ML12011A162

Amendment 61 to Final Safety Analysis Report, Chapter 8, Electric Power

ML12011A162
Person / Time
Site:	Columbia
Issue date:	12/14/2011
From:	Energy Northwest
To:	Office of Nuclear Reactor Regulation
References
GO2-11-201
Download: ML12011A162 (251)

Text

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 Chapter 8 ELECTRIC POWER

TABLE OF CONTENTS

Section Page LDCN-11-008 8-i 8.1 INTRO DUCTION .........................................................................

8.1-1 8.1.1 UTILITY GRID DESCRIPTION ..................................................... 8.

1-1 8.1.2 OFFSITE ELECTRICAL POWE R SYSTEM DESCRIPTION ................. 8.1-1 8.1.3 ONSITE ELECTRICAL POWE R SYSTEM DESCRIPTION .................. 8.1-3 8.1.4 SAFETY LOADS

........................................................................ 8.1-5

8.1.5 DESIGN

BASES ......................................................................... 8.1-5 8.1.5.1 Offsite Electri cal Power System .................................................... 8.1-5 8.1.5.2 Onsite Electrical Power System

..................................................... 8.1-7

8.2 OFFSITE

POWER SYSTEM

............................................................ 8.2-1

8.2.1 DESCRI

PTION ..........................................................................

8.2-1 8.2.1.1 Utility Grid Arrangement ............................................................ 8.2-1 8.2.1.2 Offsite Power Transmission Li nes .................................................

8.2-2 8.2.1.3 Main Generator and Step-Up Main Transfor mer Bank ......................... 8.2-3 8.2.1.4 Normal Auxiliary, Startup, and Backup Transformers and Buses ............ 8.2-4 8.2.1.5 Power System Communicati ons ....................................................

8.2-6 8.2.2 ANAL YSIS ...............................................................................

8.2-6 8.2.2.1 Stability Analysis ...................................................................... 8.2-6 8.2.2.2 Grid Availability Analysis ........................................................... 8.2-8 8.2.2.3 Generator Op erating Limits ......................................................... 8.2-8 8.2.2.4 Criteria Confor mance Analysis ..................................................... 8.2-9

8.3 ONSITE

POWER SYSTEMS

............................................................ 8.3-1

8.3.1 ALTERNATING

CURRENT POWER SYSTEMS ............................... 8.3-1 8.3.1.1 Desc ription ............................................................................. 8.3-1 8.3.1.1.1 4.16-kV and 6.

9-kV Distribution System

....................................... 8.3-1 8.3.1.1.2 480-Volt Dist ribution System ..................................................... 8.3-6 8.3.1.1.3 120/240-Volt (Non-Class 1E) Plant Uninterruptible Power System ....... 8.3-7 8.3.1.1.4 120/208-Volt N on-Class 1E Instrumentation Power System ................ 8.3-7 8.3.1.1.5 Divisions 1 a nd 2 120/240-Volt Critical (Class 1E) Instrumentation Power System ....................................................................... 8.3-8 8.3.1.1.6 Reactor Protection System Power System ...................................... 8.3-8 8.3.1.1.7 Standby Alterna ting Current Power System

.................................... 8.3-10 8.3.1.1.7.1 Redundant (Div ision 1 and Division 2) Standby Alternating Current Power Supplies ................................................................... 8.

3-10 8.3.1.1.7.1.1 General .......................................................................... 8.3-10 C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 Chapter 8 ELECTRIC POWER

TABLE OF CONTENTS (Continued)

Section Page LDCN-08-030,09-006, 09-020 8-ii 8.3.1.1.7.1.2 Unit Ratings and Capability..................................................8.3-11 8.3.1.1.7.1.3 C ooling Water Systems.......................................................8.3-12 8.3.1.1.7.1.4 L ubrication Systems...........................................................8.3-12 8.3.1.1.7.1.5 Air Starting Systems...........................................................8.3-12 8.3.1.1.7.1.6 Fuel Oil Systems...............................................................8.3-12 8.3.1.1.7.1.7 Automatic Starting and Loading Systems..................................8.3-12 8.3.1.1.7.1.8 Protective Trips................................................................8.3-14 8.3.1.1.7.1.9 Surveillance.....................................................................8.

3-15 8.3.1.1.7.1.10 Instrumentation and Control Systems.....................................8.3-16 8.3.1.1.7.1.11 Light or No Load Operation................................................8.3-17 8.3.1.1.7.2 High-Pressure Core Spray (Division 3)

Standby Alternating Current Power Supply.....................................................................8.

3-17 8.3.1.1.7.2.1 General..........................................................................8.3-17 8.3.1.1.7.2.2 Un it Rating and Capability...................................................8.3-18 8.3.1.1.7.2.3 C ooling Water System........................................................8.3-19 8.3.1.1.7.2.4 Lubrication System............................................................8.3-19 8.3.1.1.7.2.5 Air Starting System............................................................8.3-20 8.3.1.1.7.2.6 Fuel Oil System................................................................8.3-20 8.3.1.1.7.2.7 Automatic Starting and Loading System...................................8.3-20 8.3.1.1.7.2.8 Protective Trips................................................................8.3-21 8.3.1.1.7.2.9 Surveillance.....................................................................8.

3-22 8.3.1.1.7.2.10 Instrumentation and Control System......................................8.3-24 8.3.1.1.7.2.11 Light Load Operation........................................................8.3-24 8.3.1.1.8 Electrical Equipment Tests........................................................8.3-24 8.3.1.1.9 Equipm ent Criteria.................................................................8.3-25 8.3.1.1.9.1 Motor Size..........................................................................8.3-25 8.3.1.1.9.2 Motor Thermal Overloads.......................................................8.3-26 8.3.1.1.9.3 Minimum Voltage.................................................................8.3-26 8.3.1.1.9.4 Motor Starting Torque...........................................................8.3-26 8.3.1.1.9.5 Minimum Torque..................................................................8.3-26 8.3.1.1.9.6 Motor Insulation...................................................................8.

3-27 8.3.1.1.9.7 Temperature Monitoring Devices..............................................8.3-27 8.3.1.1.9.8 Interrupting Capacity.............................................................8.3-27 8.3.1.1.9.9 Electric Circuit Protection.......................................................8.3-28 8.3.1.1.9.10 4.16-kV Motor Feeder..........................................................8.3-28 8.3.1.1.9.11 Transformer Feeders............................................................8.3-29 C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 Chapter 8 ELECTRIC POWER

TABLE OF CONTENTS (Continued)

Section Page LDCN-08-025,08-030, 09-006 8-iii 8.3.1.1.9.12 Diesel Generator.................................................................8.3-29 8.3.1.1.9.13 480-Volt Motor F eeder Fed From Switchgear Bus........................8.3-29 8.3.1.1.9.14 Motor Control Center Feeder Fed From 480-V Switchgear Bus........8.3-29 8.3.1.1.9.15 Feeders From 480-Volt Motor Control Centers............................8.3-29 8.3.1.1.9.16 Electrical Pe netration Assemblies in Containment Structures............8.3-29 8.3.1.1.9.17 Raceway Systems................................................................8.3-30 8.3.1.1.9.18 Grounding Requirements.......................................................8.3-30 8.3.1.1.10 Class 1E Electrical Equipment Arrangement.................................

8.3-31 8.3.1.2 Analysis.................................................................................8.3-32 8.3.1.2.1 Complianc e to Criteria.............................................................8.3-32 8.3.1.2.1.1 General.............................................................................8.3-32 8.3.1.2.1.2 Reactor Protection System Power System...................................8.3-34 8.3.1.2.1.3 Redundant (Division 1 and Division

2) Standby Alternating Current Power Supplies.........................................................8.3-34 8.3.1.2.1.4 High-Pressu re Core Spray (Division

3) Standby Alternating Current Power Supply...........................................................8.3-35 8.3.1.2.2 Tests and Inspection................................................................8.3-41 8.3.1.2.3 Service Environment...............................................................8.3-43 8.3.1.2.4 Offsite Power System Degradation..............................................8.3-44 8.3.1.2.4.1 General.............................................................................8.3-44 8.3.1.2.4.2 Class 1E Auxiliary A lternating Current Distribution System Voltages............................................................................8.3-44 8.3.1.2.4.2.1 Voltage Criteria................................................................8.3-44 8.3.1.2.4.2.2 Expected Voltages kV Main Generating Unit Supply.............8.3-44 8.3.1.2.4.2.3 Expected Voltages - 230-kV Grid Supply.................................8.3-45 8.3.1.2.4.2.4 Expected Voltages - 115-kV Grid Supply.................................8.3-45 8.3.1.2.4.3 Class 1E A uxiliary Alternating Current Distribution System Voltage Sensing.............................................................................8.3-45 8.3.1.2.4.3.1 Primar y Undervoltage Sensing..............................................8.3-45 8.3.1.2.4.3.2 Secondary Undervoltage Sensing...........................................8.3-45 8.3.1.3 Physical Iden tification of Safety-Related (Class 1E) Equipment..............8.3-47 8.3.1.3.1 Class 1E Raceways, Cables, Equipment (Panels and Racks), and Enclosures............................................................................8.3-48 8.3.1.3.2 Prime and Associated by Proximity Circuit Raceways, Cables, Equipment, and En closures.......................................................8.3-48 8.3.1.3.3 Non-Class 1E Raceways, Cables, Equipment, and Enclosures.............8.3-48 C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 Chapter 8 ELECTRIC POWER

TABLE OF CONTENTS (Continued)

Section Page LDCN-08-025,08-030, 09-006 8-iv 8.3.1.4 Independence of Redundant Systems...............................................8.3-48 8.3.1.4.1 De finitions...........................................................................8.3-48 8.3.1.4.2 General Separation Criteria.......................................................

8.3-49 8.3.1.4.2.1 Cable Separation..................................................................8.3-49 8.3.1.4.2.2 Cable Routing.....................................................................8.

3-51 8.3.1.4.2.3 Physi cal Separation Criteria....................................................8.3-52 8.3.1.4.2.4 Administ rative Controls for Ensu ring Separation Criteria................8.3-53 8.3.1.4.2.5 Separati on For Fail-Safe Systems.............................................8.3-53 8.3.1.4.2.6 Equipment and Circuits Requi ring Separation..............................8.3-53 8.3.1.4.2.7 Compliance to Regulatory Guide 1.75, Revision 1.........................8.3-53 8.3.1.4.3 Physical and Sp atial Separation Details.........................................

8.3-55 8.3.1.4.3.1 Standby Generating Units and Auxiliaries...................................8.3-55 8.3.1.4.3.2 Direct Current Power Systems.................................................8.3-55 8.3.1.4.3.3 Switchgear.........................................................................8.3-55 8.3.1.4.3.4 Motor Control Centers and Distribution Panels.............................8.3-55 8.3.1.4.3.5 Containmen t Electrical Penetrations..........................................8.3-56 8.3.1.4.3.6 Power Generation Control Complex..........................................8.3-56 8.3.1.4.3.6.1 Te rmination Cabinets.........................................................8.3-56 8.3.1.4.3.6.2 Modular Floor Sections.......................................................8.3-56 8.3.1.4.3.6.3 Power Generation Control Complex Ca ble Assembly and Routing...8.3-57 8.3.1.4.3.7 Separation With in Enclosures and Equipment...............................8.3-57 8.3.1.4.3.8 Spatial Se paration Between Raceways........................................8.3-59 8.3.1.4.4 Associated Circuit Analysis.......................................................

8.3-59 8.3.1.4.4.1 Categories of Associated Circuits Treated as Non-Class 1E..............8.3-59 8.3.1.4.4.1.1 Analysis for Category 1A Non-Class 1E Circuits........................8.3-60 8.3.1.4.4.1.2 Analysis for Category 1B Non-Class 1E Circuits........................8.3-61 8.3.1.4.4.1.3 Analysis for Category 1C Non-Class 1E Circuits........................8.3-61 8.3.1.4.4.1.4 Analysis for Category 2A Non-Class 1E Circuits........................8.3-61 8.3.1.4.4.1.5 Analysis for Category 2B Non-Class 1E Circuits........................8.3-63 8.3.1.4.4.1.6 Analysis for Category 3A Non-Class 1E Circuits........................8.3-63 8.3.1.4.4.1.7 Analysis for Category 3B Non-Class 1E Circuits........................8.3-63 8.3.1.4.4.1.8 Analysis for Category 3C Non-Class 1E Circuits........................8.3-64 8.3.1.4.4.2 Categories of Associated Circuits Treated as Class 1E....................8.3-65 8.3.1.4.4.3 Specific De viations to Separation Criteria - Reactor Protection System Power Supply...........................................................8.3-65 C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 Chapter 8 ELECTRIC POWER

TABLE OF CONTENTS (Continued)

Section Page LDCN-08-025,08-030, 09-006 8-v 8.3.2 DIRECT CURRENT POWER SYSTEMS..........................................

8.3-66 8.3.2.1 Description.............................................................................8.3-66 8.3.2.1.1 125-Volt Direct Current Division 1 and 2 Systems...........................8.3-67 8.3.2.1.1.1 General.............................................................................8.3-67 8.3.2.1.1.2 Batteries............................................................................8.3-67 8.3.2.1.1.3 Chargers...........................................................................8.3-68 8.3.2.1.2 High-Pressure Co re Spray (Division 3) 125-Volt Direct Current System8.3-68 8.3.2.1.2.1 General.............................................................................8.3-68 8.3.2.1.2.2 Battery and Charger..............................................................8.3-69 8.3.2.1.2.3 Battery Capacity..................................................................8.3-69 8.3.2.1.2.4 Charger.............................................................................8.3-69 8.3.2.1.3 +/-24-Volt Direct Current (Division 1 and 2) Systems........................8.3-69 8.3.2.1.3.1 General.............................................................................8.3-69 8.3.2.1.3.2 Batteries............................................................................8.3-70 8.3.2.1.3.3 Chargers...........................................................................8.3-70 8.3.2.1.4 250-Volt Direct Curre nt (Division 1)

System..................................8.3-70 8.3.2.1.4.1 General.............................................................................8.3-70 8.3.2.1.4.2 Battery..............................................................................8.3-70 8.3.2.1.4.3 Charger.............................................................................8.3-71 8.3.2.1.5 Non-Class 1E Di rect Current Systems..........................................

8.3-71 8.3.2.1.5.1 Main Plant 125-Volt Di rect Current (Non-Class 1E) System............8.3-71 8.3.2.1.5.1.1 General..........................................................................8.3-71 8.3.2.1.5.1.1.1 Battery (B1-7)................................................................8.3-71 8.3.2.1.5.1.1.2 Charger (C1-7)...............................................................8.3-71 8.3.2.1.5.2 Makeup Pump House 125-Volt Direct Current (Non-Class 1E) System 8.3-71 8.3.2.1.5.2.1 General..........................................................................8.3-71 8.3.2.1.5.2.2 Batteries (B1-3 and B1-4)....................................................8.3-72 8.3.2.1.5.2.3 Char gers (C1-3 and C1-4)....................................................8.3-72 8.3.2.1.5.3 405-Volt Direct Current (Non-Class 1E) System...........................8.3-72 8.3.2.1.5.3.1 General..........................................................................8.3-72 8.3.2.1.5.3.2 Battery (B1-6)..................................................................8.3-72 8.3.2.1.5.3.3 Charger..........................................................................8.3-72 8.3.2.1.6 Ventilation...........................................................................8.3-72 8.3.2.1.7 Testing a nd Maintenance..........................................................8.3-72 8.3.2.1.7.1 Periodi c Maintenance Testing..................................................8.3-72 C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 Chapter 8 ELECTRIC POWER

TABLE OF CONTENTS (Continued)

Section Page LDCN-07-030,08-025, 08-030 8-vi 8.3.2.1.7.2 Exceptions to Institute of Electrical and Electronics Engineers Standards..........................................................................8.3-73 8.3.2.2 Analysis.................................................................................8.3-74 8.3.2.2.1 Complianc e to Criteria.............................................................8.3-74 8.3.2.2.1.1 General.............................................................................8.3-74 8.3.2.2.1.2 Divisions 1 and 2 125-Volt, +/-24-Volt, and 250-Volt Direct Current Systems............................................................................8.3-75 8.3.2.2.1.3 High-Pressure Core Spray (Division 3) 125-Volt Direct Current System.............................................................................8.3-76 8.3.2.2.1.4 Non-Class 1E Direct Current Systems........................................8.3-76 8.3.2.2.2 Service Environment...............................................................8.3-77 8.3.2.3 Physical Iden tification of Safety-Related (Class 1E) Equipment..............8.3-77 8.3.2.4 Independence of Electrical Divisions..............................................8.3-77 8.3.3 FIRE PROTECTION FOR CABLE SYSTEMS...................................8.3-77 8.3.3.1 Resistance of Cables to Combustion...............................................8.3-77 8.3.3.2 Localization of Fires..................................................................8.3-77 8.3.3.3 Detection and Protection Systems..................................................8.3-77 8.

3.4 REFERENCES

...........................................................................

8.3-78

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 Chapter 8 ELECTRIC POWER

LIST OF TABLES

Number Title Page LDCN-11-008 8-vii 8.1-1 Engineered Safety Feature Systems

.......................................... 8.1-13 8.2-1 Main Generator Data ...........................................................

8.2-11 8.3-1 Division 1 Diesel Generator Loading - Automatic Loading of Engineered Safety Sy stems Bus

.............................................. 8.3-79

8.3-2 Division 2 Diesel Generator Loading - Automatic Loading of Engineered Safety Sy stems Bus

.............................................. 8.3-81

8.3-3 Division 3 Diesel Generator Loading - Automatic Loading of Engineered Safety Systems Bus

........................................... 8.3-83

8.3-4 Motor and Motor Starter Voltage Requireme nts .......................... 8.3-84

8.3-5 Divisions 1 and 2 Standby Diesel Ge nerator Annunciators

.............. 8.3-85

8.3-6 Comparison of High-Pr essure Core Spray Diesel Generators .......... 8.3-87

8.3-7 Class 1E Auxiliary Alterna ting Current Distribution System - Acceptable Voltage Range

..................................................... 8.3-88

8.3-8 System Bus Voltage M onitoring Alarms .................................... 8.3-89

8.3-9 Plant Switchgear and Motor Cont rol Center Direct Current Control Power Summary

................................................................. 8.3-90

8.3-10 Battery Design Duty Cycles (Amperes vs. Time) Used for Operability Testing ............................................................. 8.3-92

8.3-11 Division 1 125-Volt Direct Current Battery Design Duty Cycle ....... 8.3-93

8.3-12 Division 2 125-Volt Direct Current Battery Design Duty Cycle ....... 8.3-94

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 Chapter 8 ELECTRIC POWER

LIST OF TABLES (Continued)

Section Page LDCN-08-025 8-viii 8.3-13 Division 3 (HPCS) 125-Volt Di rect Current Battery Design Duty Cycle HPCS-B1-DG3..........................................................

8.3-95 8.3-14 Division 1 250-Volt Direct Current Battery Design Duty Cycle.......8.3-96

C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Chapter 8 ELECTRIC POWER

LIST OF FIGURES Number Title 8-ix 8.1-1 500-kV Line Ties 8.1-2.1 Main One-Line Diagram - Main Buses 8.1-2.2 Main One-Line Di agram - Emergency Buses 8.1-2.3 Main One-Line Diagram - Miscellaneous Buses

8.1-2.4 Main One-Line Diagram - RRC ASD Buses

8.1-3 230-kV Line Ties

8.1-4 115-kV Line Ties

8.1-5 230-kV and 115-kV Auxiliary Power Layout

8.1-6 Electrical Symbol List (Sheets 1 and 2)

8.2-1 1998 Light Summer OCSG Case (Sheets 1 and 2)

8.2-2 1998 Light Winter WS CC Case (Sheets 1 and 2)

8.2-3 Stability Analysis Swing Ca se 98Lsas002 (Sheets 1 through 4)

8.2-4 Stability Analysis Swing Ca se 98Lsas019 (Sheets 1 through 4) 8.2-5 Stability Analysis Swing Case 98Lsas005a (Sheets 1 through 4)

8.2-6 Stability Analysis Swing Case 98Lwas028 (Sheets 1 through 4) 8.2-7 Stability Analysis Swing Case 98Lwas020 (Sheets 1 through 4)

8.3-1 Emergency Bus SM-7 Undervoltage Protection, Bus Transfer and Load Sequencing

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 Chapter 8 ELECTR I C POWER LIST OF FIGURES (Continued)

Number Title LDC N-0 3-0 1 3 8-x 8.3-2 Emergency Bus SM-8 Undervoltage Protection, Bus Transfer and Load Sequencing 8.3-3 DELETED 8.3-4 Auxiliary One-Line Diagra m (MCCs) (Sheets 1 through 6) 8.3-5 Vital One-Line Diagram

8.3-6 Diesel Generator Building Cable Tr ay and Conduit Plan - El. 441 ft 0 in.

8.3-7 Diesel Generator Logic Diag ram - Division 1, Engine Start 8.3-8 Diesel Generator L ogic Diagram - Division 1, Generator Breaker Close

8.3-9 Diesel Generator Logic Diag ram - Division 2, Engine Start

8.3-10 Diesel Generator Logic Diagram - Division 2, Generator Breaker Close

8.3-11 DG1 Excitation System

8.3-12 DG1 Engine Start/Stop Controls

8.3-13 DG1 Air Start System Control

8.3-14 DG1 Governor Speed Control

8.3-15 DG1 Unit Protection Circuits 8.3-16 DG1 Engine Alar ms (Sheets 1 and 2)

8.3-17 DG2 Excitation System

8.3-18 DG2 Engine Start/Stop Controls

8.3-19 DG2 Air Start System Control C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Chapter 8 ELECTR I C POWER LIST OF FIGURES (Continued)

Number Title 8-xi 8.3-20 DG2 Governor Speed Control 8.3-21 DG2 Unit Protection Circuits

8.3-22 DG2 Engine Alar ms (Sheets 1 and 2) 8.3-23 Diesel Generator Logic Diagram - Division 3 (HPCS), Engine Start

8.3-24 Diesel Generator L ogic Diagram - Division 3 (HPCS), Generator Breaker Close

8.3-25 Cable Tray Plans - Reactor Build ing El. 422 ft 3 in. and 441 ft 0 in.

8.3-26 Cable Tray Plans - Reactor Build ing El. 471 ft 0 in. and 501 ft 0 in.

8.3-27 Cable Tray Plans -

Miscellaneous Details El. 522 ft 0 in.; Reactor Building

8.3-28 Cable Tray Plans - Reactor Build ing El. 448 ft 0 in. and 572 ft 0 in.

8.3-29 Cable Tray Plans, Sections and Details - Reactor Building

8.3-30 Cable Tray Plans, Sections and Details - Reactor Building

8.3-31 Division 3 (HPCS) Diesel Generator Transient Response

8.3-32 Critical Bus SM-4 Undervoltage Protection, Bus Transfer, and Loading Sequence 8.3-33 Cable Tray Plans, Sections and Deta ils - Radwaste and Control Building 8.3-34 Cable Tray Plans, Cable Spreadi ng Room - Radwaste and Control Building

8.3-35 Cable Tray Plans, Cable Spreadi ng Room - Radwaste and Control Building

8.3-36 Cable Tray Plans, Sections and Deta ils - Radwaste and Control Building

C OLUMBIA G ENERATING S TATION Amendment 58 F INAL S AFETY A NALYSIS R EPORT December 2005 Chapter 8 ELECTRIC POWER

LIST OF FIGURES (Continued)

Number Title LDCN-05-000 8-xii 8.3-37 Cable Tray Plans, Sections and Deta ils - Radwaste and Control Building 8.3-38 Cable Tray Plans, Sections and Deta ils - Radwaste and Control Building 8.3-39 Power Generation Control Complex Plan - Cable Routing Detail

8.3-40 Power Generation Control Complex - Basic Assemblies and Shipping Configuration

8.3-41 Power Generation Control Complex - Termin ation Cabinet Assembly

8.3-42 Power Generation C ontrol Complex - Terminati on Cabinet Field Connection 8.3-43 Power Generation C ontrol Complex - Terminati on Cabinet - Termination Devices 8.3-44 Power Generati on Control Complex - Cable Isolation Design

8.3-45 Power Genera tion Control Complex - Firestopping Detail

8.3-46 Power Generati on Control Complex - Floor Section Assembly

8.3-47 Power Genera tion Control Complex - Mini-Duct Detail

8.3-48 Power Generation Control Complex - Fire Suppression

8.3-49 Power Generati on Control Complex - Cable Routing Method 8.3-50 Non-Class 1E Circuit Categories Requiring Anal ysis (Sheets 1 through 3) 8.3-51 Associated Circuit Categories (Sheets 1 and 2) 8.3-52 Direct Current One-Li ne Diagram (Sheets 1 and 2) 8.3-53 Four Division Grouping of the Neutron Monitoring System Utilizing Four Drywell Penetrations C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 LDC N-0 1-0 6 3 8.1-1 Chapter 8 ELECTRIC POWER

8.1 INTRODUCTION

8.1.1 UTILITY

GRID DESCRIPTION Columbia Generating Station plant power out put is connected to the Bonneville Power Administration (BPA) 500-kV transmission system. The two sources of offsite power are provided by connections to the BPA 230-kV and 115-kV transmission systems.

The BPA has an installed hydroelectric gene rating capacity of over 15.7 million kW. The BPA transmission facilities include over 15,012 miles of 115-kV to 500-kV ac and 1000-kV dc transmission lines and over 300 substations. Thes e transmission facilitie s together with the hydroelectric generators mentioned above comprise the Federal Columbia River Power

System.

The federal Columbia River Powe r System is interconnected at more than 100 locations with 17 other transmission systems, including major interconnections w ith other regions.

Three high-voltage transmission line interconnecti ons (two 500-kV ac, one 1000-kV dc) of the Pacific Northwest-Pacific Southw est Intertie are in operation.

Two 500-kV ac lines interconnect the federal Columbia River Power System with British Columbia, Canada. Several 230-kV ac lines interconnect the ea stern portion of the system with utilities in the mo untain states and adjacent Canadian provinces. These interconnections provide, in addition to mutual support in the event of a breakdown or emergency, the means for mutually beneficial excha nge of peaking capacity and ener gy between the Pacific Northwest and other regions.

8.1.2 OFFSITE

ELECTRICAL POWER SYSTEM DESCRIPTION

The offsite power system consists of the BPA grid; the step-up main transformer bank, and the 500-kV tie line to the BPA grid; the startup tr ansformer and 230-kV tie line to the BPA grid; and the backup transformer and 115-kV tie line to the BPA grid.

The 1230 MVA main generator output is fed into the BPA grid at the BPA Ashe Switchyard 500-kV bus via the step-up main transformer bank and a 3000-ft long 500-kV tie line. The arrangements of the tie line and BPA 500-kV bus at Ashe Switchyard are shown in Figure 8.1-1. When the main generator is on the line, the Class 1E and non-Class 1E switchgear buses receive power from the main ge nerator via a normal auxiliary transformer as shown in Figure 8.1-2. This source has sufficient capacity to carry both the plant normal auxiliary loads and the plant engine ered safety feature (ESF) loads.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-008 8.1-2 Two immediately available sources of power from the BPA grid are provided to supply offsite power, one from the BPA 230-kV grid and on e from the BPA 115-kV grid. The 230-kV source is from the 230-kV bus at the BPA Ashe Switchyard via a 3000-ft long 230-kV tie line, through the startup transformer, to the 4.16-kV non-Class 1E swit chgear buses to the Class 1E switchgear buses and the 6.9-kV switchgear buses. The arrangements of the BPA 230-kV grid at Ashe Switchyard and the 230-kV tie line to the plant are shown in Figure 8.1-3. The startup transformer and non-Class 1E switch gear bus arrangement is shown in Figure 8.1-2. An automatic fast transfer system is provided to transfer the 4.16-kV and 6.9-kV non-Class 1E buses from the normal auxiliary transformer to the startup transformer if the generator source

is lost. This 230-kV source has sufficient thermal capacity to carry both the plant normal auxiliary loads and the plant ESF loads.

The 115-kV source is from the BPA 115-kV Bent on Switchyard via a 4-mile long 115-kV tie line and the backup transformer to the Class 1E switchgear bus es. The arrangement of the BPA Benton Switchyard and the 115-kV tie line to the plant is shown in Figure 8.1-4. The connections from the backup transformer to the 4.16-kV Class 1E switchgear buses are shown in Figure 8.1-2. If power is not available from the generator source and the 230-kV source, Class 1E buses SM-7 and SM-8 will be automatically transferred to the 115-kV system source.

This 115-kV source has sufficient capacity to carry the Divisi on 1 and 2 ESF loads only; the tie breakers between the 4.16-kV Class 1E and non-Class 1E buses are th erefore automatically opened prior to the backup source breakers closing.

A communication system is provided between Co lumbia Generating Sta tion and the BPA Ashe Switchyard for remotely controlli ng the 500-kV power circuit break ers, for synchronizing, for interlocking with the plant step-up main transformer bank primary disconnect switch, for equipment protection, and for communication.

Columbia Generating Sta tion has a Fiber Optic Transfer Trip (FOTT) system, consisting of communications, control, and annunciation equipment associated with the 230 kV and the 500 kV network interconnections between CGS and BPA's Ashe substation. The FOTT system is used to transmit critical trip, control, and indication signals for transmissi on line protection, breaker supervisory control and indication as well as breaker position interlocks to the DEH/Turbine Control system. Various signals travel in both directions along fiber optic te le-communication channels for protection and operation of the 500 kV lines pr oviding power to the network fr om the CGS generator and for protection of the 230 kV line interconnection providing station service to CGS.

The locations of the switchyard and electric power distribution system equipment appear in Figures 1.2-1 and 8.1-5. The layout arrangement of the 230-kV and 115-kV auxiliary power equipment appear in Figure 8.1-5.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-3 8.1.3 ONSITE ELECTRICAL POWER SYSTEM DESCRIPTION The plant onsite electrical power system consists of the main gene rator and the normal auxiliary transformers, standby ac power system , high-pressure core spray (HPCS) power system, 4.16-kV, 6.9-kV, and 480-V ac power distribution systems, 125-V and 250-V dc power distribution systems, +/-24-V dc power distribution system, th e 120/208 and 120/240-V ac instrumentation and uninterruptible power systems, and the 120-V ac reactor protection system (RPS) power system. Th ese systems provide a diversity of dependable power sources which are physically isolat ed from one another.

The normal auxiliary transformers provide power to all plant auxilia ries and become the normal plant ac power source when the main generator is ope rating. One of the normal auxiliary transformers is a dual secondary type with both windings stepping down the generator voltage to 4.16-kV for supply of 4.16-kV non-Class 1E switc hgear buses. The other normal auxiliary transformer steps down the generator voltage to 6.9-kV for supply of 6.9-kV non-Class 1E switchgear buses. Both tran sformers supply the switchgear buses via nonsegregated phase bus with ma in circuit breakers located in the switchgear. Removable links are provided in each of the transformer prim ary isolated phase bus ducts for isolation of the transformers.

The startup transformer (as described in Section 8.1.2) is a dual secondary type, stepping down the 230-kV line voltage to 4.16-kV and 6.9-kV. The 4.16-kV and 6.9-kV secondaries can supply power to the same 4.16-kV and 6.9-kV non-Class 1E switchgear buses supplied by the normal auxiliary transformers.

Connections to the buses are al so via nonsegrega ted phase bus with main circuit breakers located in the switchgear.

The backup transformer (as described in Section 8.1.2) steps down incoming 115-kV voltage to 4.16-kV and can supply backup power to two 4.16-kV Class 1E switchgear buses. All connections to the 4.16-kV switchgear buses are via cable to main circuit breakers located in the switchgear.

The standby ac power system provides an onsit e power source for all ESF loads when the normal, preferred (startup), and backup offsite power su pplies are not available.

The Division 1 and 2 standby ac po wer sources consist of two i ndependent 4.16-kV Class 1E diesel generators, each connected to one of the two 4.16-kV Cl ass 1E switchgear buses via two main circuit breakers. One breaker is located near the diesel generating unit; the other is located in the 4.16-kV Class 1E switchgear.

The Division 3 standby ac power source, which is supplied for the HPCS system and support auxiliaries, consists of one independent 4.16-kV Cl ass 1E diesel generator connected to its own 4.16-kV Class 1E switchgear bus via a main circ uit breaker located in the switchgear. Under the specific conditions described in Section 8.3.1.1.7.2.1, this standby power source has the C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-4 capability to be cross co nnected to the Division 1 or Divisi on 2 buses via permanently installed cables. It does not have as hi gh a capacity as the Division 1 or 2 standby sources; however, it is capable of providing power to critical Division 1 or 2 compone nts required to maintain safe shutdown conditions.

The standby ac power system is sized to provide the required pow er to safely shut down the reactor, maintain safe shutdown condition, and operate ESF auxiliaries necessary for plant safety during and after shutdown.

The plant 480-V ac auxiliary power system distributes ac power necessary for normal auxiliary and ESF 480-V plant loads. All non-ESF elements of this distribution system are capable of being supplied from the normal auxiliary power source or from the startup power source via the 4.16-kV non-Class 1E switchgear. The ESF portions of the 480-V distribution system are supplied via the 4.16-kV Class 1E switchgear and therefore ar e capable of being supplied by either the normal, startup, backup, or standby sources (except that the HPCS power system cannot be supplied by the backup source).

The Division 1 and 2 plant 125-V dc power di stribution systems provi de two independent onsite sources of power for norma l operation and ESF dc loads.

A separate 125-V dc power system is also provided for the HPCS system.

A 250-V dc power system provides a reliable ons ite source of power for the turbine auxiliary oil pumps and for RCIC pumps and valves.

The +/-24-V dc power system provides a reliable onsite source of power for process radiation monitoring instrumentation a nd nuclear instrumentation.

The 120/240-V uninterruptible ac power system provides for non-ESF plant communications, computer, and controls and instrumentation.

The 120/208-V non-Class 1E instrumentation ac power system provides power for non-ESF control and instrumentation loads. However, the system is supplied via the 480-V Class 1E motor control centers.

The 120/240-V critical (Class 1E) instrumentation ac power system provides power for ESF plant controls and vital instrumentation in the main control ro om. The system is separated into Division 1 and Divisi on 2 portions with separate distribution panels, static switches, inverters, and ac and dc sources fed from th eir respective divisional sources.

The RPS power system, including the RPS motor generator (MG) sets, supplies power to the logic system that operates the RPS. The power system contains sufficient stored energy to remain available throughout switc hing transients. The safe failu re characteristics of the RPS exempt the power system from being classified essential. Ho wever, redundancy is provided to C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-5 avoid an unnecessary plant shut down on interruption of power to one RPS bus. The system is also grounded, preventing unsafe failures that might o ccur from multiple grounds.

A supervisory (multiplexing) system is provided between the main plant and the standby service water (SW) pump ho use, makeup water pump house, coo ling tower, and meteorological tower areas to monitor and control operation of equipment at these locations from the main control room. There are no safety-related control func tions performed by the supervisory systems.

The main one-line diagram appears in Figure 8.1-2. The electrical symbol designators are shown in Figure 8.1-6. Compliance with Regulatory Guides 1.81, 1.89, and 1.93 is a ddressed in Section 1.8.

8.1.4 SAFETY

LOADS

The principal ESF subsystem device loads requiri ng electric power to perform safety functions are included in Tables 8.3-1 , 8.3-2 , and 8.3-3. Tables 8.3-1 and 8.3-2 indicate the redundant (Divisions 1 and 2) loads associated with safe shutdown systems.

Table 8.3-3 indicates loads associated with the HPCS power system (Division 3).

Table 8.1-1 indicates the safety functions performed and the type of power source used by each of the ESF systems.

8.1.5 DESIGN

BASES

8.1.5.1 Offsite Electrical Power System

The offsite power system is designed to provide reliable offsite power sources to plant auxiliary systems during plant st artup and shutdown or any time that power is unavailable from the main generator.

To minimize the possibility of lin e failures from such causes as wi nd, ice loading, temperature, lightning, and flooding the transm ission lines interconnec ting the plant with the utility systems are designed and constructed in accordance w ith the industry standa rds for environmental conditions prevalent in the area.

The 500-kV plant output and 230-kV plant startup lines originating at the Ashe Switchyard located 3000 ft north of the plant site run para llel to each other on separate rights-of-way.

The backup 115-kV line from Benton Switchyard, ge ographically isolated from the 500-kV and 230-kV lines, approaches the plan t site from a southeasterly direction and does not run parallel to or cross the other lines. It is physically indepe ndent of the 500-kV and 230-kV lines and provides another power source for ESF loads.

Its physical separation from the 500-kV and 230-kV lines minimizes the likelihood of a si multaneous outage of all offsite sources.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-6 The normal power supply to pl ant auxiliary loads is provided through the normal auxiliary transformers connected to the ge nerator bus. On trip of the ge nerator, the auxiliary loads are automatically fast transf erred (simultaneous open/close) to the startup transformer for supply of offsite power.

Normally only one power supply breaker to a bus is closed. During manually initiated transfer after startup, during shutdown, or when removing a transforme r for maintenance, the closing of one circuit breaker initiates the trip of the other, allowi ng only momentary paralleling of two sources.

Operation of undervoltage rela ys on the 4.16-kV Class 1E bus es is designed to start the associated diesel generators and initiate load shedding and sequencing c ontrol as described in Sections 8.3.1.1.7.1.7 and 8.3.1.1.7.2.7.

Station blackout is addressed in Appendix 8A.

The offsite power system is designed in accordance with the applicable portions of the following criteria, with a level of im plementation as described in Section 8.2.2.4. Specific data regarding the use of alte rnate approaches in instances of nonconfo rmance are discussed therein.

a. General Design Criterion (GDC) 17 - Electric Power Systems

b. GDC 18 - Inspection and Testi ng of Electric Power Systems

c. GDC 33 - Reactor Coolant Makeup

d. GDC 34 - Residual Heat Removal

e. GDC 35 - Emergency Core Cooling

f. GDC 38 - Containment Heat Removal

g. GDC 41 - Containment Atmosphere Cleanup

h. GDC 44 - Cooling Water

i. IEEE 308-1974 - Class 1E Electrical Systems for Nuclear Power Generating Stations

j. Regulatory Guide 1.32, Re vision 2 - Use of IEEE 308-1974

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-008 8.1-7 Fiber Optic Transfer Trip (FOTT) system consists of a communica tions, controls, and annunciation equipment transmitting signals be tween CGS and ASHE substation for 230 kV and 500 kV transmission line protection, supervisory control and indication of the 500 kV bus tie breakers, and 500 kV breaker position indication inputs to the DEH/Turbine Control System protection logic.

CGS FOTT system is based on the concept of "

quad redundancy," or tw o sets of redundant systems. This design eliminates single point vulnerability. This redund ancy allows for on-line maintenance, so maintenance can be done more frequently.

This system includes digital, tele-communication components.

