05000395/LER-2013-003

From kanterella
Jump to navigation Jump to search
LER-2013-003, TRIP SETPOINT RENDERS CHILLER AND CONTROL ROOM EMERGENCY FILTRATION INOPERABLE
V. C. Summer Nuclear Station, Unit 1
Event date: 06-25-2013
Report date: 08-21-2013
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications

10 CFR 50.73(a)(2)(i)(C), 50.54(x) TS Deviation
3952013003R00 - NRC Website

Event Date June 25, 2013 Report Date August 21, 1013 1.0 EVENT DESCRIPTION On June 25, 2013 with the plant in Mode 1 at 100% power, the "A" Chiller (XHX0001A) shut down during a fast bus transfer due to the tripping of two locally mounted molded case circuit breakers (MCCBs). The "A" Chiller was running prior to its 7.2 kV Bus power supply (SXW1DA) being "fast" transferred from the normal power source (115kV) to the alternate source (230kV). This transfer was performed per plant procedures to facilitate taking the 115kV line out of service for planned maintenance. The fast transfer resulted in an immediate trip of the "A" Chiller. Troubleshooting found both compressor motor MCCBs in the tripped condition. These breakers are the three-phase power supply to their respective chiller compressor motor. A subsequent restart attempt resulted in both compressor motors not starting.

The fast transfer time is approximately five electrical cycles between the opening of the normal feeder breaker to XSW1DA and the closing of the alternate feeder breaker. During this time the frequency of the bus voltage drops and the motors slow down. The "A" Train bus voltages also decrease. When the bus is re-energized, the on-coming source and the bus are slightly out of phase. A large current transient can occur for a very brief time and result in an instantaneous (magnetic) trip of the MCCBs.

2.0 EVENT ANALYSIS The "A" Chiller is one of three chillers that provide chilled water to the Chilled Water (VU) System. The VU System has two trains ("A" and "B") and is designed to provide cooling to various critical areas and equipment. Usually, one chiller is running on each train. The "C" Chiller is a swing component and can be powered from either train of Safeguards Power.

During this event, the "B" Chiller was running on the "B" Train, the "C" Chiller was secured, and the "A" Chiller was running on the "A" Train.

TS 3/4.7.6, "Control Room Emergency Filtration Systems (CREFS)," states that two CREFS trains shall be operable. The surveillance requirements under TS 3/4.7.6 require each CREFS train to be demonstrated operable through verification that the control room air temperature is less than or equal to 85 degrees Fahrenheit.

TS 3/4.7.9, "Area Temperature Monitoring," and associated Table 3.7-7 describe the area temperature limits during normal operation due to cooling provided by the VU System. If the chiller is not running, the room temperature will rise over time.

If the temperature in a given area exceeds the limit shown in TS Table 3.7-7 for eight hours, a Special Report detailing past basis for continued operability must be submitted to the NRC. If the technical specifications limit for a given area is exceeded by thirty degrees for four hours, the equipment in the associated area must be declared inoperable.

The Chilled Water System consists of two independent and redundant trains that provide cooling to various critical areas including the Control Room. The Chilled Water System is a necessary attendant cooling system that supports the CREFS operability. As such, a single active failure of a component, with a loss of offsite power, should not impair the ability of the system to perform its design function.

0 With the skid mounted MCCB's instantaneous trip set at 2000 amps, the "A" Chiller may trip on a grid perturbation that causes an electrical transient similar to the one that occurred during the fast transfer. If an event requiring an Engineered Safety Features (ESF) actuation were to occur after the electrical transient, the "A" Chiller may not have started when demanded by the ESF loading sequencer.

3.0 SAFETY SIGNIFICANCE The "A" Chiller has essentially been inoperable since it was installed and declared operable on August 5, 2011. With the redundant design of the VU system, Control Room habitability was not challenged during this time. The design features of the new "A" Chiller which contributed to this event are not part of the design of the "B" and "C" chiller.

The safety significance of this event was minimal. The VU system is not modeled in the Probabilistic Risk Analysis (PRA) model. The VU backup functions for alternate cooling to Charging pump seals are also not credited in the PRA model.

The Final Safety Analysis Report (FSAR) 9.4.7.2.4 describes the Safety Class Chilled Water System. This section states that continuous operation of one of the three chillers and chilled water pumps is required during normal and emergency periods.

Use of three chillers and three chilled water pumps permits one unit to undergo extended maintenance. When all three chiller and pump sets are available, one is designated as a spare and its breaker(s) is racked out. All chillers may also be started locally.

Should the "A" Chiller trip, and the "B" Chiller not be available, the "A" Chiller can be locally reset or the "C" Chiller can be aligned to the "A" train before the control room temperature becomes excessive.

4.0 CORRECTIVE ACTIONS The MCCBs on the "A" Chiller skid have been adjusted to trip at higher amperage. The instantaneous trip setting for the MCCBs has been changed from 5 times to 8.75 times the breaker's nominal 400 amperage. The new instantaneous trip range is now 3063A to 3938A. Also, the short time trip setting for the chiller main supply breaker (XSWIDAI 07B) has been changed from the 6x tap to the 8x tap.

The design calculations have been revised to change breaker settings under NCN CR-13-02694.

5.0 PREVIOUS OCCURRENCE On October 13, 2011 a grid transient caused the "A" Chiller to trip due to an apparent lightning strike. The apparent cause evaluation determined that "A" Chiller tripped on an over-current fault sensed by the over-current trip setting of 250 amperes designed into the chiller's software logic. This 250A setting was determined to be conservative in relation to the 400A protection limit provided by the chiller's local MCCBs. The actual cause of the grid perturbation was not determined.

Engineering Change Request 50585T was issued to remove the 250A over-current trip setpoint from the software to prevent further trips of this nature. No other corrective actions were determined to be required. At the time of this event, the sensitivity-of these settings was not known and therefore the corrective actions taken did not prevent this occurrence.