How does a data center generator actually work when the power fails? The popular version is simple: the utility fails, the generator starts, and the building is saved, all in ten seconds. The real version is more precise, and the precision matters. NFPA 110-2025 Type 10 requires power at rated voltage and frequency at the load terminals within 10 seconds, and then the generator accepts load in steps, not all at once. The total time from utility failure to generator power is typically 2–10 seconds, dominated by sensing, start, and stabilization rather than by the transfer switch.
This article explains what those ten seconds contain, why the load arrives in steps, and what the test regime actually requires.
What "ten seconds" means
NFPA 110-2025 Type 10 systems must restore power at rated voltage and frequency at the load terminals within 10 seconds of utility failure; the generator then accepts load in steps, block loading, not full load in 10 seconds (VERIFIED, NFPA 110; standards paywalled, no clause number cited). The distinction is the whole point. Ten seconds is the time to have power available at the right voltage and frequency. It is not the time to have the full building load running on the generator. The generator being online and stable takes longer, typically 30–60 seconds.
A generator that reaches rated voltage and frequency in eight seconds and then takes its load in steps over the next minute is doing exactly what the standard requires. A generator that is expected to take full load in ten seconds is being asked to do something no standard requires and no machine does well.
The ten seconds themselves are not one event. They are a sequence, and each step takes time. First, the automatic transfer switch senses the loss of utility power, and it must confirm the loss is real, not a momentary dip or a transient, which takes a fraction of a second of sensing and a deliberate delay. Then the start signal goes to the generator. The engine cranks, starts, and accelerates to speed. The alternator builds voltage, the governor stabilizes frequency, and the controls confirm the output is at rated voltage and frequency. Only then does the transfer switch transfer the load.
The total is typically 2–10 seconds, and the dominant parts are sensing, start, and stabilization, not the transfer switch, which is the fastest part of the sequence. The generator being online and stable takes longer, typically 30–60 seconds.
That is why the generator's condition matters more than its age on paper. A generator that starts reliably is a generator whose batteries are charged, whose fuel is clean, whose coolant and oil are at the right levels, and whose starting system has been tested under the conditions it will actually face. A generator that has only ever been started in warm weather, on a test bench, with a technician standing next to it, has not been proved for a cold start at 3 a.m. in January.
Block loading: the load arrives in steps
Once the generator is at rated voltage and frequency, the load does not arrive all at once. It arrives in steps, block loading. The transfer switch connects the first block of load, the generator's governor and voltage regulator respond, the engine recovers, and then the next block is connected. The steps are sized so that the generator never sees a load step large enough to drag its voltage or frequency outside acceptable limits.
The reason is physics, not caution. A generator is a rotating machine with inertia, and a sudden load step demands a sudden increase in torque from the engine. The engine cannot deliver it instantly. Voltage dips, frequency dips, and the governor opens the fuel rack to recover.
If the step is too large, the dip is too deep, and the generator's own protection may trip it, or the UPS downstream may see the dip and transfer to battery, or drop the load. Block loading is how the design avoids that: the load is walked in, block by block, and each block is sized against what the generator can accept.
There is a second load that arrives with the transfer, and it is easy to forget: battery recharge. When the UPS transfers back from battery to generator power, its batteries begin recharging, and battery recharge adds load on top of the IT load. A generator sized for the IT load alone, without the recharge load, is undersized for the moment that matters most. The sizing must cover block loading plus battery recharge, and the test must prove it. Week 15 covers how to prove it without putting the load at risk.
Fuel: how long the generator can run
A generator that starts is only useful for as long as its fuel lasts, and fuel duration varies by design. The Uptime Tier Standard requires at least 12 hours of on-site fuel at N load. Beyond that minimum, owners commonly specify 24–72 hours, and some facilities hold up to 96 hours (VERIFIED, range plus Tier minimum). Any single fuel-hours figure should be treated as design-specific, not universal: runtime depends on the fuel on hand, on refueling access, on the load, and on operating restrictions.