It uses bi-directional SONET Ring configuration which provides multiple tr ansmission paths for th e information between CGS and Ashe Substation. This incr eases the reliability of the system.

The response time for the system does not add unnecessary time delay to the clearing or operating times of the protection scheme. FOTT signal transit tim e is approximately one cycle (16 ms). There is a Sequence of Events Recorder (SER) in the CGS Communication Room (RW 525) that provides a time tagged record of alarms in the case of a plan t FOTT initiated plant trip, or other FOTT equipment problems during plant operations that are visible to PBA dispatch control centers. The SER processes signals from both ends of the FOTT system from Ashe or CGS that also that also drives two trouble alarm annunciator windows in the CGS Main Control Room for either the 230 kV FOTT or the 500 kV FOTT system.

8.1.5.2 Onsite Electrical Power System

The onsite power system is desi gned to supply the power requirem ents of all auxiliary plant loads during normal operation and to ESF loads when required. Sufficient instrumentation and protective control devices are provided to maxi mize operational reliability and availability of the supply system.

Those portions of the onsite power system requ ired for the distribution of power to ESF electrical components are designed to provide re liable availability of po wer essential to shut down and maintain the unit in a safe condition and/or limit the re lease of radioactivity to the environment following a design basis accident (DBA). The physical ev ents that accompany such an accident will not interfere with the ability of the system to mitigate the consequences of that accident within the acceptable limits, even assuming a single, simultaneous failure in the electrical system.

Two immediate access (offsite) power sources are provided for the Di vision 1 and Division 2 ESF systems; one immediate access (offsite) power source is provided for the Division 3 (HPCS) system. One additional offsite power source is available to each (Division 1, 2, and 3)

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-8 division by disconnecting the main generator bus links and backfeeding the safety-related buses from the 500 kV network. Additionally, one in dependent Class 1E 4.16-kV diesel generator and one independent Class 1E 125-V dc system are provided for each division load group.

The redundant ESF electrical load groups (Divisi ons 1 and 2) are provide d with separate onsite standby power sources, electrical buses, distribution cables, controls, relays, and other electrical devices. Redundant parts of the system are physically independent to the extent that no single credible event, including a single elect rical failure, will cause loss of power to both redundant load groups. An independent raceway system is provided to meet load group cable separation requirements for each of these divisions, as well as for the HPCS (Division 3) and RPS (Division 4, 5, 6, and 7) divisions.

Each Division 1 and 2 standby power source has sufficient capacity to provide power to all its required divisional loads. In the event of loss of the normal and offsite power sources (as detected by 4.16-kV Class 1E bus undervoltage) or receipt of LOCA signals, these standby sources are designed to start a nd, if an undervoltage condition exists, conn ect automatically.

This is accomplished in sufficient time to maintain the reacto r in a safe condition, safely shut down the reactor, or limit the consequences of a DBA to acceptable limits.

The standby electrical system 4.

16-kV Division 1 or 2 switchgear buses and associated diesel generators, 480-V ac auxiliary distribution systems, 120/208-V ac, 120/240-V ac, and 125-V and 250-V dc power and control systems all c onform to Seismic Cate gory I requirements and are housed in Seismic Category I structures. Deta iled descriptions of equipment seismic design and capability are contained in Section 3.10.

The Division 3 HPCS standby power source is designed to supply a ll power required for emergency core cooling (water sp ray) in the event of a LOCA. The system consists of the 4.16-kV HPCS switchgear bus, HPCS pump motor and diesel generator, and the associated 480-V HPCS auxiliary distributi on system supplying motor-operated valves , engine cooling water pumps, and miscellaneous engine auxiliary loads. The sy stem is capable of performing its function when subjected to the effects of prevalent natural phenomena at the plant site and is designed in accordance with Class 1E requireme nts. All HPCS system equipment is housed in a Seismic Category I structure. The system is self-contained, except for access to the normal and offsite sources of power (by connection through th e plant ac power distribution system) and for instrumentation connection to the LOCA start signal. Isolated operation independent of electrical connections to other power sources is accomplished by use of direct connection to the 4.16-kV HPCS diesel-generator. Auxiliary equipment such as heater, air compressor, and battery charger are supplied fr om the same power source as the HPCS pump motor.

In the event that offs ite power is unavailabl e, the HPCS diesel generator (standby power source) can furnish onsite power in sufficien t time to provide all power for startup and operation of the HPCS pump motor compatible with accid ent mitigation. Th e diesel generator C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-9 starts automatically on receipt of 4.16-kV HPCS bus (SM-4) undervoltage or plant LOCA signals. Under the condition of bus SM-4 undervoltage, the di esel generator unit is also connected to the bus automatically. The HPCS diesel generator ha s an electrical cross connect capability to allow it to energize selected Division 1 or Division 2 equipment by feeding from the HPCS bus to the associated Division 1 or Division 2 buses. The HP CS diesel generator does not have the capacity to a ssume all the Division 1 or 2 loads, however, it can energize selected loads during an exte nded station blackout or a non-DBA loss of offsite power as described in Section 8.3.1.1.7.2.1. Manual controls are provided for a ll diesel generators to permit the plant operator to select the most suitable source to supply powe r to loads. An automatic st art signal will override the test mode. Provision is made for control from both the main control room and from the diesel generator building local control panel.

The RPS power system is designed to serve as a continuous, dependabl e source of power for the RPS logic. The system supplies power from two independent MG set sources, each capable of sustaining output voltage and frequency where mo mentary loss of input power occurs (e.g., due to switching). The system is classified as nonessential (Division A and B) since loss of output power due to open, short, or ground causes the reactor to trip.

The onsite power system is designed in accordance with the applicable portions of the

following criteria, with a level of impl ementation as described in Sections 8.3.1.2 and 8.3.2.2. Specific data regarding the use of alternative approaches in instances of nonconformance, and information regarding conformance to differing revisions of the criteria indicated below, are

discussed therein.

a. GDC 3 - Fire Protection

b. GDC 17 - Electrical Power Systems

c. GDC 18 - Inspection and Testi ng of Electrical Power Systems

d. GDC 21 - Protection System Reliability and Testability

e. GDC 33 - Reactor Coolant Makeup

f. GDC 35 - Emergency Core Cooling

g. GDC 38 - Containment Heat Removal

h. GDC 41 - Containment Atmosphere Cleanup

i. GDC 44 - Cooling Water C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-10 j. Regulatory Guide 1.6, Revision 0 -

Independence Betwee n Redundant Standby (Onsite) Power Sources and Between Their Distribution Systems

k. Regulatory Guide 1.9, Re vision 0 - Selection of Diesel Generator Set Capacity for Standby Power Supplies

l. Regulatory Guide 1.22, Revision 0 -

Periodic Testing of Protection System Actuation Functions

m. Regulatory Guide 1.29, Revision 3 - Seismic Design Classification

n. Regulatory Guide 1.30, Revision 0 - Quality Assurance Requirements for the Installation, Inspection and Testing of Instrumentation and Electrical Equipment

o. Regulatory Guide 1.32, Revision 2 - Use of IEEE Standard 308-1974 Criteria for Class 1E Electric Systems for Nuclear Power Generating Stations

p. Regulatory Guide 1.40, Revision 0 - Qualification Tests of Continuous-Duty Motors Installed Inside the Containment of Water-Cooled Nuclear Power Plants

q. Regulatory Guide 1.41, Revision 0 - Preoperational Testing of Redundant Onsite Electric Power Systems to Ve rify Proper Load Group Assignments

r. Regulatory Guide 1.47, Re vision 0 - Bypassed and I noperable Status Indication for Nuclear Power Plant Safety Systems

s. Regulatory Guide 1.53, Revision 0 - Application of the Si ngle-Failure Criterion to Nuclear Power Plant Protection Systems

t. Regulatory Guide 1.62, Revision 0 -

Manual Initiation of Protective Actions

u. Regulatory Guide 1.63, Revision 0 - Electrical Pene tration Assemblies in Containment Structures for Water-Cooled Nuclear Power Plants

v. Regulatory Guide 1.73, Revision 0 - Qualification Tests of Electric Valve Operators Installed Inside the Containment of Nuclear Power Plants

w. IEEE 279-1971 - Criteria for Protection Systems for Nuclear Power Generating Stations

x. IEEE 308-1974 - Class 1E Electrical Systems for Nuclear Power Generating Systems C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-11 y. IEEE 323-1971 - Standard for Qualif ying Class 1E Equipment for Nuclear Power Generating Stations

z. IEEE 338-1971 - Criteria for Periodic Testing of Nuclear Power Generating Station Class 1E Power and Protection Systems

aa. IEEE 344-1971 - IEEE Recommended Practic es for Seismic Qualification of Class 1E Equipment for Nuclear Power Genera ting Stations

bb. IEEE 387-1972 - Trial Use Criteria fo r Diesel Generator Units Applied as Standby Power Supplies for Nuclea r Power Generating Stations

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.1-13 Table 8.1-1 Engineered Safety Feature Systems System and Function Power Supply Section Containment systems Containment cooling system (RHR suppression pool cooling) ac, dc

6.2 Primary

containment isolation system (NSSS) ac, dc

6.2 Reactor

building ventilation and pressure control system ac, dc

7.3 Emergency

core cooling system High-pressure core spray system ac, dc 7.3 Low-pressure core spray system ac, dc 7.3 Automatic depressurization system dc 7.3 Residual heat removal system ac, dc 7.3 Low-pressure coolant injection system Standby service water system (emergency equipment cooling water system) ac, dc 7.3 Habitability systems Control room HVAC system ac, dc 6.4 Fission product removal and control systems Standby gas treatment system ac, dc 6.5 Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-008 8.2-1 8.2 OFFSITE POWER SYSTEM

8.

2.1 DESCRIPTION

The offsite power system consists of the following elements a nd the connections between them.

a. The Bonneville Power Admi nistration (BPA) utility grid, b. The 500-kV and 230-kV tie lines from the plant to the BPA Ashe Switchyard, c. The 115-kV tie line from the plant to the BPA Benton Switchyard, d. The plant main generators st ep-up main transformer bank, and e. The plant startup and backup transformers.

See Section 8.2.2 for a discussion of conformance to applicable regulatory guides and standards.

8.2.1.1 Utility Grid Arrangement

The plant output 500-kV tie line is connected to the BPA utility grid at the Ashe Switchyard located 3000 ft north of the plant.

Figure 8.1-1 shows the BPA Ashe 500-kV Switchyard arrangement and the connection of the plant 500-kV tie line.

The BPA 500-kV bus at the Ashe Switchyard is a two bus-breaker and a half arrangement.

The Ashe 500-kV bus is tied into the BPA 500-kV network by four 500-kV lines that connect to the Hanford, Slatt, Lower Monume ntal, and Marion 50 0-kV Switchyards.

The BPA line from Ashe to Hanford is 18 miles long and the BPA line from Ashe to Lower

Monumental is 41 miles long. The BPA line fr om Ashe to Marion is 224 miles long. The BPA line from Ashe to Slatt is 72 miles long. Each line has a thermal load capacity of about 3000 MW.

The protective relaying for the 500-kV lines cons ists of redundant microprocessor relays and transfer trips. The Hanford, Lower Monumental, and Slatt lines are equipped with single pole

switching and high-speed reclosing for single line to ground faults. A breaker failure scheme is provided so that in the event of a breaker failure to trip on a fault, only the bus sections adjacent to the failed breaker are lost.

The BPA network 230-kV bus arrangement at the Ashe Switchyard is shown in Figure 8.1-3. The 230-kV bus is a main bus-tra nsfer bus type confi guration. The BPA 230-kV line from the Ashe Switchyard to the DOE 230-kV loop is

9.5 miles

long and the BPA 230-kV line from Ashe Switchyard to the BPA White Bluffs Substation is 5 miles long. Each line has a capacity of about 350 MW. The 230-kV line from Ashe to the DOE 230-kV loop is equipped with redundant protective relays for lin e fault protection with a three terminal line tr ansfer trip C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-008 8.2-2 scheme. The protective relaying for the 230-kV line to the White Bluffs Switc hyard consists of redundant protective relays. Both lines are provided with a local breaker failure trip.

The BPA network arrangement at Benton Switchyard is shown in Figure 8.1-4. Benton Switchyard is located 3 miles ea st-southeast of Columbia Genera ting Station (CGS). The BPA 115-kV bus at Benton has a main bus-transfer bus configuration. The network connections that can supply power to the Benton Switchyard are th e two lines to Midway Switchyard (29 miles long), the two lines to Franklin Substation (21 miles long), and the two lines to White Bluffs (11 miles long). Each of these lines has a capa city of over 100 MW. The lines out of the BPA Benton Switchyard are equipped with redundant microprocessor protective relays for line fault protection. All lines are equippe d with breaker failure relays to provide local breaker failure backup.

8.2.1.2 Offsite Power Transmission Lines

The 500-kV transmission lines involved in this area are predominantly two or three bundle conductor designs. The is okeraunic level is five, i.e., an av erage of five thunderstorm days per year occur in the area of the station, which is reasonably low. Most existing lines east of

the Cascades have continuous overhead ground wires. All futu re 500-kV lines east of the Cascades will also have continuous overhead ground wire s for their entire length.

The 500-kV plant output transmission line originates at the CGS st ep-up main transformer bank and extends 3000 ft to the 500-kV Ashe Sw itchyard. Connection at the step-up main transformer bank is made via ground mounted bus (post type) and a disconnect switch.

The line is a horizontal flat spaced configuration using triple bundle cable. Each phase conductor consists of three aluminum cable steel-reinforced "bunting" subconductors maintained at constant spacing by fixed spacers.

Standard Stockbridge dampers are used to damp aeolian vibration if needed. Subconductor twisting has not been a problem on existing lines and it is not anticipated th at this problem will occur on this line. Accumulation of dust on insulators is a problem only when transmission lines cross areas where intensive farming activities occur. Since the 500-kV line is not traversing cultivated areas, this problem is not expected to occur. With the use of continuous overhead groun d wires and an isokeraunic level of five, it is anticipated that lightning caused outages will not be a problem. Conductors and towers are designed for 0.5 in. (uniform distri bution) ice loading and 8 psf wind loading. Since ice storms produce nonuniform coatings of ice of density between 14 and 27 lb/ft 3 , and the design basis covers ice at 57 lb/ft 3 , the towers and conductor s should be capable of withstanding an asymmetrical ice loading of appr oximately 2 in. thickness. The type of storm required to deposit this much i ce is unlikely to occur east of the Cascade Mount ains where the plant is located.

The 230-kV preferred plant startup and safe shutdown transmission line is 3000 ft long, originating at the 230-kV Ashe Switchyard and connecting to the CGS startup transformer.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.2-3 The 115-kV backup plant safe shutdown transmission line is 4 miles long. It originates at the Benton Switchyard and connects to the CGS backup transformer vi a hookstick operated disconnect links and an oil filled circuit breaker.

All incoming and outgoing lines have lightning arresters connected at the transformer terminals.

Figures 1.2-1 and 8.1-5 show the relative physical locations of the generating plant buildings, step-up main transformer bank, normal a uxiliary transformers, startup and backup transformers, transmission lines, and distribution equipment.

8.2.1.3 Main Genera tor and Step-Up Main Transformer Bank

The turbine generator is rated at 25-kV, 1230 MVA, 0.975 power factor and has a hydrogen-cooled rotor and water-cooled st ator. The generator neutral is grounded through a transformer with a secondary resistor. The brushless excitation system cons ists of a permanent magnet-pilot exciter, ac main exciter, and rotating rectifier assembly connected to the generator shaft. Current transformers are provided in the main leads for relaying and metering. Main generator data is given in Table 8.2-1.

The generator is connected to the step-up ma in transformer bank with a forced-air-cooled, isolated phase bus duct. Potential transformers for relaying, metering, and vo ltage regulation are provided and connected to the isolated phase bus duct. Separate is olated phase bus ducts are tapped from the main bus to supply power to the normal auxiliary transformers.

The main transformer bank, stepping up generator output from 25-kV to 500-kV, consists of four single phase transformers (one transformer is spare). The transformer bank is an outdoor, oil-filled type, FOA-cooled, rated 1140/1276 MVA at 55°C/65°C temperature rise. The bank is delta connected on the primary (low volta ge) side, and wye conn ected on the secondary (high voltage) side with a solidly grounded neutral.

The location of the generator st ep-up main transformer bank is outdoors on the north side of the turbine generator building.

The generator stator winding is protected agains t internal faults by hi gh-speed differential relays. Stator ground fault protection is provided by a neutral ground overvoltage relay in the high impedance grounding circuit.

An instantaneous overvoltage re lay is also furnished in the circuit to provide ground fault protection during turbine generator warm-up.

The generator rotor is protected against excessive heating due to asynchronous operation by loss of field relays. Protec tion from excessive heating due to unbalanced stator winding currents is provide d by negative sequence current relays.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.2-4 The steam turbine is protected against excessive heating caused by motoring of the generator during periods of a low or zero steam flow by differential pressure an ti-motoring devices.

Directional power relays are pr ovided to back up the antimotoring devices. In addition, an instantaneous overcurrent relay is provided to give bac kup protection when the 500-kV breakers are open.

Under frequency relays are provided for protection of the turbine.

The step-up main transformer bank is protected against faults by high-speed differential relays and by sudden pre ssure relays.

Relay signals from any of the generator or step-up main transformer bank protective devices previously described will trip the generator field, trip the 500-kV Ashe Switchyard power circuit breakers, and trip appropri ate plant auxiliary distribution system breakers. Fast transfer to the plant startup transformer would also be initiated automatically by the generating unit trip system (see Section 8.2.1.4).

In addition to the primary level of fault protec tion described above, ther e is a secondary level of protection provided by unit overall differential relays. The z one for these relays includes the generator, isolated phase generator bus, the normal auxiliary transformers, and generator step-up main transformer bank.

Step-up main transformer bank oil levels, oil temperature, and winding hot-spot temperatures are also monitored and annuncia ted, but the associated rela ys do not initiate tripping.

8.2.1.4 Normal Auxiliary, Startup, and Backup Transformers and Buses

The two normal auxiliary transformers (TR-N1, TR-N2), the st artup transformer (TR-S), and the backup transformer (TR-B) are located outdoors at the north side of the turbine generator building. The TR-N1, TR-N2, and TR-S ar e connected to the ac distribution system by nonsegregated phase bus ducts. The TR-B is connected by cable.

All transformers are three-phase, outdoor, oil-filled type with wye connected secondary (low-voltage) windings individua lly resistance grounded (transformers TR-N1 and TR-S are dual secondary winding type).

The normal auxiliary transfor mers and bac kup transformer have ratings at both 55°C and 65°C temperature rise; the startup transformer is rated at 65°C temperature rise.

The normal auxiliary transformers together have the capability of suppl ying all plant operating loads. Transformer primary (high-voltage) windings of eac h are delta connected. The 25/4.16/4.16-kV dual secondary transformer (TR-N1) is ra ted 24/32/40 MVA at 55°C temperature rise, OA/FA/FA cooled. The sec ondary windings are rated 9.6/12.8/16 MVA

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.2-5 and 14.4/19.2/24 MVA. The ratings at 65°C are approximately 12% higher. The 25/6.9-kV transformer (TR-N2) is rated 16.2/23.63/31.25 MVA at 55°C temperature rise, OA/FA/FA cooled. The 65°C rating is approximately 31.7 MVA.

The startup transformer (TR-S) has the capacity to supply full startup, normal running, and engineered safety feature (ESF) shutdown load s for Divisions 1, 2, and 3. Transformer primary (high-voltage) winding is wye connected with a solid connection to ground. An intermediate delta connected winding is provided between the single wye connected primary and dual wye connected seconda ry windings. This 230/6.9/4.

16-kV transformer is rated 42/56/68.66 MVA at 65°C temperature rise OA/FA/FA cooled. The 6.9-kV secondary winding is rated 18/24/28.66 MVA and the 4.16-kV secondary winding is rated 24/32/40 MVA.

The backup transformer (TR-B) has the capability of supplying the full power requirements of the ESF systems for both Division 1 and Division 2. Transformer primary (high-voltage) winding is wye connected with a solid connection to gr ound. An intermediate delta connected winding is provided between the wye connected primary and secondary winding. This 115/4.16-kV transformer is rated 10/12.5 MVA at 55°C temperat ure rise, OA/FA cooled, and 11.2/14 MVA at 65°C, OA/FA cooled.

Figure 8.1-5 is a representation of th e physical layout of the suppl y circuitry which connects the startup transformer and the backup transformer to their respect ive transmission lines.

Protective relaying provided fo r each transformer includes di fferential current and sudden pressure relays to sense intern al transformer faults, and primar y overcurrent relays to provide backup for secondary faults. Th ese relays in turn actuate th e affected transformer lockout relay.

The plant startup and backup transformers are also provided with overcur rent relays in the primary winding ground connection.

Protective relay signals from the normal auxiliary transformers will trip the generator field, and trip and lock out the 500-kV Ashe Switchyard power circuit breakers and appropriate plant auxiliary distribution system breakers. Transfer to the plant startup transformer would also be initiated automatically th rough lockout relays.

Protective relay signals from the startup transf ormer will trip and lock out the 230-kV Ashe Switchyard circuit breaker and appropriate plant a uxiliary distribution system breakers. In the event the main generating unit is synchronized with the 500-kV sy stem and plant auxiliaries are operating from the startup transformer and a loss of the startup transformer occurs, then a unit lockout condition will open the 500-kV Ashe Switchyard power circuit breaker, open the startup breakers (the normal breakers are already open), and trip the main turbine.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-008 8.2-6 Protective relay signals from th e backup transformer will trip a nd lock out the 115-kV circuit breaker located in the plant switchyard and the transforme r secondary circuit breakers.

Undervoltage relays monitor th e startup and back up transfor mer secondaries and trip the transformer secondary circuit breakers for loss of voltage.

In addition to the protective de vices described above, all transformer sec ondary windings are provided with ground sensor re lays which will alarm but do not initiate tripping. Reverse power relays on the startup and backup transformers will alarm if backfeed to the 230-kV or 115-kV system occurs.

8.2.1.5 Power System Communications

A communication system, including telephone facilitie s dedicated for electri cal utility service, is provided between Columbia Generating Station and the BPA Ashe Switchyard. The system is an extension of the existing communication system owned and maintained by BPA.

The power source for the solid state communication equipment lo cated at Columbia Generating Station is the non-Class 1E 125-V dc plant battery (see Figure 8.3-5

). The communication circuits also pr ovide for the following functions:

a. Protective relaying,

b. Telemetering of net plant megawatts and megavars to Dittmer Control Center at Vancouver, Washington,

c. Transmission of turbine trip signal and other data to Dittmer Control Center, and

d. Control of the power circuit breakers associated with the plant 500-kV transmission line (from Columbia Generating Station and Dittmer) and the plant 230-kV transmission line (Dittmer only).

For additional discussion of both the Columbia Generating Station co mmunication system and other (commercial, UHF radio) available plant communication systems, see Section

9.5.2. Section

8.2.2 Not Availa ble For Public Viewing

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.2-7 Section 8.2.2 Not Availa ble For Public Viewing

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.2-8 Section 8.2.2 Not Availa ble For Public Viewing

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 8.2-9 Section 8.2.2 Not Availa ble For Public Viewing

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-008 8.2-10 Section 8.2.2 Not Availa ble For Public Viewing

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 LDCN-01-063 8.2-11 Table 8.2-1 Main Generator Data Rating, MVA 1230 Power factor 0.975 Voltage, kV 25 Frequency, Hz 60 Speed, rpm 1800 Hydrogen pressure, psig 75 Synchronous reactanc e a 173 Transient reactanc e a 43.4 Subtransient reactanc e a 29 a Percent at rated kVA and kV.

Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing C OLUMBIA G ENERATING S TATION Amendment 59 F INAL S AFETY A NALYSIS R EPORT December 2007 LDCN-04-050 8.3-1 8.3 ONSITE POWER SYSTEMS

8.3.1 ALTERNATING

CURRENT POWER SYSTEMS 8.3.1.1 Description Principal elements of the Columbia Generating Station (CGS) auxiliary ac electrical systems are illustrated in Figure 8.1-2. Four auxiliary tran sformers are provided.

Normal auxiliary power is provided by two normal auxiliary tr ansformer fed from the main generator 25-kV isolated phase bus. The startup transformer is connected to the Bonneville Power Administration (BPA) 230-kV H. J. Ashe Switchyard. Th ese auxiliary systems each have the capacity to carry the full plant auxiliary load. A backup transformer is provided to supply all Divisions 1 and 2 plant engineered safety feature (ESF) loads.

This transformer is supplied from the BPA Benton Switchyard via a 115-kV line to the plant. The transformer steps down the 115-kV supply to 4.16-kV and is connected by cables th rough circuit breakers to the 4.16-kV Class 1E switc hgear buses SM-7 and SM-8.

8.3.1.1.1 4.16-kV and 6.9-kV Distribution System The auxiliary transformers step down the available voltage as required to supply the 4.16-kV and 6.9-kV auxiliary switchgear buses. During normal operation, all load is carried by the normal auxiliary transformers. The startup transformer is used while the 25-kV main generator is being starte d and synchronized with the system.

When this is accomplished, all auxiliary load is transferred (live load transfer) to the normal auxiliary transformers. The startup transformer remains energized from the 230-kV offsite power line to permit the auxiliary load to be automatica lly transferred back to it if pow er from either normal auxiliary transformer is lost. It is possible to operate th e plant with auxiliary lo ads carried by the startup transformer.

The 4.16-kV non-Class 1E switchgear buses SM-1, SM-2, and SM-3 are fed from the secondary windings of the dual secondary winding normal auxiliary transformer (TR-N1) or from the 4.16-kV "Y" winding of the dual sec ondary winding startup transformer (TR-S).

These buses supply the large non-Cl ass 1E auxiliary motors and substations, and the Class 1E switchgear buses SM-4, SM-7, and SM-8. Permanently installed, locked open electrical cross connects between SM-2 and SM-1 and SM-3 allow for powering Division 1 or 2 equipment from SM-4 when plant cond itions allow (see Section 8.3.1.1.7.2.1). The cross connect breakers are not installed in the switchgear. They must be installe d and racked in prior to use.

Use of the cross connect feature is controlled per plant procedures by administratively maintaining the source breakers open to prevent inadvertent paralleling of standby sources.

The 6.9-kV non-Class 1E switchgear buses are fed from the single secondary winding normal auxiliary transformer (TR-N2) or from the 6.9-kV "X" winding of the dual secondary winding C OLUMBIA G ENERATING S TATION Amendment 59 F INAL S AFETY A NALYSIS R EPORT December 2007 LDCN-04-050 8.3-2 startup transformer (TR-S). These buses supply the non-Class 1E reactor recirculation pump adjustable speed drives (ASDs), cooling tower substations , and auxiliary substations.

The 6.9-kV and 4.16-kV auxiliary switchgear buses are arrange d for distribution of power through a switchgear assembly of circuit breakers. The switc hgear is of metal-clad, indoor design and has three-pole circu it breakers (draw-out type) with stored energy mechanisms fed from the plant dc systems.

Normal source power failure is detected by relays in the unit trip protective system and by undervoltage relays. Automatic transfer facilities are provided so that failure of normal supply causes immediate tripping of the normal supply circuit breakers and si multaneous closing of the startup transformer supply circ uit breakers. This provides virtually continuous feed to the Class 1E and non-Class 1E switc hgear buses of all divisions.

On loss of both normal and startup sources, or if the startup source is lost when the main generator is out of service, the tie breakers between the 4.16-kV Class 1E and the 4.16-kV non-Class 1E switchgear buses are auto matically opened, thereby shedding all loads supplied via the 4.16-kV non-Class 1E buses. The 4.16-kV Class 1E bus undervo ltage signals cause trips of all 4.16-kV feed er breakers except t hose breakers supplying 480-V substations.

The Divisions 1 and 2 4.16-kV Clas s 1E buses (SM-7, 8) are then automatically transferred to the 115/4.16-kV backup transformer for supply of load. In the event this source is also unavailable, these buses would be automatically transferred to the onsite standby sources (Divisions 1 and 2 diesel genera tors). Reapplication of load is on a time priority basis. The loading sequence for buses SM

-7 and SM-8, as shown in Tables 8.3-1 and 8.3-2 and Figures 8.3-1 and 8.3-2, is accomplished through the use of electromechanical time delay relays. The Division 3

[high-pressure core spray (HPCS

)] 4.16-kV Class 1E bus (SM-4) cannot be connected to the backup source; loss of the normal/star tup sources causes automatic transfer of this load, as shown in Table 8.3-3 , to the Division 3 onsite standby source (Division 3 diesel generator).

Load shedding and load sequenc ing are not required in this division. Permanently installed, electrical cross connect cables between SM-2 and SM-1 and SM-3 allow cross connecting Division 3 to Divisions 1 or 2 under co nditions described in Section 8.3.1.1.7.2.1. This allows Division 3 to power selected Division 1 or 2 loads.

The 4.16-kV Class 1E buses SM-7 and SM-8 pr ovide power to the 4.16-kV emergency core cooling system (ECCS) loads, control rod drive pumps, and (v ia stepdown transformers) the 480-V Class 1E buses SL-71, S L-73, SL-81, and SL-83. Th e 4.16-kV Class 1E bus SM-4 provides power to the 4.16-kV HPCS pum p and (via stepdown transformer) the 480-V Class 1E motor control center (MCC) MC

-4A (HPCS auxiliaries). Buses SM-7 and SM-8 can be fed from any of three sources, namely (1) normal auxiliary switchgear which receives power from either the normal auxiliary transformers or the startup transformer, (2) the backup transformer, or (3) standby diesel generators. Bus SM-4 can be fed from either of two sources, namely, (1) normal auxiliary swit chgear which receives pow er from either the normal auxiliary transformers or the startup tr ansformer, or (2) a st andby diesel generator.

C OLUMBIA G ENERATING S TATION Amendment 59 F INAL S AFETY A NALYSIS R EPORT December 2007 8.3-3 As shown in Figure 8.1-2.2, bus SM-7 supplies 4.16-kV Di vision 1 ESF loads and non-ESF control rod drive pump (CRD-P-1A). Subbus SM-75 supplies ot her 4.16-kV non-ESF loads, including the plant service water pump (TSW-P-1A). Class 1E breaker CRD-CB-P1A (SM-7 supply to CRD-P-1A) is automatically tripped on loss of offsite power (LOOP), and Class 1E breaker E-CB-7/75/1 (SM-7 supply to SM-75) is automatically trippe d on a loss-of-coolant accident (LOCA) with LOOP to prevent overloading of DG1. This arrangement allows the plant service water pump to be supplied from Division 1 bus SM-7 during a LOCA when an offsite source is available. Division 2 loads are treated in a similar manner on buses SM-8 and SM-85. Time delays are provided with timers to extend the intervals between auto starts of ECCS pumps on LOCA initiation with the TR-S supply. This prev ents second level undervoltage relay operation due to excessi ve voltage drops and longer starting time resulting from simultaneous or overlapping starts of large motors. To improve bus voltages during LOCA (1) buses SM-72 and SM-82 are shed automatically on LOCA initiation, and (2) an electrical interlock prevents starting the second plan t service water (TSW) pump during a LOCA.

The combined ECCS and TSW loads in Divisions 1 and 2 exceed the rated capacity of their respective diesels. Hence, feeder breakers 7-75/land 8-85/1 supplying bu ses SM-75 and SM-85, respectively, are tripped automatically on a LOCA with LOOP. Breakers 7-75/1 and 8-85/1 remain closed on LOOP without a LOCA, and the TSW pumps are started automatically to provide water for drywell cooling to ensure a controlled shutdown.

Two circulating water pumps, CW-P-1B and CW-P-1C, are tripped automatically on LOCA initiation leaving the third circulating wate r pump, CW-P-1A, operating during a LOCA. Starting of CW-P-1A under minimum grid voltage (230-kV) and maximum loading conditions during a LOCA is avoided by administrative procedure.

Manual live transfer of power be tween normal auxiliary and start up sources is possible either way by the main control room operator on th e 4.16-kV non-Class 1E switchgear buses SM-1, 2, and 3. Likewise, manual live transfer of power between norma l/startup and backup transformer sources is possible on the 4.16-kV Class 1E switchgear buses SM-7 or 8, although the startup source is the preferred offsite pow er source. Manual live transfer of power between the normal/start or the backup power source and the Di vision 1 or 2 standby power source is possible. This facilitates diesel generator testing wit hout dropping loads or the return of loads from the diesel generator to the offsite power source on recovery of the offsite source following a total loss. Howeve r, synchronizing of any diesel generator with the normal auxiliary transformer is avoide d by administrative procedures.

The primary undervoltage sensing scheme for the 4.16-kV Class 1E distribution system utilizes instantaneous undervoltage relays to start the Divisions 1 a nd 2 standby diesel generators immediately on loss of voltage at their associated 4.16-kV Class 1E switchgear buses. These

C OLUMBIA G ENERATING S TATION Amendment 59 F INAL S AFETY A NALYSIS R EPORT December 2007 8.3-4 relays also energize timers whic h allow the system to attempt to establish supply from the startup source (if the plant is operating from th e normal source at the ti me) or verify that voltage loss is maintained (i f the plant is operating from the startup source initially).

In the event that voltage loss is maintained for 3.5 sec, th e Division 1 and/or 2 timers trip the Class 1E bus normal/startup source breakers, in stitute load shedding, and energize additional 2-sec and 4-sec timers. The 2-sec timer is utilized to attemp t closing of the backup source breakers; backup transformer underv oltage relays will inhibit break er closure in the event of backup source undervoltage. The 4-sec timers are used to inhi bit closure of the diesel generator breakers until th e system has had time to attempt reestablishment of supply via the backup source.

When 4.16-kV Class 1E Division 1 and/or 2 buses are supplied from 115-kV backup source, a loss of the backup source initiat es a timer. The tim er trips the backup source breaker B-7 (B-8) after a 3.5-sec delay. Th is allows coordination of the backup source under voltage relay with the associated incoming line and br anch circuit overcurrent protection.

The primary undervoltage scheme for the 4.16-kV Division 3 Cl ass 1E bus utilizes instantaneous undervoltage relays which energize a 2-sec timer.

In the event that voltage loss is maintained for 2 sec, this timer trips the preferred source br eaker and energize an additional 1-sec timer. The second timer, after timing out , starts the HPCS diesel generator and annunciates the loss of voltage in the control room. The diesel generator supply breaker will then close after the diesel has reached rated frequency.

See Sections 8.3.1.1.7.1.7 and 8.3.1.1.7.2.7 for additional discussi on of the standby diesel generator starting and loading systems.

A second level of undervoltage protection is provided to prot ect against the effects of prolonged degraded voltage which could adversely affect the ope ration of Class 1E electric motors requiring at least 90%

of the nameplate voltage fo r continuous operation (see Table 8.3-4). For this reason, Class 1E bus SM-4, SM-7, and SM-8 voltages are monitored by an additional set of Class 1E unde rvoltage relays. Three static type undervoltage relays are provided for Divisions 1 and 2 and are connected to monitor all three line voltages (i.e., phases AB, BC, and CA). The arrangement utilizes a two-out-of-three logic to preclude the possibility of spurious voltage loss signal and facilitate testi ng. The Division 3 second level undervoltage protection utilizes a two-out-of-two scheme to preclude the possibility of spurious tripping.

In the event of sustained bus undervoltage (appr oximately 89.4% of nominal bus voltage lasting more than approximately 8 sec), the second level of unde rvoltage protection automatically trips the feeder breaker connecting the normal/startup sources to their respective 4.16-kV Class 1E buses. For Di visions 1 and 2, this action results in loss of bus voltage, thereby starting the diesel generators, initiating load shedding and energizing two of the

C OLUMBIA G ENERATING S TATION Amendment 59 F INAL S AFETY A NALYSIS R EPORT December 2007 LDCN-06-000 8.3-5 three bus transfer timers mentione d in the primary undervoltage scheme above. In this case the first 3.5-sec timer is bypa ssed. The 2-sec timer permits closing of the backup source breaker and the 4-sec timer permits closing of the diesel generator breaker assuming a failure of the backup source breaker to close. Clos ure of the backup source and diesel generator breakers is permitted if the source vo ltage is at least 94% of normal.

Should the degraded voltage condition exist on the backup power source while the source is supplying the load, the second leve l undervoltage relays would then isolate that source, again initiating the sequence of events described fo r the secondary undervo ltage sensing scheme above. However, closing of back up feeder breakers, as part of that sequence of events, is blocked.

For Division 3, the second level undervoltage protection trips the normal/startup source breaker, thereby causing a loss of bus voltage.

This energizes the sec ond timer which results in diesel start and subsequent supply to Division 3 from the diesel generator.

The setpoints and allowable values for the 4.16-kV emergency bus loss of power instrumentation are as follows:

Type Setpoint (Volts) Allowable Value (Volts)

Loss of Voltage (Divisions 1, 2, and 3) 4160 V basis 2782.

5-2957.5 2450-3135 120 V basis 79.5-84.5 70.0-89.57

Undervoltage (Divisions 1, 2, and 3) 4160 V basis 3711.

8-3729.2 3685-3755 120 V basis 106.05-106.55 105.29-107.28 A blown P.T. fuse on the bus SM-7 or SM-8 woul d result in a spurious voltage loss signal for the primary and second level undervoltage relays. The primary undervoltage relays will trip the normal/startup source breaker and initiate auto transfer to the backup source. The second level undervoltage protection for the backup source is blocked in this event, in order to prevent cycling of the backup source breaker. The primary undervoltage protection for the backup source will be unaffected since th e back-up source primary undervoltage relay is connected to a separate P.T. as shown in Figures 8.3-1 and 8.3-2. In this event, th e ESF load breakers of the affected bus will trip and will not be available until the blown P.T. fuse is replaced. However, the ESF loads on the other two unaffect ed Class 1E buses will be available during this time for safe s hutdown, if required.

C OLUMBIA G ENERATING S TATION Amendment 59 F INAL S AFETY A NALYSIS R EPORT December 2007 LDCN-06-006 8.3-6 When the Class 1E buses SM-7 and SM-8 are being fed from the turbine generator, the possibility of sustained undervoltage is not considered credible due to response characteristics of the voltage regulator and protection equipment for the unit.

The scheme described ensures a power source within the acceptable voltage limits for the Class 1E loads at all times. Ci rcuit design allows for testing of the individual relays, one at a time, without disrupting the protective function.

There are no bypasses of the protective action for this system.

The load shedding of these emergency buses, SM-7 and SM-8 , due to under voltage during motor starting will not occur on ce the diesel generator is supplying power to the emergency bus. The minimum voltage on the emergency bu ses SM-7 and SM-8 as a result of motor starting when the associated diesel generator is supplying the bus is 80% or greater of the rated bus voltage. Since the Class 1E bus primary u ndervoltage relays are set at 69% of nominal bus voltage, reinstitution of load shedding as a result of voltage dip due to motor starting will not occur.

