Worcester Bosch E9 fault code: what it means and what to check

If your Worcester Bosch Greenstar is showing E9, the safety temperature limiter on the central heating flow has tripped. In plain English: the water leaving the boiler got hotter than the boiler is ever allowed to let it get, a dedicated safety device noticed, and the boiler shut down and locked out.

Like the EA code, this is the boiler protecting itself and you, not simply failing. The limiter exists precisely so that a fault elsewhere cannot cook the appliance. But E9 deserves more respect than most codes, because it usually is not the limiter that is broken. It is a symptom that heat is being made faster than it is being carried away, and the interesting question is why.

There is usually a three digit number shown alongside the E9. Write it down before you do anything else. Worcester ask you to quote both together, and the sub-code narrows the diagnosis considerably.

Source: Worcester Bosch, Engineer's Service Booklet 6720830033

What causes it, in the order it usually turns out to be

Worcester's own service documentation points the engineer at a short list for E9: system pressure, the safety temperature limiters themselves, pump operation, and air in the appliance. In practice, on boilers more than a few years old, the causes stack up in roughly this order.

• Poor circulation through the heat exchanger. Sludge, the black magnetic debris produced by corroding radiators, gradually chokes the narrow waterways. Water moves slowly, heat builds where it is made, and the limiter trips. Hard water scale, common in this area, does the same thing.
• A tired or failing pump. If the pump has seized, is airlocked, or has simply weakened with age, hot water sits in the heat exchanger instead of being pushed round the house. The temperature spikes within seconds of the burner lighting.
• Low system pressure or air in the system. Not enough water in the circuit, or pockets of air, and the same local overheating happens even with a healthy pump.
• Only after all of that: a faulty limiter or its wiring reporting an overheat that never happened. It does occur, but assuming it first is how heat exchangers get destroyed.

Source: Worcester Bosch, Engineer's Service Booklet 6720830033

What you can safely check yourself

None of this involves taking the case off the boiler. Anything behind the case is legally and practically an engineer's territory.

• Look at the pressure gauge. If it is below 1 bar, top the system up using the filling loop as described in your boiler's user instructions, to around 1 to 1.5 bar cold.
• Feel your radiators the next time the heating runs, if the boiler will run. Cold at the bottom, hot at the top is the classic sign of sludge. Radiators that need bleeding every few weeks point at air getting in.
• Bleed any radiators that are cold at the top, then re-check the pressure and top up again if it has dropped.
• Think about what the boiler was doing when it tripped. E9 seconds after firing points at circulation. E9 after running for a while points elsewhere.
• Then, and only then, press reset. Once. If E9 comes straight back, stop. Repeatedly resetting a boiler that is genuinely overheating forces it to keep firing into the fault, and that is how a recoverable problem becomes a scrapped heat exchanger.

Where it stops being your job

If the pressure is right, the radiators are bled, and one reset did not clear it, everything that remains is behind the case: the pump, the limiter and its wiring, the fuse on the circuit board, and the heat exchanger itself. That is Gas Safe registered engineer work, no exceptions.

An engineer will work through the same short list properly: confirm the pump runs and moves water, test the limiter for continuity, check the board and its fuse, and look at how quickly the flow temperature climbs when the burner lights, which is the giveaway for a restricted heat exchanger. Knowing that sequence is useful to you for one reason: it lets you judge the diagnosis you are given. "It needs a new PCB" without anyone having watched the flow temperature or tested the pump is a guess, not a diagnosis.

Repair or replace: what E9 is telling you

This is the part that matters most on an older boiler, because E9 is rarely random. A tripped overheat limiter on a boiler past its tenth birthday is very often the system telling you its circulation is failing: the heat exchanger is partly choked, the pump is worn, and the water in the pipes is dirty.

The fork is this. If the cause turns out to be pressure, air, or a one-off limiter fault on a boiler in decent health, fix it and move on. But if the diagnosis is a sludged heat exchanger on an ageing boiler, be careful before paying for the repair. A replacement heat exchanger is one of the most expensive parts on the appliance, the labour is significant, and fitting it into a system full of the same dirty water that killed the last one buys you the same fault again. The same money, or not much more, starts to overlap with a new boiler carrying a long warranty, fitted after the system has been properly cleaned.

Recurring E9 lockouts, each one cleared with a reset and a top-up, are not the boiler being temperamental. They are the early chapters of the failure. How old the boiler is, what the repair actually involves, and whether this is the first such visit or the third: those three facts decide it, and our repair-or-replace guide walks through them honestly.

If it comes to a replacement

Whatever you decide, insist that any quote for a new boiler includes a proper system clean and inhibitor, because a new boiler on old dirty water inherits the old boiler's fate. Our power flush guide explains what a clean actually involves and when it is worth it.

If the boiler is coming to the end of the road, we can put you in touch with three vetted local installers who will look at the system, not just the appliance, before they quote.