NIO ES8 High-Voltage Safety and High-Voltage Power Distribution Unit (PDU) Service Guide

Fault Background

The NIO ES8's high-voltage safety system consists of five layers: pre-charging (precharge relay + precharge resistor in parallel with the main positive relay; the main relay closes only after current stabilizes to prevent welding), collision protection (relays open automatically on collision, and re-closing is prohibited after a collision), high-voltage interlock (HVIL) (opens relays on circuit break or cover opening), insulation monitoring (BMS broadcasts insulation level on CAN—<500Ω/V warning, <100Ω/V fault and waits for vehicle command to open relays), and potential equalization (all conductive parts may become live during insulation failure; potential equalization is provided between accessible conductive parts on high-voltage components and the ground point). Power-up and power-down each occur in three stages; collision emergency power-down completes within 150ms, and the main relay opens when current <50A. Two key hardware areas: pyrotechnic disconnect safety switch (B1513 code family, located in the battery pre-fuse box, managed by ACM) and high-voltage power distribution unit (PDU) (4-bolt mounted in the front compartment center-top, IP67/IP69K, M8 ground, cover-open interlock). This article is compiled as a service guide.

Five Layers of High-Voltage Safety

• Pre-charging: Precharge relay + precharge resistor in parallel with the main positive relay—at charge start, the precharge relay closes first, current flows through the precharge resistor, and the main relay closes only after current stabilizes, connecting the battery pack high-voltage system to the vehicle high-voltage (protects the main relay from high-current welding);
• Collision: On collision, the system automatically opens the high-voltage relays; after a collision, the high-voltage system is not allowed to be re-closed;
• HVIL: Detects high-voltage circuit integrity—an open circuit or opening a device protection cover triggers discontinuity detection, and the system immediately opens the relays and other safety strategies to prevent electric shock;
• Insulation monitoring: BMS broadcasts insulation resistance and status level on CAN—<500Ω/V sets Warning, <100Ω/V sets Fault and waits for the vehicle to send relay-open command; after relay opening due to insulation fault, re-closing is prohibited until the fault is cleared;
• Potential equalization: During insulation failure, all conductive parts may become live; potential equalization is provided between accessible conductive parts on high-voltage components and the ground point.

Power-Up and Power-Down Sequences

Power-up three stages: VCU wake-up → prepare for high-voltage power-up → prepare to enable motors. Before preparing for high-voltage power-up, VCU reads feedback (software update + high-voltage command / DC or AC charging request, etc.); when conditions are met (including no high-voltage interlock DTC), VCU controls high-voltage power-up, BMS controls precharge relay closure → current stabilizes → main relay closure → HVIC activates and starts working.

Power-down three stages: Prepare for high-voltage power-down → high-voltage power-down → low-voltage power-down. Prepare for high-voltage power-down conditions: park state (and comfort functions disabled) or software update state without high-voltage command. VCU controls high-voltage power-down, BMS controls main relay opening and performs insulation test, and the power electronics unit (PEU_F front power electronics control unit) opens; collision emergency power-down completes within 150ms, and the main relay opens when current <50A.

Pyrotechnic Disconnect Safety Switch

Location and principle: Located in the battery pre-fuse box, managed by ACM (airbag controller) which judges the operating environment based on signals from various modules and provides passive safety; high-voltage disconnect system (high-voltage disconnect switch, pyrotechnic disconnect switch) + emergency cut-off wiring harness + rear pre-fuse box power supply.

Replacement: Vehicle power-down procedure → disconnect the pyrotechnic disconnect safety switch connector → remove the switch; install in reverse order → vehicle power-up procedure.

B1513 code family: 11 short to ground / 12 short to power / 13 open circuit / 1A resistance too low / 2B cross-wiring / 55 connection configuration error.

Diagnostic steps: Check ACM DTCs → first disconnect the emergency cut-off switch, then disconnect the 12V battery negative terminal, wait 5 minutes → disconnect ACM harness connector MAIN75 and pyrotechnic disconnect safety switch harness connector MAIN137 → use multimeter to check continuity between the two → at MAIN137, connect a ~3Ω resistor in series to verify switch resistance for judgment → measure circuit-to-ground voltage (for short to power/short to ground) → replace the pyrotechnic disconnect safety switch and clear DTCs.

High-Voltage Power Distribution Unit (PDU)

Structure: Mounted with 4 bolts in the front compartment center-top; distributes traction battery power to the powertrain and high-voltage consumers; components—housing, cover, shield, fuses, relays, busbars, brackets, labels, insulating material. Housing ground point ring terminal spec M8 + high-voltage warning label; cover high-voltage open-cover interlock design; assembly sealed to IP67; connector interfaces are misplug-proof, all with high-voltage interlock loop design, high-voltage connector interfaces meet IP69K.

Replacement: Vehicle power-down → remove the front compartment cover assembly → disconnect high-voltage connectors → disconnect low-voltage connectors → move ground wire aside → remove PDU; install in reverse order (ground wire reconnected) → PDU equipotential test → vehicle high-voltage-off insulation test → if fail, PDU insulation test → vehicle power-up procedure.

PDU code family:

Key Parameter Quick Reference

Safety Warnings

• This article is for technical reference. High-voltage system service must be performed by personnel trained on this vehicle's high-voltage system knowledge.
• Fixed power-down sequence: First disconnect the emergency cut-off switch, then disconnect the 12V battery negative terminal, wait 5 minutes.
• After relay opening due to insulation fault, re-closing is prohibited until the fault is cleared.
• After a collision, the high-voltage system is not allowed to be re-closed—collision repair must follow the special accident vehicle procedure.
• After PDU reassembly, equipotential test and insulation test must be performed before vehicle power-up.

Service Insights

The core sentence of this high-voltage safety chapter is "Re-closing is prohibited until the fault is cleared"—insulation faults, collisions, and HVIL opens are all non-resettable protections. A common technician error is "clear codes and try power-up again," but the manual is clear: first restore insulation/interlock, then consider closing. Remember thresholds by level: insulation 500Ω/V warning, 100Ω/V fault (the tenfold difference is the safety margin); collision power-down 150ms/50A is the hardware-level deadline; on the PDU side, the 5.458~6.658V monitoring voltage window and the 500ms/10ms two-level duration thresholds distinguish "transient disturbance" from "real fault." Two field details: the pyrotechnic disconnect safety switch is hidden in the battery pre-fuse box and is managed by ACM—for B1513 family codes, don't check the PDU; first check MAIN75/MAIN137 harness and the 3Ω series test; the PDU reassembly trio (equipotential → vehicle insulation → PDU insulation) cannot be skipped—this is the key process that turns "install and drive" into "install and prove safety."

---

【This article is for reference only】