Technical Specifications for CGS include a test requirement to verify that on interruption of offsite power the loads are shed from the emergency buses a nd the loading of the onsite sources is sequenced by time delay re lays in the motor start controls.

8.3.1.1.2 480-Volt Distribution System

Power for 480-V auxiliaries is supplied from unit substations consisting of 6.

9-kV/480-V or 4.16-kV/480-V transformers and associated metal clad switchgear. Non-Class 1E 4.16-kV buses SM-1, 2 and 3, supply sepa rate 480-V substations, each w ith its own power transformer and switchgear.

Class 1E 480-V substations supplying ESF loads are arranged as indepe ndent radial systems with each 480-V bus fed by its own power transformer. Each 480-V Class 1E bus is independent of the other 480-V bu ses; there are no cross ties.

The 480-V auxiliaries required during emergency conditions are supplied from 480-V Class 1E bus es SL-71 and SL-73 (Division 1) and SL-81 and S L-83 (Division 2). The HPCS 480-V auxiliaries are supplied from an independent transformer and Class 1E bus MC-4A (Division 3). Power supplies to all Class 1E auxiliary systems are arranged so that alternate or redundant auxiliary systems are supplied from 4.16-kV switchgear buses of separate Cl ass 1E divisions.

The 480-V substations, in general, supply 460-V motor loads la rger than 100 hp and all MCC loads. Switchgear for 480-V substations is of the indoor metal clad type with draw-out circuit breakers operated from the plant dc system, with the excepti on of SL-54 which is equipped with molded case circuit breakers.

Phase to ground fault current s are limited to a maximum of 10 amp by use of neutral grou nd resistors in all substation transformer neutral ground

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-09-006 8.3-7 connections. All substation tr ansformer neutral ground connec tions and switchgear branch feeder circuits are equipped with ground detection devices and alarms.

The 480-V MCCs feed motors 100 hp and less (in ge neral), control po wer transformers, heaters, motor-operated valves (MOVs), all other small electrically operated auxiliaries, and all lighting. Control centers ar e isolated in separate load groups correspondi ng to divisions established by the 480-V s ubstation units. Branch circuit prot ection for all loads is provided by fused disconnect switches equippe d with current limiting fuses or molded-case circ uit breakers.

The fuses for the MC-8BA subfeed also provide backup overc urrent protection for containment penetration circuits in accordance with Regulatory Guide 1.63.

Class 1E MCCs are shown on the auxiliary one-line diagram (Figure 8.3-4

).

8.3.1.1.3 120/240-Volt (Non-Class 1E) Pl ant Uninterruptible Power System

The non-Class 1E plant uninterruptible power system supplies 120/240-V ac to station services where uninterruptible power is required, such as for plant computer and plant instrumentation [e.g., digital electrohydraulic control system (DEH) cabinet]. This source of power is necessary for plant operational loads, but does not supply ESF loads. Power is distributed via a single phase, three-wire, grounded neutral system.

Failure of the non-Class 1E uninterruptible power system has no adverse effect on station safety since no ESF loads are supplied from this system.

The plant uninterruptible power sy stem receives its power from a static inverter-static switch arrangement fed both from a 250-V dc station battery (float source) and from a 480-V ac Class 1E MCC (preferred source) as shown in Figure 8.3-5. During faults on the uninterruptible power system the static switch will automatically transfer loads to a regulated alternate source, which supplies su fficient fault current to blow the circuit fuse and clear the fault.

Manual bypass switches are also provided to bypass th e plants uninterruptible power systems and transfer load to a regulated bypass source. This will allo w for maintenance and inspection of the system.

8.3.1.1.4 120/208-Volt N on-Class 1E Instrument ation Power System Power is supplied to non-Cla ss 1E plant instrumentation at 120/208-V ac via a three-phase, four-wire, grounded neutral distri bution system. This distributi on system supplies power to the 115-V ac transversing in-core probe (TIP) of the neutron monitoring system and other non-Class 1E instrumentation loads.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-8 Failure of the noncritical instrumentation power system has no adverse effect on station safety since no ESF loads are supp lied from this system.

Alarm and fault detection equipment is provided to alert the ope rator of possible trouble. All equipment associated with the 120/208-V non-Class 1E instrumentation power system is readily accessible for in spection and maintenance on a routin e basis in accordance with the manufacturer's recommendation.

8.3.1.1.5 Divisions 1 a nd 2 120/240-Volt Critical (Class 1E) Instrumentation Power System

Power is supplied to critical plant instrumentation at 120/240-V ac via two single-phase, three-wire, grounded neutral dist ribution systems as shown in Figure 8.3-5. The ac power is normally fed into the systems fr om 15-kVA static inverter-stati c switch arrangements supplied from both the 125-V dc battery systems (primary sources) and the critical ac distribution panels (alternate sources). The static switches immediately transfer from the inverter sources to separate ac sources on lo ss of inverter output. The system is divided into Divisions 1 and 2 redundant circuits with se parate inverters and sta tic switches feeding into separate distribution panels (7A-A and 8A-A) in the main control room for service to ESF ci rcuits in the nuclear steam supply system (NSSS). This system main tains critical instrumentation power sources even during the short interval when offsite power has been lo st and standby power has not yet been applied to the Class 1E ac buses. Each division has two, full ca pacity, 15-kVA static inverters (E-IN-3A and E-IN-3B for Division 1 and E-IN-2A and E-IN-2B for Division 2).

One inverter in each division will be on line s upplying power to their a ssociated bus and the other will normally be available for service if the on-line inverter fails or has to be removed from service.

8.3.1.1.6 Reactor Protection System Power System

The reactor protection system (RPS) power system is designed to provide 120-V ac power to the logic and/or system component s that are part of the RPS, th e containment isolation system, the neutron monitoring sy stem, and the process radiation mon itoring system. It is designed to prevent inadvertent reactor trip or isolation due to a transient loss of power to the trip logic.

See also Section 7.2.1.1.

The principal elements of the RPS power system are shown in Figure 8.3-5. The system consists of two high inertia, ac, motor generator (MG) sets.

Each of these high inertia MG sets has a voltage regulator which is designed to respond to a step load change of 50% of rated load with an output voltage change of not more than 15% and keep the normal voltage limits to within +/-10% of rated. The MG sets do not require manual operation or adjustment during coastdown or acceleration.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-9 High inertia is provided by a flywheel. The inertia is sufficient to maintain the voltage and frequency of generate d voltage within -5% of the rated values for at least 1 sec following a loss of power to the drive motor. However, prototype tests show that an RPS trip does not occur until approximately 4 to 5 sec after the loss of MG set power supply.

The 120-V ac power is supplied from two sources.

The primary source of power is the MG sets previously described. The alternate s ource is from a non-Class 1E distribution panel which is powered from the main generator or the startup transformer. The MG sets themselves are supplied from se parate Class 1E 480-V (Divisions 1 and 2)

MCCs. Indicating lights are provided in the main control room to monitor the status of both the MG sets and the alternate feed.

To protect the RPS trip system from the unacceptable effects of sustained over/under voltage or under frequency from the non-Class 1E pow er sources, two series redundant Class 1E circuit breakers are provided between the RPS distribution panel and each of the non-Class 1E power sources, namely, the two RPS MG sets and the common alternate source. Each circuit breaker is provided with an independent set of Class 1E over/under voltage and underfrequency sensi ng relays. See Figure 8.3-5.

During operation, the RPS buses are energized by their respective MG sets. Either MG set can be taken out of service by manually operating the RPS transf er contactor which takes one MG set out and connects that RPS bus to the al ternate power source. Provision is made to prevent connection of both RPS buses to the alternate source at the same time. A loss of power to either MG set is monitored in the main control room where the operator on detecting such a condition can switch to the alternate sour ce. A complete, sustai ned loss of electrical power to both buses is required to cause a scram and contai nment isolation.

Equipment associated with the RPS power system is located in separate rooms where routine maintenance can be conducted.

Motor generator sets can be in spected, serviced, and tested individually while using the alternate feed from the aforementioned distribution panel.

The electrical protective assembly (EPA) consisting of Class 1E protective circuitry is installed between the RPS and each of the power sources. The EPA provides redundant protection to the RPS and other systems which receive power from the RPS buses by acting to disconnect the RPS from the power source circuits.

The EPA consists of a circuit br eaker with a trip coil driven by logic circuitry which senses line voltage and frequenc y and trips the circuit breaker open on the conditions of overvoltage, undervoltage, and underf requency. Provision is made for set point verification, calibration, and adjustment under administrative control. After tripping, the circuit breaker must be reset manually. Trip setpoints are based on providing 115-V ac, 60-Hz power at the RPS logic cabinets. The protective circuit functional range is +/-10% of nominal ac voltage and -5% of nominal frequency.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-10 The EPA assemblies are packaged in an enclosure desi gned to be wall mounted. The enclosures are mounted on a Seismic Category I structure separately fr om the MG sets and separate from each other. Two EPAs are installed in series between each of the two RPS MG sets and the RPS buses, and between the auxiliary power s ource and the RPS buses. The block diagram in Figure 7.2-11 provides an overview of the EPA un its and their connections between the power sources and the RPS buses. The EP A is designed as a Class 1E electrical component to meet the environmental qualification requirements of IEEE 323-1974 (see Section 3.11) and the seismic qualifications requ irements of IEEE 344-1975 (see Section 3.10). It is designed and fabricated to meet th e quality assurance requi rements of 10 CFR 50, Appendix B.

The enclosure dimensions are approximately 16 x 24 x 8 in. and accommodate power cable sizes from 6 AWG to 250 MCM.

8.3.1.1.7 Standby Alternati ng Current Power System

The standby ac power source for th e plant consists of three dies el generator sets, each one serving ESF loads in its associat ed division (1, 2, 3), their atte ndant air starting and fuel supply systems, and automatic control circuitry. The diesel generator sets supply power to those electrical loads which are required to achieve sa fe cold shutdown of th e plant and/or mitigate the consequences of a design basis event coinci dent with a loss of all offsite ac power.

Tables 8.3-1 , 8.3-2 , and 8.3-3 list the equipment and loads s upplied by each generator for both cases.

Each diesel generator (with its auxiliaries) is housed in a separate room as shown in Figure 1.2-22. The separating walls are designed as 3-hr fire barriers and will provide missile protection in the event of explosion or failure of rotating equipment. Each room is provided with its own ventilation and lighting systems.

Design provisions ensure that flooding in one diesel generator room do es not jeopardize the operation of the other diesel generators. The power, instrumentation, and control cabling associated with the di esel generators is contained in cable trays and conduits which meet the separation criteria detailed in Section 8.3.1.4. All equipment for these systems is identified as indicated in Section 8.3.1.3.

8.3.1.1.7.1 Redundant (Division 1 and Division 2) St andby Alternating Current Power Supplies.

8.3.1.1.7.1.1 General. The dual drive diesel generators comprising the Divisions 1 and 2 standby ac power supplies are designed to quick ly restore onsite power to their respective Class 1E distribution system divisions in the ev ent of coincident loss of all offsite ac power.

Figure 8.1-2 shows the interconnections between the preferred power system and the Divisions 1 and 2 standby diesel generating units.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-11 The dual drive engines utilized are medium weight , fabricated, main fram e engines capable of rapid starting and quick acceptance of the electrical loads. Selection of the type of diesel engine utilized is based upon the advantages offered by the class of unit: the ability to start and accept rated load rapidly and repeatedly with enough dead load pickup capability to assume substantial incremental motor load additions.

8.3.1.1.7.1.2 Unit Ratings and Capability. The diesel generator se ts for Divisions 1 and 2 each have a continuous service ra ting of 4400 kW. Diesel genera tor set short-term ratings are 4650 kW for 2000 hr, 4900 kW fo r 7 days, and 5150 kW for 30 minutes. The continuous rating of each diesel generator is based on an accident condition load which is larger than that required for a safe plant shutdow

n. The generators are rated 5812-kVA at 0.8 pf, which is sufficient to carry the 4650 kW short-term ratings at 0.8 pf.

At higher kW outputs, the diesel generator sets would have to ope rate at a higher power factor.

The size of each of the diesel generators serving Divisions 1 and 2 satisfies the requirements of Regulatory Guide 1.9, Revision 0, and conforms to the following criteria:

a. The continuous (8000 hr/year) nameplate rating of each set exceeds the maximum required load indicated in Tables 8.3-1 and 8.3-2 under rated conditions. Engine brake horsepower required to supply calculated steady state load is also within each diesel engine's 8000 hr/year rated capability with an air inlet temperature of 115°F;

b. Each diesel genera tor is capable of star ting, accelerating, a nd supplying its loads in the sequence shown on Tables 8.3-1 and 8.3-2 without exceeding 5% frequency drop (maximum). The units are capable of recovery to 98% of normal frequency in less than 2 sec;

c. Each diesel generator is capable of starting, accelera ting, and supplying its load in their proper sequence without exceeding 20% voltage drop at its terminals (maximum). The units are ca pable of recovery to 90%

of normal voltage is less than 2 sec;

d. Each diesel genera tor is capable of starting, accelerating, and running its largest motor at any time after the automatic loading sequence is completed, assuming that the motor had failed to start immediately;

e. Each diesel generator is capable of reaching full speed and voltage within 15 sec after receiving a signal to start, and can be fully loaded with in 30 sec following the start signal; and

f. The speed of each diesel generato r does not exceed 75% of the difference between nominal speed and the overspeed trip setpoint, or 115% of nominal

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-12 speed, whichever is lower, during recovery from transients caused by disconnection of the largest single load.

Each governor control system includes manua l engine idle capabili ty. Manually operating engines at a reduced speed fo r "warm up" or a "cool down" run prior to shutdown is recommended by manufacturer to minimize mechanical stress and wear. If a 4.16-kV Class 1E bus (SM-7, 8) primary undervoltage relay si gnal is received when operating engines at reduced rpm (idle sp eed), manual control is automa tically bypassed. The engines are accelerated to rated speed a nd generator excitation (field flas h) is initiated. The diesel generator is automatically brou ght to rated frequency and volta ge attaining a ready-to-load condition within 15 sec.

8.3.1.1.7.1.3 Coo ling Water Systems. Each engine in each diesel generator set has a closed cooling system consisting of a forced circulation coo ling water system which cools the engine directly and a heat exchanger connected to the respective standby service water system. The cooling water pumps are driven directly from th e engine crankshaft. Th e engine cooling water system incorporates provision fo r heat to maintain the engine jacket at a steady temperature when the engine is not running to ensure quick starts. The diesel generator cooling water systems are discussed in Section 9.5.5.

8.3.1.1.7.1.4 L ubrication Systems. The engines of each di esel generator set have self-contained lubrication oil sy stems consisting of lubrication sumps located at the base of each engine, lubrication oil pumps, piping, and heat exchangers. The lube oil heat exchanger is served by the diesel genera tor cooling water system. When the engine is not running, the temperature of the lube oil is maintained at a steady level with heaters and temperature controls to ensure quick starts. The diesel generato r lubrication systems ar e discussed in Section 9.5.7.

8.3.1.1.7.1.5 Air Starting Systems. Diesel generators 1 and 2 have indepe ndent redundant air starting systems as discussed in Section 9.5.6; diesel generator 3 has redundant equipment, but not redundant independent systems.

8.3.1.1.7.1.6 Fuel Oil Systems. The diesel generator fuel oil storage and transfer systems are discussed in Section 9.5.4.

8.3.1.1.7.1.7 Automatic St arting and Loading Systems. In the event of loss of offsite sources of power to the onsite power bus, each diesel generator set is automatically started and loaded by independent control and circuitry. The starting circuitry and control power is provided by separate 125-V dc statio n batteries for Divisions 1 and 2 (see Section 8.3.2.1.1). The diesel generator starting logic and starting signals (shown in Figures 8.3-1 , 8.3-2 , and 8.3-7 through 8.3-10) are described as follows:

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-13 a. Each diesel generator starts immediately upon recei pt of a 4.16-kV Class 1E bus (SM-7, 8) primary unde rvoltage relay signal or LO CA signals (reactor low water level and/or hi gh drywell pressure);

b. On sustained loss of 4.16-kV Class 1E bus voltage, the bus is automatically isolated from the upstream non-Class 1E system. All loads on the bus are tripped, except for those small loads shown in Tables 8.3-1 and 8.3-2 as part of the initial load block fed by the 480-V unit substation;

c. After each diesel generator has attained approximately normal frequency and voltage, its breaker closes (if 4.16-kV Class 1E bus voltage has not been reestablished via the offsite system sources) thus imme diately starting all loads belonging to the first block for which "s tarting required" si gnals are available for ESF actuation signals;

d. The starting of subsequent load blocks are delayed by time relays in accordance with Tables 8.3-1 and 8.3-2. Diesel generator capacity is such that units are capable of maintaining a ll required loads establishe d by the loading schedules;

e. Limitation of diesel gene rator loading is maintained during the entire period the units are operate, since the Class 1E loads capable of being connected to the units exceed unit capability.

However, as indicated in the loading schedules Tables 8.3-1 and 8.3-2, the maximum loads automa tically connected to the Divisions 1 and 2 diesel generating units do not exceed individual diesel generator unit ratings (4400 kW each). Loading beyond the automatically applied load would require positive operator action to manually apply loads;

f. The minimum voltage projected to occu r on the Class 1E buses (SM-7, 8) as a result of motor starting during periods when emergency plant load is being supplied by the diesel generators is greater than 80% of nominal bus voltage.

The duration of voltage dip is expected to be very short lived in the order of 2 to 5 sec. Since the Class 1E bus primary undervoltage re lays are set at approximately 69% of nominal bus volta ge, initiation of load shedding as a result of voltage dip due to motor starti ng will not occur. Since the Class 1E bus secondary undervoltage relays are set at approximately 89.4% of nominal bus voltage (approximately 93% of motor nominal voltage) with a definite time delay of approximately 8 sec, they will not initiate any undesirable tripping action. If bus voltage were to dip below approximately 89.4% of nominal for more than approximately 8 sec, lo ad shedding would be initiated;

g. If offsite power is still present, and th e diesel generator is started by a LOCA signal, the diesel generator breaker w ill not close. However, the unit will continue to run at rate d frequency and voltage un til manually shut down; and

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-030 8.3-14

h. Means are provided for periodic exercising of each diesel generator under load. To accomplish this, supply of the 4.16-kV Class 1E bus associated with the diesel generator to be test ed is transferred to the st artup source. Under this condition the diesel generator to be tested is synchronized to the 230-kV startup source and loaded via manual adjustment of the unit speed controls. During periodic testing of a dies el generator, if a safe ty-injection actuation signal occurs, the diesel generator in test mode is disconnected from parallel operation with the offsite power system and main tained in the emergency standby mode. The diesel generator can automatically provide acceptable voltage and frequency for subsequent unit operation within requirements set by Regulatory Guide 1.9, Revision 0. See unit ratings and capability discussion in 8.3.1.1.7.1.2. In the event of a loss of voltage to the criti cal medium voltage bus, the associated diesel generator would be ready to accept load.

Administrative procedures are used to prevent paralleling of the diesel generator with the normal auxiliary transformer so that the switchgear short circuit capability is not exceeded.

The control circuits for auto matic start are provided with means for manual testing during normal plant operation and conf orm to criteria detailed in IEEE 279-1971. Means are provided to permit applying selected non-ESF loads in the plant to the diesel generator sets within their capabilities. However, this is a manual operation unde r the operator's full control. Under LOCA conditions, application of the non-ESF loads can only be accomplished after the LOCA parameters have been reduced below LOCA sensing instrume ntation setpoints.

8.3.1.1.7.1.8 Protective Trips. The diesel generator protecti on system is designed such that on accident signal (low reactor water level, high drywell pre ssure) only the following diesel generator trips are effective:

a. Engine overspeed,

b. Generator differential relay action,

c. Incomplete sequence, and

d. Emergency stop push button.

During nonemergency operation of the diesel generator se ts (such as testing) the engine is shut down and the generator breaker tri pped under the following conditions:

a. Engine overspeed,

b. Generator differential relay action,

c. Incomplete sequence,

d. Emergency stop push button,

e. Generator loss of excitation,

f. Reverse current,

g. Generator overcurrent, C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-15 h. Generator overvoltage, i. High jacket water temperature, and

j. Low lube oil pressure.

During a synchronizing test, the diesel generator is protected from overcurrent resulting from the non-Class 1E loads connected to the upstream buses, in th e event of a loss of startup transformer power. The overcurrent protection re sults in isolation of the diesel generator

emergency bus from the upstr eam non-Class 1E loads without disconnecting the diesel generator from the emergency bus.

The Divisions 1 and 2 standby diesel generator contro l circuits are shown in Figure 8.3-11 through 8.3-22.

The diesel generator incomplete sequence (f ail to start) relay (K4) indicated in Figures 8.3-15 and 8.3-21 is designed to shut the generating unit dow n and lock it out in the event the normal starting cycle is not completed within a predetermined time. The relay is actuated if speed sensing instrumentation indicates that the unit requires in excess of 10 sec to accelerate to 150 rpm (regardless of the cause), or on failure of the cranking motors to disconnect when the unit is running.

8.3.1.1.7.1.9 Surveillance. Surveillance instrumentation is provided to monitor the status of the standby diesel generating system. Provisions for surveillance are an essential requirement in the design, manufacturing, installation, test ing, operation, and main tenance of the diesel generators. Such surveillance not only provides conti nuous monitoring of the status of the standby diesel generating system, so as to indicate readiness to perform intended functions, but also serves to facilitate te sting and maintenance of the equipment. Periodic surveillance procedures are also implemented to check setpoints of protective relays to ensure a reliable operation. Annunciation is provided both locally (diesel gene rator control panels) and in the main control room.

Table 8.3-5 indicates the annunciation furn ished for the Divisions 1 and 2 diesel generating systems.

When operating in the standby mode, conditi ons rendering the diesel generating units incapable of responding to emerge ncy start signals are intentiona lly limited, as indicated in Section 8.3.1.1.7.1.8. Table 8.3-5 , items 1 through 7 (inclusi ve), indicates all conditions which render the units incapable of responding, incl uding both diesel generating unit and distribution system problems. Local, disabling diesel generator incomplete sequence and

differential current conditions ar e annunciated indirectly (and di stinctly from any nondisabling alarms) via the unit lockout (item 6) and fail to start (item 9) alarms.

Item 21 indicates that the unit has been started automatically on receipt of emergency start signals. The remaining items indicate nondisabling di esel generator problems which do not cause unit trip.

During test mode operation, an expanded set of disa bling conditions are permitted to prevent unit start or initiate unit trip as indicated in Section 8.3.1.1.7.1.8. However, in the event of

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-030 8.3-16 receipt of emergency start signals while the units are in the test mode, those signals not permitted to disable the unit in the standby mode are eliminated from the trip circuitry. In the event of receipt of a LOCA signal when a diesel is parallel to an offsite source, the diesel generator breaker will trip. With the diesel generator disconnected from parallel operation with the offsite power system during test mode operation, the di esel generator can automatically provide acceptable voltage and fr equency for subsequent unit operation within requirements set by Regulatory Guide 1.9, Revision 0 if called upon. The diesel will keep running until shutdown by operator action. The maintenance lockout key lock switch and the emergency stop lockout features ar e verified to prevent the dies el generator from starting only when required no less than once every 30 months.

Main control room annunciation is designed to permit the control room operator to accurately monitor the status of the standby diesel generating system at all times and during all modes of operation. Any condition which renders the diesel generators incap able of operation is annunciated via Table 8.3-5 , Items 1 through 9. The differ ence between the standby mode and all other modes is that the number of unit trippi ng signals permitted to act ually operate (via the unit lockout relay) is li mited in the standby mode.

Diesel generating unit controls reset automatically (time de layed) following nonemergency manual stops initiated at th e local control stations.

8.3.1.1.7.1.10 Instrumentation and Control Systems. Power supply source for the instrumentation and control systems for each diesel generator is independent in accordance with the divisional separation criteria detailed in Sections 8.3.1.4 and 8.3.2.4. Each diesel generator set includes the following instrumentation:

a. Voltmeter,

b. Ammeter,

c. Wattmeter,

d. Varmeter,

e. Field ammeter,

f. Annunciator panel,

g. Synchroscope, synchroni zing switches and lights, h. Frequency meter,

i. Elapsed time meter, j. Generator breaker status lights, and k. Bus-tie breaker status lights.

The diesel generator sets are capable of being started or stopped manually from the main control room or from local cont rol panels, and all Class 1E inst rumentation is capable of being monitored both in the main control room and locally.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-17 8.3.1.1.7.1.11 Light or No Load Operation. Light loading of the diesel generators for extended periods may lead to accumulation of oil in the exhaust system and create a potential for fire which could damage the turbo-char ger and exhaust system. The HPCS diesel generator (3) when started will be loaded, except when offsite power is available as described in Section 8.3.1.1.7.2.7. The diesel generators (units 1 a nd 2) start when offsite power is not available to the Class 1E 4.16-kV switchgear buses or when LOCA signal is received. Partial LOOP does not cause connection of a diesel generator onto its 4.16-kV switchgear bus. Once offsite power to the bus is reestablished via tran sfer to a remaining offsite source, closure of the diesel generator breaker is blocked. In such a case, the units run unloaded. Also, during testing and maintenance/

repairs, periods of unl oaded operation are also expected to occur.

The Divisions 1 and 2 diesel generating units are capable of running for 4 hr in the unloaded or lightly loaded condition at rate d speed. Operating restricti ons are employed to avoid the potential for fire if the diesels are run for more than 4 hr at less than 50% loading at rated speed. After 4 hr of loading at less than 50% the engines are run for a minimum of 30 minutes at greater than 50% loading befo re being shut down. The engine s may be run unloaded at idle speed for extended periods.

8.3.1.1.7.2 High-Pressure Co re Spray (Division 3) Sta ndby Alternating Current Power Supply.

8.3.1.1.7.2.1 General. The single drive HPCS standby dies el generator is used to supply power to the HPCS system in the absen ce of the normal/startup power sources.

Figure 8.1-2 shows the interconnections between the preferred power system, the HPCS diesel generator unit, and the HPCS pump and 225-kVA auxiliary transformer. The HPCS auxiliary loads appear in Figure 8.3-4.

The HPCS system is self-contained except for c onnection to LOCA start signals and for access to the preferred source of offsite power through the plant ac power distribution system. It is operable as an isolated system independent of electri cal connection to any other system through its use of the dedicated HPCS diesel generator. The standb y auxiliary equipment such as heaters, air compressor, and battery charger are supplied from the same power source as the

HPCS motor when the diesel generator is not running.

The HPCS diesel generator has the capability to qui ckly restore onsite power to the HPCS pump motor in the event offsite power is unavailable and to provide all required power for the startup and operation of the HPCS pump motor in a manner compatible with safe shutdown of the plant. The HPCS diesel generator starts automatically on a signal fr om the plant protection system; the unit is both started and connected to the bus automatically upon receipt of a bus undervoltage signal. The failure of this unit does not negate the capability of other power sources.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-18 The HPCS diesel generator may also be cross connected to eith er Division 1 or to Division 2. These cross connects are only allowed under the following two scenarios:

(1) Extended Station Blackout (ESBO): A station blac kout that may extend beyond the analyzed 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> coping time in which adequate core coo ling can be assured without continuous HPCS system operation.

(2) Non-Design Basis Accident (DBA) L OOP: A LOOP in wh ich adequate core cooling can be assured without continuous HPCS system operation.

Under these conditions, the HPCS di esel generator may be used to energize selected Division 1 or Division 2 equipment by back-feeding from th e HPCS bus to the Division 1 or Division 2 buses. The HPCS diesel gene rator does not have sufficient capacity to assume all the Division 1 or 2 ESBO or non-DBA LOOP loads.

However, the HPCS diesel generator can energize selected loads during an ESBO or non-DBA LOOP. The cross connect breakers are not installed in their associated switchgear cubicle. They are located near their switchgear on the 471-foot elevation of the TG Building.

If a Division 1 or Divisi on 2 emergency diesel generator is being taken out of service for routine maintenance with the plant at power, the cross connect breakers will be installed in their cubicle; how ever, they will re main racked out and locked in the open position.

8.3.1.1.7.2.2 Unit Rating and Capability. The diesel generator se t for Division 3 (HPCS) has a continuous service rating of 2 600 kW. Diesel generator set short-term ratings are 2850 kW for 2000 hr and 3026 kW for 30 mi nutes. The generator is rated 3560 kVA at 0.8 pf, which is sufficient to carry the 2850 kW short-term rating at 0.8 p

f. At higher kW outputs, the diesel generator set would have to ope rate at a higher power factor.

The generator is rated to have sufficient capacity to start and supply the HPCS induction motor for the HPCS pump and (via stepdown auxiliary transformer) 460-V induction motors which

drive the engine cooling water pump, valv e operator motors, and miscellaneous HPCS auxiliaries. The valve motors operate for s hort times and do not impose a significant load on the generator. The HPCS pump motor has a nameplate rating of 3000 hp at 4000-V.

Table 8.3-3 lists the principal loads on Division 3 (HPCS). The diesel generator unit has the capacity to start and supply the loads requi red by the HPCS system within the time requirements described in Chapter 6. Table 8.3-3 lists the sequence of starting loads for the HPCS system.

The size of the diesel generator serving Divi sion 3 (HPCS) satisfies the requirements of Regulatory Guide 1.9, Revision 0, except for voltage and fre quency limitations, and conforms to the following criteria:

a. The (2000 hr/year) nameplate rating of the unit exceeds the maximum required load indicated in Table 8.3-3 under rated conditions.

Engine brake horsepower

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-19 required to supply calculated steady state load is with in the diesel engine's 2000-hr/year rated capability with an air inlet temperature of 115°F;

b. The unit is capable of starting, accelerating, and running its largest motor at any time;

c. The unit is capable of reaching full speed and voltage within 15 sec after receiving a signal to start, and can be fu lly loaded within 30 sec following the start signal; and

d. The unit demonstrates a torque margin in excess of the starting period requirements.

See Section 8.3.1.2.1.4 for a discussion of the nonconformance to Regulatory Guide 1.9, Revision 0, voltage a nd frequency limitations.

The HPCS power system electrical apparatus is sized on the basis of the most severe conditions it will be subject to in either a continuous or intermittent basis in a ny mode of operation. Intermittent loads are fact ored in on the basis of heating (e.g., short time p eaks are not added directly to determine total continuous load imposed). Adverse environm ental conditions have been taken into consideration (e.g., derating of cable for temperatures higher than the basic rated values and use of multiplie rs on actual service hours for moto rs operated at higher than normal rated temperatures).

8.3.1.1.7.2.3 C ooling Water System. The HPCS diesel engine is provided with a closed cooling system containing immers ion heaters to maintain the e ngine coolant temperature, an expansion tank, a temperature regul ating valve, and a l ube oil cooler. The immersion heater is thermostatically controlled and, in conjunction with the temper ature regulating valve, will maintain the jacket water at a steady temperatur

e. During engine shutdown condition, jacket water heated by the immersi on heater will circulate thr ough the lube oil cooler by thermosyphon action to warm the lubricating oil circulated by an ac motor-driven pump. This "keep warm" feature will provide the engine wi th the capability of quick start and load acceptance after a shut down.

The engine low temperature condition will be annunciated in the main control room. See Section 9.5.5 for additional details of the cooling water system.

8.3.1.1.7.2.4 Lubrication System. The lubricating oil system schematic is shown in Figure 9.5-6. The lube oil system is provided with a suction-strainer fu ll-flow filter with bypass relief valves, a lube oil cool er/heater, and a lube oil sump pan of sufficient capacity to hold usable lube oil for 7 days operating wit hout adding makeup lube oil. High crankcase pressure is annunc iated for operator ac tion. See Section 9.5.7 for additional details of the lubrication system.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-09-020 8.3-20 8.3.1.1.7.2.5 Air Starting System. The air starting system is shown in Figure 9.5-1. To ensure positive starting, both solenoids are energized simultan eously and both banks of dual starting motors crank the engine.

The air supply system contains two receivers. One of the air compressors is electric-motor driven and the other is diesel-engine driven. The motor-driven air compressor is powered from MCC MC-6B. Running either air compressor will charge both receivers.

The volume of the receiver allows sufficient tim e for moisture and oil to precipitate in the bottom of the tank. The connection to the engi ne start system is lo cated far enough above the bottom so that the moisture in the bottom will not get carried in the air being supplied to the air start motors. Blowdown valves are provided in the bottom of the air receivers to drain any moisture that might have collected in the bottom. The blowdown valves are opened

periodically on a maintenan ce schedule to blow mois ture out of the tank.

Wye strainers are provided in the air start system piping to filter any particulate carryover. Inspection and cleaning of the system components were made after the initial trail runs during installation. After the initial trial runs, all loose particles were either collected or blown out. As an extra precaution against moisture ca rryover, a dryer was added between the air compressors and air receivers.

See Section 9.5.6 for additional details of the air starting system.

8.3.1.1.7.2.6 Fuel Oil System. The fuel oil system consists of two fuel oil systems external to the engine fuel manifolds, either of which is capable of supplying fuel oil to the engine. One of the fuel oil pumps is mechanically driven by the engine, and the other by a 120-V dc motor.

The systems contain the following components from the day tank:

fuel supply lines, strainers, fuel oil pumps, duplex filters, reli ef and check valves. The two systems join together at the manifold for the duplex filter of the engine driven fuel oil pum p and share that duplex filter, a pressure gage, fuel lines and manifolds to the in jectors, injectors, and a return line to the day tank.

See Section 9.5.4 for additional details of the fuel oil system.

8.3.1.1.7.2.7 Automatic Starting and Loading System. In the event of lo ss of offsite sources of power to the onsite power system, the HPCS diesel generator se t is automatically started and loaded by controls and circuitr y which are independent of thos e used to start and load the Divisions 1 and 2 units. Contro l power for the diesel generato r unit is supplied from its own 125-V dc system which consis ts of a battery with its own battery charger (see Section 8.3.2.1.2).

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-21 The diesel generator starting logi c and starting signals (shown in Figures 8.3-23 and 8.3-24) are described as follows:

a. The diesel generator st arts immediately upon receipt of LOCA signals (reactor low water level and/or high drywell pressure);

b. Upon sustained loss of bus SM-4 voltage the bus is automatic ally isolated from the upstream non-Class 1E system, a nd the diesel generator started;

c. After the diesel generator has attained approximately nor mal frequency, its breaker automatically closes (if un it start was initiated by bus SM-4 undervoltage), picking up loads as indicated in Table 8.3-3. LOCA signals do not initiate automatic breaker closure;

d. Diesel generator capacity (2850 kW) is such that the unit is capable of supplying the entire Division 3 load per the load schedule shown in Table 8.3-3 on a 2000-hr/year basis. There is no load shedding in Division 3;

e. If offsite power is still present and the unit is started by a LOCA signal, the diesel generator breaker will not close.

However, the unit will continue to run at rated frequency and voltage until manually shut down; and

f. Means are provided for periodic exercising of the diesel generator under load. To accomplish this, supply of 4.16-kV Class 1E bus SM-4 is transferred to the

startup source. Under this condition, the diesel generator is synchronized to the 230-kV startup source and loaded via manual adjustment of the unit speed controls. Administrative procedures are used to prevent paralleling of the diesel generator with the normal auxiliary transformer so that the short circuit capability of the switchgear is not exceeded.

Means are also provided to periodically test the entire chain of HPCS system elements from sensing devices throug h driven equipment to ensure th at equipment is functioning in accordance with design requirements. The draw out feature of protective relays allows a replacement relay to be installed while the relay that was removed can be bench tested and calibrated. Startup of the diesel generator can be effected by simulation of signals for LOCA or bus SM-4 undervoltage.

8.3.1.1.7.2.8 Protective Trips. The HPCS diesel generator protection system is designed such that on accident signal (low reactor wate r level, high drywell pr essure) only the following diesel generator trips are effective:

a. Engine overspeed,

b. Generator differential relay action, C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-22 c. Incomplete sequence, and d. Emergency stop push button.

The trips are annuciated in the main control room. Other norma l protective relays and devices such as loss of excitation, an timotoring (reverse power), overcu rrent (with voltage restraint), high jacket water temperature, high crankcase pressure, and low lube oil pressures are used to protect the machine when it is operating during periodic tests. These relays are automatically blocked from the tripping circ uits under accident conditions.

In addition to these protective relays, a normal ti me delay overcurrent re lay senses a generator overload and causes an alarm in the main control room. The ge nerator different ial relays and overspeed trip device are retained under emergenc y conditions to protect against what could be major faults which would cause immediate system failure and major damage. All the necessary bypassed trip devices alarm in the control room an d provide the operator with sufficient information to take the necessary corrective action.

Since the diesel generator is performing a safety-related core cooling function during accident conditions, these trip devices cannot be permitted to interrupt th e diesel generator's operation.

The capability of the diesel to operate under these a bnormal conditions is le ft to the operator.

During a synchronizing test, the diesel generator is protected from overcurrent resulting from non-Class 1E loads connected to the upstream buses, in the event of a loss of startup transformer power. The overcurrent protection results in the tripping of the offsite source breaker without tripping the generator breaker.

8.3.1.1.7.2.9 Surveillance. Surveillance instrumentation is provided to monitor the status of the standby diesel generating system. Provisions for surveillance are an essential requirement in the design, manufacture, installa tion, testing, and maintenance of the diesel generator. Such surveillance not only pr ovides continuous monitoring of the status of the standby diesel generating system, so as to indicate readiness to perform intended functions, but also serves to facilitate testing and main tenance of the equipment. Protectiv e surveillance pro cedures are also implemented to check setpoints of protective relays to ensure a reliable operation. Annunciation is provided both loca lly (diesel generator panel) a nd in the main control room.

An alarm "HPCS not ready for auto start," which operates during one of the following conditions, is provided in the control room.

a. Voltage regulator not in auto position, b. Engine generato r lockout operated, c. Engine in maintenance position,

d. Diesel generator breaker racked out, and

e. HPCS pump motor breaker racked out.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-23 In addition, the following alarms in the control room pertaining to the diesel generator aid the operator in determining th e status of the unit.

a. Diesel engine in main tenance or test position, b. Generator trip lockout,

c. 125-V dc power failure,

d. Diesel engine overspeed,

e. Diesel engine running, and

f. Diesel generator local panel alarm.

The diesel generator local pane l alarm indicated above is actu ated by any one of the following alarms (which are annunciated locally in the diesel generator panel).

a. Low lube oil pressure, b. High lube oil temperature,

c. Low air pressure,

d. Overspeed trip,

e. Low jacket water temperature,

f. High jacket water temperature,

g. Low water pressure,

h. Unit lockout,

i. Blown fuse,

j. Lube oil relief valve ope n (lube oil system fault), k. Fuel system fault,

l. Fail to start,

m. Fail to run,

n. Not ready for auto start,

o. Engine running,

p. Charger input power failure,

q. Generator RTD high temperature,

r. Low lube oil temperature,

s. Low circulating lube oil pressure,

t. High crankcase pressure,

u. Low water level, and v. Low lube oil sump level.

