On June 5, T 2001, T St. T Lucie Unit 1 was in Mode 1 at 100 percent reactor power. T At 1048 hours0.0121 days <br />0.291 hours <br />0.00173 weeks <br />3.98764e-4 months <br />, St. Lucie Unit 1 experienced an unexpected trip of the 1A2 reactor coolant pump ( RCP) . T This was immediately followed by an automatic reactor trip from the reactor protection system ( RPS) T on low reactor coolant flow. T The Unit 1 turbine generator tripped following the reactor trip.
T Plant electrical distribution systems automatically transferred from the unit auxiliary transformers to the unit start up transformers as required for onsite power. T Approximately one minute later, the 1B main feedwater pump (MFP) tripped and the auxiliary feedwater system actuated to provide cooling flow to the steam generators.
T All safety-related equipment operated per design.
FPL determined that the most probable cause of the 1A2 reactor coolant pump trip was the spurious actuation of a Westinghouse SA-1 motor protective relay device.
T This determination was based on vendor notifications, known industry history, and the symptoms of the trip. T FPL replaced the SA-1 relay and a main feedwater recirculation valve positioner, and at power operations for St. Lucie Unit 1 resumed on June 7, 2001. |
Description of the Event
On June 5, 2001, St. Lucie Unit 1 was in Mode 1 at 100 percent reactor power. At 1048 hours0.0121 days <br />0.291 hours <br />0.00173 weeks <br />3.98764e-4 months <br />, St. Lucie Unit 1 experienced an unexpected trip of the 1A2 reactor coolant pump [EIIS:AB:P] (RCP). This was immediately followed by an automatic reactor trip from the reactor protection system (RPS) on low reactor coolant flow.
The Unit 1 turbine generator tripped following the reactor trip. Plant electrical distribution systems automatically transferred from the unit auxiliary transformers to the unit start up transformers as required for onsite power. Approximately one minute later, the 1B main feedwater pump [EIIS:SJ:P] (MFP) tripped and the auxiliary feedwater system actuated to provide cooling flow to the steam generators. All safety-related equipment operated per design.
Cause of the Event
Although no definitive root cause was found for the RCP trip, FPL determined that the most probable cause was a spurious actuation of the Westinghouse SA-1 motor protective relay device [EIIS:AB:P:87]. This determination was based on vendor notifications, known industry history, and the symptoms of the trip.
The 6900-volt switchgear uses a motor protective relay, SA-1, that provides motor protection for faults less than approximately 50% of the motor locked rotor current.
This relay senses the current flow through all three phases of the motor power cables. Any differential in the current flow that exceeds a factory setpoint results in a trip of the motor circuit breaker. This relay responds to motor conditions different than the motor overcurrent relays. It was noted during the review of similar industry events and vendor notifications that the silicon controlled rectified (SCR) in the SA-1 relay was susceptible to random firing. The SCR initiates a trip signal based on a differential current in the motor windings in the three motor phases. Spurious trip signals from the SCR were dependent on "history, ambient temperature, voltage, and time." As a conservative measure, FPL replaced the SA-1 relay. The SA-1 relay that was removed was extensively tested and no problems were found with the removed relay.
The MFP trip was caused when recirculation valve FCV-09-1B2 [EIIS:SJ:FCV] failed to open which resulted in a MFP low flow trip. The faulty valve positioner was replaced with a new positioner.
Analysis of the Event
This event is reportable under 10 CFR 50.73(a)(2)(iv) for two conditions. The first condition is as any event or condition that caused a manual or automatic actuation of the reactor protection system, including reactor scram or trip. The second condition is as any event or condition that caused a manual or automatic actuation of the auxiliary feedwater system.
Analysis of Safety Significance Reactor trips are analyzed events, and pose no significant safety issues. The trip was uncomplicated, and minor secondary equipment issues were dispositioned. FPL confirmed that Westinghouse SA-1 differential current relays are not used in any safety-related circuits at St. Lucie. Therefore, this event had no adverse impact on the health and safety of the public.
FACILITY NAME (1) DOCKET NUMBER (2) LER NUMBER (6) PAGE (3)
Corrective Actions
1. The 1A2 RCP SA-1 relay was replaced and the retest was completed satisfactorily.
2. The valve positioner for FCV-09-1B2 was replaced and the retest was completed satisfactorily.
3. FPL is considering the feasibility of several design alternatives to the SA-1 relays.
Additional Information
Failed Components Identified Component: � Motor Protective Relay Device Manufacturer: Westinghouse Model: � SA-1 Component: � Valve Positioner for FCV-09-1B2 Manufacturer: Moore Industries Model: � 74H/FR Similar Events Power to the 1A2 Reactor Coolant Pump," documents a similar trip of the 1A2 RCP.
|
---|
|
|
| | Reporting criterion |
---|
05000263/LER-2001-010 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000529/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000250/LER-2001-001 | | | 05000251/LER-2001-001 | | | 05000255/LER-2001-001 | | | 05000261/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000263/LER-2001-001 | | 10 CFR 50.73(a)(2)(i) | 05000266/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000272/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000277/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(vi) | 05000278/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000286/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vi) | 05000287/LER-2001-001 | Reactor Pressure Vessel Head Leakage Due to Stress Corrosion Cracks Found in Nine Control Rod Drive Nozzle Penetrations | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000289/LER-2001-001 | | | 05000298/LER-2001-001 | | | 05000301/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000302/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000305/LER-2001-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000306/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000313/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000315/LER-2001-001 | | | 05000316/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000317/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000318/LER-2001-001 | | 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor | 05000324/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000334/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000338/LER-2001-001 | | 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000339/LER-2001-001 | | | 05000341/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000352/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000353/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000354/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000361/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) | 05000362/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(Iv)(A) 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition 10 CFR 50.73(a)(2)(Iv)(B) | 05000364/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000368/LER-2001-001 | | 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2001-001 | | | 05000370/LER-2001-001 | | | 05000440/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000412/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000400/LER-2001-001 | | | 05000413/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000528/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000483/LER-2001-001 | | | 05000397/LER-2001-001 | | | 05000395/LER-2001-001 | | | 05000443/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000388/LER-2001-001 | | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000387/LER-2001-001 | | | 05000458/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation |
|