ML17207A251
| ML17207A251 | |
| Person / Time | |
|---|---|
| Issue date: | 08/31/1977 |
| From: | NRC OFFICE OF STANDARDS DEVELOPMENT |
| To: | |
| References | |
| REGGD-01.108, REGGD-1.108, NUDOCS 7907100397 | |
| Download: ML17207A251 (6) | |
Text
efsft Rfntr c+
yp0o~i I
co ih0 IS ty*gtOt U.S. NUCLEAR REGULATORY COMMISSION Revision 1
August 1877 REGULATORY6 UlDE OFFICE OF STANDARDS DEVELOPMENT REGULATORY GUIDE 1.108 PERIODIC TESTING OF DIESEL GENERATOR UNITS USED AS ONSITE ELECTRIC POWER SYSTEMS AT NUCLEAR POWER PLANTS A, INTRODUCTION Criterion XI, "Test Control," of Appendix B,
"Quality Assurance Criteria for Nuclear Power Plants and Fuel Reprocessing Plants," to 10 CFR Part 50, "Licensing of Production and Utilization Facilities."
requires that a
test program be es-tablished to ensure that systems and components per-form satisfactorily and that the test program include operational tests during nuclear power plant opera-tion.
Criterion 17, "Electric Power Systems," ofAppen-dix A. "General Design Criteria for Nuclear Power Plants," to 10 CFR Part 50 requires that onsite electric power systems have sufficient independence, capacity, redundancy, and testability to perform their safety functions, assuming a single failure.
Criterion 18, "Inspection and Testing of Electric
, Power Systems," of Appendix A to 10 CFR Part 50 requires that electric power systems important to safety be designed to permit appropriate periodic in-spection and testing to assess the continuity of the systems and the condition of their components.
This regulatory guide describes a method accep-table to the NRC staff for complying with the Com-mission's regulations with regard to periodic testing of diesel electric power units to ensure that the diesel electric power systems will meet their availability re-quirements.
The Advisory Committee on Reactor Safeguards has been consulted concerning this guide and has concurred in the regulatory position.
B. DISCUSSION The purposes of onsite electric power systems are (I) to provide power promptly to engineered safety
+Lines indicate substantive changes from previous issue.
USNRC REGULATORYGUIDES Regulatory Guides ore nsued to describe and moke availabk to the publ>> methods
~cctptablc IO the IfRC staff of implementing SpeCifie Parts ot the Commnsion's reyu tat rhnS. IO dehneolt Ice hn eau tr vted by the slats m tvaluahny Sptedic problems or postutoted <<crdtnts. or to cvovide guidance to applicants.
Regulatory Guides oie not substnutes for regutatrons.
ond cornplunct with them is not rertvired, Methods and solutions different from those set out in the guides vhll be accept able if they prOvide o basis for the findings rortunite to the nsvanee or Cpntinvanec of o permit or license by the Commnsron.
Comments ond suygcstiorn for improvements in there yuides we encouraged ot ~u times, ond yuides will be revnad, os appropriate, to accommodate comments ond to reflect rltw rhforhutroh or tspcirchee.
This yvidt was rtvned os o result of oubstanbvt comments received from the public ond additional stan review.
features ifa loss ofoffsite power and an accident oc-cur during the same time period and (2) to provide power to equipment needed to maintain the plant in a safe condition ifan extended loss ol'offsite power oc-curs. Diesel generator units are the most common source of onsite electric power.
High reliability must be designed into the diesel generator units and maintained throughout their ser'-
vice lifetime by appropriate testing, maintenance, and operating programs.
Branch Technical Position EICSB 2, "Diesel-Generator Reliability Qualifica-tion Testing,"
dated 11/24/75, ol'he Standard Review Plan (Appendix 7-A ofNUREG-75/087') es-tablishes a reliability goal of 0.99 (at a nominal 507p confidence level) and an acceptable qualification testing program for diesel generator units of a type or size not previously used as standby emergency power sources in nuclear power plants. The preoperational and periodic testing provisions set forth in this guide have been designed to provide a basis for taking those corrective actions needed to maintain high inservice reliability of installed diesel generator units. In addi-tion, the data developed will provide an ongoing demonstration of performance and reliability for all diesel generator units after installation and in service.
