05000346/LER-2016-006, Potential to Trip Emergency Diesel Generator on High Crankcase Pressure
| ML16230A488 | |
| Person / Time | |
|---|---|
| Site: | Davis Besse  |
| Issue date: | 08/15/2016 |
| From: | Boles B FirstEnergy Nuclear Operating Co |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| L-16-222 LER 16-006-00 | |
| Download: ML16230A488 (6) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) |
| 3462016006R00 - NRC Website | |
text
FENOC' RrstEnergy Nuclear Operating Company 5501 North State Route 2 Oak Harbor, Ohio 43449 Brian D. Boles Vice President, Nuclear August 15, 2016 L-16-222 ATTN: Document Control Desk United States Nuclear Regulatory Commission Washington, D.C. 20555-0001
Subject:
Davis-Besse Nuclear Power Station, Unit 1 Docket Number 50-346, License Number NPF-3 Licensee Event Report 2016-006 10 CFR 50.73 419-321-7676 Fax: 419-321-7582 Enclosed is Licensee Event Report (LER) 2016-006-00, "Potential to Trip Emergency Diesel Generator on High Crankcase Pressure." This event is being reported pursuant to 10 CFR 50.73(a)(2)(i)(B), 10 CFR 50.73(a)(2)(ii)(B), and 10 CFR 50.73(a)(2)(v)(A) through (D).
There are no regulatory commitments contained in this letter or its enclosure. The actions described represent intended or planned actions and are described for information only. If there are any questions or if additional information is required, please contact Mr. Patrick J. McCloskey, Manager-Site Regulatory Compliance, at (419) 321-7274.
Sincerely,
~!4B JCS Enclosure: LER 2016-006 cc: NRG Region Ill Administrator NRG Resident Inspector N RR Project Manager Utility Radiological Safety Board
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION APPROVED BY OMB: NO. 3150-0104 EXPIRES: 10/31/2018 (11-2015)
Estimated burden per response to comply with this mandatory collection request: 80 hours9.259259e-4 days <br />0.0222 hours <br />1.322751e-4 weeks <br />3.044e-5 months <br />. Reported
~'flllfG((l.,
lessons learned are incorporated into the licensing process and fed back to industry. Send
._(J
'o comments regarding burden estimate to the FOIA, Privacy and Information Collections Branch (T-
~
s
~
LICENSEE EVENT REPORT (LER) 5 F53), U.S. Nuclear Regulatory Commission, Washington, DC 20555-0001, or by internet e-
\\
'/
mail to lnfocollects.Resource@nrc.gov, and to the Desk Officer, Office of Information and Regulatory (See Page 2 for required number of Affairs, NEOB-10202, (3150-0104), Office of Management and Budget, Washington, DC 20503.
digits/characters for each block)
If a means used to impose an information collection does not display a currently valid OMB control num~er, the NRG may not conduct or sponsor, and a person is not required to respond to, the information collection.
- 3. PAGE Davis-Besse Nuclear Power Station, Unit 1 05000 346 1 OF 5
- 4. TITLE:
Potential to Trip Emergency Diesel Generator on High Crankcase Pressure
- 5. EVENT DATE
- 6. LER NUMBER
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED I
SEQUENTIAL I REV FACILITY NAME DOCKET NUMBER MONTH DAY YEAR YEAR NUMBER NO.