When the engine selector switch is in the "local manual" positi on, the air compressor switch is in the "not in auto" position, or the voltage regulator switch is in the "off" position, the engine will not be prevented from starting automatically.

A manual stop signal does not prevent the engi ne from starting in the automatic mode; however, the emergency manual stop signal prevents the engine from starting unless reset. In

this case, it is annunciated in the control room as "HPCS not ready for automatic start."

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-24 8.3.1.1.7.2.10 Instrumentation and Control System. The power supply source for Division 3 controls and instrumentation is independent of the power sources for controls and instrumentation of other divisi ons, in accordance with the separation criteria described in Sections 8.3.1.4 and 8.3.2.4.

The diesel generator set include s the following instrumentation:

a. Voltmeter, b. Ammeter, c. Wattmeter,

d. Watthour meter,

e. Varmeter,

f. Field voltmeter,

g. Field ammeter,

h. Synchroscope, synchroni zing switches and lights, i. Frequency meter, and

j. Generator breaker status lights.

See Figure 8.1-2 for protection and surveillance devices for the HPCS power system. Some control and monitoring instrume nts are located on the diesel ge nerator skid and have been qualified for engine vibration.

Additional information is provided in Section 7.3.1.1.1.1.

8.3.1.1.7.2.11 Light Load Operation. Light load operating capability of the HPCS (Division 3) diesel generating unit, and administratively controlled operating procedures for this operating mode, are identical to those described for the Divi sions 1 and 2 di esel generating units. See Section 8.3.1.1.7.1.11.

8.3.1.1.8 Electrical Equipment Tests

Components of the onsite ac power system are factory tested in accordance with industry and manufacturer's standards. For Seismic Category I components, the manufacturer submits dynamic tests, analysis, or combination of both which substantia te the ability of the equipment to function under safe shutdown eart hquake (SSE) loads (see Section 3.10). Tests and inspection of the onsite ac power system are discussed further in Section 8.3.1.2.2.

The standby diesel generators for Divisions 1 and 2 are of a type not previously used nor qualified for standby power se rvice at a nuclear plan

t. Therefore, the di esel generators were shop tested to demonstrate starting reliability. The starting test requirements included the following:

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-25 a. Shop tests which confirmed a starting reliability of 0.99 with a confidence level of 0.95. One of the diesel generators was st arted 300 times with a failure rate not in excess of one per 100 starts;

b. Bringing the set to full speed and voltage automatically within 15 sec;

c. Loading of the generator to at least 95% of continuous rating in four steps at 5 sec intervals immediately after each succ essful start and maintaining this load until thermal equilibrium is attained;

d. 90% "cold" starts a nd 10% "hot" starts; and

e. Monitoring of operating conditions throughout th e duration of test with significant parameters such as volta ge frequency, opera ting temperature, acceleration times, and other per tinent functions being recorded.

Failures considered were limited to those caused by malfunctions of the diesel generator set only. Failures caused by malfuncti ons in the test equipment, exte rnal circuitry, or loads were not considered attributable to the reliability of the diesel generator set.

Provisions were made in the testing procedure to de termine the cause of any malfunction or excess wear and to classify it as a valid failure of the equipment being tested or an external nonvalid failure. Such determination of cause and clas sification of failure or exces s wear was fully supported by documentation. At the completion of the tests, a thorough inspecti on was performed on the diesel generator unit.

A prototype test was made for the standby diesel generator sele cted for Division 3 (HPCS) to establish the adequacy of the diesel generator unit to success fully accelerate the bulk HPCS pump loads. The test consisted of starting the actual HPCS pump motor depic ting as closely as possible the actual HPCS pum p loop (HPCS system in condens ate to condensate test mode) and auxiliary loads. A topical report on HPCS power system unit (NEDO-10905-3) describes and shows theoretical and expe rimental evidence as to th e adequacy of the design.

8.3.1.1.9 Equipment Criteria

8.3.1.1.9.1 Motor Size. The criterion for Class 1E motor size is that the safety-related motor develop sufficient horsepower to drive the mechanical load under runout or maximum expected flow and pressure, whichever is greater. Class 1E motors are sized in accordance with NEMA standards and manufacturers ratings to be at least large enough to produce the starting, pull-up, and breakdown torque calculated to be needed for the particular application, and to permit the driven equipment to develop its specified ca pacity without exceeding the temperature rise rating of the motor when operated at the duty cycle of the driven equipment.

Motors are initially tested in accordance with NEMA-MG-1.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-26 The motor and the associated driv en equipment are preoperationally tested to verify that the system requirements are met.

8.3.1.1.9.2 Motor Thermal Overloads. Motor thermal overloa ds for miscellaneous Class 1E motors having a 1.0 or 1.15 service factor are selected from manufacturer's table for 1.15 service factor motors. Overloads so sel ected give 125% of mo tor full load current protection.

Motor thermal overloads for Class 1E MOVs are selected two sizes larg er than the normally selected thermal overload (this approximates 140% of motor FLA).

Selection of overloads in this range permits Class 1E M OVs to operate for extended periods of time at moderate overloads; tripping occurs just prior to motor damage. Class 1E MCCs are located in environmentally controlled rooms such that ove rload ambient temperature variation is not a significant factor. Periodic surveillance procedures are provided to check setpoint drift of the thermal overload devices.

8.3.1.1.9.3 Minimum Voltage. In general, Class 1E motors are designed to start and run at full load with a minimum 80% of rated voltage at the motor terminals. Deviation from the 80% voltage requirement is permitted provided an analysis is performed and documented to demonstrate that the motor can perform its safe ty function with the mi nimum voltage supplied.

The HPCS pump motor is designed to accelerate its load with onl y 75% voltage applied to the motor terminals.

8.3.1.1.9.4 Motor Starting Torque. Class 1E motors are desi gned for full voltage starting and to be capable of accelerating the driven equipment to its required speed without exceeding the thermal capability of the motor under all expected conditions of ambient temperature, voltage, and frequency.

8.3.1.1.9.5 Minimum Torque. The minimum motor torque th rough the accelerating period, for Class 1E motors, is ba sed on the following criteria:

a. The brake horsepower does not exceed the guaranteed motor rating over the entire range of the driven equipment, and

b. The driven equipment is capable of attaining required speed under normal voltage conditions within 5 sec and unde r degraded voltage conditions within

8 sec.

In general, motors are sized such that no portion of a motor's se rvice factor above 1.0 is used in continuous operation of the motor. Specified minimum values of motor torque over equipment torque are, therefore, not required.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-27 For the HPCS pump motor, the minimum differe nce between the motor torque and the pump torque at any given speed during acceler ation is 10% of mo tor rated torque.

8.3.1.1.9.6 Motor Insulation. The criteria for determining insulation for Class 1E motors are as follows:

a. The insulation for continuous rated motors has a 40-year life expectancy for the duty cycle and the ambient conditions of te mperature and radiation at which they are required to operate.

Intermittent duty motors ar e similarly rated for the number of duty cycles expected over the 40-year life of the plant; and

b. For Class 1E motors, which are required to operate during or subsequent to accidents, insulation is provided to withstand the expected environmental

conditions of ambient pressure, temperature, and radiation dosage.

All motors are provided with either class B, F, or H insulation. The insulation temperature ratings are greater than the sum of the motor temperature rise, the ambient temperature at the motor location, and the hot spot temperature allowance.

8.3.1.1.9.7 Temperature Monitoring Devices. Motors 300 hp in size and larger are provided with one or more coppe r-constantan thermocoup les in each bearing.

The HPCS, low-pressure core spray (LPCS), residual heat removal (RHR), and standby service water pump motors are provided w ith six single element copper-constantan thermocouples imbedded in stator windings, two per phase, where the highest operating temperatures are expected.

The output from the thermocouples is wired to the station computer for scanning and alarm in the main control room.

8.3.1.1.9.8 Interrupting Capacity. Class 1E switchgear, load centers, control centers, and distribution panels are sized for interrupting capacity based on maximum short circuit availability at their location. Switchgear is applied within its inte rrupting close and latch ratings in accordance with ANSI C37.010-1972, Application Guide fo r Alternating Current High Voltage Circuit Breakers.

The calculations to document this application take into account the fault contributions of all rotating machines and source transformers and make proper allowance for system X/R ratio at the point of fault. Transformer impedance is selected to limit short circuit currents at 4.16-kV switchgear. Low voltage metal enclosed breakers at load centers and molded-case breakers at MCCs are adequately sized for the maximum ava ilable short circuit currents.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-28 8.3.1.1.9.9 Electric Circuit Protection. Equipment and settings are provided to carry out relaying as listed below.

The basic coordination for the 4.16-kV and 480-V systems for Class 1E buses is as follows:

a. A faulted piece of equipment is cleared by isolating the smallest possible portion of the system;

b. A faulted piece of equipment is cleared as quickly as possible to minimize damage to that equipment and the effects on the remainder of the system; and

c. In the event that the primary protective device fails to clear the fault, a backup device operates to clear it after a suitable coordination interval. Operation of a backup device usually results in deenergizing a larger portion of this system than the operation of a primary device.

The one line diagrams, Figure 8.1-2 shows the relay protection schemes.

The incoming supply feed ers are included in th e differential zone of the normal auxiliary, startup, and backup transformers; hence the primary protection fo r these feeders consists of harmonically restrained differe ntial relays. The overcurrent relays on the incoming supply breaker are coordinated with the ma ximum feeder setting on the bus.

The 6.9-kV and 4.16-kV systems are high resistance grounded to minimize damages by limiting ground fault currents to 12.5 amps (maximum). An overcurrent re lay is connected to a current transformer in the neutral of the re sistance grounded, wye-c onnected secondary of the supply transformer for ground indication, and each feeder is equipped with a ground sensor.

The 480-V system is also high resistance grounded to limit groun d fault currents to 10 amps (maximum). Ground faults are detected at all diesel generator neutrals, transformer secondary neutrals, or 480-V switchgear feeders.

Circuit protection of the NSSS ve ndor supplied HPCS bus is coordinated with the design of the overall protection system for the plant auxiliary system. Simplicity in load grouping is employed to achieve simplicity in conventional protective rela ying practice for isolation of fault. There is no load sheddi ng or sequencing in the HPCS pow er system. Emphasis is given in preserving function and limiting loss of Class 1E equipment function in situations of power loss and equipment failure. Normal overloa d relays for HPCS pump motor and diesel generator give alarm indication only. Faults are isolated by instantaneous relaying.

8.3.1.1.9.10 4.16-kV Motor Feeder. Each Class 1E 4.16-kV motor feeder is protected by two relays, each having a long time overcurrent unit, a high dropout instantaneous unit, and an indicating instantaneous trip unit.

The relays are set to provid e: (1) an overload alarm at

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-09-006 8.3-29 114% to 160% of the motor nameplate full load current, (2) a breaker trip on locked rotor current within the safe stall time of the motor, and (3) an instan taneous trip of the breaker for short circuit currents above the motor locked rotor current including adjustments for DC offset and voltage variation. The motor relays are coordinated with the three sets of incoming bus breaker time overcurrent relays.

Ground fault indica tion is provided by a ground sensor relay activated by a doughnut current tr ansformer. The 4.16-kV HPCS pump motor feeder is also tripped on motor feed er over frequency.

8.3.1.1.9.11 Transformer Feeders. Each 480-V load center unit substation or MCC transformer feeder on the 4.16-kV buses has two time overcurrent relays with instantaneous overcurrent elements or high sp eed transformer differential prot ection for fault protection.

These relays are coordinated with the maximum protective device settings on the 480-V Class 1E equipment buses fed by the transf ormers. Ground fault indication is provided by the ground sensor system.

8.3.1.1.9.12 Diesel Generator. The primary protection for the diesel generator connected to each 4.16-kV Class 1E bus consists of differential relaying and ove rspeed trip (see Sections 8.3.1.1.7.1.8 and 8.3.1.1.7.2.8

).

8.3.1.1.9.13 480-Volt Motor F eeder Fed From Switchgear Bus. The overcurrent fault protection on each 480-V motor feeder is a low-voltage power circuit breaker, containing a solid state trip device with adjustable long time delay and instantaneous trips. Ground sensors provide ground fault detection.

8.3.1.1.9.14 Motor Control Center Feeder Fed From 480-Volt Switchgear Bus. The overcurrent fault protection for each 480-V MCC feeder (except HPCS MCC MC-4A) is a low voltage power circuit breaker with a solid state trip device having both adjustable long time and adjustable short time trips. The long time device is coordinated with the maximum overload device setting in the MCC. The short time device is coordina ted with the maximum instantaneous device setting in the MCC. Motor control cente r MC-4A is protected by the 4.16-kV feeder circuit breaker. Ground sensors provide ground fault detection.

8.3.1.1.9.15 Feeders From 480-Volt Motor Control Centers. Motors fed from the 480-V MCCs are generally 100 hp or less. Ci rcuit protection, which includes molded-case circuit breakers or dual element time delay fuses, is provided fo r high interrupting capacity and short circuit protection. Motor running overcurrent protection is provided by ove rload relays in each motor starter. Non motor MCC loads are generally prov ided short circuit and overload protection by dual element time delay fuses.

Subfeeders to other M CCs are provided short circuit and overload protection by molded-case circuit breakers or dual element time delay fuses.

8.3.1.1.9.16 Electrical Pe netration Assemblies in Containment Structures. CGS design is in compliance with Regulatory Guide 1.63, Revision 0. All circuits which enter pe netrations and C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-30 are subject to I 2 T heating due to fault currents are provided with two protective devices (primary and backup). In the event the primary protective devices fail to clear faults, the backup protective devices ar e designed to limit the I 2 T levels experienced by the penetration conductors to values below the conductor I 2T ratings.

Electrical Calculation E/I-02 04 presents an analys is of overcur rent protection of primary containment electrical penetrations.

8.3.1.1.9.17 Raceway Systems. The cable tray system utilizes open ladder type trays, with the exception of RPS and instrumentation tr ays which are totally enclosed type (see Figures 8.3-25 through 8.3-30 and Figures 8.3-33 through 8.3-38). Cable trays are constructed of galvanized steel, except for aluminum cable trays installed in and adjacent to the building for the non-Class 1E reactor recirculation pump ASD.

All conduit, except for conduits for lighting, communication, security , and fire detection systems which may utilize EMT thinwall, are full weight rigid galvanized steel. Sleeves also utilize full weight conduit.

Conduit and sleeve fill is generally in accordance with National Electric Code criteria.

Flexible metallic conduit is utili zed for final connections to vi brating or rotating equipment, cabling within the area below the reactor pressure vessel, cabli ng within the power generation control room complex (PGCC) periphery, cab ling for fail safe, fire protection, and control/utility power circuits w ithin the PGCC, short extensions of rigid conduit which require numerous direction changes, short connections be tween cable tray and pa nels or devices, and between different structures or buildings which experience differential movement.

8.3.1.1.9.18 Grounding Requirements. The design criteria for grounding are

a. Equipment hardware, exposed surfaces, and potential induced voltage hazards are adequately grounded to ensure that no danger exists fo r plant personnel;

b. A high resistance ground return path is provided to facilitate the operation of ground fault detection devices in the even t of ground fault or insulation failure on any electrical load or current. Groun d fault currents are thereby limited to 12.5 amps (maximum) in the 6.9-kV and 4.16-kV systems, and to 10 amps (maximum) in the 480-V system. The 120/

208-V system is solidly grounded; and

c. A separate and independent grounding system for in struments and instrument wire shield is provided.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-31 The design basis for grounding requirements is

a. All major electrical equipment is connected directly to the grounding grid by cable ties. A fault current return path is provided for 6.9-kV and 4.16-kV switchgear, 480-V switchgear, MCCs , and other equipment. This fault return path consists of bare #4/0 copper cables in stalled on all power cable trays, in duct banks and in loops along th e building walls. Moto rs and electrical equipment operating at 150 V (to ground) and above, or carrying currents of 60 amps or more, have direct cable or strap connections to the ground grid. Alternately, the #4/0 AWG grounding cable alongside the trays may be tapped for grounding motors, panels and other equipment, if the distance is not greater than from the grounding loop indicated on contract drawings, and the equipment does not require larger cable than #4/0.

Motors and electrical equipment operating at less than 150 V (to ground) or carrying currents less than 60 amps are grounded via the connecting conduit system and the ground cable in trays;

b. The cable trays ar e solidly grounded to the station grounding grid or building steel work. Electrical connections betw een individual tray s ections are made by mechanical connector plates. In addition, a bare ground cable is attached to trays supporting power cables and to flex ible conduits extern al to the PGCC.

All flexible conduits contai ning fail-safe circuits whic h are routed in the PGCC modular floor are grounded;

c. The station ground grid is routed into primary containment via two penetrations suitable for the purpose; and

d. The station grounding grid is designe d to maintain the station area at an effective ground potential during a worst-case ground fault of any installed electrical equipment, including transmi ssion facilities and unit main generator, as well as lightning effect

s. An effective ground is considered to be the maintenance of voltage potentials below "safe touch-a nd-step potential" levels for plant personnel.

8.3.1.1.10 Class 1E Electri cal Equipment Arrangement The Class 1E electrical equipment arrangement for major components of the three separate power divisions is shown in Figures 1.2-14 and 1.2-22.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-32 8.3.1.2 Analysis 8.3.1.2.1 Compliance to Criteria

8.3.1.2.1.1 General. Compliance with General Design Cr iterion (GDC) 17 is ensured for the onsite power systems by having sufficient inde pendence, redundancy, and testability to perform the required safety func tions assuming a single failure.

Independence is discussed in Section 8.3.1.4 and testability is covered in Section 8.3.1.2.2. Redundancy in the onsite auxiliary ac power system is provided via the fo rmation of redundant safety-related (Class 1E) electrical load groups (Divis ions 1 and 2) in conformance with GDC 17, IEEE308-1974, and Regulatory Guide 1.6, Revision

0. This redundancy extends from the onsite standby power sources through 4.16-kV buses, st ation service transformers, 480-V buses, MCCs, distribution cables, switchgear, a nd protective devices.

The Division 3 power system is a separate and independent safety-related (Class 1E) power system serving the HPCS system. The Division 3 power system may be connected to either Division 1 or Division 2 in conformance with GDC 17, IEEE 308-1974, and Regulatory Guide 1.6, Revision 0 as described in Section 8.3.1.1.7.2.1.

The DG3 cross connect is in compliance with GDC 17 in that no single failure can inhibit the design independence, re dundancy, and testing features.

This is ensured by the multiple breakers that separate the divi sions within the non-safety related switchgear. The DG3 cross connect decreases the probability of losing power to plant power systems due to the defense in depth features that it provides.

The DG3 cross connect is in compliance with IEEE 308-1974 since the cross connect is performed manually and the breaker positions are admi nistratively controlled.

The DG3 cross connect is in compliance with Regulatory Guide 1.

6, Revision 0 as explained in Section 8.3.1.2.1.4.

No essential electrical component of one Class 1E electrical division is dependent for its emergency power supply on electrical equipment or devices which are common to the power supply of another division. Th e onsite auxiliary ac power syst em standby sources consist of three diesel generator sets. Each of the diesel generators feeds one of the Class 1E divisions.

The onsite auxiliary power system redundancy is base d on the capability of either of the two redundant (Divisions 1 and 2) onsite power sources and their associated load groups, in conjunction with the Division 3 onsite power source and associated load group, to bring the reactor to a safe cold shutdown condition and/

or to mitigate the consequences of a DBA.

The electrical separation and inde pendence of redundant (Divisions 1 and 2) portions of the safety-related auxiliary power systems conform to IEEE 308-1974, GDC 17 and Regulatory Guide 1.6, Revision 0, except that these diesel generators have tande m diesel engines.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-33 Reliability equivalent to a single diesel engine generator set is achieved, as show n by prototype testing (see Section 8.3.1.1.8). The 4.16-kV Class 1E buses (SM-7, 8, and 4 respectively) for Divisions 1, 2, and 3 are normally supplied from se parate 4.16-kV non-Clas s 1E buses (SM-1, 3, and 2 respectively) as indicated in Figure 8.1-2. Class 1E circuit breakers whic h automatically open on a LOOP are provided on the 4.16-kV tie lines betwee n the Class 1E and non-Class 1E buses.

As protection against failures of the redundant standby ac power sources due to a single event, there are no electrical interconnections between the circuits needed to star t, load, and maintain operation of each standby diesel generator.

All principal power circuits have both overl oad and short circuit protection provided by protective relays circui t breakers or by fuses.

Physical separation is provided between the independent elec trical divisions as described in Section 8.3.1.4.

Design of the onsite power systems is not in st rict accordance with Regulatory Guide 1.75, Revision 0, since the CGS Construction Permit issue date precedes the regulatory guide issue date. However, CGS design does provide independence between equipment and circuits of redundant Class 1E electrical di visions and between Class 1E and non-Class 1E equipment and circuits where practicable in satisfaction of 10 CFR 50 requirements.

Non-Class 1E loads required to operate during a LOOP are connected to the Class 1E power supplies. These connections do not degrade the Class 1E power supplies, based on the following:

a. Connection of non-Class 1E loads to Cl ass 1E power supplie s is via Class 1E isolation devices. These de vices are either a circuit breaker shunt tripped on LOCA or one or two overcurrent devices in series such as fuses or circuit breakers. The overcurrent devices trip on overload currents (except for 4-kV motor circuits), line-to-line and three-phase fa ults and line-to-ground faults for solidly grounded systems. All overcurrent devices trip on overloads with the exception of those us ed in 4-kV motor circuits;

b. Wiring to the non-Class 1E loads fr om the Class 1E power supplies are designated as prime circuits and are routed in accordance with the separation criteria of Section 8.3.1.4; c. Periodic surveillance of isolation de vices ensure mainte nance of the trip setpoints within the limits for proper c oordination with the main supply circuit protective devices; and C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-34 d. The Class 1E power supplies are adequately sized to handle a ll the Class 1E and non-Class 1E loads.

See Sections 8.3.1.3 and 8.3.2.3 for specific details of equipmen t and circuit identification for plant ac and dc systems respectively.

See Sections 8.3.1.4 and 8.3.2.4 for specific details of equipm ent and circuit separation for plant ac and dc systems respectively.

8.3.1.2.1.2 Reactor Protection System Power System. The RPS power system is not an ESF, component, or system. Th e system itself fails in a fail-safe mode. That is, it deenergizes and thus causes a shutdown action.

In addition, redundant electrical protection devices are utilized for isolation as indicated in Section 8.3.1.1.6. However, design considerations are taken to ensure power supply availability commensurate with the needs of the equipment serviced by it.

Redundancy of equipment ensures a high degree of availability.

8.3.1.2.1.3 Redundant (Division 1 and Division 2) Sta ndby Alternating Current Power Supplies. On loss of normal and offsite sources of power to the 4.16-kV switchgear buses, the 4.16-kV Class 1E portion of the auxiliary ac power system is automatically isolated. All 4.0-kV motor and selected 460-V motor loads are automatically shed from their respective buses to allow for the seque ntial loading of the standby diesel generators (see Section 8.3.1.1.1).

The diesel generators start automatically and are automatically connect ed to the Class 1E 4.16-kV buses. Electrical loads necessary fo r an emergency reactor shutdown or shutdown in the event of a LOCA are automatically and sequentially reconnected to these safety-related buses. The automatic diesel starting and loading sequence is designed to provide power to ESF components required in the event of a DBA within the time period specified for their

operation in Chapter 15.

The two diesel generators suppl ying power to Divisions 1 and 2 ESF components are sized and designed in accordance with Regulat ory Guide 1.9, Revision 0. Their ratings are based on the 2000 hr/year load rating greater than the sum of the loads requiring power at any one time.

The sequencing of large loads at 5 sec (or more) intervals ensures that di esel generator voltage and frequency limits (80%

and 95%, respectively) are main tained. Also, engine overspeed settings and other design parameters remain in accordance with Regulatory Guide 1.9, Revision 0, as discussed in Section 8.3.1.1.7.1.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-35 The Divisions 1 and 2 portions of the onsite ac power syst em also satisfy Regulatory Guide 1.32, Revision 2, not only in their adherence to IEEE 308-1974, but also as follows:

a. Offsite power is available from either offsite source within a few seconds if the plant main generator source is lost, b. Electrical and physical independence of standby power sources is in accordance with Regulatory Guide 1.6 as described in Section 8.3.1.1.7.1 , and c. The selection of the diesel generator capacities has been made in accordance with Regulatory Guide 1.9 as further described in Section 8.3.1.1.7.1. 8.3.1.2.1.4 High-Pressure Co re Spray (Division 3) Standb y Alternating Current Power Supply.

Compliance With GDC 17

The HPCS ac power supply is Class 1E and is designed with su fficient capacity and independence to ensure that core cooling, containment integrity, and other vital functions are maintained in the event of a pos tulated accident. The design of the onsite and offsite electrical power systems provides compatible independence and redundancy to ensure high availability of power supply to the ECCS, ev en assuming a single failure.

Electrical power from the transmission networ k to the HPCS bus SM-4 is provided via the 230-kV startup auxiliary transformer. A loss of normal voltage at 4.16-kV bus SM-4 results in automatic starting of the HPCS diesel generator, tripping of the normal supply breaker and closing of the generator break er as described in Section 8.3.1.1.7.2.7.

Compliance With GDC 18

The auxiliary electrical system is designed to permit inspecti on and testing of all important areas and features, especially those that have a safety func tion and whose operation is not normally required. As described in the Technical Specifications , periodic component tests will be supplemented by extensive f unctional tests during the refue ling outage, the latter based on simulation of actual accident conditions. Thes e tests demonstrate the operability of diesel generator, battery system compone nts, and logic systems and ther eby verify the continuity of the systems and the opera tion of the components.

Because the diesel genera tor is a standby unit, readiness is of prime importance. Readiness is demonstrated by periodic testing. The testing program is designe d to test the ability to start the HPCS loads as well as to run under load long enough to brin g all components of the system into equilibrium conditions. Th is ensures that cooling and lubrication are adequate for

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-36 extended periods of opera tion. Full functional tests of the automatic control circuitry will be conducted on a periodic basis to demonstrate correct operation.

Conformance With Regulatory Guide 1.6, Revision 0

The HPCS diesel generator unit supplies power fo r the HPCS pump and its auxiliaries; failure of any single component of the HPCS diesel generator does not prevent the startup and operation of any other standby power supply and thus meet s the requirements of Regulatory Guide 1.6, Revision 0.

The system conforms to Position 1 of the guide in that each Class 1E load is assigned to a division of the load groups. The assignment is determined by the nuclear safety functional

redundancy of the load such that the loss of any one division of the load group does not prevent the minimum safety functions from being performed.

The system conforms to Position 2 of the guide in that the HPCS ac loads have a supply from the startup auxiliary transformer as the preferred (offsite) power source, as well as from the HPCS diesel generator as the standby (onsite) power source (see Figure 8.1-2

).

The HPCS diesel generator breaker will close automatically if the nor mal source breaker to HPCS bus SM-4 is open and the diesel generator has reached rated frequency.

The system conforms to Position 3 of the guide in that there is no automatic connection of the HPCS system to any other load group.

The system conforms to Positi on 4 of the guide as follows:

a. The diesel generator connected to any division of a load group cannot be automatically paralleled with a diesel ge nerator that is connected to another division of the load group;

b. Each of the diesel gene rators is connected to one independent division of load group. No means exist fo r automatically connecting different load groups with each other;

c. No means are provided for automatically transferring loads between the diesel generators; and

d. An exception is taken to Regulatory Guide 1.6, Position 4d as follows. As described in Section 8.3.1.1.7.2.1 , the HPCS diesel gene rator may be manually cross connected to either Division 1 or Di vision 2. This is performed without an interlock as specified by Position 4, Item d. Howeve r, Generic Letter 91-11:

Resolution of Generic Issues 48 clarifies this requirement by stating that "the

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-37 staff concludes that if proper administrati ve controls that provide assurance that these breakers are normally open are plac ed on the operation of the tie breakers, then the addition of interlocks need not be pursued."

To comply with the requireme nts of Position 5 of the guide , the following start and load reliability test as described in NEDO-10905-3 (Reference 8.3-1) was successfully performed.

a. A series of tests were conducted to establish the capability of a prototype HPCS diesel generator unit to consistently st art and load within the required time;

b. The prototype diesel generator is of the same model as the unit used for CGS except for the generator.

Comparative data shown in Table 8.3-6 indicates that the CGS generator is at least e quivalent to the prototype unit;

c. The start and load reliability test satisfied the following requirements: A total of 69 valid start and loading tests with no failure or 128 valid start and loading tests with a single failure have been performed. The start and load test was conducted as follows:

1. Engine cranking was started on receipt of the start signal, and the diesel generator set accelerated to specified frequency and voltage within the required time interval;

2. Immediately following, the diesel generator set accepted a single step load consisting of the main HPCS pump motor load (fully loaded) or larger motor load (fully loaded) and additional loads (inductive and/or resistive) as required to total at least 100% of the continuous rating of the diesel generator unit;

3. At least 90% of these tests were performed with the diesel generator set initially at "warm standby," based on jacket water and lube oil

temperatures at or below va lues recommended by the engine manufacturer. After load was applied, the diesel generator set continued to operate until jacket water and lube oil temperatures were within

+/-10°F (5.5°C) of the normal engine operating temperatures for the corresponding load; and

4. The other 10% of these tests were performed with the engine initially at normal operating temperature equilibrium (defined as jacket water and lube oil temperature within +/-1 0°F (5.5°C) of normal operating temperatures as esta blished by the engine manufacturer for the corresponding load).

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-38 If the cause for failure to st art or accept load in accordance with th e preceding sequence fell under any of the categories listed below, that particular test was disregarded, and the test sequence resumed without penalty fo llowing identification of the cause for the unsuccessful attempt.

1. Unsuccessful start attempts which can definitely be attributed to operator error including setting of alignmen t control switches, rheostats, potentiometers, or other adjustment s that may have been changed inadvertently prior to that particular start test;

2. A starting and/or loading test pe rformed for verifica tion of a schedule maintenance procedure required during this series of tests. This maintenance procedure was defined prior to conduc ting the start and load acceptance qualification tests and then became part of the normal maintenance schedule after installation;

3. Failure of any of the temporary service systems such as dc power source, output circuit breaker, load , interconnecting piping, and any other temporary setup which was not part of the permanent installation; and

4. Failure to carry load which was defin itely attributed to loadings in excess of required loading.

Conformance With Regulatory Guide 1.9, Revision 0

The HPCS system diesel generating unit conforms to the requirements of Regulatory Guide 1.9, Revision 0, with the exception of vo ltage and frequency limits , as described below.

The unit conforms to Position 2 of the guide in that the 2000-hr (2850-kW) and 90% of the 30-minute (2727-kW) ratings bot h exceed the maximum coincidental load indicated in Table 8.3-3. Intermittent loads such as MOVs are not considered for long-term loads.

The unit conforms to Position 3 of the guide in that the load requirements will be verified by preoperational tests. The HPCS diesel generator unit is considered as a justifiable departure from strict conformance to Position 4 of the guide regarding voltage and frequency limits during the initial loading transien

t. The HPCS system consists of one large pump and motor combination which represents more than 90% of the total load; consequently, limiting the momentary voltage drop to 25% and the momentary frequency drop to 5% would not significantly enhance the reliability of HPCS operation. To meet these regulatory guide requirements, a diesel generator unit approximately two to three tim es as large as that required to carry the continuous rated load would be n ecessary. However, the frequency and voltage overshoot requirements of Regulat ory Guide 1.9, Revision 0, ar e met. A prototype testing C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-39 program on an installed unit, as described in Section 8.3.1.2.1.4 , has verified the following functions:

a. System fast-s tart capabilities,

b. Load carrying capability,

c. Load rejection capability,

d. Ability of the system to accept and carry the required loads, and

e. The mechanical integrity of the diesel engine generator unit and all of the major system auxiliaries.

The above diesel generator capabilities will be further verified by preoperational testing in conformance with Regulatory Guid e 1.108, Revision 1, including erra ta. At least five of the 69 start and loading tests will be made using the actual generator loads.

The design of the HPCS diesel generator conf orms with the applicable sections of IEEE criteria for Class 1E Electrical Systems for Nuclear Power Ge neration Station, IEEE 308-1971.

The generator has the capab ility of providing power to st art the required loads with operationally acceptable voltage and frequency recovery characteristics. A partial or complete load rejection will not cause the di esel engine to trip on overspeed.

Reference 8.3-1 describes the prototype and reliability test requirements.

The calculated HPCS diesel generato r transient response is indicated in Figure 8.3-31. Reference 8.3-1 provides an analysis showing the c onservatism of calculated response compared to that obtai ned from actual tests.

Conformance With Regulatory Guide 1.29

The HPCS power supply system is capable of performing its f unction when subjected to the effects of design bases natural phenomena at its location. In particul ar, it is designed in accordance with the Seismic Cate gory I criteria and housed in a safety class structure.

Conformance With Regulatory Guide 1.32

The design of the HPCS diesel generator conf orms with the applicable sections of IEEE criteria for Class 1E, Electrical Systems for Nuclear Power Generation Stations, IEEE 308-1971.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-09-011 8.3-40 Conformance With Regulatory Guide 1.47

See Section

7.1. Conformance

With Regulatory Guide 1.62

Manual controls are provided to pe rmit the operator to select the most suitable distribution path from the power supply to the load. An automa tic start signal will overr ide the test mode. Provision is made for control of the system from the control room as well as from an external location.

Conformance With IEEE 279-1971

See Section 7.3.2.1.2 for a discussion of compliance of the HPCS with IEEE 279-1971.

Conformance With IEEE 308-1971

The HPCS electrical system components supplying power to the Class 1E electrical equipment are designed to meet their functional requirements under the c onditions produced by the design basis events. Equipment of different divisions is physica lly separated to maintain independence and to minimize the possibility of a common-mode failure. The HPCS Class 1E equipment is located in Se ismic Category I structures.

Surveillance of the HPCS Class 1E electrical system is in compliance with the standard.

Conformance With I EEE 344-1971 and 1975 The HPCS power supply unit components are seismically qua lified to IEEE 344-1971 or 1975 as applicable. See Section 3.10.1.2.

Conformance to IEEE 387-1972

The HPCS power supply unit is completely independent from other standby power supply units and meets the applicable re quirements of IEEE 387-1972.

The HPCS diesel genera tor unit is designed to

a. Operate in its service environment during and after any design basis event without support from the preferred power supply;

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-09-011 8.3-41 b. Start, accelerate, and be loaded with the design load within an acceptable time:

1. From the normal standby condition,

2. With no cooling available, for a time equivalent to that required to bring the cooling equipment into service w ith energy from the diesel generator unit, and

3. On a restart with an initial engine temperature equal to the continuous rating, full load engine temperature;

c. Carry the design load for 2000 hr;

d. Maintain voltage and frequency within limits that will not degrade the performance of any of the loads co mposing the design load below their minimum requirements, in cluding the duration of transients caused by load application or load removal; and

e. Withstand any anticipat ed vibration and overspeed conditions. There is no flywheel coupled with the HPCS diesel generator. The ge nerator and exciter are designed to withstand 25% overspeed without damage.

The HPCS diesel generator ha s continuous and short-term ra tings consistent with the requirements of Secti on 5.1 of IEEE 387-1972.

Mechanical and electrical system interactions between th e HPCS diesel generator unit and other units of the standby power supply, the nuclear plant, the conventional plant, and the

Class 1E electrical systems are coordinated so that the HPCS diesel generator units' design function and capability are realized for any design basis event except failure of the HPCS

diesel generator unit.

Environmental qualification of the HPCS diesel generator is not required since it is located in a mild environment.

8.3.1.2.2 Tests and Inspection The auxiliary ac power system is designed to permit periodic testing and inspection of the system as a whole and of the operability and functional perfor mance of the components in accordance with GDC 18. Preoperational testing, as described in Section 14.2 , was performed to verify that all components, automatic and manual controls, a nd sequences of operation of the standby power system function as re quired. Preoperationa l testing of redundant portions of the onsite electrical power system to verify proper load group assignmen ts was performed in accordance with Regulatory Guide 1.41, Revision 0.

Voltage values at Class 1E high and low C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-42 voltage buses were measured and compared to the design values, to demonstrate correct transformer tap settings, during the preope rational testing phase of the plant.

Preoperational testing included demonstrating the required re liability of the CGS standby diesels by means of a start/load test described in Regulatory Guide 1.108.

Since Divisions 1 and 2 diesel generators are similar, a 35 start/load test was performed on each diesel.

A 69 start/load test was pe rformed on Division 3 (HPCS).

Description of Division 3 Test

To accomplish this test, supply of 4.16-kV Class 1E bus SM

-4 was transferred to the startup source. Under this condition, the diesel ge nerator was synchronized to the 230-kV startup source and loaded via manual adjustment of th e unit speed controls to at least 50% of continuous rating and operated to th is level for at least 1 hr. Si xty-nine such tests have been accomplished with no failures. In addition, five tests have involved loading the diesel with the existing bus loads including the HPCS pump motor.

Significant parameters such as voltage, frequency, operating temperature, acceleration times, and other pertinent functions were monitored throughout the duration of the test and recorded.

Valid tests and failures were based on the criteria of Regulat ory Guide 1.108, Section 2.e.

Prior to plant startup, and at periodic intervals when the reactor is not at power operation, tests simulating Class 1E bus undervoltage, LOCA, undervoltage and LOCA simultaneously, or manual start signals will be performed to demonstrate the capability of the power sources to meet the starting and loading se quencing requirements.

Periodic testing will verify the diesel generator being tested is aligned to provide standby power to the associated emergency buses. Testing procedures during these times are de scribed in the Technical Specifications.

Periodically during plant operati on, each diesel generator is manually started and loaded.

Each (Divisions 1, 2, and 3) unit is separa tely synchronized to th e 230-kV startup offsite power source and loaded.

During diesel generator test mode, a LOCA signal received when a diesel is parallel to an offsite source will cause the diesel generator breaker to tr ip. The diesel will then remain running in standby mode until shutdown by operator action.

Prior to operation of the standby diesel generators, there are ch ecks to ensure correct valve lineup as well as switch position confirmation as identified in the dies el generator operating procedure. Among these are the normal presta rt checks including expans ion tank water level, diesel starting air compressor oil level, air start mo tor in line lubricator oil level, engine crank case oil level, using both the gauge and the dipstick, generator bearing oil level, and the woodward governor oil level. Periodic inspections of the diesel generators will be conducted

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-43 no less than once every 30 months in accordance with pl ant procedures prepared in conjunction with the manufacturer's recommendations.

The testing program is designed to test the ability of each diesel generator to start as well as to run under load long enough to br ing all components of the system into equilibrium condition.

