05000387/LER-2003-004

From kanterella
Jump to navigation Jump to search
LER-2003-004, Loss of Control Structure Chiller Safety Function due to Spurious Chiller Trip
Susquehanna Steam Electric Station - Unit 1
Event date: 06-11-2003
Report date: 08-11-2003
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(v)(D), Loss of Safety Function - Mitigate the Consequences of an Accident
Initial Reporting
3872003004R00 - NRC Website

CONDITIONS PRIOR TO EVENT

Unit 1, Mode 1, 100 percent Rated Thermal Power Unit 2, Mode 1, 100 percent Rated Thermal Power

EVENT DESCRIPTION

On June 11, 2003, Control Structure (CS) Heating, Ventilation and Air Conditioning (HVAC) fan OV103B (EIIS: FAN) and Computer Room Floor Cooling fan OV115B were removed from service for scheduled maintenance. Clearances were applied and the breakers to each respective fan were opened. Due to the interlocks and pemiissives within the control logic of the CS HVAC system, these actions rendered the 'B' train of the CS HVAC system inoperable (including CS chiller OK112B) (EIIS: KM). With both fans out of service, the Limiting Condition for Operation (LCO) for Technical Specification (TS) 3.7.3 was entered due to one train of the Control Room Emergency Outside Air Supply (CREOAS) system (EIIS: VI) being inoperable. In addition, the LCO for TS 3.7.4 was entered due to one train of the Control Room Floor Cooling system being inoperable.

At approximately 1217 hours0.0141 days <br />0.338 hours <br />0.00201 weeks <br />4.630685e-4 months <br /> on June 11, 2003, the 'A' CS chiller OK112A tripped. Local alarm indication at CS chiller OK112A indicated the chiller tripped on "High Bearing or High Motor Temperature." However, a review of the as-found chiller parameters did not indicate that an actual trip of the "High Bearing or High Motor Temperature" circuit had occurred. The 'A' CS chiller was successfully restarted at approximately 1247 hours0.0144 days <br />0.346 hours <br />0.00206 weeks <br />4.744835e-4 months <br /> but was not declared operable since the cause of the trip had not been determined. With the 'A' and 'B' CS chillers inoperable, both trains of the CREOAS and Control Room Floor Cooling systems were made inoperable. As such, with both trains of the CREOAS system (TS 3.7.3) and the Control Room Floor Cooling system (TS 3.7.4) inoperable, Unit 1 and Unit 2 entered TS 3.0.3 and a controlled shutdown of both units was commenced at 1315 hours0.0152 days <br />0.365 hours <br />0.00217 weeks <br />5.003575e-4 months <br />. At 1320 hours0.0153 days <br />0.367 hours <br />0.00218 weeks <br />5.0226e-4 months <br /> on June 11, 2003, the 'B' train of CS HVAC system was declared operable and the shutdown was aborted. A four-hour ENS notification (#39919) was made to the NRC at 1407 hours0.0163 days <br />0.391 hours <br />0.00233 weeks <br />5.353635e-4 months <br /> on June 11, 2003 in accordance with 10 CFR 50.72(b)(2)(i) due the initiation of a TS-required plant shutdown.

In accordance with 10 CFR 50.73(a)(2)(v)(D), this LER is being submitted for a condition that could have prevented the fulfillment of a safety function. This event is also reportable in accordance with 10 CFR 50.73(a)(2)(i)(B) for the initiation of a TS-required plant shutdown.

CAUSE OF EVENT

The most probable cause for the CS chiller trip was due to a loose connection identified at Point 40 within the "High Bearing or High Motor Temperature" circuit. A loose connection can create a high resistance termination and subsequent voltage drop across the electrical connection. If the voltage drop becomes significant enough, the downstream voltage may be insufficient to hold-in the downstream relay coils. If the downstream relay coils de-energize, the chiller will trip.

CAUSE OF EVENT (continued) Another potential cause for the spurious trip of CS Chiller OK112A on "High Bearing or High Motor Temperature" was a momentary loss of the "High Bearing or High Motor Temperature" circuit due to an unknown electrical transient. The "High Bearing or High Motor Temperature" trip is monitored and initiated by the two solid state control modules. One control module initiates the "High Bearing Temperature" trip.

The other control module initiates the "High Motor Temperature" trip. These solid state control modules are energized with a 24 VAC non-regulated power supply. Electrical transients (i.e. voltage spikes and dips) within a non-regulated power supply can cause operational perturbations within solid state components. Thus, it is possible that an unknown electrical transient caused an operational perturbation of one of the control modules initiating the "High Bearing or High Motor Temperature" trip.

