USB is the awkward cable to bring through a sealed wall. The connector is fat, the cable limit is short, and the fitting that works for a bare wire gland will not close over a molded USB-C plug. The fix is a bulkhead USB feedthrough: a fitting that bonds to the wall with an O-ring and locknut and presents a permanent connector on each side. Rated NEMA 4X / IP66 by the manufacturer; not UL listed, our enclosures keep that rating only if every penetration is engineered the same way as the box itself.
Why USB is not a normal cable entry
A standard cable gland seals on the cable jacket. That works for round, single-jacket cable. A USB cable with a molded USB-C end has a stepped profile: thin jacket, then a wider overmold, then the metal shell. A gland sized for the jacket cannot clamp the overmold, and one sized for the overmold leaves the jacket loose. Either way the seal fails.
There are three workable designs:
- Bulkhead USB feedthrough. A fixed fitting in the wall with a female USB-C on each side, or a captive pigtail inside. The wall seal is the fitting's O-ring, not the cable. This is the default choice.
- Gland on a plain-jacket cable, connector inside. Order the USB cable without a molded end at the enclosure side, run the bare cable through the gland, and terminate on a panel-mount USB socket or the device directly.
- Connector stays outside, nothing penetrates. For equipment that only needs occasional service, the USB point lives on the outside and the link to the inside runs over another medium already penetrating the wall.
If you also need antennas or Ethernet through the same wall, the same logic applies; the bulkhead approach for RJ45 is covered in cable gland for RJ45 connector: sizing and sealing, and RF penetrations in SMA antenna connector on a NEMA 4X enclosure wall.
Mind the USB cable length limit
USB data does not like long passive runs. Plan on about 5 m (16 ft) maximum for USB 2.0 and about 3 m (10 ft) for USB 3.x. Beyond that, signal integrity fails before anything gets wet. If the device inside is farther than that from where the cable enters, do not stretch the USB run. Options:
- Put the enclosure close enough that the total run, outside plus inside, stays under the limit.
- Run Ethernet or RS-485 for the long haul and convert to USB inside the box.
- Use an active USB extension rated for the environment on the outside run only, keeping the passive portion through the wall short.
Power-only loads are more forgiving than data, but design for data anyway. A cable that flashes firmware today should still work in three years.
What you need
- A bulkhead USB-C feedthrough, or a cable gland matched to a plain-jacket USB cable, with the datasheet at hand.
- The enclosure wall thickness, so the fitting's thread and locknut engagement match. This matters more on thin custom walls; the sealing plan for thin doors is the same problem at larger scale, covered in thin outdoor enclosure sealing: plan the water barrier.
- Hole saw or punch, deburring tool, and a torque wrench for the locknut.
- A short USB jumper for the inside leg, since the internal pigtail is rarely long enough to reach the device.
- The cutout drawing, with the hole diameter and position marked before any metal is cut.
Steps
- Decide which side owns the seal. The bulkhead fitting's O-ring or gasket must seat against the outside face of the wall, with the locknut tightening from the inside. Water on the outside face then cannot wick into the joint. If the fitting uses an O-ring on the locknut side instead, follow its datasheet exactly; the axial-versus-radial distinction is explained in O-ring sealing for bulkhead fittings with locknuts.
- Size the hole from the fitting, not the cable. Read the datasheet's panel cutout diameter and thickness range. A typical USB bulkhead needs a hole in the 12-22 mm (0.47-0.87 in) range, but the exact number belongs to the fitting you bought. On a custom box, put that diameter and its tolerance on the drawing before ordering; the layout tool in the cutout designer checks spacing and exports the positions.
- Deburr and clean the hole. Burrs and chips cut the O-ring. Deburr both faces, wipe the sealing face clean, and confirm the surface is flat. Paint or scale under a sealing face causes a slow leak that no re-torque fixes.