During the 24-hr run surveillanc e, the generator voltage and fr equency is verified to be 4160 V (+420, -250) for DG-1 and DG-2, 4180 V (+420, -420) for DG-3 and 60 (+3.0, -3.0) Hz within 15 sec for DG-1, DG

-2, and DG-3 after start signal. The steady-state generator voltage and freque ncy is verified to be mainta ined within 4160 V (+420, -420) and the above frequency limit durin g this test. This ensures th at cooling and lubrication are adequate for extended periods of operation. Functional testing of the automatic control circuitry is conducted on a periodic basis to demonstrate proper operation.

Sufficient testability, al arms, and fault detection equipment are provided to comply with the criteria indicated above. Thus a ssurance is given that the standby power sources are capable of performing their safety f unctions with adequate re liability at all times.

The preoperational as well as the operational testing programs are in conformance with Regulatory Guide 1.108, Revi sion 1, including errata in paragraph 6.2.1(9).

8.3.1.2.3 Service Environment

In addition to the effects of operation in norm al service environment, all components of the emergency portion of the auxiliary ac power system essential to limiting the consequences of a LOCA are designed to operate in the postaccident environment expected in the area in which they are located. See Section 3.11 for discussion of environmen tal design and analysis of safety-related (Class 1E) elec trical components for postaccident conditions. Section 3.11 also identifies safety-related equipm ent that must operate in a harsh environment and provides information on the conditions under which the equipment must operate. Section 3.10 identifies Seismic Category I electrical e quipment and describes the crit eria, design and testing of electrical equipment in co mpliance with IEEE 344-1971 for seismic qualification.

All cables for Class 1E systems and associated circuits are moisture and ra diation resistant, are highly flame retardant and emit negligible amounts of corrosive gas when subject to heat or flame. Certified proof tests are performed on cable samples to certify 40-year life by thermal aging, to prove radiation resistance by exposure of aged specimen to integrated dosage of 5 x 10 7 rads, mechanical/elect rical tests of previously expos ed cable to 340°F and 45 psig steam, to prove flame resistance by the vertical tray, 70,000-Btu/hr flame test for 8 minutes, minimum, and finally, to show acceptable levels of gas by an acid gas generation test. See Section 8.3.3.1.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-44 8.3.1.2.4 Offsite Powe r System Degradation

8.3.1.2.4.1 General. The CGS auxiliary ac power syst em is normally supplied by the 25-kV plant main generator (via the normal auxiliary transformers TR-N1 and TR-N2). During this time, the main generating unit is generally synchronized with and furnishes power to the 500-kV BPA grid via the plant main transformer.

During plant startup, shutdown, or sudden loss of the main generating unit, the 230-kV startup offsite power source is capable of supplying all required, steady state, plant auxiliary ac power system loads via the startup auxiliary transformer TR-S.

In the event that both the 25-kV normal source and the 230-kV startup source are unavailable, the 115-kV backup offsite power source supplies (via the backup auxiliary transformer TR-B) the Divisions 1 and 2 Class 1E lo ads required for safe shutdown.

See Section 8.2 for a detailed description of the CGS offsite power sources. See Section 8.3.1 for a detailed description of the auxiliary ac power system.

Based on previous industry operati ng experience with BWRs of a similar type, it is estimated that CGS plant availability will be approximately 0.75. When th e plant is shut down, auxiliary ac power system loads are supp lied by either the 230-kV startup offsite power source, the 115-kV offsite power source, or the 500-kV backfeed with th e generator links removed.

8.3.1.2.4.2 Class 1E Auxiliary Alterna ting Current Distribution System Voltages.

8.3.1.2.4.2.1 Voltage Criteria. The auxiliary ac distribution system is designed to maintain system voltages within acceptable ranges at all levels of th e plant distribution system, whether incoming supply is from the plant main generator or from the BPA grid system.

Table 8.3-7 indicates the acceptable voltage ranges for the major Class 1E portions of the system, based upon consideration of motor-operating voltage ranges as determining system voltage acceptability.

Table 8.3-4 indicates the voltage range over which Class 1E and non-Class 1E motors and motor starters are capable of operating.

Load tap changing capability is not provided on the power transfor mers utilized at CGS. All power transformers are furnishe d with no-load type tap changers on the primary side only.

8.3.1.2.4.2.2 Expected Voltages kV Main Generating Unit Supply. Main generating unit output voltage range is 23.8 kV to 26.3 kV, co rresponding to an output voltage variation of 5% of generator nameplate volta ge. This range is based upo n the use of a unit automatic voltage regulator designed to maintain generator output voltage between 0.95 pu and 1.05 pu.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-45 The expected voltages in the Cl ass 1E portions of the auxiliar y ac distribution system, when supplied from the 25-kV plant main generating unit, are within the acceptable ranges of Tables 8.3-7 and 8.3-4.

Higher bus voltages are expected during shutdown light load conditions when ac distribution system is supplied from the 230-kV grid system.

8.3.1.2.4.2.3 Expected Voltages - 230-kV Grid Supply. The preferred offsite power source grid system voltage has a nominal rating of 230 kV. Minimum and maximum loaded values of grid voltage are 230 kV and 242 kV, respectively.

The expected voltages in the Cl ass 1E portions of the auxiliar y ac distribution system, when supplied from the 230-kV grid system, are within the acceptable ranges of Tables 8.3-7 and 8.3-4.

8.3.1.2.4.2.4 Expected Vo ltages - 115 kV Grid Supply. The backup offsite power source grid voltage has a nominal rating of 115 kV.

Minimum and maximum loaded values of grid voltage are 115 kV and 122 kV, respectively.

The expected voltages in the Cl ass 1E portions of the auxiliar y ac distribution system, when supplied from 115-kV grid system, ar e within the acceptable ranges of Tables 8.3-7 and 8.3-4.

8.3.1.2.4.3 Class 1E Auxilia ry Alternating Current Distri bution System Voltage Sensing.

8.3.1.2.4.3.1 Primary Undervoltage Sensing. High speed, instantaneous undervoltage relays located in each of the 4.16-kV Class 1E switchgear units are utilized for detection of undervoltage at the switchgear buses.

The trip setpoint of each relay is set at 2870 V, corresponding to 69% of nominal bus voltage.

Trip setpoint selection is ba sed upon overriding minimum bus voltage during motor starting, with an allowance (10% below minimum motor starting voltage) to compensate for relay setting tolerances.

8.3.1.2.4.3.2 Secondary Undervoltage Sensing. Static Class 1E undervoltage relays with definite time delay located in each of the redundant 4.16-kV Class 1E Divisions 1 and 2 switchgear units are utili zed for detection of sustained degr aded voltage in the offsite power system. This protection scheme is designed to compliment th e primary undervo ltage scheme described above, by ensuring ES F motors fed from critical 480-V and 4160-V buses do not operate continuously connected to a degraded voltage s ource exceeding the motor (NEMA MG-1) design tolerance of +/-10% of nameplate, unless a deviation has been analyzed and documented (see Table 8.3-4

).

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-46 The trip setpoint selection is normally based upon ensuring 90% of moto r nominal voltage at the motor terminals, including allowance for feeder (and branch ci rcuit) voltage drop and relay error tolerances. Any deviations are analyzed and documented (see Table 8.3-4

). The relay automatically resets when the bus voltage exceeds the 1% differ ential between dropout (trip) and pickup (reset) settings.

The approximately 8-sec time delay will override the voltage dips associated with motor starting loads under normal operating pr actice and under normal source voltage.

The relays operate to isolate th e degraded source and initiate the sequence of events to select the next available source. Circ uit design precludes spurious volta ge loss signal and allows for testing of the individual relay, one at a time, without disrupting the protective function.

During a LOCA, the output breaker close permissive for Divisions 1 and 2 diesel generators is satisfied 12 sec after the sustaine d degraded grid voltage conditi on is sensed at the emergency bus. This time delay is derived from the approximately 8-s ec delay prior to the offsite breaker trip plus an approximately 4-sec delay. The above time delay is acce ptable since, during a concurrent LOCA, the ECCS coolant injection time requirements as specified in Table 6.3-2 are met.

See Figures 8.3-1 and 8.3-2 for the logic diagrams of Divisions 1 a nd 2 secondary undervoltage protection and nominal time delay setpoints.

Similar voltage trip and tim e delay setpoints are used for the Division 3 secondary undervoltage relays. For Divi sion 3, however, the diesel ge nerator output breaker close permissive is satisfied approximately 9 sec after a coincident occurrence of a LOCA and a degraded grid condition. This time delay is equal to the approxi mately 8-sec delay prior to the offsite breaker trip plus an approximately 1-sec delay.

See Figure 8.3-32 for the Division 3 secondary undervo ltage protection logic diagram and nominal time delay setpoints. The HPCS injection time requirement of Table 6.3-2 are also met.

Assume that during an accident when the em ergency motor loads are running a subsequent degradation of offsite grid voltage occurs assuming further that the degraded voltage is anywhere between 69% and appr oximately 90% of the bus nominal voltage. The following analysis shows that the motor lo ads remain adequately protected and ready for a restart as soon as the power supply has been restored to normal. Under the above condition the emergency motors would be exposed to terminal volta ge between 72% and 90% (approximately) of nameplate value. For terminal voltages betw een 80% (or 75% for the HPCS pump motor) and 90%, the motor will continue to run overloaded up to 125% (133% for the HPCS pump motor) of full load current. The motors can safely carry this overloa d for 8 sec. For voltages less

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-47 than 80% (75% for the HPCS pump motor), the motor torque could be less than the load torque, thus resulting in deceleration and eventual stalling.

At rated voltage and cold start conditions the motors are protected against locked rotor currents by a relay which trips and locks out within 15 s ec. However, for a degraded voltage condition which could cause motor stalling, the secondary undervolta ge relaying is set to trip the offsite source breaker approximately 8 sec after the unde rvoltage condition deve lops and the locked rotor protective relay will not trip. Load shedding after 8 sec trips the motors without locking

them out. A subsequent motor restart when power supply is restored will expose the motor to locked rotor currents for another 5 sec as a maximum (based on maximum motor starting time of 5 sec at rated voltage). The total stall time is therefore equal to appr oximately 13 sec. This is less than the designed motor safe stall time of 14 sec at 80°C winding temperature. Since the voltage at the motor is assumed to be less than 90% of the rated value, resulting in lower locked rotor currents it follows that there is sufficient margin between the motor stall time under the above worst case c onditions and the designed motor safe stall time.

It should be noted that critical (Class 1E) plant controls and vital inst rumentation are supplied by redundant (Divisions 1 and 2) divisions of the 120/240-V ac Class 1E uninterruptible power supply (UPS) system. This syst em supplies loads via inverters with static transfer to an alternate ac supply in cas e of circuit faults or loss of invert er voltage. The alternate supply line voltage is regulated within +/-10% of normal in accordance with the NSSS vendor's requirements. A manual bypass swit ch is provided for maintenance of the inverter or static switch.

Table 8.3-8 indicates the various mo nitors and alarms (annunciators/computer) provided to monitor system voltages.

8.3.1.3 Physical Identif ication of Safety-Relat ed (Class 1E) Equipment

Each safety-related electrical component or cable is tagged with an identification number. In addition, a color-coded separa tion marker is provided along w ith the identification number which indicates the assignment to on e of seven divisions (D ivision 1, 2, 3, 4, 5, 6, or 7). This division marker is inscribed with color-coded characters on a color-coded background as described in Reference 8.3-2 , which was submitted to the NRC. Assignment of equipment to the seven divisions is given in Reference 8.3-2.

Cable routing information is provided in Reference 8.3-2. This illustrates the computer program used for identification and routing of cab les in trays. Routing information for cables in conduits is provided in raceway layout drawings. Reference 8.3-2 also contains sample cable routing schedules. Actual cable tray dr awings for the diesel generator, reactor and radwaste/control buildings are shown in Figures 8.3-6 , 8.3-25 through 8.3-30 , and 8.3-33 through 8.3-38.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-48 A list of Class 1E components and equipment is provided to facilit ate identification of safety-related components and their circuits.

8.3.1.3.1 Class 1E Raceways, Cables, Equipment (Panels and Racks), and Enclosures

See Reference 8.3-2.

In addition to the discussion provided in Reference 8.3-2 , circuits that have been upgraded from non-Class 1E to Class 1E and are already installed in raceways are identified with a Class 1E color coded marker at terminations, pu ll boxes, and entrances and exits to raceways.

Upgraded cables are routed in Class 1E raceways. Cable installation records are reviewed to provide assurance that these cable s are routed in Cla ss 1E raceways and inst alled to Class 1E requirements (cable installation parameters). Otherwise, megger and continuity tests shall be performed, termination and rou ting reinspected to Class 1E requirement s, and documentation prepared verifying the upgrade.

8.3.1.3.2 Prime and Associated by Proximity Circuit Raceways, Cables, Equipment, and Enclosures

See Reference 8.3-2.

8.3.1.3.3 Non-Class 1E Raceways, Cables, Equipm ent, and Enclosures

See Reference 8.3-2.

8.3.1.4 Independence of Redundant Systems

The physical independence of electrical systems complies with the requirements of IEEE 279-1971, IEEE 308-1974 (IEEE 308-1971 for the HPCS system), GDC 3 and 17, and Regulatory Guide 1.6, Revision 0. See Table 7.1-3 for a matrix of the applicability of codes and standards to the various sa fety-related systems.

The physical separation of mechanical equipment including piping and instrumentation tubing is not in cluded in this section.

However, sufficient separati on between redundant plant prot ection system equipment is provided such that the capability of the protection systems to m itigate the consequences of any DBA and bring the reactor to a cold shut down condition is ensured. See Section 3.1.

8.3.1.4.1 Definitions

See Reference 8.3-2.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-49 8.3.1.4.2 General Separation Criteria The criteria in this section provides sufficient physical i ndependence of Class 1E electrical systems so safety-related systems can perform their engineered safety functi on during any DBA and bring the reactor to a cold shutdown condition.

8.3.1.4.2.1 Cable Separation. Cable separation is achieved by segregating electrical circuits by voltage level and service it pe rforms (such as power, contro l, or signal) by engineered system designations, by power supply and divisi onal separation categories, and by routing as described in Reference 8.3-2.

Power cables of different voltage ratings are routed in different cable trays except as follows: (1) common tray is permitted for 480 V, 120/2 08 V ac, 125 V and 250 V dc of compatible

divisions, and (2) common tray is permitted for 4160-V and 6900-V power cables of compatible divisions; 480-V, 4160-V, and 6900-V power cables ar e not to be installed in cable trays in the spreading area beneath the control room. If a run through this area is unavoidable, the power cable is installed in conduit.

Power cables are installed in raceways separate from control cables and low level signal cables and where vertically stacked, the power cables are placed in the tray with the highest position in the tray tier. Stacking of multiple power tr ays are such that the voltage levels decrease sequentially from the top of the bottom tray in the stack.

In addition to the discussion provided in Reference 8.3-2, control circuits are low energy circuits for the following reasons: the larges t protective devices for control circuit fuses (35 amp) are found only in 4-kV switchgear breaker trip circuits; the ma jority of the control circuits are intermittent with circuit protective device having 5-to 20-amp ratings; the circuit protective device ratings are chos en to accept initial momentary in-rush currents; and the actual circuit normal operating current is generally in the 0.1 to 2 amp range.

In addition to the discussion provided in Reference 8.3-2, associated cables are procured to the same requirements as Class 1E. When not bulk pulled with Class 1E cables they are installed to the same installation parameters as Class 1E cables except that verification documentation for sidewall pressure, pull tension, and minimum bend radius may not be available. Associated cables comply with at least one of the following requirements:

a. Where installed in cable tray s, raceways, and PGCC floor ducts,

1. They are uniquely identified as associated or as Class 1E circuits and remain with, or are physically sepa rated the same as, those Class 1E circuits with which they are associated;

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-50 2. They are identified in accordance with item 1 above from the Class 1E equipment up to and including an isolation device. Beyond the isolation device, such a circuit is not considered an associ ated circuit and does not conform to item 1 above, provided it does not again become associated with a Class 1E system; or

3. They are analyzed or tested to demonstrate that Class 1E circuits are not degraded below an acceptable level.

b. Where installed in enclosures and equipment, external to trays, raceways, and PGCC floor ducts (item a above), associated circuits which become associated due to sharing of enclosures with Class 1E circuits are not separated; they are analyzed to show that the Class 1E circuits ar e not degraded below an acceptable level.

In addition to the discussion provided in Reference 8.3-2 , non-Class 1E (non-associated) cable numbers are prefixed by "A" or "B" and are routed in non-Class 1E raceways. They are procured to the same requireme nts and installed to the same installation parameters as Class 1E cables, except for a few vendor supplied cables designated in the computerized cable schedule as Type Z.

The isolation of non-Class 1E circuits from Class 1E circuits or associated circuits is achieved by complying with at least one of the following requirements:

a. Non-Class 1E circuits are physically separated from Class 1E circuits and associated circuits by the minimum separation requirements specified for redundant Class 1E divisions or they become associated circuits; or

b. Non-Class 1E circuits are electrically isolated from Class 1E circuits and associated circuits by the use of is olation devices, shielding and wiring techniques, physical se paration, or an appropriate co mbination, or they become associated circuits; or

c. The effects of lesser separation or the absence of isolation between the non-Class 1E circuits and th e Class 1E circuits or associated circuits are analyzed to demonstrate that Class 1E circuits are not degraded below an acceptable level or they become associated circuits; or

d. Non-Class 1E low energy (instrumentati on and control) circu its are not required to be physically separated or isolated from associated circuits provided: (1) the non-Class 1E circuits are not routed w ith associated cabl es of a redundant division; or (2) they are analyzed to demonstrate that Class 1E circuits are not

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-51 degraded below an acceptable level. As part of the analysis, consideration is given to potential energy and identific ation of the circ uits involved.

Since power circuits are not considered to be low energy, the analysis applied to non-Class 1E-to-Class 1E/associated separation described above does not totally apply. Non-Class 1E power cables routed in open raceways (trays) dedicated to non-Class 1E power cables are physically separated from all Clas s 1E/associated cable trays with the same requirements specified fo r physical separa tion of redundant Class 1E cable trays. For other than open raceways, additional information is provided in Section 8.3.1.4.4.

8.3.1.4.2.2 Cable Routing. In addition to the discussion provided in Reference 8.3-2 , the routing of cables in raceways is in accordance with the following:

a. Cable splices are not normally designed into the cable system (except for cables entering containment at elec trical penetrations).

If required, they are not permitted in cable trays, but are made in conduit fittings or me tallic electrical boxes;

b. All cabling for use in Class 1E systems, and for associ ated circuits, is designed to resist combustion as described in Section

8.3.3. Cable

flame retardance characteristics and routing arrangement eliminate (insofar as practical) the potential for fire damage to cables and the spread of fire between redundant divisions;

c. Power cable ampacities are based on NEMA publication number WC51-1975 for cables routed in trays and ICEA pub lications P46-426 for cables routed in conduit including underground conduits (ducts). A dditional cable ampacity derating factors have been used for fire rated barrier material on raceways, covered trays, conduit clus ters, and ambient air temp eratures above 40°C.

Power trays can be filled to 40% of the cross-sectiona l area, which is based on a 4-in. deep tray. The cabl e ampacity is determined from the calculated cable depth;

d. In general, hazardous areas are avoided to limit circuit failures to failures or faults internal to the electric equipment or cables. Where hazardous areas cannot be avoided an an alysis is provided;

e. In the cable spreading and main control room areas, 120-V ac (or below) and 125-V dc (or below) branch circuits from distributi on panels to the control boards and terminal cabinets are routed in conduit. The only power cables in these areas are the 460-V ac feeders to the control room emergency lighting panel step-down transformers; these cables are routed in conduit; and

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-52 f. In addition to the discus sion provided in Reference 8.3-2, underground cables for Class 1E systems comp ly with GDC 1, 2, 3, 4, and 17, as well as IEEE 308-1974 and the following:

1. Underground cables between manhol es are run in concrete encased plastic ducts for non-Class 1E systems and in reinforced concrete encased steel ducts for Class 1E systems; and

2. Underground ducts for Class 1E cab les are Quality Cl ass I and Seismic Category I. Cables are fire reta rdant type, and where splices are necessary in manholes because of the length of pull, waterproofing is used.

8.3.1.4.2.3 Physical Separation Criteria. Physical separation as a protection against single failures of redundant Class 1E power, control, and instrumentati on systems (Divisions 1 to 7) is provided. Where the use of separate safety class structures is not feasible, spatial separation is the preferred method of achie ving separation. Me thods of maintaini ng physical separation are as follows:

a. Non-safety-related equipment, compone nts, or piping are not installed above safety equipment. Where installati on above safety equipment cannot be avoided, the supports are installed to Seismic Category I requirements or analysis is made to demonstrate that failure will not impair the overall function of the safety system;

b. Where Class 1E equipment or cabling is located or routed in areas where there is a potential for internally generated mi ssiles, pipe whip, or flood, a protective barrier is provided or an an alysis is performed to ensure that a loss of plant capability to mitig ate the consequences of an accident and/or to bring it to a safe shutdown condition cannot occur;

c. Fire-rated fire stops, fire barriers, and/or electrical separation barriers are provided between redun dant electrical equipment including raceways whenever the physical separation distances required in Reference 8.3-2 , are not met.

Acceptable barriers are noted in the above referenced document.

Raceways penetrating fire-rated walls, floors, or ceilings are sealed with a fire-rated fire stop; and

d. Raceways penetrating pressure boundaries are sealed to main tain the pressure rating. See Appendix F for compliance with 10 CFR 50 Appendix R.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-53 8.3.1.4.2.4 Administra tive Controls for Ensu ring Separation Criteria. The quality assurance procedures described in IEEE 336-1971 are employed during the design and installation of the cable system to ensure compliance with the design criteria.

Design drawings and cable lists are prepared, reviewed, and approved for installations. Each cable and raceway is identified in the computer program, and the identification includes the applicable separation classification. Cable routing programs ensure that cables or particular se paration groups are routed through the appropriate raceways. Cables are installed in accordance with written procedures which specify quality requirements, inspection, and documentation requirements for all cable pulls.

In some cases it has been necessary to upgrade certain cables from a non-Class 1E status to either a Class 1E or prime cab le status. Postinstallation procedures exist to upgrade such cables. These cables are evaluated on an individual basis and allowed to deviate from the normal installation procedures.

The following briefly describes the upgrading procedure for va rious categories of cables:

a. Non-Class 1E cables upgraded to Class 1E

1. Cable identification tags are revised at all terminations, pullpoints, entrance, and exits to raceways; and

2. Cable installation records are reviewed to provide assurance that these cables are routed in Class 1E raceways and installed to Class 1E requirements. Otherwise, megger and continuity tests are performed, termination and routing is reinspected to Cla ss 1E requirements, and documentation is prepared verifying the upgrade;

b. Non-Class 1E cables upgraded to prime cables

1. Same upgrade as a.1 above; and

2. Routing and termination is reinsp ected to Class 1E requirements and documentation is prepared verifying the upgrade.

8.3.1.4.2.5 Se paration For Fail-Safe Systems. See Reference 8.3-2. 8.3.1.4.2.6 Equipment and Circuits Requiring Separation. Equipment and circuits requiring separation are identified on documents a nd drawings in a distinctive manner.

8.3.1.4.2.7 Compliance to Regulatory Guide 1.75, Revision 1. This regulatory guide is not applicable to CGS since the CGS Construction Permit date precedes the regulatory guide issue date. However, the actual plant design does provide a technically accepta ble alternative to the

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-54 requirements of the guide.

Independence between equipment and circuits of redundant Class 1E electrical divisions is provi ded to satisfy 10 CFR 50 requirements.

Deviations to the guide are listed below:

a. Paragraph C.1 of Regulat ory Guide 1.75, Revision 1, excludes the use of fault current actuated circuit interrupting devices as an is olation device;

CGS uses overcurrent actuated circuit break ers and fuses. Jus tification for this deviation is provi ded in Sections 8.3.1.2.1.1 and 8.3.2.2.1.1

b. Paragraph 4.5 of IEEE 384, as endorsed by Regulator y Guide 1.75, Revision 1, Paragraph C.4, states th at associated circuits should meet all the same requirements as those placed on Class 1E circuits. Some CGS cables, which are

associated by the IEEE 384 defi nitions may be partially routed in non-Class 1E raceways as well as Class 1E raceways.

These cables, when routed in the non-Class 1E trays, are not considered a ssociated based on analysis. They meet all the pull/termination documentation requirements placed on Class 1E cables when they are bulk pulled with Class 1E cables. When they are not bulk pulled with Class 1E cables, they are installed to the same installation parameters as Class 1E by procedure, except that verification documentation for sidewall pressure, pulling tension, and minimum bend ra dius may not be available;

c. Paragraphs 4.6.1 and 4.6.2 of IEEE 384 as endorsed by Regulatory Guide 1.75, Revision 1, require that non-Class 1E circuits be separated from Class 1E/

associated circuits by the same mini mum separation require d between redundant Class 1E circuits, unless the non-Class 1E ci rcuits are classified as associated.

As discussed in (b) above, some circuits th at would be classifi ed as "associated" by the IEEE 384 definition are partially routed in non-Class 1E raceways and, therefore, are not separated from non-Class 1E circuits. Class 1E physical separation is not necessarily maintained between the non-Class 1E and Class 1E raceways, except for power trays as noted in Section 8.3.1.4.2.1.

Inside enclosures, non-Class 1E circuits are not separate d from Class 1E circuits and thus would be termed "associated" by Regulato ry Guide 1.75. These circuits are Category 1C and treated as non-Class 1E, except for prime circuits which do meet Class 1E sepa ration requirements.

Justification for this deviation is described in Section 8.3.1.4.4.1.3

d. Paragraphs 5.1.3 and 5.1.4 of IEEE 384 as endorsed by Regulatory Guide 1.75, Revision 1, required a minimum separation of 1-in. between enclosed raceways of redundant divisions.

This requirement is not met in CGS though the raceways are not physically touching. Jus tification for this de viation is based on

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-55 Wyle Lab tests No. 56719 and No. 56669 for the Sus quehanna Steam Electric Station. These tests dem onstrate that rigid steel c onduits and some specific heat-resistant sleeving materials qualify as barriers ag ainst potential damage due to an electrical fault in one of the circuits requiring separation; and

e. Paragraph 5.6.3 of IEEE 384 as endorsed by Regulatory Guide 1.75, Revision 1, requires identif ication of internal wiring to distinguish between redundant Class 1E wiring and between Class 1E and non-Class 1E wiring. At CGS the panel or enclosure is assigned to a given Class 1E division if the majority of the contained wiring belongs to this division. Circuits compatible with this division and non-Class 1E wiring in the panel are not identified. However, if Class 1E wiring for a redundant division or wiring associated by connection to the redundant division are al so present in the same panel, then these wires are identified by color coded tags as shown in Reference 8.3-2.

8.3.1.4.3 Physical And Sp atial Separation Details

See Reference 8.3-2.

Structures are designed to provide protection fr om the effects of wind loadings, tornadoes, external missiles, flooding, a nd earthquakes. All Class 1E equipment, components, and raceways, and their supports, are designed to Seismic Category I requirements (see Section 3.10 for discussion of seismic capability).

8.3.1.4.3.1 Standby Generating Units and Auxiliaries. The standby diesel generator sets are located in separate equipment r ooms in the diesel generator bu ilding. Auxiliaries and local controls for each diesel generator set, separated the same as the units themselves, are also located in this building. Each unit is provided with an independent air supply.

8.3.1.4.3.2 Direct Current Power Systems. The Class 1E dc power systems include batteries, chargers, and associated equipment. Equipment for redundant systems is located in separate rooms. For further de scription see Section 8.3.2.

8.3.1.4.3.3 Switchgear. Separate electrical equipment rooms are provided in the radwaste/ control building for redundant 4.16-kV and 480-V Class 1E Di visions 1 and 2 switchgear as shown in Figure 1.2-14. The Division 3 4.16-kV Class 1E switchgear and 480-V Class 1E MCCs are located in the diesel generator building.

8.3.1.4.3.4 Motor Control Ce nters and Distribution Panels. The MCCs, distribution panels, and miscellaneous electrical equi pment of redundant divisions are either spatially separated or are located in separate rooms of safety class structures.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-56 8.3.1.4.3.5 Containment Electrical Penetrations. There are 24 electric al penetrations which provide electrical power to equipment inside the primary containment as described in Section 3.8.6.1.4. Redundant Class 1E circuits for load s located inside pr imary containment are routed through separate penetrations with the excepti on of HPCS cabling. HPCS (Division 3) cabling is routed through a Division 2 penetration in a separate sleeve.

8.3.1.4.3.6 Power Gene ration Control Complex. The PGCC is defined in Reference 8.3-2. PGCC is a modular design concept which allows th e fabrication, installation, and testing in a quality controlled environment in accordance with the requirements of 10 CFR 50, Appendix B (see Figures 8.3-39 and 8.3-40). The PGCC forms an interface between the field cables and the control panels and consists of three different subassembli es: termination cabinets (T/C), modular floor sections, and cable assemblies.

8.3.1.4.3.6.1 Te rmination Cabinets. Termination cabinets provide the interface with the field cables (see Figures 8.3-41 and 8.3-42) and consists of three different subassemblies:

termination modules, connector plates (including connectors), a nd junction boxes for flexible conduit terminations (see Figure 8.3-43). The T/C enclosures are c onstructed of 3/16-in. steel plate welded to 3/8-in. steel corn er angles and use swing and stationary steel barriers for fire separation between redundant system cables. Seismic a nd fire tests have been conducted on these units as reported in the licen sing report NEDO-10466A (Reference 8.3-3). The fire tests demonstrated the adequacy of the stationary stee l barriers. In addition to the overall structural fire protection design of the PGCC (see Figure 8.3-44

), products of combustion detectors are located at the top of each termination cabinet. These detect ors are monitored on each module fire control panel and on the main control room fi re control panel. Add itional defense in depth measures include the installation of fire stops and penetration seals at all cable en trances to the cabinet, and the use of fire reta rdant materials, and the use of unlocked cabinet doors to allow rapid use of hand-held extinguishers (see Figure 8.3-45

).

8.3.1.4.3.6.2 Modul ar Floor Sections. The modular floor section is a latticed floor constructed of steel "I" beams and rectangular steel tubes fo rming longitudinal and lateral ducts. These ducts interconnect the control panel modules (w hich are bolted on the modular floor section) and the termination cabinet (see Figures 8.3-40 and 8.3-46). The network, including transition and extension ducts, provides divisional separa tion with the use of vertical and/or horizontal barriers a nd fire stops. Miniducts (Figure 8.3-47) are for divisional separation within the longitudinal ducts. Cables in the miniducts are routed in flexible metallic conduit or wrapped in Haveg Siltemp tape.

When it is necessary to route cables between PGCC sections which are not directly connected by floor ducts, it is permissible to route thes e cables through the cable spreading room; see Reference 8.3-2.

Fire protection is provided in accordance with the PGCC Licensing Topical Report, NEDO-10466A (Reference 8.3-3) and Appendix F. Products of combustion and thermal

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-57 detectors are provided in the floor section long itudinal ducts. These detectors are monitored on the respective PGCC module fire control pane l and on the main control room fire control panel where zoned alarms are grouped by floor section. Products of combustion detectors will prealarm to allow a manual response through quickly removable floor plates. Thermal detectors will automatically release Halon 1301 through a distribution system into each of the floor sections longitudinal cable ducts. Fire stops and penetration seals are located in the ducts that access the termination cab ling and in the ducts that ac cess the control panels (see Figure 8.3-48

). Floor plates consist of an alumi num honeycomb core, 1-1/16 in. thick.

8.3.1.4.3.6.3 Power Generation Control Complex Cabl e Assembly and Routing. The cable assembly within the PGCC is designed around the following variables: engineered system designation, circuit signal cl assification, PGCC separation classification based on power supply, and finally, the origin ation/destination which provides the routing and length (see Figure 8.3-49). (See Reference 8.3-2.) Each PGCC cable is precut, assembled (with lugs and connectors at either end as requi red), and installed in the panel

/floor module shipping section. Special cable and routing requirements are identified in Reference 8.3-2. The cable jacket and conductor insulation for the cables within the PGCC is either Raychem Flamtrol, General Electric Vulkene/Geoprene, Teflon, or Tefzel.

The fire suppression syst em has been provided to limit a cable fire and resulting offgasing/smoke.

Cable routing consists of two categories: field interface te rminations (FITS) and system interface terminations (SITS). FITS cables are routed between termination cabinets and PGCC control panels, while SITS cables are routed between PGCC control panels and do not interface with balance-of-plant (BOP) field cable (see Figure 8.3-39

).

8.3.1.4.3.7 Separation Within Enclosures and Equipment. See Reference 8.3-2.

Within equipment and enclosures it may be necessary for a single device such as a relay to be connected to wiring from redundant safety divisions. In such cases the intruding division wiring is routed immediately away from the device to attain the required 6-in. separation or to the extent where a barrier can be installed.

Where relays are used for isolation coil-to-cont act separation is provide d except as described below for fail-safe circuits.

General Electric type s HMA, HFA, and CR105, and Agastat type GP relays are used. The relays are used for 125-V dc or less applications. The justification for this type configur ation is the following:

Contact-to-contact separation betw een redundant divisions within relay isolati on devices is acceptable when utiliz ed within fail-safe system (RPS and containment isolation) logic. Justification is as follows:

a. Logic circuits are fail-safe, i.e., loss of power from faults results in safety system actuation;

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-58 b. Logic is arranged in a one-out-of-two twice network such that contacts utilized in redundant logics are reversed in order in each logic. This arrangement allows the logic to always function in a fail-safe manner irrespective of hot shorts or ground fault combinations;

c. Intruder circuits to the relay contacts are separated from resi ding wiring by 6 in. or an approved barrier which is inst alled, as practicable, between redundant division wiring as near to the device as possible;

d. The circuits are all control circuits which are low energy;

e. Wire insulation is fire retardan t complying with the requirements of IEEE 383-1974 or equivalent;

f. Each circuit is provided with Class 1E overcurrent protective devices to isolate faults;

g. These circuits are not allowed to bri dge directly between redundant Class 1E raceways;

h. Fire loading inside pa nels is a minimum; and

i. Wire insulation within these relays is rated at 600-V minimum Type Class A or H while the control circuit voltage carried by this wiring is 125-V dc maximum.

As described in Reference 8.3-2 , within enclosures/equipmen t it is acceptable to have secondary bridging between redundant division wiring by non-Class 1E control and instrumentation (low energy). Wiring secondary bridging is not allowed by non-Class 1E power cables unless supported by an alysis. The following analysis is provided to justify the power cable secondary bridge(s) which exist within the CGS design:

a. Power cables upstream of the Class 1E 4160-V ac buses are part of the offsite power source scheme and are exempted from the bridging requirement; and

b. A single 6900-V ac circuit from the ASD providing power to the reactor recirculation pump(s) is routed between a Division 1 and a Division 2 circuit breaker enclosure and comes in proximity to both Divisions 1 and 2 breaker control 125-V dc circuits. These break ers are provided to ensure that the reactor recirculation pump(s) will trip when a main turbine generator trip occurs. This ensures adequate reactivity shutdown margin at control rod end of cycle. These breakers are Class 1E but not required to respond to a LOCA or a high-energy line break (HELB). Each control circuit is located in a separate and

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-59 independent cabinet and pr otected by Class 1E protec tive devices (fuses). Any faults occurring in the 6900-V ac circuits will be cleared by the overcurrent trips provided with these Class 1E circuit breakers.

8.3.1.4.3.8 Spatial Se paration Between Raceways. See Reference 8.3-2.

8.3.1.4.4 Associated Circuit Analysis

Non-Class 1E control and instrumenta tion cables as discus sed in Reference 8.3-2 illustrates the various circuit configurations that result in associated circuits within the designed cable and raceway systems. These non-Class 1E cables which become associated by connection or proximity to a Class 1E circuit are representative of the definition of associated circuits in Reference 8.3-2. Associated cables de scribed in Reference 8.3-2 are routed in compatible divisional trays. These cables are uniquely identified and while routed with Class 1E cables are physically separated the same as those Class 1E circuits w ith which they are associated except inside enclosures.

8.3.1.4.4.1 Categories of Associated Circuits Treated as Non-Class 1E. The following categories of circuits are treated as non-Class 1E circuits. Justific ation is provided in Sections 8.3.1.4.4.1.1 to 8.3.1.4.4.1.8.

Category 1A: Non-Class 1E instrumentati on and control cables/wires that are not supplied Class 1E power and are rout ed in non-Class 1E raceways, but have a continuing section in Class 1E raceways or enclosures. See Figure 8.3-50.

Category 1B: Non-Class 1E instrumentation and control cables/wires that are supplied Class 1E power and are routed in non-Class 1E raceways, but have a continuing section in Class 1E raceways or enclosures. See Figure 8.3-50.

Category 1C: Non-Class 1E in strumentation and control cables/wires that are not supplied Class 1E power, but are a ssociated by proximity inside an enclosure. See Figure 8.3-50. Category 2A: Non-Class 1E power cables/wir es that are not supplied Class 1E power and are routed in non-Class 1E race ways, but have a continuing section in Class 1E raceways or enclosures. See Figure 8.3-50. Category 2B: Non-Class 1E power cables/wires that are connected to Class 1E power and are routed in non-Class 1E race ways, but have a continuing section in Class 1E raceways or enclosures. See Figure 8.3-50.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-60 Category 3A: Non-Class 1E instrumentation circuits that are conn ected to Class 1E circuits and utilize current lim iting isolation devices. See Figure 8.3-50. Category 3B: Non-Class 1E power cables/wires that are connected to Class 1E power through a series of two Class 1E circuit breakers or fuses.

Category 3C: Non-Class 1E power cables/wires that are supplied Class 1E power through other than two Cla ss 1E isolation devices.

8.3.1.4.4.1.1 Analysis for Category 1A Non-Class 1E Circuits. The postulated events for this category of non-Class 1E instru mentation and control cables (non-Class 1E powered, but a continuing section associated by proximity w ith Class 1E cables/wires) are mechanical, structural, or electrical failu res in the non-Class 1E raceway or equipment during seismic or other degrading events, e.g., mi ssiles. Failure of non-Class 1E raceways and equipment may result in short circuits manifesting as overcurrents in the non-Class 1E cable section routed with Class 1E cables. Class 1E cables can only be effected by thes e failures if circuit protective devices in the non-Class 1E circuits fail to clear the short circuit and sufficient electrical energy exists to cause localized fires or cable insulation failures of Class 1E cables in the Class 1E raceway sections. This condition must occur simultaneously in two redundant division raceways and involve cable s having redundant safe ty functions before plant safety is degraded. The following design features are provided to demonstrate that even with the unlikely events listed above, the effects on safety-related systems are minimized:

a. Overcurrent protective devices (including current limiting) are provided to isolate the cables or wires carrying abnormal currents and limit the effects on the Class 1E cables. In many cases non-Class 1E circui ts routed with Class 1E circuits are protected by Class 1E overcu rrent circuit protective devices. Those devices which are not Class 1E are hi ghly reliable industrial grade equipment and, in general, are the same models as those whic h are qualified to Class 1E requirements;

b. The cable insulation and jacketing are fire retardant pe r IEEE 383-1974 or equivalent (see Section 8.3.3). Cable types are selected and routed according to their voltage level and application;

c. Fire stops are provided at or near th e penetration of all fire-rated barriers, seismic gaps, and entrances to PGCC pa nels (including term ination cabinets).

