05000461/LER-2002-003

From kanterella
Jump to navigation Jump to search
LER-2002-003, Manufacturing Process Deficiency in Main Power Transformer Sudden Pressure Relay Causes False Actuation of Relay Resulting in Generator and Turbine Trip and Reactor Scram
Clinton Power Station
Event date:
Report date:
Reporting criterion: 10 CFR 50.73(a)(2)(iv)(A), System Actuation
4612002003R00 - NRC Website

PLANT CONDITIONS PRIOR TO THE EVENT:

Unit: 1; Event Date: 07/04/02; Event Time: 0133 Central Daylight Time MODE: 1 (POWER OPERATION); Reactor Power: 095 percent

DESCRIPTION OF EVENT

On July 4, 2002, at about 0133 hours0.00154 days <br />0.0369 hours <br />2.199074e-4 weeks <br />5.06065e-5 months <br />, the sudden pressure alarm [ALM] for the 'B' Main Power Transformer (MPT)[XFMR][EL] actuated in the Main Control Room and at the same time the reactor automatically scrammed. The sudden pressure alarm was initiated by an apparent malfunction of the sudden pressure relay [RLY]. The sudden pressure relay initiated a Main Generator [GEN] trip and lockout. The generator trip caused a Main Turbine [TRB][TA] trip and Turbine Control Valve fast closure, resulting in the reactor scram. The sudden pressure relay trip also initiated the � MPT deluge system [KP], and the fire pumps [P] automatically started as expected.

Following the scram, reactor pressure vessel (RPV) water level dropped, as expected, below the Low Level 3 trip setpoint to minus 3 inches narrow range indication, so operators entered Emergency Operating Procedure (EOP) 1, "RPV Control." (Low Level 3 is 8.9 inches narrow range indication.) At 0138 hours0.0016 days <br />0.0383 hours <br />2.281746e-4 weeks <br />5.2509e-5 months <br />, in response to the reactor scram and the lowering RPV water level, operators entered the reactor scram off-normal procedure.

At 0138 hours0.0016 days <br />0.0383 hours <br />2.281746e-4 weeks <br />5.2509e-5 months <br />, operators transitioned to EOP 1A, "ATWS RPV Control" due to not having indication that all control rods fully inserted. The full core display did not have position indication for some control rods and the full-in LEDs were not lit on both divisions of the Rod Action Control System (RACS) [AA], however, reactor power was zero percent. At 0139 hours0.00161 days <br />0.0386 hours <br />2.29828e-4 weeks <br />5.28895e-5 months <br />, Division 1 RACS indicated that all control rods were fully inserted, so operators exited EOP lA and reentered EOP 1.

At 0141 hours0.00163 days <br />0.0392 hours <br />2.331349e-4 weeks <br />5.36505e-5 months <br />, the Division 2 RACS indicated that all control rods were fully inserted. Action Tracking Item 114453-25 was initiated to track a review of this position indication issue.

The Low Level 3 RPV water level trip caused Primary Containment isolation valves [ISV] in Group 2 (Residual Heat Removal (RHR)[BO]), Group 3 (RHR), and Group 20 (miscellaneous systems) to receive signals to shut as expected; these valves were already shut prior to the event in accordance with the normal plant lineup. By 0327 hours0.00378 days <br />0.0908 hours <br />5.406746e-4 weeks <br />1.244235e-4 months <br />, operators completed the Automatic Isolation Checklist 'and verified that the Primary Containment isolation valves responded as expected.

At 0240 hours0.00278 days <br />0.0667 hours <br />3.968254e-4 weeks <br />9.132e-5 months <br />, operators exited EOP 1 and continued reactor control in accordance with the reactor scram off-normal procedure. At 0955 hours0.0111 days <br />0.265 hours <br />0.00158 weeks <br />3.633775e-4 months <br />, operators exited the reactor scram off-normal procedure and RPV water level and pressure were being controlled in accordance with the unit shutdown procedure.

The plant was maintained in Mode 3 (HOT SHUTDOWN) with reactor coolant pressure being maintained within a pressure band of 550 to 650 pounds per square inch gage (psig) and reactor coolant level was being maintained between the Low Level 3 and the High Level 8 setpoints.

