How to Seal Penetrations on a Metal Roof: Starlink, Antennas, HVAC Stacks, and More

Metal roofs are one of the best waterproofing systems available — right up until you put a hole in one. Penetrations are where most metal roof leaks originate, and with the explosion of Starlink installs, new HVAC equipment, and antenna upgrades happening on existing metal roofs every day, this is a problem more contractors and homeowners are running into.

The good news: penetrations don’t have to leak. Done right, they should outlast the panels around them. Here’s how to do it right.

Why Penetrations Are the Leak Point

A metal roof panel itself almost never fails — the steel doesn’t crack, rot, or degrade the way asphalt does. What fails is the seal around the holes. Water finds the path of least resistance, and a poorly flashed penetration is a direct invitation.

The challenge on metal roofs specifically is thermal movement. Metal panels expand and contract significantly with temperature changes. Anything that’s rigidly attached to both the roof and the structure below — like a pipe bolted through the deck — fights that movement and will eventually work the seal loose. Every detail you use has to accommodate that movement.

The Right Materials for Metal Roof Penetrations

Not all pipe boots and flashings are created equal, and the wrong product on a metal roof will fail faster than you’d expect. Here’s what to use:

• EPDM rubber pipe boot with bonded aluminum base: This is the industry standard for most penetrations on exposed fastener and standing seam metal roofs. The aluminum base forms a compression seal against the panel; the EPDM rubber sleeve fits snug around the pipe. Standard EPDM handles temperatures up to 212°F — fine for plumbing vents, antennas, and most utility penetrations.
• Butyl tape: Your primary sealant at the base of the boot where it meets the panel. Butyl maintains adhesion through thermal cycling better than silicone or urethane caulk. Use 1-inch wide butyl tape as a bed under the boot flange.
• Stainless steel or zinc-plated fasteners with gaskets: Corrosion-resistant only. Standard carbon steel screws will rust and stain the panel. Space fasteners every 1–2 inches around the boot perimeter.
• Tripolymer or polyurethane sealant: Applied as a secondary bead around the perimeter edge of the boot after it’s fastened. UV-stable and flexible — not latex caulk, which shrinks and cracks outdoors.

Step-by-Step: Installing a Penetration on an Exposed Fastener Metal Roof

This applies to Starlink mounts, plumbing vents, antenna bases, and HVAC stacks. The process is the same; the boot spec changes based on heat exposure.

• Step 1 — Plan the location carefully. Place the penetration in the flat of the panel, not through a rib or seam. You need at least 4 inches of clearance on all sides of the boot base for water to flow freely around it. Never let a pipe interrupt water flow down a panel run — it creates a dam.
• Step 2 — Cut cleanly. Use a hole saw or sheet metal cutter sized to the pipe’s outer diameter — not larger. A clean, correctly-sized hole is critical. File or deburr any sharp edges that could damage the boot material over time.
• Step 3 — Select the right boot size. The rubber sleeve should be cut to a diameter slightly smaller than the pipe — it should require a little effort to slide over. A loose fit means no compression seal. Most EPDM boots have multiple rib layers; cut the layer that produces a snug fit on your pipe diameter.
• Step 4 — Apply butyl tape to the boot base. Run 1-inch butyl tape around the underside of the boot flange before setting it on the panel. This is your primary waterproof seal.
• Step 5 — Tuck the upper edge correctly. On a sloped roof, the upper portion of the boot flange should tuck under the panel above it, or under a piece of metal cap flashing, so water sheds over the boot rather than against it. The lower and side edges lap on top.
• Step 6 — Fasten and seal. Drive corrosion-resistant screws with gaskets every 1–2 inches around the flange perimeter. Do not overtighten. Apply a secondary bead of tripolymer sealant around the entire perimeter edge. Add a storm collar — a metal band that clamps around the pipe just above the boot top — for additional water protection on any penetration that will see standing water or driven rain.
• Step 7 — Inspect and maintain. Check every penetration twice a year and after any major storm. Look for boot cracking, UV degradation, and sealant separation. EPDM boots on residential metal roofs typically need replacement every 15–20 years — far before the panels do.

Starlink and Antenna Mounts: A Special Note

Starlink and satellite dish mounts present a specific challenge: the mount is usually rigid, bolted through the deck, while the metal roof around it wants to move. If the mount is fastened directly through the panel without a proper rubber boot and adequate thermal gap, the panel will eventually work against the mount fasteners and crack the sealant.

Best practice for Starlink on a metal roof: use a purpose-built metal roof mount kit or work with the panel manufacturer’s recommended penetration detail. The dish cable also needs a waterproof entry point — cable entry boots are available specifically for this. Do not silicone a cable through a ragged hole in the panel.

HVAC Stacks: Don’t Mix Up Your Boot Type

This is where we see the most expensive callbacks: a contractor installs a standard EPDM boot on a furnace exhaust stack or a wood stove flue. Within a season, the rubber bakes, cracks, and fails. EPDM is not rated for high-heat applications. If the pipe is exhausting combustion gases or carrying flue products, use a silicone-based high-temp boot rated to 437°F minimum. When in doubt, ask what the pipe is venting before you select your boot.