Penetrations of pressure boundaries are sealed to maintain the pressure rating;

d. The cables routed in instrumenta tion and control raceways are low energy circuits and, as such localized fires or insulation failures are not expected;

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-61 e. Non-Class 1E cables are not allowed to bridge directly between redundant Class 1E raceways (except as allowed by Reference 8.3-2), thus preventing single cable faults from affecting tw o redundant Class 1E divisions; and

f. Pipe whip/jet impingement and missile st udies provide structur al barriers and/or restraints where required to prevent impact on redundant ESF required to mitigate the consequences of these ev ents and safely shutdown the plant.

8.3.1.4.4.1.2 Analysis for Category 1B Non-Class 1E Circuits. This category of non-Class 1E circuits are instru mentation and control cables/wire s that are supplied Class 1E power and have continuing secti ons routed in Class 1E racewa ys. The postulated failures and results are the same as those of Category 1A.

The following design features are provided to minimize the occurrence of this hazard.

a. Those listed under Categor y 1A-b, c, d, e, and f;

b. Class 1E coordinated overcurrent protective devices have been provided for all Category 1B non-Class 1E circ uits to protect Class 1E buses from failures in non-Class 1E loads. Thes e devices may be current-limiting fuses or circuit breakers. See Sections 8.3.1.2.1.1 and 8.3.2.2.1.1

c. These circuits have been designated "prime" downstream of the circuit isolation device and adhere to the same physi cal separation requi rements imposed on Class 1E circuits. Barriers used to comply with Class 1E separation requirements are provided between Division A and Division B raceways that contain redundant prime cables where de sign constraints prevent adequate physical separation of these raceways; and

d. Prime cables are separated the same as Class 1E cables within enclosures. An A prime 1 (A'1) cable is treated like a Division 1 cable and a B'2 cable is treated like a Division 2 cable.

8.3.1.4.4.1.3 Analysis for Category 1C Non-Class 1E Circuits. This category of non-Class 1E circuits are non-Cl ass 1E powered instrumentati on and control circuits that become associated by proximity to Class 1E cables inside enclosures. The analysis for Category 1C is similar to Category 1A. See Section 8.3.1.4.4.1.1.

8.3.1.4.4.1.4 Analysis for Category 2A Non-Class 1E Circuits. This category of non-Class 1E cables consists of power cables that are not supplied power from a Class 1E source and are routed in non-Cla ss 1E raceways, but have a continuing section in Class 1E raceways or enclosures. The analysis for this category is identical to Category 1A except that these circuits are not low energy circuits and under short circuit conditions may provide C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-62 sufficient energy to cause localized cable failures in the Class 1E raceway sections. See Section 8.3.1.4.4.1.1. The justifications for these circuits are as follows:

a. Those as listed under Cate gory 1A-a, b, c, e, and f;

b. A safe shutdown analysis was performed for this category of cables with the following assumptions, gui delines, and results:

1. Non-Class 1E power cables analyzed were those which had a portion of their route with Class 1E power cables;

2. A single non-Class 1E power cable wa s assumed to fau lt. A worst case single failure was assumed in addition to the failures of the Class 1E cables routed with the faulted non-Class 1E cable. Circuit overcurrent interrupting devices (fuse s/breakers) were assume d to clear the fault without damage if the devices were Class 1E;

3. Those non-Class 1E power cables whos e failure resulted in the loss of ability to safely shutdown the plant were identified; and

4. The identified cables were either rerouted or provided with Class 1E circuit protective devices.

c. The 480-V system is high resistance grounded to limit ground fault currents to 10 amps maximum (see Section 8.3.1.1.9). Phase-to-phase faults are not limited;

d. The 6.9-kV and 4.16-kV systems ar e high resistance grounded to limit ground fault currents to 12.5 amps maximum. Ph ase-to-phase faults are not limited;

e. For cable loading in power trays see Section 8.3.1.4.2.2

f. Non-Class 1E 480-V combination motor starters in MCCs are provided current limiting fuses and thermal overload relays which are designed to operate at 1.25 times full load current;

g. Since power circuits are not considered to be low energy non-Class 1E power cables routed in open racew ays (trays) dedicated to non-Class 1E power cables are physically separated from all Class 1E associated cable tr ays with the same requirements specified for physical separa tion of redundant Class 1E cable trays; and

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-63 h. Certain non-Class 1E loads which are normally supplied from a Class 1E source but have no useful pos taccident function are shunt tr ipped from the Class 1E bus by providing a LOCA trip signal to a Class 1E breaker in the non-Class 1E circuit. Those loads that are not tr ipped are assumed to be energized and included in the appropriate bus loading calculation. See Section 8.3.1.4.4.1.7. This removes the potential for Class 1E circuit damage from failures in these non-Class 1E loads during and following these accidents.

8.3.1.4.4.1.5 Analysis for Category 2B Non-Class 1E Circuits. These circuits are non-Class 1E power cables that are supplied power from a Cla ss 1E source, ar e routed in non-Class 1E raceways, and have a continuing section in Cla ss 1E raceways or enclosures.

Justification for these circuits are as follows:

a. Those listed unde r Category 2A, and b. Those listed under Cate gory 1B-b, c, and d.

8.3.1.4.4.1.6 Analysis for Category 3A Non-Class 1E Circuits. The cables in this category consist of data logging a nd display type instrume ntation circuits such as inputs to the analog process computer. These circuits are low energy circuits that are connected to Class 1E signal circuits through current limiting resistance units or current limiting power supplies such that a fault in the non-Class 1E portion of the circuit does not affect opera tion of the Class 1E circuit. These circuits are not identifie d or separated as pr ime circuits downstream of the current limiting units. Downstream of th e current limiting units these circ uits are reviewed to ensure that direct bridging between redundant division raceways does not occur except as allowed by Reference 8.3-2. Additionally, the justifica tions for Category 1A apply.

8.3.1.4.4.1.7 Analysis for Category 3B Non-Class 1E Circuits. The non-Class 1E cables in this category are connected to Class 1E power supplies and supply power to important non-Class 1E loads such as: emergency lighti ng, obstruction lighting, main control room normal lighting, synchronizati on circuits, portions of the standby liquid control system, portions of the source range monitor (SRM) and intermediate range monitor (IRM) systems, TIP system feeders, meteorological tower supervisory, fire protec tion circuits, diesel generator building welding outlets, power panel E-PP-7AZ, power panel E-PP-8AZ, the UPS inverters (IN-1 and IN-4) breaker control circuits fo r accident tripped breakers RCC-CB-P/1A, RCC-CB-P/1B, RCC-CB-P/1C, ROA-CB-FN/1A, ROA-CB-FN/1B, REA-CB-FN/1A, REA-CB-FN/1B, and welding receptacles. To prevent failures in the non-Class 1E loads from effecting the Class 1E power supplies, two-series Class 1E circuit protective devices are provided for these circuits. Down stream of the circuit protective devices the circuits need not be identified or separated as Pr ime, but may be identified as non-Class 1E.

As in Category 3A above, these circuits are review ed to ensure that direct bridging between redundant division raceways does not occur. Additionally, justifica tions a, b, c, and f, of Category 1A apply.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-64 8.3.1.4.4.1.8 Analysis for Category 3C Non-Class 1E Circuits. The non-Class 1E cables in this category connect to non-Class 1E loads to Class 1E power supplies by means other than two-series Class 1E isolation devices. De scription and justification are as follows:

a. The TDAS UPS Inverter (IN-5) which supplies power to the non-Class 1E TDAS loads (computer, remote multiplexers , etc.) is connected to the Class 1E power supply through a single Class 1E circuit breaker and a cable which is identified and routed as Prime to the input of the non-Class 1E inverter.

Downstream of the inverter these TDAS circuits are routed as non-Class 1E and not Prime. This design is justifiable since the TDAS Inverter has inherent design features which limit inverter output current. Current limiting is provided by multiple, inverter internal series circ uit protective devices and an overcurrent sensing network which limits the unit output current to 125% of rated with a downstream fault;

b. The following normally open manual transfer switches connect alternate Class 1E power supplies to non-Class 1E buses whose downstream circuits are

non-Class 1E.

1. Inverter IN-1 alternate supply is identified and routed as Prime to the transfer switch and as non-Cla ss 1E downstream of the switch;

2. 480-V ac bus MC-8A-2C alternate power supply is identified and routed as Prime to the transfer switch; downstream circuits are routed is non-Class 1E; and

3. 480-V ac alternate supply from MC

-7AA to the backup transformer for the cooling water cooling fan is identified and routed as Prime to the transfer switch; downstr eam the circuit is identified and routed as non-Class 1E.

Since the above described Prime circu its are isolated by manual transfer switches which are, by procedure normally open and thus assumed to be open during an accident, it is justifiable to allow downstream circuits to be identified and routed as non-Class 1E, and not Prime; and

c. The security system's critical power comes from a Class 1E source for reliability. The power supply is routed as Prime from a Class 1E circuit protective device at the Class 1E bus to a non-Class 1E bus, E-DP-SS/SL81 with two non-Class 1E breakers. Downstream of E-DP-SS/SL81, the cables are all non-Class 1E security circuits routed in security raceways that contain no

Class 1E circuits. Similarly the Technical Support Center (TSC) receives its power supply from a Class 1E source for reliability. The power supply circuit C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-65 is routed as Prime from a Class 1E circ uit protective device at the Class 1E bus to a non-Class 1E incoming breaker at th e TSC MCC. Downst ream of the TSC incoming breaker the circuits are identified and routed as non-Class 1E. In that the TSC received its power from a singl e Class 1E supply, the design serves, by itself, as a means of separa tion of TSC circuits from re dundant division circuits.

The routing and identification of the ci rcuits downstream of the TSC incoming breaker need only comply with non-Cla ss 1E separation criteria, i.e., no redundant division circuits are within the TSC. As in 3A a bove, these circuits are reviewed to ensure that direct bridging between redundant division raceways does not occur. Additionally, justifications a, b, c, and f of Category 1A apply.

8.3.1.4.4.2 Categories of Associated Circuits Treated as Class 1E. The following categories of associated circuits ex ist and are illustrated in Figure 8.3-51.

Category 4A: Associated instrumentation and control circuits that are connected to non-Class 1E power and routed in Cl ass 1E raceways and/or enclosures and may have a continuing section in a non-Class 1E raceway (Category 1A).

Category 4B: Associated power circuits that are connected to non-Class 1E power and routed in Class 1E raceways a nd/or enclosures and may have a continuing section in a non-Class 1E raceway (Category 2A).

Category 4C: Associated instrumentation and control circuits that are supplied Class 1E power are routed in Class 1E raceways, are not isolated on accident signal, and may have a continuing section in a non-Class 1E raceway (Category 1B).

Category 4D: Associated power circuits that are connect ed to Class 1E power, are routed in Class 1E raceways, are not isolated on accident signal and may have a continuing section in a non-Class 1E raceway (Category 2B).

The design features of all associated circuits are in accordance with Section 8.3.1.4.2.1. The non-associated circuit portions of the cab le routes are anal yzed in Section 8.3.1.4.4.1. 8.3.1.4.4.3 Specific Deviati ons to Separation Criteria - Reactor Protection System Power Supply. See Reference 8.3-2.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-66 8.3.2 DIRECT CURRENT POWER SYSTEMS

8.3.2.1 Description

The principal elements of the Class 1E dc power systems are shown in Figure 8.3-52. The systems consist of three electric ally independent and se parate 125-V batteries (Divisions 1, 2, and 3), two +/-24-V batteries (D ivisions 1 and 2), one 250-V battery (Division 1) and associated auxilia ry equipment.

One non-Class 1E 125-V dc power supply system is provided in the radwaste building to supply non-Class 1E power, contro l, and instrumentation loads.

Two non-Class 1E 125-V dc (Divisions A and B) power supply systems are located at the makeup water pump house to provide local control power.

One non-Class 1E 405-V dc power supply system is provided in building 62 for the security system.

All non-Class 1E loads supplied by the Class 1E dc power system s are connected to Class 1E dc power supplies through Class 1E isolation de vices. Any overcurrent conditions that could occur in the non-Class 1E portions of the system are isolated by the Cl ass 1E devices without affecting the availability of the power supply. These Class 1E protective devi ces are discussed further in Section 8.3.2.2.1.1. Wiring to the non-Class 1E loads from the Class 1E power supplies are designated as prime circuits and are routed in accordance with separation criteria defined in Section 8.3.1.4.

An analysis of the consequences of a total loss of dc buses (Cla ss 1E) S1-1, S1-2 , or S2-1 for operating and shutdown modes is addressed in Chapter 15 accident analyses. The conclusion of this analysis is that previously reporte d limits of minimum critical power ratio (MCPR), peak vessel and main steam line pressures, and peak fuel cladding temperature for the expected operational occurrence category of events would not be exceeded as a result of common power source failures. Furthermore no situation exists where a single bus power failure would prevent plant personnel from achieving a reactor co ld shutdown condition.

This conclusion is based primarily on the analysis results which deli neate that no single bus supplies power to all three shutdown paths. In most cases, single buses are active in only one shutdown path.

Table 8.3-13 indicates the switchgear and MCCs which are supplied with dc control power by the various dc power systems.

The battery chargers for the Divisions 1 and 2 (Class 1E) dc power systems will remain stable while supplying the load even if the batteries ar e disconnected. The load on the charger has to be more than 10% of its rating under this condition. When th e battery is disconnected from the charger, there is a possibility that the ripple in the ch arger output is more than 100 mV.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-67 There are no normal modes of plant operation where the battery will be disconnected from the charger and load. The charger and the batte ry will be connected for applying equalizing charges.

During service and performance tests of the batteries whic h are normally performed during refueling outage, the batteries for 250-V and 1 25-V systems are disconnect ed from the charger and load. For the 24-V system, the charger is shut down for service and performance tests of the batteries. During this period, the 24-V battery carries the load.

Plant maintenance procedures require that the chargers be disconnected from their respective batteries and loads during mainte nance checks of the charger lo w and high voltage level alarms and the high level shunt trip.

The chargers for 250-V and 125-V Divisions 1 a nd 2 dc systems remain stable under this conditi on but additional capacitiv e load is connected to the output of the 24-V charger to stabilize the output.

The design of the battery chargers provides assu rance that safety-relat ed equipment will be protected from damaging overvoltages as a result of faulty charger voltage regulation or operator error by alarms and a high voltage shutdown feature. No rmal system float voltage is 2.25 V per cell. Should the volta ge increase approximately 5 to 8%, a high voltage alarm is sounded. At approximately 10-12% above float voltage, the high voltage shutdown relay trips the charger output breaker, disconnecting the charger from its respective bus, thus protecting the equipment from further voltage increase. The controls for these alarm/trips are located inside the respective batter y charger cabinet precluding inadvertent operator error.

Table 8.3-10 is a summary of the Class 1E battery duty cycles based on an ticipated operations required during LOOP with coincident LOCA conditi ons. A battery duty cycle test is used in conjunction with other criteria to verify battery operability in accordance with Technical Specifications and Licensee Controlled Sp ecifications Surveilla nce Requirements.

8.3.2.1.1 125-Volt Direct Current Divisions 1 and 2 Systems

8.3.2.1.1.1 General. Two separate a nd independent Class 1E, 125-V dc systems are provided to power the safety-related (ESF) load groups of Divisions 1 and

2. Each of the batteries has two, full capacity, battery chargers sized to carry normal and postaccide nt steady dc loads, while simultaneously recharging th e battery from its discharged state (1.81-V per cell) to its fully charged state (charging current has stabilized) within 24 hr. The battery chargers receive 480-V ac input power from their respective Divisions 1 and 2 480-V MCCs. For each division, one charger will be on line while the other will normally be available for service if the on-line charger fails or has to be removed from service.

8.3.2.1.1.2 Batteries. In the event of a loss or interruption of charger 125-V dc output, the station batteries will maintain power to their respec tive dc systems. Th e ampere-hour capacity and short time rating of all batteries are in ac cordance with IEEE 308-1974.

They are capable

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-68 of supplying, (based on duty cycle calculati ons for a simultaneous LOOP and LOCA), dc power required to safely shut down the plant.

The capability of the 125-V Divi sions 1 and 2 batteries to supply SBO loads for a 4-hr coping period is discussed in Appendix 8A. The battery is conservativ ely sized based on the charger not being available for 2 hr even though this condition is not a requirement for any analyzed DBE at CGS.

Tables 8.3-11 and 8.3-12 indicate the duty cycle of the 125-V Divisions 1 and 2 dc load groups following a LOOP with a coincident LOCA.

The 125-V dc, stati on batteries E-B1-1 (Division 1) and E-B1-2 (Division 2) each consist of 58 cells.

The capacity of batteries E-B1-1 and E-B1-2 is 1190 ampere-hours (based on an 8-hr discharge to 1.81 V per cell) which is equivalent to a battery term inal voltage of 105 V dc.

The nominal "float-voltage" for these batteries is 2.25 V per cell, and the "end-of-discharge" voltage is 1.81 V per cell.

8.3.2.1.1.3 Chargers. The chargers for each Divisions 1 and 2 125-V dc load group are supplied from separa te 480-V ac MCCs associated with each division. Each charger is capable of carrying the largest combined demand of the various steady state dc loads for its division while simultaneously recharging th e battery from its discharged state (1.81 V per cell) to its fully charged state (charging current has stabilized) in 24 hr. The charger size and instrumentation conform to the requirements of IEEE 308-1974 and Regulatory Guide 1.32, Revision 2. The chargers are capable of s upplying the 125-V dc pow er requirements during all modes of plant operation. The Divisions 1 and 2 battery chargers (chargers C1-1A and 1B and C1-2A and 2B, respectively) are rated 200 amps dc output. The old 125 V dc charger E-C1-1, (formally Division 1) is disconnected and spared in pl ace for use as temporary power.

8.3.2.1.2 High-Pressure Core Spray (Division 3) 125-Volt Direct Current System

8.3.2.1.2.1 General. The objective of the HPCS 125-V dc (Division 3) system is to provide a reliable, continuous, and independent 125-V dc power source of control and motive power as required for the HPCS system logic, HPCS diesel generator set control and protection, and all Division 3 related control.

Figure 8.3-52 shows the 125-V dc one-line diagram. The system is classified as Class 1E. The Division 3 125-V dc system is inde pendent of all other divisional batteries and there is no manual or automatic connection to any other battery. The battery is not shared with any other unit. The 125-V dc powe r is required for HPCS diesel generator field flashing, control logic, control, and switchi ng functions of 4.16-kV breakers.

Table 8.3-13 indicates the 125-V dc Di vision 3 duty cycle loads required following a LOOP with a coincident HPCS system actuation.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-69 8.3.2.1.2.2 Battery and Charger. The 125-V dc system for th e HPCS power supply has a 58-cell 125-V dc battery, one battery ch arger, and a distribution panel.

The 125-V dc system is designed as Class 1E e quipment in accordance with applicable clauses of IEEE 308-1974. It is designed so that no single failure in th e 125-V dc system will result in conditions that prevent safe shutdown of the plant. The plant design and circuit layout from

these dc systems provide physical separation of the e quipment, cabling, and instrumentation essential to plant safety.

The 125-V dc battery and its charger and distribution panel are shown in Figure 8.3-52. All components of the system are lo cated in the HPCS diesel ge nerating area of the diesel generator building.

8.3.2.1.2.3 Battery Capacity. The ampere-hour capacity (96 AH at 8 hr) and short time rating of the battery are in acco rdance with criteria given in IEEE 308-1974 and are adequate to supply all electrical loads required until ac power is restored for the operation of the battery chargers. The battery is conservatively sized ba sed on the charger not being available for 2 hr even though this condition is not a requirement for any analyzed DBE at CGS. See SBO discussion in Appendix 8A. Capacity is large enough to co pe with LOCA conditions or any other emergency shutdown. E ach distribution circuit is cap able of transmitting sufficient energy to start and operate all re quired loads in that circuit.

The 125-V battery is sized in accordance with the principles set out in IEEE 308-1974.

8.3.2.1.2.4 Charger. The charger for the 125-V dc sy stem is supplied by the 480-V HPCS MCC (via the engine generator c ontrol panel). It is rated 50 am p dc and is capable of carrying the largest combined demand of the various direct current system load s while simultaneously recharging the battery from its discharged state (1.81 V per ce ll which is equivalent to a battery terminal voltage of 105 V dc) to a fully charged st ate (charging current has stabilized) within 24 hr.

During an ESBO scenario that extends beyond the 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> coping time of a SBO or during a non-DBA LOOP scenario, the Cla ss 1E 125-V Division 1 and Division 2 batte ry chargers may be supplied by alternative sources. 1) The Division 3 HPCS di esel generator may be cross connected from SM-2 to either Division 1 through SM-1 or Division 2 through SM-3. 2) The opposite division may be connected to a 400 kW diesel genera tor connected to either the Division 1 or the Divi sion 2 480V safety bus.

8.3.2.1.3 +/-24-Volt Direct Current (Divisions 1 and 2) Systems

8.3.2.1.3.1 General. Two separate and independent Class 1E, +/-24-V dc systems are provided to power the Divisions 1 and 2 main control room equipm ent as indicated in Figure 8.3-52. Each +/-24-V battery has two 12-cell 24-V banks connected in series with

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-70 common point grounded. Each bank is provide d with a solid-state battery charger which receives 120-V ac input power from its respective Division 1 or 2 120-V ac vital power panel.

8.3.2.1.3.2 Batteries. In the event of a loss or interruption of charger 24-V dc (plus or minus) output, the batteries will maintain power to their respective dc systems for at least 2 hr. The ampere-hour capacity of each battery is 150 AH at 8 hr. This exceeds the NSSS vendor's requirements for units sized 60 AH at 4 hr. Circuit loads are indicated in Figure 8.3-52 , dc one line diagram.

Table 8.3-10 indicates the duty cycle of the 24-V Division 1 and 2 loads following a LOOP with a coincident LOCA.

8.3.2.1.3.3 Chargers. The chargers for each +/-24-V dc load group (four chargers total) are supplied from 120-V ac vital power panels associat ed with each division.

Each charger is capable of carrying the largest combined demand of the various steady state dc loads while simultaneously restoring the ba ttery from its discharged state (1.75 V per cell which is equivalent to a battery terminal voltage of 21 V dc) to its full y charged state (charging current has stability) in 24 hr. The charger size and instrumentati on conform to the requirements of IEEE 308-1974 and Regulatory Guid e 1.32, Revision 2. The +/-2 4-V dc Division 1 (CO-1A, CO-1B) and Division 2 (CO-2A, CO-2B) ch argers are rated 25 amps dc output.

8.3.2.1.4 250-Volt Direct Curre nt (Division 1) System

8.3.2.1.4.1 General. One Class 1E 250-V dc system is provided to su pply 120/240-V ac power on an uninterruptible basis to plant controls, instrument ation, computer and communication equipment via a solid state inverter. It also supplies 250-V dc power directly to reactor core isolation cooling (RCIC), se lected RHR and reactor water cleanup (RWCU) system MOVs and the main and feedwater turbines auxiliary oil pumps. See Figures 8.3-5 and 8.3-52.

The cabling to the main 250-V dc distribution pane l, the panel, battery, charger, and incoming 480-V ac normal source are Class 1E (Division 1).

8.3.2.1.4.2 Battery. In the event of a loss or interrup tion of charger 250-V dc output, the battery will maintain power to its dc system loads. The amp ra ting and short time rating of the battery is in accordance with IEE E 308-1974. The battery is capable of supplying (based on duty cycle calculations for a si multaneous LOOP and LOCA) dc pow er required to safely shut down the plant. The battery is conservatively sized based on the charge r not being available for 2 hr even though this condition is not a requirement for any analyzed DBE at CGS.

Table 8.3-14 indicates the 250-V dc duty cycle lo ads required following a LOOP with coincident LOCA. The battery c onsists of two parall el strings of 116 cells (total of 232 cells) and has a capacity of 2380 AH (based on an 8 hr discharge to 1.81 V per cell which is equivalent to a battery te rminal voltage of 210 V dc).

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-71 8.3.2.1.4.3 Charger. The charger for the 250-V dc sy stem is supplied from a Class 1E 480-V ac MCC and is capable of carrying the largest combined demand of the various steady-state loads while simultaneously restoring the battery from its di scharged state (1.81 V per cell) to its fully charged state in 24 hr. The ch arger size and instrumentation conform to the requirements of IEEE 308-1974 and Regulatory Guide 1.32, Revi sion 2. The active charger (C2-1) is rated at 400 amps output.

During an ESBO scenario that extends beyond the 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> coping time of a SBO or during a non-DBA LOOP scenario, the Cla ss 1E 250-V Division 1 battery charger may be supplied by alternative sources. The Divisi on 3 HPCS diesel generator may be cross connected from SM-2 to Division 1 through SM-1 or a 400 kW diesel generator conn ected to the Division 1 480V safety bus.

8.3.2.1.5 Non-Class 1E Direct Current Systems

8.3.2.1.5.1 Main Plant 125-Volt Direct Current (Non-Class 1E) System.

8.3.2.1.5.1.1 General. The main plant non-Class 1E 125-V dc system is designed to supply the majority of the plant non-Class 1E 125-V dc loads. Selected 125-V dc non-Class 1E loads are supplied by one or the other of two Class 1E 125-V dc batteries thr ough isolation devices.

The battery is provided a solid-state battery charger which is fed from a non-Class 1E 480-V ac source. During an ESBO or a non-DB A LOOP, its source power may be transferred from its normal power source to a Division 2 power source.

8.3.2.1.5.1.1.1 Battery (B1-7). The battery has 58 cells which are floated to 2.25 V per cell.

It is rated at 1190 amp hr at an 8-hr discharge rate down to 1.81 V per cell.

8.3.2.1.5.1.1.2 Charger (C1-7). The battery charger is a th ree phase, thyristor controlled, constant potential battery charge

r. It is unique in that it has two separate power supply sources. It is normally powered from MC-6 B. However, during an ESBO or a non-DBA LOOP, its source power may be transferred from MC-6B to MC-8A. This transfer is accomplished by repositioning two locked, manual transfer switches located near the battery charger. The keys for the locked manual transfer switches are administratively controlled.

8.3.2.1.5.2 Makeup Pump House 125-Volt Direct Cu rrent (Non-Class 1E) System.

8.3.2.1.5.2.1 General. The Divisions A and B 125-V dc non-Class 1E loads of the makeup water pump house are fed from two non-Class 1E batteries.

B1-3 and B1-4. Each battery is provide d with a charger which is fed from a 480/120-V transformer connected to an MCC of a compatible division.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-07-030 8.3-72 8.3.2.1.5.2.2 Batteri es (B1-3 and B1-4). The batteries are rated for 94 amp-hr based on an 8-hr discharge rate of 1.81 V per cell.

8.3.2.1.5.2.3 Charge rs (C1-3 and C1-4). The battery chargers ar e each sized 25 amps at 125 V dc.

8.3.2.1.5.3 405-Volt Direct Cu rrent (Non-Class 1E) System.

8.3.2.1.5.3.1 General. The 405-V dc system is located in building 62. It is provided with an inverter/charger (IN-4) which is supp lied from a Class 1E 480-V ac source.

8.3.2.1.5.3.2 Battery (B1-6). The battery is made up of 180 cells in se ries and floated at 2.25 V per cell. Its 1-hr discharge rate is 620 amps down to a minimum voltage of 1.75 V per cell. The 1-hr emergency load cycle consis ts of 366 amps for the first minute, 593 amps during the second minute, and 406 amps from the third to the sixtieth minute.

8.3.2.1.5.3.3 Charger. The battery charger portion of the security system inverter (IN-4) is sized to supply the emergency and normal loads and at the same time ch arge the battery from its minimum charge of 1.75 V per cell to its fully charged state in 24 hr.

8.3.2.1.6 Ventilation

Batteries for Divisions 1 and 2 are located in separate rooms within the radwaste/control building. The battery for Division 3 is located in the diesel gene rator building. Each room is ventilated by separate exhaust fans to remove gases produced during the battery charging cycle. Battery rooms have no common ventilation ducts. Failure of the HVAC system of each battery room is annunciated. A portable exhaust fan is provided to service a battery room with

a failed ventilation system.

8.3.2.1.7 Testing and Maintenance

8.3.2.1.7.1 Periodic Maintenance Testing. Periodic maintenance tests will be performed in accordance with IEEE 308-1974, 450-2002, with the exception noted in Section 8.3.2.1.7.2 , and Regulatory Guide 1.32, Revisi on 2, on all components of the dc systems to determine the condition of each individual subsystem. Battery and battery chargers will be tested and inspected in accordance with Technical Specifications requirements. The following tests/inspections shall be made:

a. Visual inspection of syst em and electrical connections;

b. Liquid level of each cell;

c. Voltage and temperature of the pilot cell of each battery;

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-07-030 8.3-73

d. The voltage and specific gravity of each cell, and the temper ature of selected cells;

e. Performance discharge and service tests will be performed in accordance with IEEE 450-2002. The voltage of each cell will be taken and logged after discharge; and

f. Battery voltage and charging current will be measured and logged on a weekly basis.

For Class 1E dc system components, the manuf acturer has either perf ormed operational tests or calculated data which substantiate the capability of the equipment to carry their dc postaccident (worst case) loads. Seismic and environmental qualification is discussed in Sections 3.10 and 3.11.

Preoperational testing, as described in Section 14.2 , was performed to verify that all components, automatic and manual controls, and functions of the dc power systems perform as required.

8.3.2.1.7.2 Exceptions to In stitute of Electrical and El ectronics Engineers Standards. The following exceptions are taken to the require ments listed in Table 2 of IEEE 308-1974:

a. Battery float charging current will be measured in lieu of pilot cell specific gravity. Charging current and pilot ce ll voltage will be measured monthly versus every week as recommended in the standard;

b. The cell voltage of all the cells will be measured quarterly versus every month as recommended in the standard;

c. Specific gravity of all cells will be measured annually versus every month as recommended in the standard;

d. A visual inspection will be perfor med monthly versus every week as recommended in the standard; and

e. A performance test will be performed at least once every 5 years versus every 3 years as recommended in the standard.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-07-030 8.3-74 The following exception is taken to the requirements listed in IEEE 450-2002.

a. Water will be added when any cell elect rolyte reaches the lo w-level line to bring all cells to the middle of high-low mark ve rsus to bring all cells to the high-level line as recommended by step a of Section 5.3.1 of IEEE 450-2002.

8.3.2.2 Analysis

8.3.2.2.1 Compliance to Criteria 8.3.2.2.1.1 General. In accordance with GDC 17, IEEE 308-1974, and Regulatory Guide 1.6, Revision 0, redundancy and independence of dc power sources and distribution equipment are provided by the separa te Divisions 1 and 2 (Class 1E) battery systems. Each dc system has sufficient capacity to supply the dc power requirements of the redundant (Divisions 1 and 2) load grou ps for at least 2 hr following loss of power to the charger coincident with a DBA. This redundancy extends from the ba tteries and battery chargers through distribution panels, cabling, switchgear, and protective devices.

The HPCS dc power system is a separate and independent safety-related (Class 1E) system comprising Division 3. The Division 3 dc loads serve a separate safety function not provided by Division 1 or 2 directly. However, the automatic depressurization sy stem (ADS), working with the LPCS, or low-pressure coolant injection (LPCI) system s supplied via Di visions 1 and 2, can compensate for the loss of the entire Division 3 system.

There are no electrical connecti ons between the dc buses for Divi sion 1, 2, and 3, and there is no automatic or manual transfer of load between divisions. The elimina tion of ties between dc systems prevents a single failure from affecting more than one division.

Selected non-Class 1E loads are connected to the Cl ass 1E power supplies. This does not degrade the Class 1E power supplies based on the following:

a. All non-Class 1E loads are connected to Class 1E power supplies through Class 1E isolation devices.

Any overcurrent condition that could occur in the non-Class 1E portions of the system are isolated by these Class 1E devices without affecting the availability of the power supply. These Class 1E protective devices ar e either a circuit breaker shunt, tripped on a LOCA signal, or one or two series overcurrent devices such as fuses or circuit breakers. The overcurrent devices trip on overloads, line-to-line and double line-to-ground faults on all dc systems. They also trip on single line, line-to-line ground faults on solidly grounded systems;

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-07-030 8.3-75 b. Periodic surveillance procedures ensure protective device trip setpoints to be within acceptable limits for proper coordination with the main circuit protective device;

c. Wiring to the non-Class 1E loads from the Class 1E power supplies is designated as prime circuits , and is routed in accordance with separation criteria defined in Section 8.3.1.4; and

d. The Class 1E power supp lies are sized adequately to supply all Class 1E and non-Class 1E loads connected to them.

8.3.2.2.1.2 Divisions 1 and 2 125-Volt, +/-24-Volt, and 250-Volt Direct Current Systems. The Divisions 1 and 2 dc power systems have been designed in compliance with IEEE 308-1974. Components of th e systems are lo cated in the radwaste/control building, a Seismic Category I structure. This ensures that any design basis event as listed in IEEE 308-1974, Table I, will not cause loss of dc power and jeopardize the safety of the reactor or cause damage to the reactor coolant system. The dc buses and the associated equipment are located such that redundant counterparts are physically separated from each other. There are no dc ties between redundant ESF equipment su ch as switchgear or motors.

Therefore, no single failure of any dc component can adversel y affect the operation of the redundant dc systems.

The chargers are on diesel generator supplied buses so that during LOOP, with diesel generators operating, the batterie s will be required to carry their loads for short periods only. Alarms are provided in the main control room for low dc bus voltage on the 125-V and 250-V buses.

Low +/-24-V dc alarms are communicated via the main control room computer.

The Divisions 1 and 2 dc power systems satisf y the requirements of Regulatory Guide 1.32, Revision 2, not only in their adherence to IEEE 308-1974 but also as follows:

a. The battery chargers are si zed as described in Section 8.3.2.1 to meet load and recharging requirements, and

b. Battery performance discharge tests a nd battery service tests are scheduled in accordance with IEEE 450-2002.

The dc power systems are designed to permit periodic inspection and test of important areas such as wiring, insulation, connections, and switchboards, and thus comply with GDC 18.

Control room instrumentation and alarms are provided for each battery and battery charger to monitor the status of each power supply in accordance w ith IEEE 308-1974 and Regulatory C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORT December 2011 LDCN-11-012 8.3-76 Guide 1.47. This instrumentation includes indi cation of the main bus voltage, battery current (charge and discharge

), and battery charger current. Alarms through the control room annunciator and computer are provided fo r the following abnormal conditions: bus undervoltage, dc system ground fault (for ungrounded systems), ba ttery fuse blown, battery charger over/undervoltage , and battery charger ac failure.

Charger and battery disconnect switches are provided with position indication and group alarm in the control room.

Battery high discharge rate is not separately alarmed. In the absence of an electrical fault and with battery charger available, all normal and emergency steady state loads are carried by the battery charger. For the 125-Volt and 250-Volt Direct Current Systems, the battery charger operates in a current-limiting mode of 115% of its full load rating and any overcurrent in excess is supplied by the battery. For the 24-Volt Direct Current Systems, the battery charger operates in a current-limiting mode between 110% to 125% of its full load rating and any overcurrent in excess is supplied by the battery. However, the feeder circ uit fuses are sized to trip on overcurrents of this magnitude, there by preventing battery high discharge current to continue to the point of degradi ng the system. Annunciation of the isolated Class 1E circuit is made for each connected load. Failure of the battery charger also causes a battery high discharge as discussed above.

8.3.2.2.1.3 High-Pressure Core Spray (Division 3) 125-Volt Direct Current System. The 480-V ac feed to the HPCS battery charger is from the HPCS MCC via the engine generator control panel. Separation betw een Division 3 and other independent systems is maintained and the power provided to the chargers can be from either offsite or onsite sources. The HPCS dc system is arranged so that the probability of a sy stem failure resulting in loss of dc power is extremely low. Important system components are either self-alarming on failure or capable of being tested during service to detect faults. All abnormal conditions of selected system parameters important to surveilla nce of the system annunciate in the main control room. Cross connections with othe r independent 125-V dc systems do not exist.

Control room instrumentation and alarms for the HPCS are similar to those of the Divisions 1 and 2 dc systems as discussed in Section 8.3.2.2.1.2.

Components of the system are lo cated in the diesel generator building, a Seismic Category I structure.

The dc power supply to switchgear circuit breakers in the Division 3 load group is from the Division 3 battery. There are no connections between dc syst ems of different divisions, thereby ensuring that no single failure in one dc system can affect power systems of other divisions.

8.3.2.2.1.4 Non-Class 1E Direct Current Systems. There are no specific safety design requirements for the non-Class 1E dc systems other than those required for a reliable operation and for good system operability and maintainability.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-77 8.3.2.2.2 Service Environment

All components of Class 1E dc systems, with the exception of some distribution and control cables and control devices, are locate d outside of primary containment.

Components located in normally air conditioned areas are either designed to continue operating in the event of loss of air conditioning or a Class 1E air conditi oning system is provided (see Section 3.11.4). See Section 3.11 for discussion of environmental design and analysis of Cl ass 1E electrical components for postaccident conditions and to Section 3.10 for seismic conditions.

8.3.2.3 Physical Identif ication of Safety-Relat ed (Class 1E) Equipment

The safety-related equipment for each division of the Class 1E dc power system is discussed in Section 8.3.1.3.

8.3.2.4 Independence of Electrical Divisions

Spatial separation and/or placemen t of physical barriers between di fferent divisions of the dc power system is used as a protection against lo ss of the redundant dc load groups from a single event. Electrical separation is provided as described in Section 8.3.1.4.

The Class 1E batteries and battery chargers of redundant divisions are located separately from one another in Seismi c Category I rooms with no common ventilation connec tions. Redundant dc distribution panels and 480-V MCCs are located at sufficient distance apart to prevent any single credible event from causi ng the loss of more than one pa nel or MCC. Cable trays, cables, and control circuitry for th e three divisions (1, 2, and 3) are also separated as described in Section 8.3.1.4.

8.3.3 FIRE PROTECTION FOR CABLE SYSTEMS

8.3.3.1 Resistance of Cables to Combustion

See Section F.3.

8.3.3.2 Localization of Fires

See Section F.3.

8.3.3.3 Detection a nd Protection Systems

See Section F.3.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 8.3-78 8.

3.4 REFERENCES

8.3-1 NEDO-10905-3, HPCS Po wer Supply Topical Report.

8.3-2 WNP-2 Electrical Se paration Design Requirements (Design Specification for Division 200, Section 201).

