05000390/LER-2016-004, Regarding Automatic Reactor Trip Due to Actuation of Over Temperature Delta Temperature Bistables
| ML16144A377 | |
| Person / Time | |
|---|---|
| Site: | Watts Bar  |
| Issue date: | 05/23/2016 |
| From: | Simmons P Tennessee Valley Authority |
| To: | Document Control Desk, Office of Nuclear Reactor Regulation |
| References | |
| LER 16-004-00 | |
| Download: ML16144A377 (6) | |
| Event date: | |
|---|---|
| Report date: | |
| Reporting criterion: | 10 CFR 50.73(a)(2)(iv)(A), System Actuation 10 CFR 50.73(a)(2)(ii)(A), Seriously Degraded 10 CFR 50.73(a)(2)(viii)(A) 10 CFR 50.73(a)(2)(ii)(B), Unanalyzed Condition 10 CFR 50.73(a)(2)(viii)(B) 10 CFR 50.73(a)(2)(iii) 10 CFR 50.73(a)(2)(ix)(A) 10 CFR 50.73(a)(2)(x) 10 CFR 50.73(a)(2)(v)(A), Loss of Safety Function - Shutdown the Reactor 10 CFR 50.73(a)(2)(v)(B), Loss of Safety Function - Remove Residual Heat 10 CFR 50.73(a)(2)(v), Loss of Safety Function 10 CFR 50.73(a)(2)(i)(A), Completion of TS Shutdown 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications 10 CFR 50.73(a)(2)(vii), Common Cause Inoperability 10 CFR 50.73(a)(2)(i) |
| 3902016004R00 - NRC Website | |
text
m Tennessee Valley Authority, Post Office Box 2000, Spring City, Tennessee 37381 May 23, 2016 10 CFR 50.73 ATTN:
Document Control Desk U.S. Nuclear Regulatory Commission Washington, D.C. 20555-0001 Watts Bar Nuclear Plant, Unit 1 Facility Operating License No. NPF-90 NRC Docket No. 50-390
Subject:
Licensee Event Report 390/2016-004-00, Automatic Reactor Trip Due to Actuation of Over Temperature Delta Temperature Bistables This submittal provides Licensee Event Report (LER) 390/2016-004-00. This LER provides details concerning a recent automatic plant trip on Over Temperature Delta Temperature. This report is being submitted in accordance with 10 CFR 50.73(a)(2)(iv)(A).
Please direct any questions concerning this matter to Gordon Arent, WBN Licensing Director, at (423) 365-2004.
Respectfully, Paul Simmons Site Vice President Watts Bar Nuclear Plant Enclosure cc: See Page 2
U.S. Nuclear Regulatory Commission Page 2 May 23, 2016 cc (Enclosure):
NRC Regional Administrator - Region II NRC Senior Resident Inspector - Watts Bar Nuclear Plant
NRC FORM 366 U.S. NUCLEAR REGULATORY COMMISSION CM) LICENSEE EVENT REPORT (LER)
APPROVED BY OMB: NO. 3150-0104 EXPIRES: 10/31/2018
, the NRC may notconduct or sponsor, and a person is not required to respondto, the infomnation collection.
- 1. FACILITY NAME Watts Bar Nuclear Plant, Unit 1
- 2. DOCKET NUMBER 05000390
- 3. PAGE 1
OF 4
- 4. TITLE Automatic Reactor Trip Due to Actuation of Over Temperature Delta Temperature Bistables
- 5. EVENT DATE
- 6. LER NUMBER
- 7. REPORT DATE
- 8. OTHER FACILITIES INVOLVED MONTH DAY YEAR YEAR SEQUENTIAL NUMBER REV NO.
MONTH DAY YEAR FACILITY NAME N/A DOCKET NUMBER N/A 03 22 2016 2016 004 00 05 23 2016 FACILITY NAME N/A DOCKET NUMBER N/A
- 9. OPERATING MODE
- 11. THIS REPORT IS SUBMITTED PURSUANT TO THE REQUIREMENTS OF 10 CFR §: (Check all that apply) 1 20.2201(b) 20.2203(a)(3)(i) 50.73(a)(2)(ii)(A) 50.73(a)(2)(viii)(A) 20.2201(d) 20.2203(a)(3)(ii) 50.73(a)(2)(ii)(B) 50.73(a)(2)(viii)(B) 20.2203(a)(1) 20.2203(a)(4) 50.73(a)(2)(iii) 50.73(a)(2)(ix)(A) 20.2203(a)(2)(i) 50.36(c)(1)(i)(A)
S 50.73(a)(2)(iv)(A) 50.73(a)(2)(x)
- 10. POWER LEVEL 100 20.2203(a)(2)(ii) 50.36(0(1 )(ii)(A) 50.73(a)(2)(v)(A) 73.71(a)(4) 20.2203(a)(2)(iii) 50.36(c)(2) 50.73(a)(2)(v)(B) 73.71(a)(5) 20.2203(a)(2)(iv) 50.46(a)(3)(ii) 50.73(a)(2)(v)(C) 73.77(a)(1) 20.2203(a)(2)(v) 50.73(a)(2)(i)(A) 50.73(a)(2)(v)(D) 73.77(a)(2)(i) 20.2203(a)(2)(vi) 50.73(a)(2)(i)(B) 50.73(a)(2)(vii) 73.77(a)(2)(ii) 50.73(a)(2)(i)(C) 1 1 OTHER Specify in Abstract below or in YEAR 2016 SEQUENTIAL NUMBER 004 REV NO.