ANALYSIS / SAFETY SIGNIFICANCE

The CS HVAC system provides ventilation and cooling for such areas as the control room, battery rooms, cable spreading rooms and relay rooms.

The CREOAS system is designed to provide a radiologically controlled environment from which each Unit can be safely operated following a Design Basis Accident (DBA). The CREOAS system is designed to maintain the control room environment for a 30-day continuous occupancy after a DBA without exceeding 5 REM whole body dose or its equivalent to any part of the body. To achieve this, one train of the CREOAS system must be available and capable of pressurizing the habitability envelope to greater than or equal to 0.125" WC to prevent the infiltration of air from surrounding buildings. The CS HVAC fans (0V103A/B, OV115A/B, and OV117A/B) are part of the CREOAS system and are required to ensure a positive pressure of 0.125" WC within the habitability envelope.

The Control Room Floor Cooling system provides temperature control for the control room. The system is designed to provide a controlled environment for maintaining equipment operability for a 30-day continuous occupancy under both normal and accident conditions. Additionally, during accident Emergency Switchgear Room Cooling (ESRC) system (EIIS: VA).

During this event, with CS chillers OK112A and OK112B tripped, both trains of the Control Room Floor Cooling and CREOAS systems were rendered inoperable resulting in the loss of their automatic function during a DBA. In addition, with both CS chillers tripped, the emergency source of cooling water to the Unit 1 Emergency Switchgear Room Coolers would not have been available during a DBA.

In accordance with plant design, when CS chiller OK112A tripped, the 'A' CS HVAC fans also shut down.

However, the 'A' CS HVAC fans could have been restored by manually placing their respective handswitches in the START position. Although the automatic design function of both CS HVAC fans was lost, the 'A' CS HVAC fans remained functional for manual initiation. Hence, one division of the CREOAS system remained available at all times during this event.

ANALYSIS / SAFETY SIGNIFICANCE (continued) Since train 'A' of the CS HVAC system was restored within 30 minutes, equipment operating temperatures in the CS and the Unit 1 Emergency Switchgear (EIIS: ED) room were not exceeded or challenged.

During a loss of CS HVAC, procedure ON-030-001, "Loss of Control Structure HVAC," includes mitigating actions to be taken during such an event. These mitigating actions account for increases in room temperature and for hydrogen build-up. The most limiting action described in procedure ON-030-001 must be performed within three hours following the loss of CS HVAC to avoid any adverse impact to the CS environment. As such, any increase in room temperature or hydrogen concentration was minimal during the time that the CS HVAC system was inoperable. Therefore, this event was bounded by procedure ON-030-001.

Cooling to the Unit 1 ESRC system was maintained throughout this event via the normal source of cooling water (i.e., the Reactor Building (RB) Chilled Water system). Thus, Unit 1 Switchgear Room temperatures were not exceeded or challenged. During a DBA, cooling to the Unit 1 ESRC system would have been lost since the CS Chilled Water system is its emergency source of cooling. However, an engineering calculation has demonstrated that a safe shutdown could be achieved without CS Chilled Water being supplied to the ESRC system for up to 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br />.

The actual consequences of this event would not have been more severe at different operational modes.

Based upon the discussion above, the safety significance of this event was minimal. In addition, there was no impact to the health and safety of the public.

CORRECTIVE ACTIONS

The corrective actions that have been completed are:

  • The "High Bearing Temperature" and "High Motor Temperature" components within CS chiller OK112A were tested. All components tested satisfactorily.
  • All accessible terminations within the "High Bearing or High Motor Temperature" circuit of CS chiller OK112A were checked for tightness. The as-left conditions of all electrical connections were tight and secure.
  • Thermography was used to check CS chillers OK112A and OK112B for loose electrical connections.

No loose connections were identified.

The key corrective actions to be completed are:

  • Thermography will be performed to check the RB and Turbine Building (TB) chillers for loose electrical connections.

CORRECTIVE ACTIONS (continued)

  • To prevent the station chillers from tripping due to operational perturbations of their control modules, a modification will be performed to install a short time delay within the trip relays for the "High Bearing or High Motor Temperature" circuit for the CS chillers. The time delay is sufficient to "ride out" an operational transient without tripping the chiller yet will provide adequate equipment protection. Similar modifications to the RB and TB chillers are also being investigated.

PREVIOUS SIMILAR EVENTS

CR 409481: On June 24, 2002, Unit 2 TB chiller 1K102B tripped on "High Bearing Temperature" and the standby TB chiller 1K102A automatically started. However, based on actual recorded temperatures for the chiller 1K102B, the trip was determined not to be valid, since temperatures were within allowable values. Investigation results concluded that the most likely cause of the chiller trip was due to an electrical transient within the "High Bearing Temperature" instrumentation circuit.