8.3-3 NEDO-10466A, PGCC Li censing Topical Report.

8.3-4 "AC Electrical Distribution System,"

Design Basis Document, Section 317-AC.

8.3-5 "DC Electrical Distribution System,"

Design Basis Document, Section 317-DC.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORTDecember 2011LDCN-11-037 8.3-79 Table 8.3-1 Division 1 Diesel Generator Loading Automatic Loading of Engineered Safety Systems Bus Shutdown With Loss of Offsite Power LOCA With Loss of Offsite Power Item Description No. on Bus Total hp/kW Connected to Bus No. Req'dPart of Set P/O Time to Start a Time to Stop kW No. Req'dPart of Set P/O Time to Start a Time to Stop kW 1)Motor operated valves b Set 200.0 kW Set 0 sec (c) --- Set 0 sec (c) ---

2)Emergency lighting and power panels d Set 98 kW Set 0 sec (e) 98 Set 0 sec (e) 91 3)Power panels (1E) Set 47.3 kW Set 0 sec (e) 47.3 Set 0 sec (e) 47.3 4)Diesel auxiliaries and HVAC Set 146.2 kW Set 0 sec e,f (e,f) 146.2 Set 0 sec e,f (e,f) 146.2 5)Low pressure core spray water leg pump 1 15/5.9 kW 1 0 sec e (e) 5.9 1 0 sec e (e) 5.9 6)Standby liquid control pump 1 40/29.7 kW --- --- --- --- --- --- --- --- 7)Reactor core isolation cooling water leg pump 1 15/5.8 kW 1 0 sec f (f) 5.8 1 0 sec f (f) 5.8 8)Fuel pool recirculation pump Set 55/39.2 kW Set 0 sec f (e) 39.2 Set 0 sec f (e) 39.2 9)Plant service water pump A d 1 1500/1176.7 kW1 10 sec (e) 1176.7 --- --- --- --- 10)Low-pressure core spray pump 1 1500/1180.8 kW--- --- --- --- 1 0 sec (e) 1180.8 11)Residual heat removal pump A 1 800/643.8 kW 1 10 min e (e) (643.8) 1 5 sec (e) 643.8 12)Standby service water pump 1 1750/1292.8 kW1 (g) (e) 1292.8 1 (g) (e) 1292.8 13)Cooling tower makeup water pump d 2 1600/1280.3 kW1 (e,h) (e) (640.2) --- --- --- ---

14)Control rod drive pump d 1 250/204 kW 1 (e) (e) (204) --- --- --- ---

15)Reactor closed cooling pump d 1 200/161.3 kW 1 0 sec (e) 161.3 --- --- --- --- 16)Load center transformer losses TR-7/71 and -7/73 2 40.0 kW 2 0 sec Cont 40.0 2 0 sec Cont 40.3 17)250-V battery charger 1 82.0 kW 1 0 sec (e) 82.0 1 0 sec (e) 82.0 18)125-V battery charger 1 28.0 kW 1 0 sec (e) 28.0 1 0 sec (e) 28.0 19)Uninterruptible power supply d E-IN-1 1 27.6 kW 1 0 sec (e) 27.6 1 0 sec (e) 27.6 20)Standby gas treatment fans and heater coils 2 2 50/47.6 kW 45.5 kW ---

--- ---

--- ---

--- ---

--- 1 2 30 sec 20 sec (e) (f) 47.6 45.5 21)Reactor protection system motor-generator set d 1 25/20.2 kW 1 0 sec (e) 20.2 1 (e) (e) 20.2

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORTDecember 2011LDCN-11-037 8.3-80 Table 8.3-1 Division 1 Diesel Generator Loading Automatic Loading of Engineered Safety Systems Bus (Continued)

Shutdown With Loss of Offsite Power LOCA With Loss of Offsite Power Item Description No. on Bus Total hp/kW Connected to Bus No. Req'dPart of Set P/O Time to Start a Time to Stop kW No. Req'dPart of Set P/O Time to Start a Time to Stop kW 22)Drywell cooling and fans Set 292.5/241.4 kW P/O Set 0 sec (e) 32.3 P/O Set 0 sec (e) 32.3 23)Control air compressor d 1 103/81.8 kW 1 0 sec (e) 81.8 1 0 sec (e) 81.8 24)Reactor building electrical equipment HVAC Set 338.5 kW Set 0 sec f (e) 13.4 Set 0 sec f (e) 20.9 25)Control building electrical equipment HVAC Set 253.7 kW Set 0 sec e,f (e) 115.0 Set 0 sec e,f (e) 114.0 26)Makeup water pump house electrical equipment HVAC d Set 80 kW Set (e,h) (e) (80) --- --- --- --- 27)Standby service water pump house electrical equipment HVAC Set 38.4 kW Set 0 sec (e) 38.4 Set 0 sec (e) 38.4 28)Control room emergency chiller i Set 134.8 kW Set 0 sec (f) 134.8 Set 0 sec (f) 134.8 29)Security system power panels d Set 77.7 kW Set 0 sec (e) 77.7 Set 0 sec (e) 77.7 30)TSC building electric equipment and heaters Set 92.2 kW Set 0 sec (e) 92.2 Set 0 sec (f) 82.2 31)Miscellaneous auxiliaries --- 8.2 kW --- 0 sec (e) 8.2 Set 0 sec (e) 8.2 Total automatically applied 3764.8 Total automatically applied 4334.3 ( ) kW figures in parenthesis are for manually applied loads not added to total automatically applied loads.

a Time to start after bus voltage frequency have been established. Maximum time after signal to start generator for voltage to be established is 15 sec.

b Intermittent loads not included as long-term loading.

c Motors stop automatically when valve action is completed.

d Items are non-Class 1E.

e Start and/or stop manually.

f Start and/or stop automatically with associated pump or diesel, pressure, temperature switch, or flow.

g SW start time (after bus energization) is the sum of SW start timer (20 sec) and SW return valve open time to actuate the limit switch permissive.

h Load can be manually applied after the operator determines there is sufficient generator capacity.

i Operates automatically on chilled water demand.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORTDecember 2011LDCN-11-037 8.3-81 Table 8.3-2 Division 2 Diesel Generator Loading Automatic Loading of Engineered Safety Systems Bus Shutdown With Loss of Offsite Power LOCA With Loss of Offsite Power Item Description No. on Bus Total hp/kW Connected to Bus No. Req'dPart of Set P/O Time to Start a Time to Stop kW No. Req'dPart of Set P/O Time to Start a Time to Stop kW 1)Motor operated valves b Set 200.0 kW Set 0 sec (c) --- Set 0 sec (c) ---

2)Emergency lighting and power panels d Set 115.0 kW Set 0 sec (e) 115.0 Set 0 sec (e) 107.4 3)Power panels (1E) Set 27.0 kW Set 0 sec (e) 27.0 Set 0 sec (e)27.0 4)Diesel auxiliaries and HVAC Set 179.6 kW Set 0 sec e,f (f) 179.6 Set 0 sec e,f (e,f) 179.6 5)Residual heat removal water leg pump 1 15/6.0 kW 1 0 sec (e) 6.0 1 0 sec (e)6.0 6)Standby liquid control pump 1 40/29.7 kW --- --- --- --- --- --- --- --- 7)Standby liquid control tank heaters 2 50 kW 1 0 sec f (f) 10.0 1 0 sec f (f) 10.0 8)Fuel pool cooling and cleanup system Set 39.2 kW P/O set 0 sec f (e) 39.2 P/O set 0 sec f (e) 39.2 9)Plant service water pump B d 1 1500/1176.7 kW 1 10 sec (e) 1176.7 --- --- --- --- 10)Residual heat removal pump C 1 800/643.8 kW 1 (e,f)(e) (643.8) 1 0 sec (e)643.8 11)Standby service water pump 1 1750/1312.0 kW 1 (g) (e) 1312.0 1 (g) (e)1312.0 12)Cooling tower makeup water pump d 2 1600/1280.3 kW 1 (e,h) (e) (640.2) --- --- --- ---

13)Control rod drive pump d 1 250/204 kW 1 (e) (e) (204) --- --- --- ---

14)Reactor closed cooling pump d 2 400/322.6 kW 1 0 sec (e) 161.3 --- --- --- ---

15)Load Center Transformer Losses TR-8/81 and -8/83 d 2 45/39.0 kW 2 0 sec Cont 39.1 2 0 sec Cont 38.0 16)125-V battery charger 1 26.3 kW 1 0 sec (e) 26.3 1 0 sec (e)26.3 17)Standby gas treatment fans and heater coils 2 2 50/47.6 kW 45.5 kW ---

--- ---

--- ---

--- ---

--- 1 2 30 sec 20 sec (e)(f) 47.6 45.5 18)Reactor protection system motor-generator set 1 25/20.2 kW 1 0 sec (e) 20.2 1 (e) (e)20.2 19)Drywell cooling and fans Set 347.5/41.1 kW P/O set 0 sec (e) 41.1 P/O set 0 sec (e)41.1 C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORTDecember 2011LDCN-11-037 8.3-82 Table 8.3-2 Division 2 Diesel Generator Loading Automatic Loading of Engineered Safety Systems Bus (Continued)

Shutdown With Loss of Offsite Power LOCA With Loss of Offsite Power Item Description No. on Bus Total hp/kW Connected to Bus No. Req'dPart of Set P/O Time to Start a Time to Stop kW No. Req'dPart of Set P/O Time to Start a Time to Stop kW 20)Control air compressor and dryers d 1 100/78.9 kW 1 0 sec (e) 78.9 1 0 sec (e) 78.9 21)Reactor building electrical equipment, HVAC Set 371 kW Set 0 sec f (e)11.3 Set 0 sec f (e) 17 22)Control building electrical equipment, HVAC Set 193 kW Set 0 sec f (e)99.3 Set 0 sec e (e) 99.3 23)Makeup water pump house electrical equipment HVAC d Set 93.1 kW Set (e,h) (e) (93.1) --- --- --- --- 24)Standby service water pump house Set 40.9 kW Set 0 sec (e) 40.9 Set 0 sec (e) 40.9 25)Control room emergency chiller i Set 134.8 kW Set 0 sec (f) 134.8 Set 0 sec (f) 134.8 26)Uninterruptible power supply d E-IN-5 1 52.1 kW 1 0 sec (e)52.1 1 0 sec (e) 52.1 27)Security system power panels d Set 155.7 kW Set 0 sec (e)155.7 Set 0 sec (e) 155.7 28)Miscellaneous auxiliaries --- 9.1 kW --- 0 sec (e) 9.1 --- 0 sec (e) 9.1 29)Residual heat removal pump B 1 800/632.9 kW --- --- --- --- 1 5 sec (e) 632.9 Total automatically applied 3735.6 Total automatically applied 3764.4

( ) kW Figures in parenthesis are for manual applied loads not added to the total automatically applied loads.

a Time to start after bus voltage frequency have been established. Maximum time after signal to start generator for voltage to be established is 15 sec.

b Intermittent loads not included as long-term loading.

c Motors stop automatically when valve action is completed.

dItems are non-Class 1E.

eStart and/or stop manually.

f Start and/or stop automatically with associated pump or diesel, pressure, temperature switch, or flow.

g SW start time (after bus energization) is the sum of SW start timer (20 sec) and SW return valve open time to actuate the limit switch permissive.

h Load can be manually applied after the operator determines there is sufficient generator capacity.

iOperates automatically on chilled water demand.

C OLUMBIA G ENERATING S TATION Amendment 61 F INAL S AFETY A NALYSIS R EPORTDecember 2011LDCN-11-037 8.3-83 Table 8.3-3 Division 3 Diesel Generator Loading Automatic Loading of Engineered Safety Systems Bus Shutdown With Loss of Offsite Power LOCA With Loss of Offsite Power Item Description No. on Bus Total hp/kW Connected to Bus No. Req'dPart of Set P/O Time to Start a Time to Stop kW No. Req'd Part ofSet P/O Time to Start a Time to Stop kW 1)High-pressure core spray pump (HPCS-P-1) 1 3000/2306.7 kW--- --- --- --- 1 0 sec (b) 2306.7 2)Motor operated valves c Set 77/62 kW --- --- --- --- Set 0 sec (b) --- 3)High-pressure core spray water leg pump (HPCS-P-3) 1 15/12.8 kW 1 --- (b) 12.8 1 (b) (b) 12.8 4)High-pressure core spray service water pump (HPCS-P-2)1 60/49.6 kW 1 0 sec (b) 49.6 1 0 sec (b) 49.6 5)Auxiliary panel (E-CP-DG/CP3) 1 3.5 kW 1 0 sec (d) 3.5 1 0 sec (d) 3.5 6)Diesel generator room exhaust fan (DEA-FN-31) 1 50/40.8 kW 1 (d) (d) 40.8 1 (d) (d) 40.8 7)Supply fans (DMA-FN-31) 2 32/22.7 kW 1 (d) (d) 22.7 2 (d) (d) 22.7 8)Fan coil unit (RRA-FN-4) 1 10/8.4 kW --- --- --- --- 1 0 sec (d) 8.4 9)Instrument and control power (E-PP-4A) Pnl 2.4 kW Pnl 0 sec (b) 2.4 Pnl 0 sec (b) 2.4 10)Lighting panel (E-ELP-4A) f Pnl 9.3 kW Pnl 0 sec (b) 9.3 Pnl 0 sec (b) 9.3 11)Miscellaneous auxiliary (DO-P-2, DLO-P-12, POA-FN-2A) Set 4 kW Set 0 sec (b) 2.2 Set 0 sec (b) 4 12)Load center, transformer losses (E-TR-4/41) 1 7.0 kW 1 0 sec --- 6.0 1 0 sec --- 6.5 13)High-pressure core spray diesel room heater (DMA-EHC-32) 1 35 kW 1 0 sec (d) 35.0 1 0 sec (d) 35.0 e 14)DMA supply fan (DMA-FN-32) 1 11.8 kW 1 0 sec (b) 11.8 1 0 sec (b) 11.8 15)Day tank room exhaust fan (DEA-FN-32) 1 0.5 kW 1 (b) (b) 0.5 1 (b) (b) 0.5 16)High-pressure core spray oil pump room heater (DRA-EUH-31) 1 7.5 kW 1 0 sec (d) 7.5 1 0 sec (d) 7.5 e Total 204.1 kW Total 2521.5 kW a Time to start after bus voltage frequency have been established. Maximum time after signal to start generator for voltage to be established is 15 sec.

b Start and/or stop manually.

c Intermittent loads not included as long-term loading.

d Start and/or stop automatically with associated pump or diesel, pressure, temperature switch, or flow.

e Due to heat dissipation from the diesel, the room temperature exceeds 70F (thermostat settings for DMA-EHC-32 and DRA-EUH-31 are 70 F and 50F, respectively) within a few minutes. Hence, DMA-EHC-32 and DRA-EUH-31 are switched off within a few minutes. Therefore, these heaters are short-term load. However, for a conservative approach, these heater loads are included in the diesel loading.

f Non-Class 1E.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8.3-84 Table 8.3-4

Motor and Motor Starte r Voltage Requirements Minimum Requirement Maximum Capability Equipment Nameplate Voltage Voltage  % NPV Voltage  % NPV 6.9-kV motors (continuous operation) 6600 V 5940 90 7260 110 4.16-kV motors (continuous operation) 4000 V 3600 90 4400 110 480-V motors (continuous operation) 460 V 414 90 506 110 480-V starters (pickup) 480 V 341-408 a 71-85 528 110 480-V starters (holding) 480 99V 264 55 --- ---

a Minimum pickup voltage vari es between different manufac turers and model types.

Notes:

1. NPV indicates nameplate voltage of motors or starters for the particular voltage level.

2. Deviation from the minimum voltage requi rements is permitted for Class 1E motors provided an analysis is performed and documented, to demonstrate that the motors can perform their safety function with the voltage supplied.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8.3-85 Table 8.3-5 Divisions 1 and 2 Standby Di e s el Gen e rator Annunciators Location Annunciatio n a Local MC R b 1. Diesel g e nerator breaker 7-DG1 (8-DG2) trip

--- X 2. Diesel g e nerator breaker 7

-DG1 (8-D G2) over c urrent lockou t c --- X 3. Diesel generator breaker DG1-7 (DG2-8) close circuit undervoltage/tes t c --- X 4. Diesel g e nerator breaker DG1-7 (DG2-8) trip

--- X 5. Diesel generator No. 1 (N o. 2) ove r s peed trip X X 6. Diesel g e nerator No. 1 (No. 2) lockou t d --- X 7. Diesel g e nerator No. 1 (No. 2) not in auto start

--- X 8. Diesel generator breaker DG 1-7 (DG2-8) switch in local or remote --- X 9. Diesel generator No. 1 (N o. 2) failed to start X X 10. Diesel g e nerator 7-DG1 (8-DG2) ground

--- X 11. Diesel g e nerator No. 1 (N o. 2) generator ground

--- X 12. Diesel g e nerator No. 1 (No.

2) generator field ground

--- X 13. Diesel g e nerator No. 1 (No. 2) local dc control power failure

--- X 14. Diesel generator No. 1 (N o. 2) vibr a tion high X X 15. Diesel g e nerator No. 1 (No. 2) stat o r bearing temperature high

--- X 16. Diesel generator No. 1 (No.

2) day t a nk oil level high X X 17. Diesel generator No. 1 (No.

2) day t a nk oil level low X X 18. Diesel g e nerator No. 1 (No. 2) storage tank oil level high

--- X 19. Diesel g e nerator No. 1 (No.

2) storage tank oil level low

--- X 20. Diesel g enerator No. 1 (No. 2) cable cooling flow low

--- X 21. Diesel g e nerator No. 1 (No. 2) auto start

--- X 22. Diesel g e nerator No. 1 (N o. 2) local panel alar m e X C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8.3-86 Table 8.3-5 Divisions 1 and 2 Standby Di e s el Generator Annunciators (Continued)

Location Annunciatio n a Local MC R b 23. Diesel generator breaker 7-DG1 (8-DG 2) close circuit undervoltage/test c --- X 24. Engines for diesel generator No. 1 (DG 2) - cooling water low flow --- X 25. Diesel g e nerator No. 1 (DG 2) room - cooling flow low

--- X 26. Diesel g e nerator No. 1 (No.

2) solenoid valve fa i l ure X --- 27. Diesel g e nerator No. 1 (No.

2) lube oil pressure low X --- 28. Diesel g e nerator No. 1 (No. 2) oil temperature high X --- 29. Diesel g e nerator No. 1 (No.

2) crankcase press high X --- 30. Diesel g e nerator No. 1 (No.

2) engine water l e vel low X --- 31. Diesel g e nerator No. 1 (No.

2) lube oil level low X --- 32. Diesel g e nerator No. 1 (No. 2) oil temperature low X --- 33. Diesel g e nerator No. 1 (No. 2) differential f u el pressure high X --- 34. Diesel g e nerator No. 1 (No. 2) jacket water t e mperature high X --- 35. Diesel g e nerator No. 1 (No. 2) jacket water t e mperature low X --- 36. Diesel g e nerator No. 1 (No.

2) fuel oil pressure low X --- 37. Diesel generator No. 1 (No. 2) starting air receivers No. 1 and No. 2 pressure low X --- 38. Diesel generator No. 1 (No. 2) improper paralleling --- X a Independent drops are provided for Division 1 and Division 2 an nunciators. Drop titles for the Division 2 annunciators are indicated by parentheses.

b Main control room - Board "C" (Panel P800).

c This function inputs into a BISI alarm that indicates the breaker is out of service.

d Diesel generating unit incomple te sequence and differe ntial current signals trip the units via the unit lockout relays (item 6).

e All abnormal signals detect ed at the local diesel generator c ontrol panels provide input to the general (item 22) alarm.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8.3-87 Table 8.3-6 Comparison of High-P r essure C o re Spray Diesel Generators Data Compon e nt LaSalle Columbia Generating Station Engine: Model EMD 6 4 5 E4 EMD-20-6 4 5 E 4 hp 3600 3600 Speed (rpm) 900 900 Generat o r: Model Ideal Electric-CO-SAB GE - 264 x 7 30 kVA 3560 3560 Volts 3400/4160Y 2400/

4 160Y Hertz 60 60 Insulation Class B Class B Moment of inertia (#-ft

2) 36,000 32,450 a Reactance (%)

Subtransient (X" d) 7.1 10.9 b Transient (X

'd) 14.3 16.5 Sync h r o n ous (X d) 112.0 82.0 Time const (sec)

T d" (S-C) 0.021 0.01 T'd+(O-C) 3.5 2.87 Regulator type Solid state Solid state Exciter type Brushless rotary Static with field flashing Gover n or Model Woodw a r d U G-8 Woodw a r d E G B-10 Speed sen s or Mech a n ical Electroni c c Err o r 1% 0.2 5% Loads HPCS pump 3000 hp 3000 hp 1800 rpm 1800 rpm 373 FLA 373 FLA Auxiliary loads 220 kW 220 kW a Columbia Generating Station overall diesel generator moment of inertia is lower than LaSalle. Hence, diesel generator starting time may be less for Columbia Generating Station than for LaSalle.

b The higher transient and subtransient reactance for Columbia Generating Station is compensated by the use of a static exciter which provides faster voltage recovery during voltage dips.

c Electronic sensing together with hydraulic actuation result in faster and more accurate response.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8.3-88 Table 8.3-7 Class 1E Auxiliary Alte r n ating Current Distribution System - Acceptab l e Voltage Range Voltages Voltage Ranges System Level System Nominal Motor Nameplate Normal Operation a Starting b 4.16-kV switchgear 4.16 kV 4.0 kV 3.6-4.4 kV 3.2-4.4 kV 480-V switchgear 480 V 460 V 414-506 V 368-506 V 480-V MCC 480 V 460 V 414-506 V 368-506 V a Minimum and maximum voltages indicated correspond to 90

% and 110% (respectively) of motor nameplate voltage for th e particular voltage level.

b Minimum and maximum voltages indicated correspond to 80

% and 110% (respectively) of motor nameplate voltage for th e particular voltage level.

Note: Deviation from the minimum volta ge requirements is permitted for Class 1E motors provided an analysis is performed, and documented to demonstrate that the motors can perform their safety function with the voltage supplied.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-89 Table 8.3-8

System Bus Voltage Monitoring Alarms

Undervoltage Alarms a System Level Monitoring DeviceLocation Annunciator Computer 500-kV grid Voltmeter Main control room --- ---

230-kV grid Voltmeter Main control room --- ---

115-kV grid Voltmeter Main control room X

--- 4.16-kV switchgear Voltmeter Main control room X X 480-V switchgear Voltmeter Main control room --- ---

480-V MCC

--- --- --- --- a Located in main control room.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-90 Table 8.3-9

Plant Switchgear and Motor Control Center Direct Current Control Power Summary

Switchgear/MCC Source Designation Voltage a Division Panel b Division SH-5 6.9 kV A DP-S1-1C A SH-6 6.9 kV B DP-S1-2C B SH-9 6.9 kV 1 DP-S1-1F 1 SH-10 6.9 kV 2 DP-S1-2D 2 SH-11 6.9 kV 2 DP-S1-2D 2 SH-12 6.9 kV 1 DP-S1-1F 1 SM-1 4.16 kV A DP-S1-1C A SM-2 4.16 kV B DP-S1-2C B SM-3 4.16 kV A DP-S1-1C A SM-4 4.16 kV 3 DP-HPCS 3 SM-7 4.16 kV 1 DP-S1-1D 1 SM-8 4.16 kV 2 DP-S1-2D 2 SM-72 4.16 kV A DP-S1-3 A SM-75 4.16 kV A DP-S1-1C A SM-82 4.16 kV B DP-S1-4 B SM-85 4.16 kV B DP-S1-2C B DG1-7 4.16 kV 1 DP-S1-1E 1 DG2-8 4.16 kV 2 DP-S1-2E 2 SL-11 480 V A DP-S1-1C A SL-21 480 V B DP-S1-2C B SL-31 480 V A DP-S1-1C A SL-51 480 V A Note 4 SL-52 480 V A Note 4 C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-91 Table 8.3-9

Plant Switchgear and Motor Control Center Direct Current Control Power Summary (Continued)

Switchgear/MCC Source Designation Voltage a Division Panel b Division SL-53 480 V A DP-S1-1C-2 A SL-54 480 V A DP-S1-1C A SL-61 480 V B c SL-62 480 V B c SL-63 480 V B DP-S1-2C B SL-71 480 V 1 DP-S1-1F 1 SL-73 480 V 1 DP-S1-1F 1 SL-81 480 V 2 DP-S1-2D 2 SL-83 480 V 2 DP-S1-2D 2 MC-S1-1D 125-V dc 1 DP-S1-1 1 MC-S1-2D 125-V dc 2 DP-S1-2 2 MC-S2-1A 250-V dc 1 DP-S1-1D 1 MC-S2-1B 250-V dc A DP-S1-1C-1 A a Voltage is ac, unless otherwise noted.

b See Figure 8.3-52. c Switchgear contains manually operated breakers. All indicati on is remote powered via the non-Class 1E supervisory system.

Note: Control power for 480-V-ac motor control centers is obtained from control power transformers located in the units.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORTDecember 2009LDCN-08-025 8.3-92 Table 8.3-10 Battery Design Duty Cycles (Amperes vs. Time) Used for Operability Testing Seconds Minutes Battery (Volts/Division) 0-6 6-18 18-60 1-2 2-60 60-119 119-120 B0-1A/-1B (+/-24-V/Division 1) 24 24 24 24 24 24 24 B0-2A/-2B (+/-24-V/Division 2) 24 24 24 24 24 24 24 B2-1 (250-V/Division 1) 899 356 360 448 352 345 345 Seconds Minutes Battery (Volts/Division) 0-6 6-18 18-60 1-2 2-60 60-119 119-120 B1-1 (125-V/Division 1) 370 303 182 169 161 161 219 B1-2 (125-V/Division 2) 304 255 174 160 160 160 218 Seconds Minutes Battery (Volts/Division) 0-13 13-20 20-60 1-2 2-60 60-119 119-120 B1-HPCS (125-V/Division 3) 50 50 15 15 15 15 15

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-93 Table 8.3-11 Division 1 125-Volt Direct Curre nt Battery Design Duty Cycle Seconds Minutes Equipment 0-6 6-18 18-60 1-2 2-60 60-119 119-120 MC-S1-1D 138 77 40 26 18 18 18 Switchgear control a --- --- --- --- --- --- ---

Inverter IN-3A or 3B (PP-7A-A) 85 85 85 85 85 85 85 Distribution panels (DP-S1-1A)

(DP-S1-1D)

(DP-S1-1E)

(DP-S1-1F) 137 131 55 53 53 53 111 Contingency (future) 10 10 5 5 5 5 5 Total amperes b 370 303 182 169 161 161 219 a The switchgear control power loads are included in the distribution panels.

b The total values include margin and are rounded up from the maximum amps occurring at any second within the above time intervals. Not all loads listed within the 0-60 second interval are concurrent.

Notes:

1 This duty cycle is based on calculation 2.05.01.

2. The duty cycle is based on loss of offsite power (LOOP) with a coincident loss-of-coolant accident (LOCA) at time = 0.

3. The load increase dur ing the last minute (time = 120 mi nutes) is the result of adding momentary loads that occur while returning safety systems to their standby mode. The most limiting condition is for these operator c ontrolled loads to occu r at the end of the duty cycle.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-94 Table 8.3-12

Division 2 125-Volt Direct Curre nt Battery Design Duty Cycle Seconds Minutes Equipment 0-6 6-18 18-60 1-2 2-60 60-119 119-120 MC-S1-2D 76 40 36 22 22 22 22 Switchgear control a --- --- --- --- --- --- ---

Inverter IN-2A or 2B (PP-8A-A) 70 70 70 70 70 70 70 Distribution panels (DP-S1-2A)

(DP-S1-2D)

(DP-S1-2E) 153 141 63 63 63 63 121 Contingency (future) 5 5 5 5 5 5 5 Total amperes b 304 255 174 160 160 160 218 a The switchgear control power loads are included in the distribution panels.

b The total values include margin and are rounded up from the maximum amps occurring at any second within the above time intervals.

Not all loads listed within the 0-60 second intervals are concurrent.

Notes:

1. This battery duty cycle is based on calculation 2.05.01.

2. The load profile is based on loss of offsite power (LOOP) with a coincident loss of coolant accident (LOCA) at time = 0.

3. The load increase during th e last minute (time = 120 mi nutes) is the result of adding momentary loads that occur while re turning safety syst ems to their standby mode. The most limiting condition is for these operator contro lled loads to occur at the end of the 2-hr duty cycle.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-95 Table 8.3-13

Division 3 (HPCS) 125-Volt Direct Current Battery Design Duty Cycle HPCS-B1-DG3 a Seconds Minutes Description 0-13 13-20 20-60 1-60 60-120 HPCS system control b 6.5 6.5 6.5 6.5 6.5 Field flashing 22 --- --- --- --- Two air-start solenoid valves 2.0 --- --- --- ---

Switchgear (one breaker trip) 6.0 --- --- --- --- Switchgear (two breakers close) 6.0 6.0 --- --- ---

Diesel generator standby fuel pump (DO-P-6) 16.7 5.2 5.2 5.2 5.4 Diesel generator lube oil pump (DLO-P-10) 10.9 4.8 --- --- --- Total amperes c 50.0 50.0 15.0 15.0 15.0 a Battery duty cycle is based on loss of ac power with a coincident HPCS system actuation.

b High-pressure core spray syst em control components consist of DG protective and auxiliary relays, DG control relays, time delay relays, a local annuciato r panel, HPCS valve position indicators, control relays for HP CS process control logic, etc.

c The total values include margin and are rounded up from the maximum amps occurring at any second within the above time intervals.

Not all loads listed within the 0-13 second interval are concurrent.

C OLUMBIA G ENERATING S TATION Amendment 60 F INAL S AFETY A NALYSIS R EPORT December 2009 LDCN-08-025 8.3-96 Table 8.3-14

Division 1 250-Volt Direct Curre nt Battery Design Duty Cycle Seconds Minutes Equipment 0-6 6-18 18-60 1-2 2-60 60-119 119-120 MC-S2-1A 150 36 40 133 37 30 30 MC-S2-1B 617 188 188 188 188 188 188 Inverter IN-1 (Panel US-PP) 122 122 122 122 122 122 122 Contingency (future) 10 10 10 5 5 5 5 Total amperes a 899 356 360 448 352 345 345 a The total values include margin and are rounded up from the ma ximum amps occurring at any second within the above time intervals. Not al l loads listed within the 0-60 second intervals are concurrent.

Notes:

1. Duty cycle based on calculation 2.05.01.

2. The duty cycle is based on loss of offsite power (LOOP) with a coincident loss of coolant accident (LOCA) at time = 0.

3. The load increase during th e last minute (time = 120 mi nutes) is the result of adding momentary loads that occur while re turning safety syst ems to their standby mode. The most limiting condition is for these operator contro lled loads to occur at the end of the 2-hr duty cycle.

Figure Not Available For Public Viewing Figure Not Available For Public Viewing 950021.24 8.3-3 Figure Amendment 57December 2003Draw. No.Rev.Form No. 960690 LDCN-03-013 Columbia Generating StationFinal Safety Analysis Report DELETED Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Amendment 60December 2009 Form No. 960690ai Columbia Generating StationFinal Safety Analysis Report08.3-11 10 EWD-47E-032 DGI Excitation SystemRev.FigureDraw. No.

Draw. No.

Rev.Figure Amendment 60December 2009 Form No. 960690ai Columbia Generating StationFinal Safety Analysis Report 08.3-14 8 EWD-47E-046DG1 Governor Speed ControlRev.FigureDraw. No.

Draw. No.

Rev.Figure

Amendment 60December 2009 Form No. 960690ai Columbia Generating StationFinal Safety Analysis Report 08.3-17 6 EWD-47E-033 DG2 Excitation SystemRev.FigureDraw. No.

Draw. No.

Rev.Figure Amendment 60December 2009 Form No. 960690ai Columbia Generating StationFinal Safety Analysis Report 08.3-20 9 EWD-47E-058DG2 Governor Speed ControlRev.FigureDraw. No.

Draw. No.

Rev.Figure

Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Division 3 (HPCS) Diesel GeneratorTransient Response 920843.47 8.3-31 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.1.8 1.6 1.4 1.2 1.0 0.8 0.6 0.4 0.2 0.0 1.2 1.0 0.8 0.6 0.4 0.2 0.0 4.5 4.0 3.5 3.0 2.5 2.0 1.5 1.0 0.5 0.0012345678910111213141516 T T Generator TGenerator Output Columbia Generating StationFinal Safety Analysis Report Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing

Draw. No.Rev.Figure Power Generation Control ComplexBasic Assemblies and Shipping Configuration 920843.87 8.3-40 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Signal Conditioning Panel*

Signal Conditioning Panel*Termination Cabinet Floor Section (Contains Interpanel Cables)Basic PGCC Assemblies Plywood Shipping Container Cable Ladder Panel ModuleRemovable Access Panel (4 Places)

Skid Base 8 Places 95 121 1/2 336 Columbia Generating StationFinal Safety Analysis Report 920843.85 8.3-41 Figure Amendment 53 November 1998Form No. 960690.veR.oN .warD Assembled Termination Cabinet (Door Removed for Clarity)

Power Generation Control Complex Termination Cabinet AssemblyStationary Barriers Floor Plate Support PostFloor Plate To PGCC FloorSection (Typical)Connector Plate Barrier Junction Boxes Bay ACable Ladder Bay BTermination Module Bay FSwing Barrier Bay G Columbia Generating Station Final Safety Analysis Report 920843.84 8.3-42 Figure Amendment 53 November 1998Form No. 960690.veR.oN .warDCable Ladder ConnectorTermination ModuleField Cables Termination Cabinet Assembly (Field Connections)Swing Barrier Power Generation Control Complex Termination Cabinet Field Connection Columbia Generating Station Final Safety Analysis Report Power Generation Control ComplexTermination Cabinet - Termination Devices 920843.83 8.3-43 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Bracket Factory WiringTerminal BoardTermination Module Connector Conduit Knockouts Metal EnclosureTerminal Board Mounting Plate Connector Connector Plate Junction Box CoverTermination DevicesTo Field Cable Columbia Generating StationFinal Safety Analysis Report Power Generation Control Complex Cable Isolation Design 920843.86 8.3-44 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Termination Cabinet Enclosure SideFloor Plate and Support AssemblyTransition Barrier Swing Barrier Enclosure Door Angle FrameTermination Cabinet Backwall Permanent Bulkhead Barrier PermanentVertical Barrier Outer Channel Lateral Internal Connection Wireway (typ)

Endcap Cable Path Longitudinal Barrier Wireway Cover Longitudinal Wireway (typ)

Support Beam Floor Section Honeycomb Floor Plate Extension BarrierEnclosure Wall Enclosure BarrierTransition Wireway Columbia Generating StationFinal Safety Analysis Report Power Generation Control Complex -Firestopping Detail 920843.91 8.3-45 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Longitudinal Duct Lateral Duct Silicone Foam Columbia Generating StationFinal Safety Analysis Report Power Generation Control ComplexFloor Section Assembly 920843.88 8.3-46 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Lateral Rectangular Tube(Typical of 2)

Lateral Raceway(Typical of 23) with End Caps RemovedLongitudinal "

I"Beam(Typical of 4)

Longitudinal Raceway(Typical of 4)Floor Section Assembly Columbia Generating StationFinal Safety Analysis Report Power Generation Control Complex Mini-duct Detail 920843.89 8.3-47 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Note: The mini-duct is used to route cables of one division through a main-duct assigned to a redundant division.

Mini-ductN.T.S.4" Panel Mini-duct (Quality Class I, Seismic Class I)

Assigned to Redundant Division of "Main Duct"Conduit (Intruding Div.

Y )Main Duct Cables (Residing Div. X)"A" Panel"A" Columbia Generating StationFinal Safety Analysis Report Power Generation Control ComplexFire Suppression 920843.90 8.3-48 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.3 ft Nozzle (4)Termination Cabinet Fire Protection Cabinet Floor SectionHalon Storage Tank and Controls Products of Combination

Detectors (4)

Rate of RiseTemperature

Sensors (8)

Fire Suppression Nozzles (4)

Panels 78.00 162.00 258.00 324.00 Columbia Generating StationFinal Safety Analysis Report Power Generation Control Complex Cable Routing Method 920843.99 8.3-49 Figure Amendment 57 December 2003Form No. 960690.veR.oN .warD C A B D F E Columbia Generating Station Final Safety Analysis Report LDCN-02-000 Non-Class 1E Circuit CategoriesRequiring Analysis 920843.93 8.3-50.1 Figure Amendment 57December 2003 Form No. 960690Draw. No.Rev.Non-Class 1E (Non-Class 1E Powered) Instrumentation and Control CablesCable Category 1A (Raceways)

Non-Class 1E (Class 1E Powered) Instrumentation & Control Cables Cable Category 1B (Raceways)

AANN-9000 (C1)(Typical Cable No.)

Cable Category 1ABuilding Wall Non-Class 1E Cables Non-Class 1E

Raceway Remote Compo-

nent EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AANN-9001 (CA)

(Typical Cable No.)

Equipment EnclosureLess Than Class 1E Cable Non-Class 1E Powered

Non-Class 1E Circuit Non-Class 1E Cables Associated Cables (See Category 4A) 6" Class 1E Raceway AANN-9000 (C1)

(Typical Cable No.)

Cable Category 1BBuilding Wall Non-Class 1E Cables with Class 1E Separation (Prime)

Non-Class 1E

Raceway Remote Compo-

nent EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AANN-9001 (CA)

(Typical Cable No.)

Equipment Enclosure Class 1E Powered

Non-Class 1E Circuit Associated Cables (See Category 4B)

Class 1E Raceway Non-Class 1E Cables (Non-Class 1E Powered)Device/Equipment Enclosure Div.

Class 1E Cables "Enclosure Division Compatible Cables" (Divisional and Prime)

Cable Category 1C Non-Class 1E Cables Associated cable per RG.1.75 rev 1.

However, since cable category

1C has been analyzed to be

Non-Class 1E, this group of

Non-Class 1E cables is not

associated.

Less than 6" Non-Class 1E (Non-Class 1E Powered) Instrumentation & Control Circuits Cable Category 1C (Enclosures)

Non-Class 1E Cables with Class 1E Separation (Prime)

Less than 6" LDCN-01-079 Columbia Generating StationFinal Safety Analysis Report Non-Class 1E Circuit CategoriesRequiring Analysis 920843.94 8.3-50.2 Figure Amendment 57December 2003 Form No. 960690Draw. No.Rev.Non-Class 1E (Non-Class 1E Powered) Power Cables (in Non-Class 1E Raceways) Cable Category 2A Non-Class 1E (Class 1E Powered) Power Cables (in Non-Class 1E Raceways) Cable Category 2B AM3DA-9080 (C1)(Typical Cable No.)