- Fit the bulkhead. Insert from outside, slide the gasket or O-ring against the outer wall face, then thread the locknut from inside and torque it to the datasheet value. Do not over-tighten; a crushed O-ring seals worse than a correctly loaded one. Confirm the fitting cannot rotate after torquing.
- Route the external USB cable to the outside connector. Drip-loop the cable below the fitting so water runs off the jacket, not into the connector shell. Cap or cover the outside USB-C port when it is not in use; a dust cap also protects the contacts from salt and sun.
- Terminate the inside leg. Connect a short jumper from the bulkhead's internal side to the device. Leave enough slack for service but not enough to loop onto a sharp edge. If you chose the gland route instead, the gland's clamping range must match the jacket diameter, and the termination rules are the same as any glanded entry, as in G3/4 cable gland sizing and thread compatibility.
- Test data and power end to end. Plug in from the outside and confirm the device enumerates and charges. Wiggle the external cable at the connector while watching the link; a marginal termination shows up now, not in the rain.
Checks when done
- The fitting is torqued, non-rotating, and its gasket is visible and evenly compressed on the outside face.
- The cable has a drip loop and no sharp bends within 50 mm (2 in) of the connector.
- The outside port is capped.
- The inside jumper does not pull on the fitting.
- A full connect-disconnect from outside works without tools and without unseating anything inside.
- Any field-made hole is on the as-built drawing. If you added penetrations after the fact, document them the way the drawing callout article describes, in NEMA 4 enclosure drawing callout: what to include.
Mistakes that cost the rating
- Silicone around a molded connector. Sealant over an overmold is not a seal; it is a future leak with a service date.
- Gland sized for the overmold. The jacket floats, water tracks along it, and the gland cannot tell the difference until it drips.
- Hole cut oversized "to be safe." An oversize hole has no gasket compression. Match the datasheet or spec a gland plate; the trade-offs are in stainless steel enclosure with gland plate: when to specify one.
- Locknut over-tightened. The O-ring extrudes, then takes a set, then leaks at the next temperature swing.
- Cable run past the USB limit. The link drops intermittently and the enclosure gets blamed.
- No drip loop. Water rides the jacket straight into the port.
What to put on the order
If the box is a catalog size, add the bulkhead hole to the cutout layout and send the drawing with the quote. On a custom build, mark every penetration: hole diameter with tolerance, edge distance from bends and door gaskets, and the wall thickness the fitting must suit. One-piece custom bodies in 304 or 316L are built to that drawing; see custom stainless enclosures for the drawing checklist and custom enclosures for materials and NEMA types. Every order is delivered in 10 business days, counted from drawing approval for custom work. Get the hole right on paper and the wall stays sealed on day one and at the fifth washdown.
Questions
Can I just drill a hole and pass a USB cable through with silicone?
No. A raw hole with sealant has no defined compression, so the seal depends on workmanship, not design. It will pass a hose test once at best and fail after thermal cycling. Use a bulkhead feedthrough with an O-ring and locknut, or a gland listed for the cable's actual outer diameter, so the rating is a property of the parts.
What size hole does a USB bulkhead feedthrough need?
It depends on the fitting, not the cable. Most bulkhead USB feedthroughs mount in a hole between about 12 mm and 22 mm in diameter, and the maker's datasheet states the exact value plus the panel thickness range. Take the hole diameter and tolerance from the datasheet and put that number on the cutout drawing, never an estimate.
Do I need the waterproof USB-C connector if I use a bulkhead feedthrough?
Not usually. If the fitting seals the wall penetration and the inside of the enclosure stays dry, a standard USB-C connector on the inside is fine and easier to service. A waterproof overmold matters when the connector itself sits outside or can be submerged, or when the inside connection can get wet during washdown.
How long can the USB cable run be on the outside?
USB 2.0 is generally limited to about 5 m (16 ft) of passive cable for reliable data; USB 3.x passive runs are shorter, around 3 m (10 ft). If you need more distance, move the active electronics: use active extension, or switch the outdoor run to Ethernet or serial over a longer-line standard and convert inside the enclosure.





