{% video_player “embed_player” overrideable=False, type=’scriptV4′, hide_playlist=True, viral_sharing=False, embed_button=False, autoplay=False, hidden_controls=False, loop=False, muted=False, full_width=False, width=’1920′, height=’1080′, player_id=’38931115335′, style=’max-width: 1920px; margin-left: 0px; margin-right: 0px; width: 100%; display: -block;’ %}

Story Summary

  • Otis Microgrid at Joint Base Cape Cod, MA is a model for military microgrid projects.
  • Controller Hardware-in-the-Loop (C-HIL) increased test coverage for Raytheon Microgrid Controls
  • Simulated Power Stage: wind turbine, diesel generator, BESS, and more
  • Utility concerns: island-mode protection, cybersecurity, hardware damage prevention.
  • Typhoon HIL Solution: safe control testing throughout lifecycle of a microgrid project.

Otis Microgrid a Model for Military Microgrid Projects

Raytheon uses cutting-edge Typhoon HIL technology to design and test supervisory microgrid controls for the Otis Air National Guard base in Massachusetts.

The base was built in 1938 and was known as Otis Air Force Base before transferring from its active duty to an Air National Guard base hosting the 102nd Intelligence Wing, a cybersecurity intelligence and civil engineering communication unit which supports operations around the globe. The base cannot risk losing power and needs secure and stable power 24/7 no matter what happens to the commercial grid.

This success story showcases both the challenges and solutions that can enable military microgrids to transition to renewables while ensuring energy independence and cybersecurity.

Otis Microgrid Components:

  • Power Generation: 1.5MW wind turbine and 1.6MW diesel generator
  • Storage: 1.6MW/1.2MWh Battery Energy Storage System (BESS) built by EastPenn based on Ecoult’s Ultrabattery lead-acid batteries,
  • Control: Raytheon’s Intelligent Power and Energy Management (IPEM) Microgrid Control System.

What creates a major challenge in setting up microgrids like this one is the prediction of emergent behaviors that occur as a result of the interaction between components in unique configurations once they are assembled into a system. In all power systems, but especially military ones, providing uninterrupted operation is of particular importance.

We’re fortunate enough that the size of our generating capacity and the size of our actual load are pretty compatible.

Shawn Doyle

Former Otis Microgrid Project Manager

BESS Onsite

Otis microgrid milestones in DoD microgrid development1:

  • the first wind-powered microgrid to support an entire Department of Defense (DoD) installation,
  • the first US military facility to ensure a cyber-secure connection to the regional power grid,
  • the first microgrid in Eastern MA and ISO New England to provide ancillary services,
  • first microgrid to leverage a BESS to be completely independent of any utility grid.

Challenges of designing and testing microgrid controllers

There are a few major utilities-related concerns when designing and testing a supervisory level microgrid control, especially for military use. The various generation elements need to be dispatched and ensure load control that will balance out the supply and demand within the microgrid over large timescales. Besides enabling operation during steady-state conditions, safe operation within various dynamic conditions, like heavy load changes, is also a requirement.


Features need to be designed to endure power maintenance, quality, and stability even in the presence of transient phenomena unique to the system’s particular design and location. For example, in this area, certain natural disasters, like hurricanes or winter storms, are becoming more frequent and are increasing in intensity.

At the same time, a lot of the power infrastructure on Cape Cod is fairly old and therefore more vulnerable. So, for interrupted use of power, it is important to ensure the microgrid completely islands when the commercial grid goes down, and in general, take steps to prevent this make any damage to hardware systems.

Nothing ever quite behaves and communicates the way you expect the literature says it should.

Dave Altman

Principal Investigator for Otis Microgrid


In the project, Raytheon also needed to ensure the understanding of component behaviors in a unique system configuration to be able to predict emergent behaviors of various components in the power system. The control testing was based on the IEEE 2030.8 Standard requirements that set the baseline for testing microgrid controllers. Working with strong external collaborators to set up testing which follows the recommended standard was the basis of the success of the project.

Otis Microgrid Testbed

An additional challenge comes from integrating commercially available equipment, as it is inherently not very secure, since it’s not required to be. Additional levels of security then need to be built into the supervisory control system itself, as maintaining a cyber-secure connection with the microgrid is a major requirement, especially for military use.

Solution: C-HIL reduces risk and increases test coverage

The DoD is very risk-averse, so whenever making large investments that include capital equipment and long contracts, they want to understand what they are getting into. Using Typhoon’s HIL technology, Raytheon had the capacity to simulate system integration issues within a digital twin of the system with high-fidelity and predict emergent behaviors when integrating various distributed energy resources (DERs).

This helped use the results from the simulated environment to support the investment decisions of DoD. Raytheon also found that the C-HIL was a much more suitable approach than Power HIL (P-HIL), as understanding the controller behavior was more important than the power devices, and it was more convenient for simulating large-scale systems since it did not require expensive specialized facilities to perform testing.

Otis Schematic Power Stage

The migration into C-HIL was motivated by the convenience associated with the ability to simulate large-scale systems instead of using real power hardware.

Dave Altman

Principal Investigator for Otis Microgrid


The test automation capacity of C-HIL also enabled a higher working speed within the project. The Typhoon team directly helped with the most difficult part of interfacing the simulated power stage with the physical controllers.

Even though making sure that the simulation and test automation are configured well takes up the most time and knowledge, the full test plans were up and running in just a few days. After that, repeating tests and fixing problems get much easier.

Testing in a simulated environment also offers unparalleled flexibility, as it is easy and quick to change settings and explore numerous possibilities. So C-HIL lowers risks during testing while preventing system integration issues on-site. This increase in quality assurance helps build confidence in customers.

Otis Testbed US office 2

At the same time, over time technology improves and the control system needs to have the capacity to test those changes. Having a digital twin means that you can continuously improve parts of the microgrid and test how the entire system behaves after each tweak without any risk while testing and de-risking uploading the updates onto the physical microgrid as well.

The advantages have been that C-HIL accelerates and de-risks our integration activities that would otherwise occur.

Dave Altman

Principal Investigator for Otis Microgrid


Using the digital twin, the microgrid was set up so it can fully island when the commercial grid goes down and use the battery to power up the generator and rely on it until it detects that the commercial grid has been back up. Also, a cyber-secure connection was secured so any damage to hardware systems is prevented within the base.

Raytheon used C-HIL to test their supervisory microgrid control algorithms in a real-time simulation environment. These HIL test scenarios would be difficult to test on-site. C-HIL increases test coverage of various transients and faults scenarios.

Examples of Test Scenarios with C-HIL:

  • the diesel genset transition from emergency operating mode to normal,
  • the BESS inverter transition from -800kW to 800kW,
  • the transients in islanded operation (protective relays tripping),
  • disconnection from the utility grid,
  • the transition from grid-connected to islanded mode,
  • failure at the point of common coupling (PCC) to the grid.

Making sure that the control was ensuring the operating safety of the microgrid throughout all these and many other expected or extreme test scenarios in a safe and reliable real-time testing environment helped assure the quality of the system.



  1. Andrew Burger. Otis Microgrid Nearly Ready and Poised to Make Some Energy History in MA. Microgrid Knowledge. https://microgridknowledge.com/otis-microgrid-development/ Published Aug.22, 2018. Accessed Sept. 11, 2020.