LER-2009-004, Regarding Automatic Reactor Trip Due to High Steam Generator 32 Water Level Caused by Inadequate 31 Main Feedwater Pump Governor Valve Setting and 32 Main Steam Generator Level Controller Set-Up |
| Event date: |
|
|---|
| Report date: |
|
|---|
| Reporting criterion: |
10 CFR 50.73(a)(1), Submit an LER, Invalid Actuation
10 CFR 50.73(a)(2)(iv)(A), System Actuation |
|---|
| 2862009004R00 - NRC Website |
|
text
Entery Indian Point Energy Center 450 Broadway, GSB P.O. Box 249 Buchanan, N.Y. 10511-0249 Tel (914) 734-6700 i
J. E. Pollock Site Vice President NL-09-074 July 27, 2009 U.S. Nuclear Regulatory Commission Attn: Document Control Desk Mail Stop O-P1-17 Washington, D.C. 20555-0001
SUBJECT:
Licensee Event Report # 2009-004-00, "Automatic Reactor Trip Due to a High Steam Generator 32 Water Level Caused by Inadequate 31 Main Feedwater Pump Governor Valve Setting and 32 Main Steam Generator Level Controller Set-up" Indian Point Unit No. 3 Docket No. 50-286 DPR-64
Dear Sir or Madam:
Pursuant to 10 CFR 50.73(a)(1), Entergy Nuclear Operations Inc. (ENO) hereby provides Licensee Event Report (LER) 2009-004-00. The attached LER identifies an event where the reactor automatically tripped, which is reportable under 10 CFR 50.73(a)(2)(iv)(A).
As a result of the reactor trip, the Auxiliary Feedwater system was actuated which is also reportable under 10 CFR 50.73(a)(2)(iv)(A). This condition was recorded in the Entergy Corrective Action Program as Condition Report CR-IP3-2009-02494 and CR-IP3-2009-02710.
There are no new commitments identified in this letter. Should you have any questions regarding this submittal, please contact Mr. Robert Walpole, Manager, Licensing at (914) 734-6710.
Sincerely, JEP/cbr cc:
Mr. Samuel J Collins, Regional Administrator, NRC Region I NRC Resident Inspector's Office, Indian Point 3 Mr. Paul Eddy, New York State Public Service Commission LEREvents@inpo.org e'
Wýk
yr
Abstract
On May 28, 2009, the Control Room received 32 MBFP vibration alarms and reduced power to approximately 65% and removed the 32 MBFP from service.
The 31 MBFP was unable to supply sufficient feedwater (FW) flow to maintain Steam Generator (SG) levels which resulted in all four main FW regulating valves (FRV) opening.
SG-31, 33, 34 water levels recovered but the SG-32 water level increased and continued increasing after the 32 FRV was placed in manual.
The 32 SG level reached the high level trip initiating a turbine trip that resulted in a reactor trip.
All control rods fully inserted and all required safety systems functioned properly.
The Auxiliary Feedwater System automatically started as expected.
The root cause was improper MBFP governor valve stroke due to poor vendor oversight of a maintenance work order which was performed without completing MBFP governor valve stroke readings, and 32 SG level controller set-up due to inadequate programmatic control of controller settings.
Contributing causes included 1) an inadequate MBFP turbine inspection procedure which did not specify a check of governor linkage clearances,
- 2) failure of vendor to adhere to procedure by not documenting 31 MBFP governor valve settings, 3) Ineffective corrective action due to failure to check HP governor stroke as planned.
Significant corrective'actions include: adjustment of the 31 MBFP governor and coaching of Maintenance personnel on requirements for contractor oversight, and including the event in maintenance training.
Procedure 0-TUR-402-MFW will be revised to require stroke measurement of governor valves and linkage clearance check, and SG Level Control settings will be reviewed for adequacy.
The event had no effect on public health and safety.
(If more space is required, use additional copies of (If more space is required, use additional copies of (If more space is required, use additional copies of (If more space is required, use additional copies of NRC Form 366A) (17)
There were no significant potential safety consequences of this event under reasonable and credible alternative conditions.
A RT and the increase in SG level is a condition for which the plant is analyzed. This event was bounded by the analyzed event described in FSAR Section 14.1.10, "Excessive Heat Removal Due to Feedwater System Malfunctions."
Excessive FW additions is an analyzed event postulated to occur from a malfunction of the FW control system or an operator error which results in the opening of a FW control valve.
The analysis assumes one FW valve opens fully resulting in the excessive FW flow to one SG.
For the FW system malfunction at full power, the FW flow resulting from a fully open control valve is terminated by the SG high level signal that closes all FW control valves and trips the MBFPs and the main turbine.
A TT initiates a RT.
The analysis for all cases of the excessive FW addition initiated at full power conditions with and without automatic rod control, show that the minimum DNBR remains above the applicable safety analysis DNBR limit, the primary and secondary side maximum pressures are less than 110% of the design values, and all applicable Condition TI acceptance criteria are met.
For this event, rod control was in automatic and all rods inserted upon initiation of the RT.
The AFWS actuated and provided required FW flow to the SGs.
RCS pressure remained below the set point for pressurizer PORV or code safety valve operation and above the set point for automatic safety injection actuation.