Cable Category 2ABuilding Wall Non-Class 1E Cables Non-Class 1E

Raceway Remote Compo-

nent EnclosureCable Transition Point(One Cable Length with Two Compatabilities A&1 or B&2)

AM3DA-9081 (CA)

(Typical Cable No.)

Equipment Enclosure Non-Class 1E Powered

Non-Class 1E Circuit Non-Class 1E Cables Associated Cables (See Category 4B)

Class 1E Raceway AM7A-9100 (C1)

(Typical Cable No.)

Cable Category 2BBuilding Wall Non-Class 1E Cables with Class 1E Separation (Prime)

Non-Class 1E

Raceway Remote Compo-

nent EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AM7A-9101 (CA)

(Typical Cable No.)

Equipment Enclosure Class 1E Powered

Non-Class 1E Circuit Associated Cables (See Category 4A)

Class 1E Raceway Non-Class 1E Cables with Class 1E Separation (Prime)

LDCN-01-079 Columbia Generating StationFinal Safety Analysis Report Non-Class 1E Circuit CategoriesRequiringAnalysis 920843.95 8.3-50.3 Figure Amendment 53November 1998 Form No. 960690Draw. No.Rev.Non-Class 1E Instrumentation Circuits Powered from Class 1E throughCurrent Limiting Devices-Cable Category 3A

++R3 R4 C R1 CCBDGI-10 (Cable No.)

Cable Category 3A 150+---24VDC (Class 1E)

Class 1E Indicator Class 1E Transmitter 4-20mADC 242 8 32-160mVDC 1 - 5VDC Non-Class 1E Cables

e.g. Computer Cables Columbia Generating StationFinal SafetyAnalysis Report Associated Circuit Categories 920843.96 8.3-51.1 Figure Amendment 57December 2003 Form No. 960690Draw. No.Rev.Associated (Non-Class 1E Powered) Instrumentation & Control CablesCable Category 4A (Raceway)

AANN-9000 (C1)(Typical Cable No.)

Cable Category 4ABuilding Wall Non-Class 1E Cables(See Category 1A & 1C)

Non-Class 1E

Raceway Remote Component

EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AANN-9001 (CA)

(Typical Cable No.)

Equipment Enclosure Class 1E Cable Non-Class 1E Powered

Non-Class 1E Circuit Non-Class 1E Cables Associated Cables Class 1E Raceway Remote Component

Enclosure AANN-9002 (C1)

(Typical Cable No.)Less Than 6" AM3DA-9080 (C1)

(Typical Cable No.)

Cable Category 4BBuilding Wall Non-Class 1E Cables (See Category 1B or 2A)

Non-Class 1E

Raceway Remote Component

EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AM3DA-9081 (CA)

(Typical Cable No.)

Equipment Enclosure Non-Class 1E Powered

Non-Class 1E Circuit Non-Class 1E Cables Associated Cables Class 1E Raceway Remote Component

Enclosure AM3DA-9070 (C1)

(Typical Cable No.)

Associated (Non-Class 1E Powered) Power Cables (In Class 1E Raceways)

Cable Category 4B LDCN-01-079 Columbia Generating StationFinal Safety Analysis Report Amendment 57December 2003 LDCN-01-079Associated Circuit Categories 920843.97 8.3-51.2 Figure Form No. 960690Draw. No.Rev.Associated (Class 1E Powered) Instrumentation & Control Cables Cable Category 4C (Raceways)

AANN-9000 (C1)(Typical Cable No.)

Cable Category 4CBuilding Wall Non-Class 1E Raceway Remote Component

EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AANN-9001 (CA)

(Typical Cable No.)

Equipment Enclosure Class 1E Powered

Non-Class 1E Circuit Non-Class 1E Cables with Class 1E Separation (Prime)

Associated Cables Class 1E Raceway Remote Component

Enclosure AANN-9002 (C1)

(Typical Cable No.)

AM7A-9100 (C1)

(Typical Cable No.)

Cable Category 4DBuilding Wall Non-Class 1E Cables (See Category 2B, 3B, 3C)

Non-Class 1E

Raceway Remote Component

EnclosureCable Transition Point (One Cable Length with Two Compatabilities A&1 or B&2)

AM7A-9101 (CA)

(Typical Cable No.)

Equipment Enclosure Class 1E Powered

Non-Class 1E Circuit Associated Cables Class 1E Raceway Remote Component

Enclosure AM7A-9200 (C1)

(Typical Cable No.)

Associated (Class 1E Powered) Power Cables (In Class 1E Raceways)

Cable Category 4D Non-Class 1E Cables with Class 1E Separation (Prime)

Non-Class 1E Cables with Class 1E Separation (Prime)(See Category 3A)

Columbia Generating StationFinal Safety Analysis Report Figure Not Available For Public Viewing Figure Not Available For Public Viewing Figure Not Available For Public Viewing C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Appendix 8A STATION BLACKOUT

TABLE OF CONTENTS Section Page 8A-i 8A.1 INTRODUCTION.......................................................................8A-1 8A.2 EVALUATION TO NUMARC 87-00...............................................8A-4 8A.2.1 REQUIRED CO PING DURATION...............................................8A-4 8A.2.2 RESPONSE PROCEDURES........................................................8A-4 8A.2.3 COLD STARTS.......................................................................8A-5 8A.2.4 EMERGENCY ALTERNATING CURRENT POWER AVAILABILITY......................................................................8A-5 8A.2.5 COPING WITH A STATION BLACKOUT EVENT..........................8A-6 8A.2.5.1 Condensate Inventory...............................................................8A-6 8A.2.5.2 Class 1E Battery Capacity.........................................................8A-6 8A.2.5.3 Compressed Air.....................................................................8A-7 8A.2.5.4 Effects of Loss of Ventilation.....................................................8A-7 8A.2.5.5 Containment Isolation..............................................................8A-8 8A.2.6 QUALITY ASSURANCE CONSIDERATIONS................................

8A-10 8A.2.7 TECHNICAL SPECIFICA TIONS CONSIDERATIONS......................

8A-10 8A.2.8 VERIFICATION OF NUMARC 87-00 BASELINE ASSUMPTIONS......8A-10 8A.

2.9 REFERENCES

.........................................................................

8A-11 C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Appendix 8A STATION BLACKOUT

LIST OF TABLES Section Title Page 8A-ii 8A-1 Station Blackout Cop i ng Determina t io n.....................................

8A-13 8A-2 Validation of NUMARC 87-00 Assump tions ..............................

8A-16 C OLUMBIA G ENERATING S TATION Amendment 54 F INAL S AFETY A NALYSIS R EPORT April 2000 LDC N-9 9-0 0 0 8A-1 Appendix 8A STATION BLACKO U T 8A.1 INTRODUCTION The complete loss of ac electric al power to the essential and nonessential switchgear buses is referred to as "station blackout" (SBO). It does not include the loss of ac power as supplied by the station batteries through inverter or the loss of ac powe r that is available from an "alternate ac" source as define d below. Station blackout also does not assume a concurrent single failure or a design basis a ccident (10 CFR 50.

2 and Reference 8A-1 , Appendix A).

NUREG-0933 states that SBO was resolved on a generic basis by publi cation of the station blackout rule (10 CFR 50.63) and Regulatory Guide 1.155. The regulatory guide provides guidance acceptable to the Staff for use of NUMARC 87-00 to satisfy the requirements of 50.63 (Reference 8A-1, Appendix K). The regulatory guide shows that NUMARC 87-00 provides guidance for meeting all aspects of the rule with the exception of the quality assurance requirements to be applied to SBO response equipment that is not safety-related and the potential need for changes to the Technical Specifications (Reference 8A-1, Appendix I, Q/A 1). Contained within NUMARC 87-00 are five initiatives approved by the NUMARC Board of Directors to address the more important c ontributors to SBO risk. The initiatives are

a. Initiative 1A - Risk Reduction Each utility will revi ew their site(s) against the criteria specified in the revised draft SBO Regulatory Guide, and if the si te(s) fall into the category of an 8-hr or 16-hr site after utilizing all power sources available, the utility will take actions to reduce the site(s) contribution to the overall risk of station blackout. Nonhardware changes will be made within 1 year. Hardware changes will be made within a reasonable time thereafter.

b. Initiative 2 - Procedures Each utility will implem ent procedures at each of its site(s) for

1. Coping with a station blackout,

2. Restoration of ac power followi ng a station blackout event, and

C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 8A-2 3. Preparing the plant for severe w e ather conditions (e.g., hurricanes) to reduce the likelihood and c onsequences of a loss of offsite power and to reduce the overall risk of a station blackout event.

c. Initiative 3 - Cold Starts Each utility will, if appl i cable, reduce or eliminate cold fast-starts of e m ergency diesel generators for testing through ch a nges to technical spec i fications or other appropriate means.

d. Initiative 4 - Alternating Current Power Availa b ility Each utility will monitor emergency ac power unavailability, utilizing data prov i ded to INPO on a regular basis.

e. Initiative 5A - Coping Assess m ent/Emergency Diesel Gene r a tor (EDG)

Performance Each utility will ass e ss the ability of its plant(s) to cope with a station blackout.

Plants utilizing alternate ac power for station blackout response which can be shown by test to be available to power the shutdown buses within 10 m i nutes of the onset of station blac kout do not need to perfo r m any cop i ng assessment.

Remaining alternate ac p l ants will assess their ability to cope for 1 hr.

P l ants not utilizing an alternate ac source will a ssess their ability to cope for 4 hr.

Factors identified which prevent demonst r ating the capability to cope for the appropriate duration will be addressed through hardw a re and/or procedural changes so t h at succe s s f ul demonst r ation is possible.

As part of the coping ass e ssment, utilities are required to choose an EDG target reliability (0.95 or 0.975) and are requir e d to maintain that chosen reliability.

Accordingly, each utili t y will employ the following exceedance trigger values (on a plant unit basis) as the mechani s m for monitoring EDG target reliability and to support closure of Generic Issues B-56.

Selected E D G Target Reliability Failures in 20 Demands Failures in 50 Demands Failures in 100 Demands 0.95 3 5 8 0.975 3 4 5 Additionally, each utility, in response to an individual EDG experienci n g four or more failures in the last 25 demands, will demonstrate restored EDG performance by conducting seven consecutive failure free start and load-run tests. This form of accelerated testing shall be conducted at a frequency of no C OLUMBIA G ENERATING S TATION Amendment 56 F INAL S AFETY A NALYSIS R EPORT December 2001 LDC N-0 0-0 5 6 8A-3 less than 24 hr and of no more than 7 days between each demand. Each utility will, if applicable, address this reduc tion in accelerated testing through changes to Technical Specifications or other appropriate means.

Columbia Generating Station im plementation of these initiatives is discussed in Section 8A.2.

The SBO rule requires that a SBO coping period be established through appropriate coping analysis. It is required that during the established SBO coping period core cooling and containment integrity are main tained [10 CFR 50.63(a)(2)].

The discussion in Section 8A.2 shows Columbia Generating Stati on to be in compliance to the SBO rule by comparison with the requirements of NUMARC 87-00. Additional discussions relative to station blackout quality assurance and Technical Specifications are provided in Sections 8A.2.6 and 8A.2.7.

Two approaches are available to licensees for compliance to the SBO rule. They are use of Alternate ac. This is a power source that is (1) connectable to but not normally connected to the offsite or onsite emergency ac power systems, (2) has minimum potential for common-mode failure with offsite power or the onsite emergency ac power sources, (3) is available in a timely manner after th e onset of SBO, and (4) has sufficient capacity and reliability for operation of all syst ems required for coping with SBO and for the time required to bring and maintain the plant in safe shutdown (non-design-basis accident) (1 0 CFR 50.2 and Reference 8A-1, Appendix A).

Columbia Generating Station, along with some other BWRs, proposed the use of the high-pressure core spray (HPCS) diesel generator as alternate ac (Reference 8A-2) as this third diesel generator is in excess of the number required to meet the minimum redundancy requirement s (i.e., single failure for safe shutdown) (Reference 8A-1 , Appendix I, Q/A 105). While HPCS could provide decay h eat removal during an SBO, it could not provide power to an emergenc y bus. Therefore, it was proposed that coping analyses would also be performed to address instrume ntation, battery capacities, air supply, and loss of hea ting, ventilating, and ai r conditioning (HVAC). This approach has been found to be acceptable to the NRC although they disagreed that the HPCS diesel generator s hould be classified as alternate ac (Reference 8A-3). ac-Independent. For this approach the plant relies on available process steam, dc power, and compressed air to operate equipment necessary to achieve safe shutdown conditions until offsite o r emergency ac power is restored (Refe r ence 8 A-1). The RCIC system is cons idered the backup to HPCS during SBO. Columbia Generating Station's coping analysis includes battery voltage profiles for both the 125 V dc and 250 V dc batteries that provide power to RCIC system equipment. These C OLUMBIA G ENERATING S TATION Amendment 56 F INAL S AFETY A NALYSIS R EPORT December 2001 LDC N-0 0-0 5 6 8A-4 battery profiles assume that RCIC is providing s o le miti g ation for the SBO event.

Although the RCIC system is not c r edited for SBO event mitigation, it is the prefer r e d SBO mitigation system and will be maintained available to respond to a n SBO event.

RCIC uses reactor steam and dc po w er to op e rate during S B O. The system's keepfill pump, RCIC-P-3, is ac powered and assumed unavailable. Upon l o ss of keepfi l l, t h e system experiences a gradual decay in pressure while in the standby mode. The RCIC system re m a ins available for use until the l o w pressure ala r m of RCIC-PIS-34, which alerts the operator to the loss of ma r g in to vo i d formation in the dischar g e header.

8A.2 EVALUATION TO NUMARC 87-00

Chapter s 3 through 7 of N UM ARC 87-00 contain guidance which, if implemented, would serve to satisfy the fi v e NU M ARC SBO initiatives and obtain c o mpliance with the SBO rule, with the exception of quality assura n ce and T e c h nical Specifications considerations. The following sections address the content of these chapters.

8A.2.1 REQUIRED COPING DURATION Using the data listed in Table 8A-1 and the methodo l ogy p r ovided in C h apter 3 of NUM A RC 87-00, the coping period for C o lumbia Generating Station w a s determined to be 4 hr.

8A.2.2 RESPONSE PROCEDURES NUM A RC 87-00 requi r ed procedu r e changes to deal with

a. SBO response. Changes in this category i n cluded; requi ring priority efforts to restore ac power with site specific instructions on how this is to be accomplis h e d, providing for core cool i ng and containment i s olation, dea l ing with the loss of HVAC (e.g., the op e ning of control room cabinet doors), and the need to strip battery loads if necessary to conserve dc power.

b. Alternating current po w er restorati o n. These changes prov i ded guidan c e to operations and the load dis p atcher concerning the course of actions to b e taken to restore ac power.

c. Severe weather guideline

s. These changes provided guidance for operators to determine the proper course of action due to the onset of s e v e re weather; in particular hurricanes.

The Columbia Generating Station SBO emerge ncy response procedure p r ovides guidance for responding to an SBO including specific instructions for (1) providing for core cooling if HPCS and/or reactor core isolation cooling (RCIC) are available, (2) de aling with the loss of

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 LDC N-0 2-0 0 2 8A-5 HVAC (e.g., the opening of cont rol room cabinet doors and actions to prevent RCIC isolation on high temperature), (3) notifying BPA to give priority to restoration of power to Columbia Generating Station, and (4) checking closed containment isolation valves that might have been open prior to the onset of the SBO. For Columbia Generating Station response to the SBO rule, only the B1-1 and B1-2 batteries are required. As there is no need to provide for load stripping of these batteries, th is is not provided for in the SBO procedure (Reference 8A-1 , Appendix I, Q/A 77).

In addition to the instructions in the SBO response procedure for giving priority to restoration of power to Columbia Generati ng Station, the loss of all offs ite power procedure was revised to provide this guidance and the BPA System Restoration Plan wa s revised to identify the need for prompt restoration of offsite power to Columbia Generating Station and the actions to be taken to achieve this.

As Columbia Generating Stati on was not evaluated for a hurri cane during initial plant licensing and as no credit was taken for hurricane proce dures in the coping analysis, no procedure changes were required to deal with t h e threat of hurricanes (R eference 8A-1 , Appendix I , Q/As 12 and 52). In Reference 8A-4 Energy Northwest proposed to the NRC that with the Columbia Generating Station si te having a very low risk fo r tornadoes, no special site inspections for potential missiles were necessary. Also, it was explained that restoration of important plant systems and components did not require special procedur es with the exception of tornado damage to the ultimate heat sink spray ponds which was covered by existing procedures.

8A.2.3 COLD STARTS

This requires that each plant en sure that emergency diesel gene rator tests are performed in a prewarmed and prelubed condition except during the Technical Specifications demand test required approximately once each scheduled refueling outage unless the emergency diesel generator is normally prewarmed and prelubed.

No action was required for this item as the Columbia Generating Station diesels have prewarm (see Section 9.5.5.2) and prelube (see Section 9.5.7.2) systems that are nor mally in operation.

8A.2.4 EMERGENCY ALTERNATIN G CURRENT POWER AVAILABILITY

This item implements NUMAR C SBO Initiative 4 which re quires monitoring of plant emergency generator unavailabi lity. Appendix D of the NU MARC document provides a suggested diesel generator reliability program.

In Reference 8A-5 Energy Northwest stated that proce dures had been revised to implement Appendix D of NUMARC 87-00 and the five elements listed in Regulatory Guide 1.155, Position 2.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8A-6 8A.2.5 COPING WITH A STATION BLACKOUT EVENT

Chapter 7 of NUMARC 87-00 provides a simplified assessment procedur e for establishing the ability to cope with an SBO.

There are five steps to the procedure, addressing the following topics: a. Condensate inventory fo r decay heat removal, b. Assessing the Class 1E battery capacity, c. Compressed air, d. Effects of loss of ventilation, and e. Containment isolation.

8A.2.5.1 Condensate Inventory The required condensate is to be determined from B = A*(X gal/MWt) + C + RCS leakage Where:

A = licensed output - MWt, X = 22.12 for a 4-hr coping period, and

C = amount of water to support cooldown if cooldown is required to limit pump seal leakage or to maintain decay heat removal - gallons.

The reactor coolant system (RCS) leakage term is the coping period inventory loss due to (1) an assumed pump seal failur e leakage term of 25 gpm/pump (later changed by the NRC to 18 gpm/pump for BWRs, Reference 8A-1 , Appendix J, Q/A 2.1), and (2) the maximum allowable Technical Specifications RCS leakage. For Columbia Generating Station, A is 3486 MWt and C is 30,721 gal resulting in a required inventory of 107,831 gal.

Reference 8A-6 discusses the administrative controls and plant feature that proved assurance that this quantity of water will be availabl e in the condensate stor age tanks (CST) (the Technical Specifications do not contro l CST quantity while in Mode 1).

8A.2.5.2 Class 1E Battery Capacity The B1-1 and B1-2 125-V batte ries have adequate capacity for a 4-hr SBO coping period without load shedding (Reference 8A-4 through 8A-7). The battery load calculations assume an electrolyte temperature of 74°F. This was found to be acceptable to the NRC by Reference 8A-8 provided that administrative controls are in place to ensure that this value

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 LDC N-0 2-0 2 5 8A-7 would be the lowest temperature anticipated during normal opera ting conditions as required by Reference 8A-1 , Section 7.2.2. The supplem ental SER (SSER) (Reference 8A-8) did require the revisions to the calculations to account for ch anges to inverter efficien cy and load currents.

The calculations have been revised.

The B2-1 battery is not required for compliance to the SBO rule (Reference 8A-5).

8A.2.5.3 Compressed Air Compressed air is addressed to ensure that air operated valves required for decay heat removal have sufficient reserve air or can be manually operated under station blackout conditions for the established coping duration.

In Reference 8A-4 Energy Northwest stated that (1) no air-operated valves are relied on to cope with an SBO of 4 hr, and (2) the safety/relief valves (SRVs), wh ich together with the HPCS provide for decay heat transfer to th e suppression pool, have an adequate nitrogen supply for 4 hr of SRV operation.

8A.2.5.4 Effects of Loss of Ventilation To address the impact of a lo ss of ventilation during the SBO, the 4-hr (final) steady-state temperatures are determined for dominant areas of concern (DAC). Dominant areas of concern are those that (1) contain equipment that is needed to function ear ly in an SBO (within 1 hr) to remove decay heat, (2) have significant heat generation sources after ac power is lost, relative to the free air volume of the room, and (3) unless the opera tor takes action, the capability to remove heat is lost during an SBO (Reference 8A-1 , Appendix I, Q/A 4).

With the SBO temperatures determined, reas onable assurance of ope rability (RAO) of SBO coping equipment located in the areas is then established per the requirements of NUMARC 87-00, Appendix F.

For the Columbia Generating Sta tion SBO response, the dominant areas of concern are (1) the control room, and (2) primary containment.

The SBO temperature for switchgear room 2 was determined as it contains breakers required for the restoration of ac power; its major heat source is inverter IN-5 which is not required for compliance to the SBO rule. A primary containment thermal hydraulic analysis was performed to determine the SBO drywell and wetwell temperatures.

The steam tunnel was al so analyzed for SBO although it wa s found to not contain SBO coping equipment (References 8A-5 , 8A-9 , and 8A-10). The following rooms contain SBO coping equipment but maintain ventilation during a SBO and thus do not need to be evaluated as dominant areas of concern (Reference 8A-1 , Section 7.1.2): (1) HPCS pump room, (2) HPCS

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 LDC N-0 2-0 0 2 8A-8 diesel/electrical equipment room, and (3) service water pump house A. The HVAC calculations for these rooms were reviewed to confirm RAO of SBO equipment located in these areas although this is not a requirement of the SBO rule (Reference 8A-1 , Appendix I, Q/A 137).

The SBO final temperatures for the rooms listed below were de rived from calculations based on selected initial temperatures as appropriate:

Room Final (°F) Initial (°F) Do ors SW pump house A 113 N/A Closed HPCS diesel/equipment room 104 N/A Closed HPCS pump room 123 N/A Closed RPS-1 room (IN-3A and 3B) 127 104 Closed RPS-2 room (IN-2A and 2B) 119 104 Closed Switchgear room 2 113 104 Closed Control room 119.7 78 Closed Steam tunnel 193 140 Closed Drywell 229 135 N/A Wetwell air 179 150 N/A Wetwell water 209 90 N/A In Reference 8A-5 the use of the in i tial t e mpera t ures of 78°F for the control room was jus t if i e d based on the addition of administrative controls to ensure that the room temperature would not be exceeded or corrective action would be take n to restore them. This was accepted by the NRC in Reference 8A-8.

The HPCS diesel/equipment and HPCS pump rooms and SW pump house A are not considered as dominant areas of concern as ventilation is maintained during an SBO. For the remaining areas RAO has been established for the SBO coping equipment located in these rooms. For those areas with a temp erature of less than or equal to 120°F, RAO can be assumed without further analysis (Reference 8A-1 , Appendix J, Q/A 2.2). The SBO coping equipment located in other areas was previously designated as safety-related for non-SB O considerations for which the environmental qualification requirements of 50.49 establish RAO.

8A.2.5.5 Containment Isolation Containment isolation valves must be reviewed to ensure that appropriate containment integrity can be provided during an SBO should core damage become imminent (Reference 8A-1 , Appendix I, Q/A 102).

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8A-9 Valves that do not need to be considered for SBO closure considerations are those that meet one of the following criteria:

a. Valves normally locked closed during operation, b. Valves that fail cl osed on loss of ac power, c. Valves in nonradioactive closed loop systems not exp ected to be breached in a SBO (with the exception of lines that communicate directly with the containment atmosphere), or

d. All valves less than 3 in. nominal diameter.

In addition, as the objective is to protect the penetration a nd additional single failures do not need to be applied for SBO coping, valves that have an in-series valve that satisfies one of the above criteria can also be excluded (Reference 8A-1 , Appendix I, Q/A 101).

In References 8A-5 and 8A-9 Energy Northwest proposed to add the following exclusion criteria:

a. Valves for which interlocks exist that prevent opening of one or both in-series valves during power operation;

b. Valves that are associated with containment penetrati ons that use single isolation valves and satisfy Genera l Design Criterion 56 by taking credit for the closed loop system outside containmen t as a second isolation barr ier. This is often the case for those lines for wh ich the suppression pool serv es as a loop seal; and

c. Valves that are procedurally controlled to be closed during normal power operation. It is acceptable for such valves to be ope ned to support surveillance testing. However, exclusion of valves associated with more frequent operation, e.g., suppression pool cooli ng, is not appropriate.

These exclusion criteria were found acceptable by the Staff in Reference 8A-8. The result of this evaluation is provided in Table 6.2-16. The SBO emergency response procedure has been revised to provide guidance for closure of those valves that were not excluded by this evaluation. For these valves it has been conf irmed that (1) position indication is provided (by means other than observation of the stem pos ition), (2) local manual closure capability exists, and (3) access would be available during an SBO. This confirmation was also made for those valves that were excluded by the fact that they are procedurally controlled to be closed during normal operation.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8A-10 8A.2.6 QUALITY ASSURANCE CONSIDERATIONS

Regulatory Guide 1.155, Section 3.5, requires that the quality assurance requirements of Appendixes A and B of the guide be applied to that non-safety-rel ated equipment used to meet the requirements of the SBO rule that are not already covered by existing quality assurance requirements of 10 CFR 50 Appendixes B or R.

In Reference 8A-5 Energy Northwest stated that SBO inst rumentation coping equipment that is identified as QC II+ and is also required by Regulatory Guide 1.97 conforms to the quality assurance requirements of Regulatory Guide 1.97 for Category 2 equipment. As such, any additional quality assurance requirements of Re gulatory Guide 1.155 are not applied to the equipment. Also, the reference explains that with the exception of the CST, SBO quality assurance is not applied to pa ssive equipment (e.g., piping a nd structural supports). Other SBO coping equipment will conform to the requirements of Appendix R or Regulatory Guide 1.155.

These positions were accepted by the NRC in the SSER (Reference 8A-8); however Reference 8A-10 was submitted to the NRC to correct the words in the SSE R relative to the quality assurance provided for passive equipment.

Reference 8A-5 also explained that SB O coping equipment has been identified as that equipment required to cope with an SBO and th at failure of other e quipment during an SBO was not postulated simply because it had not been assigned safety-related or SBO quality assurance requirements.

In Reference 8A-7 Energy Northwest stated that with regard to SBO recovery (not coping) equipment, SBO quality assuranc e requirements would only apply to SBO recovery equipment that is not in service during normal operation

8A.2.7 TECHNICAL SPECIFICATIONS CONSIDERATIONS

The basis for the Columbia Generating Station response to the SBO rule is use of HPCS which is safety related and already adequately covered in the Tec hnical Specifications. No SBO Technical Specifications changes are required for Columbia Genera ting Station. Use of HPCS for SBO coping does not place any additional design or opera ting considerations on the HPCS system.

8A.2.8 VERIFICATION OF NUMARC 87-00 BASELINE ASSUMPTIONS

Section 1.3 of NUMARC 87-00 states that utilities are expected to ensure that the baseline assumptions of the document are applicable to their plants. Utilities are, however, not expected to perform rigorous analyses or evaluations in verifying these assumptions (Reference 8A-1, Appendix I, Q.A 3). The analyses are to be available for NRC review.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8A-11 Table 8A-2 documents the evaluation of the baseline assumptions as applied to Columbia Generating Station. The table shows that wh ere the assumptions were found to be invalid, alternative methods confirmed Co lumbia Generating Station complia nce to the SBO rule. In all cases where a baseline a ssumption was found to be invalid, it was not because of a Columbia Generating Station unique feature, but rather because the assumption was not applicable to a large class of plants.

8A.

2.9 REFERENCES

8A-1 NUMARC 87-00, Revision 1, "Guide lines and Technical Bases for NUMARC Initiatives Addressing Station Blackout at Light Water Re actors," Nuclear Management and Res ources Council, Inc., dated August 1991.

8A-2 Meeting Summary by P. S. Tam, "B WR Alternate AC Approach to Satisfy Station Blackout Rule (TAC Nos.

68529, 68549, 68550, 68584, 68626, 40577)," dated March 2, 1989.

8A-3 Letter, GI2-92-012, P.

L. Eng to G. C. Sorensen , "Safety Evaluation of the Washington Public Power Supply System Nuclear Project Number 2 Station Blackout Analysis (TAC No. M68626)," dated December 30, 1991.

8A-4 Letter, GO2-89-062, G. C. Sorensen to NRC, "Response to Station Blackout Rule Using HPCS Division III as Alternate AC Power," date d April 17, 1989.

8A-5 Letter, GO2-92-057, G. C. Sorensen to NRC, "Safety Evaluation of the Washington Public Power Supply System Nuclear Project Number 2 Station Blackout Analysis," da ted March 6, 1992.

8A-6 Letter, GO2-91-091, G. C. Sorens en to NRC, "Additional Information Regarding SBO (TAC Nos. 6862 6)," dated May 7, 1992.

8A-7 Letter, GO2-90-064, G. C. So rensen to NRC, "Station Blackout Implementation, Additional Informati on (TAC 68626)," date d March 30, 1990.

8A-8 Letter, GI2-92-180, R.

R. Assa to G. C. Sore nsen, Supplemental Safety Evaluation (SSE) of the Washington P ublic Power Supply System Nuclear Project No. 2 (WNP-2) Station Blackout Analysis (TAC M68626)," dated June 26, 1992.

8A-9 Letter, GO2-92-121, G. C. Sorensen to NRC, "Safety Evaluation of the Washington Public Power Supply System Nuclear Project Number 2 Station Blackout Analysis (TAC No. M6 8626)," dated May 14, 1992.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 8A-12 8A-10 Letter, GO2-92-183, G. C. Sorensen to NRC, "Station Blackout Supplemental SER and Implementation Schedule, 10 CFR 50.63(c)(4), TAC NO. M68626,"

dated July 31, 1992.

8A-11 Letter, GO2-94-002, J. V. Parrish to NRC, "Updating In formation Regarding Station Blackout Resolution (TAC No. N68626)," dated Ja nuary 6, 1994.

8A-12 "Storage Batteries, A General Tr eatise on the Physics and Chemistry of Secondary Batteries and their Engineer ing Applications,"

fourth edition by G. W. Vinal, and J. Wiley & Sons.

8A-13 Letter, GO2-88-025, D. W. Mazur to NRC, "NRC Inspection Report 87-19," dated January 29, 1988.

8A-14 Letter, GO2-92-099, G. C. Sorensen to NRC, "Safety Evaluation of the Washington Public Power Supply System Nuclear Project Number 2 Station Blackout Analysis (TA C No. M68626)," date d April 15, 1992.

8A-15 Calculation ME-02-89-21.

C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Table 8A-1 Station Blackout Coping Determination Station Blackout Consideration NUM A RC 87-00, Rev. 1 Reference 8A-13 1. Determine t h e Offs ite P o wer Design Characteristic Group A. Site susceptibility to grid related loss of offsite power (LOOP) events with < one event/20 yrs; then, not a P3 site App I, Q/A 10 B. Frequency of a LOOP due to extremely severe weather

with an annual expectation of 0.0001; then, ESW Group 1

Table 3-2 C. Frequency of a LOOP due to severe weather f = (1.3x10

-4)*h 1 + b*h 2 + (1.2x10

-2) *h 3 + c*h 4 with h 1 = annual snowfall expectation, 14 in. (FSAR Table 2.3-1) h 2 = annual expectation for a tornado of severity <f2, 2x10

-7 h 3 = annual expectation for wind of 75 to 124 mph, 0.03 h 4 = annual expectation of a storm w/salt spray, 0.0 p 3-6

App I, Q/A 14 Reference 8A-5 Table 3-3 Table 3-3 Table 3-3

C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Table 8A-1 Station Blackout Coping De termination (Continued)

Station Blackout Consideration NUM A RC 87-00, Rev. 1 Reference 8A-14 C. Frequency of a LOOP due to severe weather (continued) b = 12.5 for sites w/multiple rights away

c = 0.0 for sites w/o salt spray vulnerability then f = 2.2x10

-3; therefore SW Group 1

p 3-6 p 3-6

Table 3-4 D. Independence of offsite power system

with two switch yards and with automatic transfers provided upon loss of the main generator and the preferred source then, I Group 1/2

p 3-10 E. Determine offsite power design group

with ESW 1, SW 1, and I 1/2

then, Group P1

Table 3-5a

2. Classify Emergency A lternating Current Power Supply System Configuration with EDGs nor m a lly available = 2 EDGs required for safe shutdown =

1; then, EAC Group C

Table 3-7 C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Table 8A-1 Station Blackout Coping De termination (Continued)

Station Blackout Consideration NUM A RC 87-00, Rev. 1 Reference 8A-15 3. Determine Allowed E D G Target Reliability with 0 failures last 20 demands being >90%

1 failure in last 50 demands being >94%

1 failure in last 100 demands being >95%

and with EAC Group C, then, a target reliability of 95%

Section 3.2.4

4. Determining Coping Duration Requirement

with

Offsite Power Group P1 EAC Group C

EDG target reliability of 95%

then, the required coping duration is 4 hr Table 3-8 C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 Table 8A-2 Validation of NUMARC 87-00 Assumptions NUMARC Assumption Comment LDC N-0 2-0 0 2, 0 2-025 8A-16 NUM ARC 87-00, Rev. 1, A ppend i x J.9 Considerations 2.4.1(1) Confirm dc power for EDG field flashing and breaker closure.

These cons i d erations a r e included in the batte r y capacity calculations (Re f erence 8A-7). 2.5.2 BWRs should consider RRC pump seal leakage.

Seal l eaka g e is included in the required inventory calculation (see Section 8A.2.5.1). 2.7.1 LOCA and HELB temperatures may not be conser vative for SBO. A plant specific SBO primary

containment heatup calculation has

been performed for Columbia

Generating Station, and the SBO

temperatures are bounded by the LOCA analysis temperatures. The DAC area outside containment is not susceptible to HELB conditions. (see Section 8A.2.5.4). 2.7.1(2)(a) Confirm control room temperatures do not exceed 120°F. This assumption was confirmed for Columbia Generating Station by a plant-specific control room heatup calculation (Reference 8A-7). 2.7.1(2)(a)1 2.7.1(2)(a)2 Initial and average wall temperatures assumptions should

be verified by plant data.

The use of 104°F for RPS rooms and switchgear room 2 is valid as these rooms are controlled to below this temperature per the Licensee Controlled Specifications.

C OLUMBIA G ENERATING S TATION Amendment 53 F INAL S AFETY A NALYSIS R EPORT November 1998 Table 8A-2 Validation of NUMARC 87-00 Assumptions (Continued)

NUMARC Assumption Comment 8A-17 The heatup calculations for the control room used an alternate

methodology for which the

temperature of adjacent rooms was properly accounted for. The temperatures of the rooms adjacent

to the control room were

conservatively assu med to be 104°F with the exception of the communication room which may have SBO heat loads and was assumed to be at 120°F. The control room model does not use

the basic NUMARC 87-00 assumption that wall temperature

remains basically constant during the SBO. Rather it models the wall

as several nodes (typically 10) for

which time dependent heat

conduction and convection are

accounted for.

The primary containment model used the maximum temperature

allowed by the Technical Specifications for the drywell and

suppression pool as the initial temperatures for the appropriate portions of the containment shell

and internal structures. These temperatures are higher than those that would be expected for the

adjacent areas outside primary containment (i.e., within the Reactor Building).

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 Table 8A-2 Validation of NUMARC 87-00 Assumptions (Continued)

NUMARC Assumption Comment LDC N-0 2-0 0 2 8A-18 2.7.1(2)(a)(3) 2.7.1(2)(a)(4)

Drop ceilings and walls that are not poured conc rete cannot be modeled by NUMARC 87-00

methodology. If either are to be modeled, an alternate methodology must be used and

this should be identified to the

NRC. The control room has a drop ceiling

and walls that have facia board

paneling. The drop ceiling was

modeled by a method identified to the NRC in Reference 8A-7. The control room model has two volumes; the main portion of the

room and t h e volume above the drop ceiling. Walls with facia

board panel were not credited as heat sinks. 2.7.1(2)(a)(5) In order to take credit for opening doors, the adjacent room must be large relative to the DAC and at a

lower temperature.

The opening of doors is not

required for SBO Rule compliance. 2.7.1.(2)(b) Loss of heating in the battery room is assumed not to affect battery capacity. Provided battery capacity calculations used the lowest electrolyte temperature anticipated under normal

operating conditions, further

consideration of loss of battery capacity is not required.

The battery rooms have no walls that are exterior walls of the

building and some of the adjacent rooms will have SBO heat loads.

As such, there will not be

significant cooling of the rooms

during the coping period. Also, as

the I 2 R heat generation within the batteries will be greater than the heat loss due to the endothermic discharge reaction (Reference 8A-12), it is likely that the electrolyte temperature will increase even with a slight decrease in room temperature.

C OLUMBIA G ENERATING S TATION Amendment 57 F INAL S AFETY A NALYSIS R EPORT December 2003 Table 8A-2 Validation of NUMARC 87-00 Assumptions (Continued)

NUMARC Assumption Comment LDC N-0 2-0 0 2, 0 2-025 8A-19 Other Considerations

2.3.1 Specific

consideration was not given in NUMARC 87-00 for a

grid related LOOP due to volcanic activity.

The eruptions of Mt. St. Helens in 1980 did not result in significant disturbance to the BPA system.

Also, the probability of volcanic

activity that could significantly impact the BPA system is low relative to severe weather events

that could do the same. Columbia

Generating Sta tion has made procedure and design provisions to

ensure continuous EDG operations during volcanic activity (see Section 9.2.5.3 and Reference 8A-13). 2.7.1.(2)(a) RAO only need s to be established for areas that lose normal ventilation.

RAO was confirmed for those

areas that contain SBO coping equipment for which ventilation is

maintained (Section 8A.2.5.4). 2.7.1.(2)(a)

For a temperature 120°F, it is likely no specific actions to ensure

RAO are required.

Analysis has confirmed that all

equipment important to station

blackout is capable of functioning at temperatures 120°F ( 129°F for the RPS-1 room) with no specific action required to ensure RAO. 2.7.1.(2)(a) The DACs for BWRs are the HPCI/HPCS and RCIC rooms and the main steam tunnel.

For Columbia Generating Station, the control room and primary containment are considered as DACs.

C OLUMBIA G ENERATING S TATION Amendment 56 F INAL S AFETY A NALYSIS R EPORT December 2001 Table 8A-2 Validation of NUMARC 87-00 Assumptions (Continued)

NUMARC Assumption Comment LDC N-0 1-0 0 0 8A-20 Appendix I, Q/A 95 Plants that relied on GE HELB analysis or a plant specific

analysis which bounds the GE analysis, need not address the drywell temperature.

This assumption was validated for Columbia Generat i ng Station using a plant-specific primary

containment heatup ana l ysis that modeled the drywell, wetwell air

space, and suppression pool.