No Main Steam [SB] Isolation Valves [ISV] closed or Safety Relief Valves [RV] lifted during this event.

During the reactor scram and 'B' MPT trip, the Plant Process Computer [CPU] System Common Core Unit [I0] locked-up resulting in the loss of some Balance of Plant computer points for Main Control Room indication. As a result of the computer system lock-up, operators were required to use alternate indication to compensate for the unavailable indications. The system was restored by 0658 hours0.00762 days <br />0.183 hours <br />0.00109 weeks <br />2.50369e-4 months <br /> by manually initializing it in accordance with the system operating procedure; the system operated normally thereafter. Condition Report 114455 was initiated to address the cause and corrective action for the lock-up of the computer system.

A prompt investigation team performed an immediate fact-finding to identify the suspected apparent cause of the event. The prompt investigation team concluded that the suspected apparent cause was hardware related and identified no human performance deficiencies.

The initial investigation of this event identified that the sudden pressure relay actuated without a true fault overpressure condition in the transformer. The relay is designed with a dead range (no trips) of 1.25 to 1.50 psig and a trip range of 3.00 to 3.25 psig. When tested after the reactor scram, the relay was found to trip 6 out of 8 times at the 1.50-psig level indicating that the relay was overly sensitive. Based on these "as-found" testing results, the relay was quarantined and sent to the original equipment manufacturer (Qualitrol) for failure analysis.

The sudden pressure relays installed in the 4 MPTs (including one spare MPT) were factory installed new relays for the new MPTs supplied by VA Tech - Elin. The new MPTs were recently installed (May 2002) during refueling outage 8 (C1R08) as part of extended power uprate.

The investigation confirmed that no other faults or disturbances existed on the 345-kilovolt transmission lines prior to the trip of the transformer. An inspection of the 'B' MPT identified no physical damage to the MPT.

Condition Report 114453 was initiated to track the investigation and resolution of this event.

No other automatic or manually initiated safety system responses were necessary to place the plant in a safe and stable condition. Other inoperable equipment or components did not directly affect this event.

CAUSE OF EVENT

The cause of this event is attributed to a false actuation of the sudden pressure relay. The root cause for the false actuation was a latent defect in the bimetal of the relay control orifice that likely occurred during the manufacturing process. This defect resulted in the bimetal orifice becoming more sensitive when exposed to higher operating temperatures.

SAFETY ANALYSIS

This event is reportable under the provisions of 10CFR50.73(a)(2)(iv)(A) due to the automatic reactor scram.

4 The plant responded normally to the reactor scram. The response and behavior of the plant during this event were compared to the Generator Load Rejection transient discussed in Chapter 15 of the Updated Safety Analysis Report and the General Electric Transient Safety Analysis Report and were determined to be within those analyses. This event posed no challenges to fission product barriers. All systems responded as required for an event without bypass valve failure.

No safety system functional failures occurred during this event.

CORRECTIVE ACTION

The faulty sudden pressure relay in the 'B' MPT was replaced with the relay from the spare MPT ('D' MPT). The sudden pressure relays for the 'A' and IC' MPTs and the replacement 'B' MPT relay were tested and verified to operate properly.

A design change will be implemented to remove the station's vulnerability to a single failure of the Sudden Pressure Relay that results in plant shutdown. The design change will modify the sudden pressure relay protection scheme from a one- out-of-one trip logic to a fault tolerant trip logic in all 4 MPTs.

PREVIOUS OCCURRENCES

LER Number � Title � Water Intrusion Into Main Power Transformer Sudden Pressure Sensor Relay Causes Corrosion and Results in Relay Failure, Turbine Generator Trip and a Reactor Scram Clinton Power Station experienced a previous sudden pressure relay false actuation resulting in a reactor scram in June 1989 when the 'C' MPT Qualitrol sudden pressure relay malfunctioned; however, that malfunction was caused by internal corrosion resulting from water intrusion into the relay. Deterioration of the sudden pressure relay from the water intrusion caused the relay to operate erratically.

COMPONENT FAILURE DATA

Manufacturer � Nomenclature � Manufacturer Model Number � Serial Number Qualitrol � Rapid pressure � 900-021-61 � 58179 Corporation � rise relay