Following the RT, the plant was stabilized in hot standby.
|
|---|
|
|
| | | Reporting criterion |
|---|
| 05000247/LER-2009-001, Re Technical Specification Prohibited Condition Due to a Surveillance Requirement Never Performed for the Atmospheric Steam Dump Valve Local Nitrogen Controls | Re Technical Specification Prohibited Condition Due to a Surveillance Requirement Never Performed for the Atmospheric Steam Dump Valve Local Nitrogen Controls | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | | 05000286/LER-2009-001, Regarding Automatic Actuation of an Emergency Diesel Generator & Two Auxiliary Feedwater Pumps During Surveillance Testing Due to Inadvertent De-Energization of Normal Supply Breaker to 480 Volt Safeguards Bus 6A | Regarding Automatic Actuation of an Emergency Diesel Generator & Two Auxiliary Feedwater Pumps During Surveillance Testing Due to Inadvertent De-Energization of Normal Supply Breaker to 480 Volt Safeguards Bus 6A | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation | | 05000247/LER-2009-002, Manual Reactor Trip Due to Decreasing Steam Generator Levels Caused by a Loss of Main Feedwater Pump 21 and Failure of the Main Turbine to Automatically Runback | Manual Reactor Trip Due to Decreasing Steam Generator Levels Caused by a Loss of Main Feedwater Pump 21 and Failure of the Main Turbine to Automatically Runback | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation | | 05000286/LER-2009-002, Regarding Technical Specification Prohibited Condition Caused by Two Main Steam Safety Valves Outside Their As-Found Lift Setpoint Test Acceptance Criteria | Regarding Technical Specification Prohibited Condition Caused by Two Main Steam Safety Valves Outside Their As-Found Lift Setpoint Test Acceptance Criteria | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | | 05000247/LER-2009-003, Regarding Loss of Single Train 21 Pressurizer Backup Heater Required for Remote Plant Shutdown from the Control Room Due to an Inoperable Breaker | Regarding Loss of Single Train 21 Pressurizer Backup Heater Required for Remote Plant Shutdown from the Control Room Due to an Inoperable Breaker | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(v), Loss of Safety Function | | 05000286/LER-2009-003, Regarding Manual Reactor Trip Due to Steam Generator 33 High Water Level Caused by a Failed 33 Main Feedwater Regulating Valve | Regarding Manual Reactor Trip Due to Steam Generator 33 High Water Level Caused by a Failed 33 Main Feedwater Regulating Valve | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation | | 05000247/LER-2009-004, For Indian Point 2, Regarding Loss of Single Train 23 Charging Pump Required for Remote Plant Shutdown from the Control Room Due to a Failure of a Pump Internal Check Valve | For Indian Point 2, Regarding Loss of Single Train 23 Charging Pump Required for Remote Plant Shutdown from the Control Room Due to a Failure of a Pump Internal Check Valve | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor | | 05000286/LER-2009-004, Regarding Automatic Reactor Trip Due to High Steam Generator 32 Water Level Caused by Inadequate 31 Main Feedwater Pump Governor Valve Setting and 32 Main Steam Generator Level Controller Set-Up | Regarding Automatic Reactor Trip Due to High Steam Generator 32 Water Level Caused by Inadequate 31 Main Feedwater Pump Governor Valve Setting and 32 Main Steam Generator Level Controller Set-Up | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation | | 05000247/LER-2009-005, Automatic Reactor Trip Due to a Turbine-Generator Exciter Protective Trip Caused by a Loss of the Generrex Power Supply Monitored Voltage Due to a High Resistance Ground Connection | Automatic Reactor Trip Due to a Turbine-Generator Exciter Protective Trip Caused by a Loss of the Generrex Power Supply Monitored Voltage Due to a High Resistance Ground Connection | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation | | 05000286/LER-2009-005, Regarding Technical Specification Prohibited Condition Due to Exceeding Allowed Completion Time for an Inoperable 480 Volt Undervoltage/Degraded Grid Relay Caused by Personal Error | Regarding Technical Specification Prohibited Condition Due to Exceeding Allowed Completion Time for an Inoperable 480 Volt Undervoltage/Degraded Grid Relay Caused by Personal Error | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | | 05000286/LER-2009-006, Re Automatic Trip Due to a Turbine-Generator Trip Caused by Actuation of the Generator Protection System Lockout Relay During a Severe Storm with Heavy Lightning | Re Automatic Trip Due to a Turbine-Generator Trip Caused by Actuation of the Generator Protection System Lockout Relay During a Severe Storm with Heavy Lightning | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | | 05000286/LER-2009-007, Regarding Automatic Reactor Trip Due to a Turbine as a Result of Turbine Autostop Oil Actuation Caused by a Failed Autostop Oil Fitting | Regarding Automatic Reactor Trip Due to a Turbine as a Result of Turbine Autostop Oil Actuation Caused by a Failed Autostop Oil Fitting | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(iv)(A), System Actuation | | 05000286/LER-2009-008, Technical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for an Inoperable Over Power Delta Temperature (Opdt) Bistable | Technical Specification Prohibited Condition Due to Exceeding the Allowed Completion Time for an Inoperable Over Power Delta Temperature (Opdt) Bistable | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | | 05000286/LER-2009-009, Regarding Loss of Single Train Neutron Flux Detector N-38 Required for Plant Shutdown Remote from the Control Room Due to a Power Supply Failure | Regarding Loss of Single Train Neutron Flux Detector N-38 Required for Plant Shutdown Remote from the Control Room Due to a Power Supply Failure | 10 CFR 50.73(a)(1), Submit an LER 10 CFR 50.73(a)(2)(v), Loss of Safety Function |
|