00 G.
Failure Mode and Effect of Each Failed Component The VPL circuit card's output failed to zero percent, which as designed, caused the main turbine control system to limitthe position of the four governor valve to zero percent. This constitutes a complete loss of external electrical load.
H. Operator Actions
This was an uncomplicated reactor trip. No special operator actions were required.
I.
Automatically and Manually Initiated Safety System Responses
All automatic and manual safety systems responded as expected.
III.
CAUSE OF THE EVENT
A. The cause of each component or system failure or personnel error, if known.
A DC to DC converter failed on the VPL Up/Down counter card in the AEH controls, which caused the card's output to fail to zero percent.
B.
The cause(s) and circumstances for each human performance related root cause.
There were no human performance causes associated with this plant trip.
IV.
ANALYSIS OF THE EVENT
On March 22, 2016 at 1131 EDT, the main turbine control system VPL circuit card failed. This failure caused all four main turbine governor valve to go fully closed. This constituted a complete loss of external electrical load for the unit. The reactor continued to operate for approximately 8 seconds after the governor valves closed until the reactor protection system tripped the reactor on over temperature delta temperature. All safety systems operated as expected, and operations personnel were able to promptly stabilize the plant in Mode 3.
V.
ASSESSMENT OF SAFETY CONSEQUENCES
A.
Availability of systems or components that could have performed the same function as the components and systems that failed during the event The turbine controls system is not safety related. The failure of the VPL Up/Down card resulted in a plant trip, but otherwise did not impact any plant safety functions.
B.
For events that occurred when the reactor was shut down, availability of systems or components needed to shutdown the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident Not applicable.
C.
For failure that rendered a train of a safety system inoperable, an estimate of the elapsed time from the discovery of the failure until the train was returned to service Not applicable.
VI.
CORRECTIVE ACTIONS
This event was entered into the Tennessee Valley Authority Corrective Action Program and is being tracked under condition report 1152462.
A.
Immediate Corrective Actions
The failed VPL Up/Down card that resulted in the plant trip was replaced.
B.
Corrective Actions to Prevent Recurrence The existing turbine control system has a number of identified single point vulnerabilities. The long term plan is to replace the existing AEH turbine control system with a modern fault tolerant turbine digital control system.
VII.
ADDITIONAL INFORMATION
A.
Previous similar events at the same plant On May 21, 2010, WBN Unit 1 experienced a reactor trip on turbine trip from full 100 percent rated thermal power caused by closure of the Main Turbine Throttle/Stop valves as reported in LER 2010-001 dated July 20, 2010. The probable cause was determined to be an intermittent failure of a circuit card in the AEH turbine control system. The existing AEH circuit cards that were in the signal path that resulted in the trip were replaced.
B.
Additional Information
None.
C.
Safety System Functional Failure Consideration This condition did not result in a safety system functional failure.
D. Scrams with Complications Consideration There were no complications as a result of this reactor trip.
VIII.
COMMITMENTS
None.
I.
PLANT OPERATING CONDITIONS BEFORE THE EVENT
Watts Bar Nuclear Plant (WBN) Unit 1 was in Mode 1 at 100 percent rated thermal power (RTP).
II.
DESCRIPTION OF EVENT
A.
Event On March 22, 2016, at 1131 Eastern Daylight Time (EDT), the Watts Bar Nuclear Plant Unit 1 (WBN1) reactor tripped due to the actuation of the Over Temperature Delta Temperature bistables. Concurrent with the reactor trip, the Auxiliary Feedwater (AFW) system actuated. All control rods inserted upon the reactor trip and safety systems functioned as expected.