MONTH DAY YEAR 05000 FACILITY NAME DOCKET NUMBER 06 16 2016 2016 -
006 -
00 08 15 2016 05000
- 9. OPERATING MODE
- 11. THIS REPORT IS SUBMITIED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply)
D 20.2201 (bl D 20.2203(a)(3)(il D 50.73(a)(2)(ii)(A)
D 50.73(a)(2)(viii)(A) 1 D 20.2201 (dl D 20.2203(a)(3)(ii)
~ 50.73(a)(2)(ii)(B)
D 50.73(a)_(2)(viii)(B)
D 20.2203(a)(1)
D 20.2203(a)(4l D 5o.73(a)(2)(iiil D 50. 73(a)(2)(ix)(A)
D 20.2203(a)(2)(il D 50.36(c)(1)(i)(A)
D 50.73(a)(2)(iv)(A)
D 50.73(a)(2)(x)
- 10. POWER LEVEL D 20.2203(a)(2)(iil D 50.36(c)(1)(ii)(A) t8J 50. 73(a)(2)(v)(A)
D 73.11 (a)(4)
D 20.2203(a)(2r(iii)
D 50.36(c)(2)
~ 50.73(a)(2)(v)(B)
D 73.71(a)(5)
D 20.2203(a)(2)(iv)
D 50.46(a)(3)(ii)
~ 50.73(a)(2)(v)(C)
D 73.77(a)(1) 100 D 20.2203(a)(2)(v)
D 50.73(a)(2)(i)(A)
~ 50.73(a)(2)(v)(D)
D 73.77(a)(2)(il D 20.2203(a)(2)(vi)
[8J 50. 73(a)(2)(i)(B)
D 50.73(a)(2)(vii)
D 73.77(a)(2)(ii)
D 50.73(a)(2)(i)(C)
D OTHER Specify in Abstract below or in Technical Specifications:
DBNPS Technical Specification (TS) Limiting Condition for Operation (LCO) 3.8.1.b requires two separate and independent EDGs to be Operable while the plant is operating in Modes 1, 2, 3, and 4. With one EDG inoperable, the Operability of the remaining A.C. sources must be demonstrated by performing Surveillance Requirement 3.8.1.1 (verification of correct breaker alignments and indicated power availability) within one hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter and by performing Surveillance Requirement 3.8.1.2 (verification that the Operable EDG starts and accelerates up to 900 rpm) within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />. Two EDGs must be restored to Operable status within 7 days or the plant must be in Hot Standby (Mode 3) within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in Cold Shutdown (Mode 5) completed within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />. With two EDGs inoperable, the Operability of one EDG must be restored within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or the plant must be in Hot Standby (Mode 3) within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in Cold Shutdown (Mode 5) completed within 36 hours4.166667e-4 days <br />0.01 hours <br />5.952381e-5 weeks <br />1.3698e-5 months <br />.
DESCRIPTION OF EVENT
An industry operating experience report in June 2016 identified the potential for differential pressure changes caused by a tornado to actuate the plant's EDG High Crankcase Pressure switches during normal, stand-by mode, locking-out the EDGs prior to receiving an emergency mode start signal.
Review of the DBNPS Auxiliary Building Tornado Depressurization calculation on June 16, 2016, determined the specific scenario had not been previously considered, and the calculated pressure differences between the EDG rooms and outside atmosphere caused by a design basis tornado could exceed the EDG High Crankcase Pressure Switch setting of 1 inch WG (nominal), creating the same situation at the DBNPS.
The scenario assumes a tornado lowers atmospheric pressure in both EDG rooms, and the pressure inside the engines remains slightly higher, such that the high crankcase pressure switches trip. Although the crankcase pressure trips are bypassed on ari emergency start of the engines, the scenario assumes the trips happen before the ED Gs are required to start for *a Loss of Offsite power (or other bus undervoltage condition). The DBNPS review of the operating experience concluded this scenario could possibly cause the differential pressure necessary to trip the crankcase pressure switches on the DBNPS EDGs. A trip of the crankcase pressure switches, while in standby, causes actuation of the shutdown relays, which in turn causes engine lockouts, keeping the EDGs from being able to stai:t during an emergency condition. *.
CAUSE OF EVENT
The original design of the EDGs' protective devices did not anticipate the interaction between the High Crankcase Pressure switch and atmospheric pressure outside of the EDG Rooms of the Auxiliary Building during a tornado event. Additionally, there were no means to bypass or delay a trip signal in normal, stand-by mode which contributed to the susceptibility of the High Crankcase Pressure switch to possibly actuate during a tornado event.
Neither the DBNPS nor, others in the nuclear industry recognized that differential pressures due to a tornado could actuate an EDG High Crankcase Pressure Switch until this recent industry operating experience discovery.
ANALYSIS OF EVENT
YEAR 2016
- 3. LER NUMBER SEQUENTIAL NUMBER 006 This issue is considered to have at most a substantial safety significance. The delta Core Damage Frequency (CDF) of 3.42E-05, when calculated and using the most conservative assumptions is within the substantial safety significance range of significance. However, the conservative assumptions include any tornados striking the site would lockout the DBNPS EDGs because of this condition.