The operational point is that fuel is a logistics problem, not a tank problem. Twelve hours of fuel is twelve hours to arrange a delivery, in a storm, in a regional outage, when every other facility in the area is calling the same fuel supplier. The fuel contract, the delivery path, and the refueling procedure are part of the generator's readiness, not an afterthought. A generator with a full tank and no refueling plan is a generator with a deadline.
The test regime: what NFPA 110-2025 actually requires
The test regime is where the most persistent myth in this subject lives: the idea that there is a universal annual 100% two-hour load-bank test. There is not. The NFPA 110-2025 test regime is: monthly 30 minutes at 30% or more of standby nameplate kW for diesel generators; an annual supplemental load-bank test only if the monthly test does not reach the threshold; and a triennial Level 1 test (VERIFIED, NFPA 110; standards paywalled, no clause number cited). There is no universal annual 100% two-hour load-bank test, and an operator who believes there is will either over-test, spending money and wear on a test the standard does not require, or under-test, by recording a monthly run as if it proved something it did not.
The monthly test proves the generator starts, runs, and carries load. The supplemental load-bank test, when it is needed, proves the generator can carry its rated load, which a monthly test at low load does not prove. The triennial Level 1 test is the deeper periodic check. The regime is a minimum, not a ceiling: a site may test more, and many do, but the additional testing should be driven by what the site needs to prove, not by a myth about what the standard says.
The deeper point about testing is the same as the point about the ten seconds: test the transfer as it would actually happen, not just the engine. A generator test that records a no-load run as a load test proves nothing about whether the generator will carry the building. A test that never transfers the load never proves the transfer. Week 15 takes this up in full, including how to record what a test actually proved, load reached, duration, transfer behavior, rather than recording that a test happened.
What the generator does not do
It is worth stating plainly what the generator does not do, because the misunderstanding is common. The generator does not protect the load during the seconds before it starts, that is the UPS's job, and the UPS's batteries are the bridge. The generator does not carry the mechanical plant instantly, chillers and pumps restart after the generator, and take time to return to full capacity. And the generator does not guarantee the building stays up: it is one source, in a chain, and the chain is only as strong as its weakest handoff.
The generator is the part of the power path that most people picture when they think of backup power, and it is the part that works only because the UPS, the transfer switch, and the procedures around them work first.
Takeaway
NFPA 110-2025 Type 10 requires power at rated voltage and frequency at the load terminals within 10 seconds, then the load arrives in steps, by block loading, because a generator cannot take full load instantly without its voltage and frequency collapsing. Battery recharge adds load on top of the IT load, so the generator must be sized for both. The test regime is monthly, supplemental, and triennial. There is no universal annual 100% two-hour load-bank test. And the generator only works because the UPS bridges the seconds before it starts.
Further reading
- Transition to Operations guide, the guide to taking over a new data center.
- Case Study 2: Post-Turnover Operational Watch, what drifts in the first 12 months, including generator and transfer failures on demand.
- Contact, start a conversation about a readiness review; a conversation, not a pitch.
Sources
- NFPA 110-2025 Type 10, 10-second restoration and block loading: NFPA 110-2025, Standard for Emergency and Standby Power Systems. The standard is paywalled; no clause number is cited.
- NFPA 110-2025 test regime, and the absence of a universal annual 100% two-hour load-bank test: same standard.
- Fuel duration: the Uptime Tier Standard requires at least 12 hours at N load; owners commonly specify 24–72 hours, and some facilities hold up to 96 hours.
Published Saturday, November 7, 2026. By Scott Stillings. Scott spent more than twenty years in critical infrastructure operations, as a submarine reactor operator in the U.S. Navy, as a commercial nuclear operator and senior-reactor-operator-certified instructor, and as a critical operations manager for a large hyperscale data center campus. He is the author of Where AI Lives: Inside the Hyperscale Data Centers Powering the AI Boom (Inside Hyperscale).