An investigation into the cause of the trip determined that a failure of a Valve Position Limit(VPL) up/down circuit card {EIIS:CBD}in the Analog Electro-Hydraulic (AEH) turbine controls {EIIS:TG}
resulted the closure of the turbine high pressure governor valves {EIIS:XCV}, resulting in an automatic reactor trip and subsequent turbine trip on WBN1. The failed card was replaced and WBN Unit 1 was returned to service.
This event was reported to the Nuclear Regulatory Commission (NRC) on March 22, 2016 via Event Notification 51815 pursuant to 10 CFR 50.72(b){2)(iv)(B) and 10 CFR 50.72(b){3)(iv)(A).
B.
Inoperable Structures, Components, or Systems that Contributed to the Event A DC to DC converter failed on the VPL Up/Down counter card in the AEH controls, which resulted in the plant trip.
C.
Dates and Approximate Times of Occurrences
On March 22, 2016, the main turbine control system VPL Up/Down circuit card failed, which resulted in the four main turbine governor valves going closed. Eight seconds after valve closure the reactor tripped on over temperature delta temperature.
D.
Manufacturer and Model Number of Components that Failed The up/down counter circuit card was supplied by Siemens, Part number 1B51049-101.
E.
Other Systems or Secondary Functions Affected
The failure of the Valve Position Limiter did not directly affect the function of any other systems or other secondary functions.
F.
Method of discovery of each Component or System Failure or Procedural Error
The component failure was discovered by performance of the maintenance procedure that checks/calibrates the main turbine control system. This was only a component failure, no system failures or procedural errors caused this event.
YEAR 2016 SEQUENTIAL NUMBER 004 REV NO.
00 G.
Failure Mode and Effect of Each Failed Component The VPL circuit card's output failed to zero percent, which as designed, caused the main turbine control system to limitthe position of the four governor valve to zero percent. This constitutes a complete loss of external electrical load.
H. Operator Actions
This was an uncomplicated reactor trip. No special operator actions were required.
I.
Automatically and Manually Initiated Safety System Responses
All automatic and manual safety systems responded as expected.
III.
CAUSE OF THE EVENT
A. The cause of each component or system failure or personnel error, if known.
A DC to DC converter failed on the VPL Up/Down counter card in the AEH controls, which caused the card's output to fail to zero percent.
B.
The cause(s) and circumstances for each human performance related root cause.
There were no human performance causes associated with this plant trip.
IV.
ANALYSIS OF THE EVENT
On March 22, 2016 at 1131 EDT, the main turbine control system VPL circuit card failed. This failure caused all four main turbine governor valve to go fully closed. This constituted a complete loss of external electrical load for the unit. The reactor continued to operate for approximately 8 seconds after the governor valves closed until the reactor protection system tripped the reactor on over temperature delta temperature. All safety systems operated as expected, and operations personnel were able to promptly stabilize the plant in Mode 3.
V.
ASSESSMENT OF SAFETY CONSEQUENCES
A.
Availability of systems or components that could have performed the same function as the components and systems that failed during the event The turbine controls system is not safety related. The failure of the VPL Up/Down card resulted in a plant trip, but otherwise did not impact any plant safety functions.
B.
For events that occurred when the reactor was shut down, availability of systems or components needed to shutdown the reactor and maintain safe shutdown conditions, remove residual heat, control the release of radioactive material, or mitigate the consequences of an accident Not applicable.
C.
For failure that rendered a train of a safety system inoperable, an estimate of the elapsed time from the discovery of the failure until the train was returned to service Not applicable.
VI.
CORRECTIVE ACTIONS
This event was entered into the Tennessee Valley Authority Corrective Action Program and is being tracked under condition report 1152462.
A.
Immediate Corrective Actions
The failed VPL Up/Down card that resulted in the plant trip was replaced.
B.
Corrective Actions to Prevent Recurrence The existing turbine control system has a number of identified single point vulnerabilities. The long term plan is to replace the existing AEH turbine control system with a modern fault tolerant turbine digital control system.
VII.
ADDITIONAL INFORMATION
A.
Previous similar events at the same plant On May 21, 2010, WBN Unit 1 experienced a reactor trip on turbine trip from full 100 percent rated thermal power caused by closure of the Main Turbine Throttle/Stop valves as reported in LER 2010-001 dated July 20, 2010. The probable cause was determined to be an intermittent failure of a circuit card in the AEH turbine control system. The existing AEH circuit cards that were in the signal path that resulted in the trip were replaced.
B.
Additional Information
None.
C.
Safety System Functional Failure Consideration This condition did not result in a safety system functional failure.
D. Scrams with Complications Consideration There were no complications as a result of this reactor trip.
VIII.
COMMITMENTS
None.