Here's the thing: I'm not talking about the McQuay controller that works. I'm talking about the one that doesn't—the one that's locked behind a password nobody on site remembers when the alarm starts screaming at 2 AM on a Sunday.
I review quality and compliance for a company that contracts chiller maintenance. Over four years, I've watched the same simple problem turn a routine filter swap into a $3,200 after-hours service call. And it always starts the same way: someone needs to access the chillers controller, and the password is gone along with the tech who set it.
If you manage a building with McQuay centrifugal chillers or even a heat pump system, this one is for you.
The Surface Problem: A Locked Screen
I stood in front of a McQuay centrifugal chiller on a Tuesday morning. The building engineer was on the phone, sweating. Their scheduled maintenance window was four hours, and they'd already burned thirty minutes trying to get past the password screen.
He said, 'I've got the manual. It says default is 1111.'
It wasn't.
Someone had changed it four years ago during startup. The tech who set it left the company. The password left with them.
That's the surface problem. You read it as 'we need a password override.' I read it as a symptom of a much bigger gap in how we manage access to critical equipment. The difference matters because if you only fix the login, you're missing the root cause.
The Deeper Cause: We Don't Treat Passwords Like Locks
Here's the part that took me three similar incidents to figure out.
We have key boxes for mechanical rooms. We have sign-in logs for contractors. We have lockout/tagout procedures for safety. But for the digital keys—the passwords to controllers, BAS interfaces, and OEM-specific software—we have nothing resembling a process.
I said 'log the default credentials after commissioning.' The commissioning team heard 'memorize the password and tell someone.' Result: the password was stored on a sticky note in the control panel that fell off during a valve replacement two years later.
We were using the same words—'record the password'—but meaning different things. I meant a formal entry in a secure, accessible log. They meant verbal handoff during a busy startup day. Discovered this when the building's new facility manager called me, six months after the handoff, saying, 'The last guy said the password was, and I quote, 'something easy.' That's not a log. That's a memory test.
The third time we got stuck behind a missing McQuay chiller password, I finally created a verification protocol. Should have done it after the first time.
The deeper cause isn't bad techs or forgetful managers. It's the assumption that 'we told someone' equals 'we secured access.' In quality terms, it's a process gap where the handoff between teams has no accountability.
The Real Cost: What a Missing Password Actually Costs
Let's put numbers on this, because 'inconvenience' is a polite way to say 'I just spent a half hour tracking down a password.'
The direct cost of a late-night password issue. Our $3,200 after-hours service call broke down like this: $175 for the truck roll, $1,200 for overtime labor (two techs, four hours each at time-and-a-half), and $1,825 in lost cooling downtime because we couldn't reset the alarm and confirm the chiller was safe to restart. The password issue itself delayed us forty-five minutes. Forty-five minutes of 'let's try common combinations' and 'does anyone have the old guy's number?'
The irony? The actual fix once we got in was a twenty-minute parameter adjustment. A forty-five-minute delay on a twenty-minute job.
The indirect cost you don't track. On a 2023 audit of our service records, I found that password-related delays added an average of 14 minutes to 12% of our diagnostic calls. That's roughly two hours of unbillable downtime per hundred service hours. For a company that services a fleet of 200 chillers annually, you're talking about real money.
The trust cost. In Q1 2024, we lost a maintenance contract renewal because the new facility manager told us, 'Every time something goes wrong, it's a three-hour ordeal just to get into the controller.' Was the password issue the only reason? No. But it was the scar tissue that colored every interaction.
Standard industry practice for critical equipment access should be: password documented at commissioning, verified for accessibility, and stored in a location that survives staff turnover. Too many buildings treat it like a secret handshake.
The difference between a building that runs smoothly and one that doesn't is often hiding in these small, unglamorous process gaps.
The Fix: Three Decisions That Save You the 2 AM Call
I'm not going to give you a twelve-step process. If you've read this far, you already know the problem. So here's the short version of what works.
One: Assign password ownership at commissioning. Not 'everyone knows it.' One person, one formal record. Log it in the same place you log the serial numbers and warranty info. If you're using a McQuay chiller password that's unique to your site, it gets the same treatment as your mechanical room keys.
Two: Verify the handoff. When the original tech leaves, the password isn't 'out there somewhere.' It's a documented item in the turnover checklist. I recommend this for large facilities with in-house teams. If you're a smaller operation with one or two engineers, the principle still holds: don't assume it's known.
Three: Test it annually. Not the password itself—test that someone on site can retrieve it and log in within five minutes. An unverifiable password is the same as no password.
This works for 80% of facilities. Here's how to know if you're in the other 20%: if your building has multiple distinct HVAC systems (chillers, heat pumps, FCUs) from different manufacturers, you need a centralized credential management system, not a shared spreadsheet. The complexity of different default credentials across brands (Carrier, Trane, Daikin, McQuay) will create the exact same problem, just multiplied.
Look, I'm not saying every missing password causes a $3,200 overtime call. Most don't. But the ones that do are the ones you remember. And in a critical facility, a pattern of small delays is how emergency replacements get decided.
If your site has a McQuay centrifugal chiller running the building, and you don't know where the controller password is today, that's not a tomorrow problem. That's a risk you're carrying right now.
Write it down. Lock it up. Make sure the next guy knows where to look.
(note to self: I really should formalize this into a standard checklist for our handover packages. Three incidents is three too many.)