The conservative nature of this assumption is evidenced by the fact that the tornado which did strike the facility in June 1998 did not result in an EDG lockout. As a result, sensitivity studies using less conservative probabilities that a tornado would travel the specific path needed to lockout the EDGs were performed. These studies show that the delta CDF could be as low as 5.8E-07, which is within the very low safety significance range. Also, credit was not taken for operator actions to reset the EDGs. If an operator action with a 1 percent failure rate is taken into consideration, the delta CDF would be 5.8E-07, which is within the very low safety significance range. Combining both operator action credit (1 percent failure rate) with less conservative tornado pathing (1 percent chance to cause the condition) results in a delta CDF of 2.4E-07, which is within the very low safety significance range.
REV NO.
00 Additionally, since the EDG crankcase pressure lockout is bypassed during an emergency start, it may be assumed that the tornado does not cause a loss of offsite power as it approaches the site in order for this scenario to occur. The prevailing winds at the site and tornados in this geographical area, generally travel from West to East. It is likely that the switchyard and/or offsite power sources would be disabled prior to the tornado impacting the EDG Rooms and actuating the crankcase pressure switches. It is also noted that in the past 3 years, there has only been one tornado in Ottawa County, Ohio, which occurred on November 17, 2013. The tornado was classified as an EF1 and was never within 11 miles of the site.
Reportability Discussion:
The EDG crankcase pressure switch actuation due to pressure differentials during a tornado event is an unanalyzed condition and because it affects both EDGs simultaneously, it would affect all safety related onsite AC power. Therefore, this condition represents an unanalyzed condition that significantly degrades plant safety, and therefore is reportable per 10 CFR 50. 73(a)(2)(ii)(B). The NRC was verbally notified of this event per 10 CFR 50.72(b)(3)(ii)(B) at 1459 hours0.0169 days <br />0.405 hours <br />0.00241 weeks <br />5.551495e-4 months <br /> on June 16, 2016, via Event Number 52010.
A further review of this condition, concluded that because this condition was present from the original design and affected both EDGs simultaneously, coupled with the complexity of the tornado I Auxiliary Building analysis, there was not sufficient evidence to support a reasonable expectation that either EDG could have performed their safety function in the past if a design basis tornado had struck the Davis-Besse site.
Because this condition would have affected both of the EDGs simultaneously, this condition is reportable per 1 O CFR 50. 73(a)(2)(v) as a condition that could have prevented the fulfillment of the safety function of a system needed to: (A) shutdown the reactor and maintain it in a safe shutdown condition; (B) remove residual heat; (C) control the release of radioactive material; and (D) mitigate the consequences of an accident.
ANALYSIS OF EVENT (Reportability Discussion continued)
YEAR 2016
- 3. LER NUMBER SEQUENTIAL NUMBER 006 REV NO.
00 Furthermore, because both of the EDGs, in the postulated tornado scenario with the EOG crankcase pressure switch actuation, were simultaneously affected and would not have fulfilled their safety function, and since the plant operated with the subject equipment in this condition for longer than the TS LCO Action Time; this issue represents an operation prohibited by the Technical Specifications, which also is reportable as a LER in accordance with 10 CFR 50. 73(a)(2)(i)(B).
CORRECTIVE ACTIONS
Completed Actions:
Direction was provided to the operators on June 16, 2016, to implement maintenance activities to remove the Crankcase Pressure Relay/trip, as a compensatory measure, should a local Tornado Watch or Warning be issued.
A Prompt Operability Determination was completed on June 17, 2016, formalizing the compensatory measure to be implemented through the Corrective Action Program. As noted in the Prompt Operability Determination, the engine vendor has agreed that removal of the Crankcase Pressure Relay/trip relay does not adversely impact engine operation.
An Operations Standing Order was developed and issued on June 17, 2016, to provide direction to the operators to implement the compensatory measure during weather conducive to the formation of a tornado as identified by notification of a locally declared Tornado Watch or Warning.
A temporary modification was developed and implemented on June 25, 2016, to disable the EOG Crankcase Pressure Switch trip function for EOG 1 and 2.
Scheduled Actions:
A modification will be developed to permanently disable the EOG High Crankcase Pressure switches trip logic.
PREVIOUS SIMILAR EVENTS
There have been no LERs at the DBNPS in the past three years involving the inoperability of the Emergency Diesel Generators or latent system design issues.