08-14-2001 | On June 23, 2001, with the reactor at 100% power, Unit 2 experienced an automatic reactor trip due to a main generator neutral overcurrent trip, which resulted in a turbine trip/reactor trip. The generator neutral transformer electrical connection bolt had been overtorqued during previous refueling outages and subsequently failed, resulting in a main generator trip.
The failure of the bolted electrical connection on the generator neutral overcurrent transformer was due to a combination of personnel error and inadequate procedure in that on three occasions workers misidentified the silicon bronze bolt as steel and consequently overtorqued it. The main generator tagging and backfeed procedure did not provide guidance for distinguishing between coated bronze and steel bolt materials which are visually similar but have different torque requirements. This overtorquing was further aggravated on two of three occasions by failure to follow procedure in the use of metric values with a wrench calibrated in English units. A contributing cause was inadequate procedure in that no guidance on evaluating an overtorquing was established.
The main generator tagging and backfeed procedures will be revised by September 1, 2001 to specify the exclusive use of silicon bronze bolts in this application, to specify only a single torque value, and to require replacement of the generator neutral transformer connecting bolts every refueling outage. Appropriate personnel will be made aware of this event and of the above procedure changes by October 1, 2001.
Appropriate training and procedure changes will be provided by October 1, 2001 to create a standard requiring that, if a bolt is ever overtorqued, it will be evaluated for suitability for continued service. |
---|
Westinghouse -- Pressurized Water Reactor Energy Industry Identification Codes are identified in the text as [XX]
Description of Event
The generator neutral transformer leads are disconnected and reconnected each unit refueling outage. This process is controlled by the main generator [EL] tagging and backfeed procedure. In 1998, torque values for the main generator neutral transformer connection bolt [EL] were added to the procedure. This guidance included a value of 20 ft-lbs for bronze connectors and a standard table of values for steel connectors including both English units (ft-lbs) and metric units (Newton-meters), typically 24-30 ft-lbs and 33-40 nt-m for the bolt size in question. The generator neutral transformer electrical connection was made up with a bolt made of coated silicon bronze material similar in appearance to steel. During three successive outages the coated bronze bolt was misidentified by the worker as steel. In the 1998 and 1999 outages, the bolt was torqued to 33-40 ft-lbs, based on reading the metric values in the procedure as English units. In each of these cases the worker realized his mistake and remade the connection using the correct value for a steel bolt (24-30 ft-lbs). On May 2, 2001, during the 2001 outage the bolt was misidentified as steel and overtorqued to 24-30 ft-lbs.
On June 23, 2001 at 0857, with the unit at 100% power, the generator neutral connecting bolt failed due to the repeated overtorquing. The loss of this electrical connection actuated the generator neutral overcurrent auxiliary relay, which per design resulted in a main generator trip, turbine trip, and reactor trip. All safety systems functioned as designed following the trip.
In order to determine the failure torque for the silicon bronze type bolt, two new bolts were slowly torqued to failure. The bolts failed at 41 and 42 ft-lbs. Two additional new bolts were torqued in increasing increments of 5 ft-lbs, detensioning after each increment, until failure. These bolts failed at 35 and 36 ft-lbs.
Cause of Event
The failure of the bolted electrical connection on the generator neutral overcurrent transformer was due to a combination of personnel error and procedural inadequacy as follows: On three occasions over a four year period, workers reconnecting the generator neutral misidentified the bolt as steel, based on its coating, rather than silicon bronze. As a result, they overtorqued the bolt to 24-30 ft-lbs, appropriate for steel, but in excess of the recommended 20 ft-lbs for silicon bronze. The procedure did not provide guidance for distinguishing coated silicon bronze bolts from steel bolts which are visually very similar. This overtorquing was further aggravated by failure to follow procedure in the use of metric values with a wrench calibrated in English units. On two of the above three occasions, the procedure was initially misapplied in that the metric torque value given in the procedure (33-40 Newton meters is equivalent to 24-30 ft-lbs) for steel was used as 33-40 foot-pounds, resulting in additional overtorquing. Although on both these occasions the worker realized his mistake and retorqued the bolt to the correct value for steel, the initial overtorque contributed to eventual failure of the bronze bolt.
A contributing cause was inadequate procedure in that no guidance on evaluating overtorquing was established.
Safety Significance
All safety systems functioned as designed following the trip. There was no abnormal release of radioactive material during this event; therefore the health and safety of the public were unaffected by this event.
Since all safety systems functioned as designed, this event does not represent a Safety System Functional Failure.
Corrective Action The main generator tagging and backfeed procedures will be revised by September 1, 2001 to specify the exclusive use of silicon bronze bolts in this application, to specify only a single torque value, and to require replacement of the generator neutral transformer connecting bolts every refueling outage.
Appropriate personnel will be made aware of this event and of the above procedure changes by October 1, 2001.
Appropriate training and procedure changes will be provided by October 1, 2001 to create a standard requiring that, if a bolt is ever overtorqued, it will be evaluated for suitability for continued service.
Additional information The following LERs have been submitted in the past two years on reactor trips due to personnel error or inadequate procedure:
Control System Response Pump
|
---|
|
|
| | Reporting criterion |
---|
05000263/LER-2001-010 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000529/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000250/LER-2001-001 | | | 05000251/LER-2001-001 | | | 05000255/LER-2001-001 | | | 05000261/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000263/LER-2001-001 | | 10 CFR 50.73(a)(2)(i) | 05000266/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000272/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000277/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(vi) | 05000278/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function | 05000286/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(vi) | 05000287/LER-2001-001 | Reactor Pressure Vessel Head Leakage Due to Stress Corrosion Cracks Found in Nine Control Rod Drive Nozzle Penetrations | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded | 05000289/LER-2001-001 | | | 05000298/LER-2001-001 | | | 05000301/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000302/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000305/LER-2001-001 | | 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition | 05000306/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000313/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000315/LER-2001-001 | | | 05000316/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000317/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000318/LER-2001-001 | | 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor | 05000324/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000334/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000338/LER-2001-001 | | 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000339/LER-2001-001 | | | 05000341/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000352/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000353/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000354/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown | 05000361/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(i) | 05000362/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(Iv)(A) 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition 10 CFR 50.73(a)(2)(Iv)(B) | 05000364/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation | 05000368/LER-2001-001 | | 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000369/LER-2001-001 | | | 05000370/LER-2001-001 | | | 05000440/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000412/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation | 05000400/LER-2001-001 | | | 05000413/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv), System Actuation | 05000528/LER-2001-001 | | 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000483/LER-2001-001 | | | 05000397/LER-2001-001 | | | 05000395/LER-2001-001 | | | 05000443/LER-2001-001 | | 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications | 05000388/LER-2001-001 | | 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.72(b)(3)(ii), Degraded or Unanalyzed Condition | 05000387/LER-2001-001 | | | 05000458/LER-2001-001 | | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(iv), System Actuation |
|