Reliability objectives concerning the entire onsite electric power system's probability of failure depend on the interconnections among the system's compo-nents and are not within the scope of this guide.
"Failure" is taken here to mean the failure to start, accelerate, and assume the design-rated load within and for the time prescribed during an emergency or a valid test.
'UREG-75/Og7, "Standard Review Plan for the Review of Safety Analysis Reports for Nuclear Power Plants," U.S. Nuclear Regulatory Comfnission.
Copies may be purchased from the National Tcchnical Information Service, Springlield, Virginia 22 I6l.
- t. Power Reactors
- 2. Research and Ten Reactors
- 3. F uels and Materials Facilities
- 4. SIWirphmehtot and Siting
- 5. Materials and Punt Protection
- 6. Products
- 2. Trarnponotion
- 8. occupational Htahh
- y. Antitrust Review fO. General Requests for singte copies of issued guests fwhich may be reproduced I or for pface ment on on automatic distribution hst for single cooies of future yuides in specihc divisions should be nude in writing to Ihe US. Ifucleai Reyubtory C6mmission, Washington, DC.
20555. Auention:
Duector. Div'nion ol Document Control.
comments shoutd be sent to the Secretory of the Commnsion, VS. 8 vdcw Rag v.
Iatory Comm'nsion, Washington, DC.
20555, Auention; Docketing ahd5crvrce Stanch.
The guides are issued in the followinyten broad divisions:
7ct ~7lOC)~'t7 otjp
The testing of the diesel generator unit should simulate, where practicable, the parameters of opera-tion (automatic start, load sequencing, load shed-
- ding, operation
- time, etc.)
and environments (temperature, humidity, etc.) that would be expected if actual demand were to be placed on the system.
This guide provides design and operational provi-sions for the performance of periodic testing of diesel generator units used for onsite electric power for nuclear power plants. A "diesel generator unit" con-sists of the engine, generator, combustion air system, cooling water system up to the supply, fuel supply
- system, lubricating oil system, starting energy
- sources, autostart
- controls, manual
- controls, and diesel generator breaker.
C. REGULATORY POSITION Cen eral a.
The design of a diesel generator unit should be such that it can accommodate diesel generator testing as defined in Regulatory Position C.2.
b.
Diesel generator units should be designed to be testable during operation of the nuclear power plant, as well as while the plant is shut down. The design should include provisions so that the testing of the units will simulate the parameters of operation (outlined in Regulatory Position C.2) that would be expected ifactual demand were to be placed on the system.
(1) Capability should be provided to test each diesel generator unit independently of redundant un-its. Test equipment should not cause a loss of in-dependence between redundant diesel generator units or between diesel generator load groups.
(2) Testability should be considered in the selec-tion and location of instrumentation sensors and critical components (e.g., governor, starting system components).
Instrumentation sensors should be readily accessible and designed so that their inspec-tion and calibration can be verified in place.
Testability should be considered in selecting critical components, and the overall design should include status indication and alarm features.
(3) Periodic testing of diesel generator units should not impair the capability of the unit to supply emergency power within the required time. Where necessary, diesel generator unit design should include an emergency override of the test mode to permit response to bona fide signals.
7 (4) A surveillance system should be provided with remote indication in the control room as to diesel generator unit status, i.e., under test, ready-standby, lockout. A means ofcommunication should also be provided between diesel generator unit testing locations and the main control room to ensure that the operators are cognizant of the status of the unit under test.
(5) The surveillance system should indicate which of the diesel generator protective trips. is ac-
, tivated first in order to facilitate trouble diagnosis.
(6) All diesel generator protective trips.-should be in force during diesel generator unit testing.
c.
Detailed step-by-step procedures should be provided for each test under Regulatory Position C.2.
The procedures should identify those special arrange-ments or changes in normal system configuration that must be made to put the diesel generator unit un-der test. 3umpers and other nonstandard configura-tions or arrangements should not be used subsequent to initial equipment startup testing.
d.
Subsequent to any failure, the cause should be determined and corrective action taken in a timely manner. with emphasis on preventing reoccurrence of the failure.
2.
Testing a,
Testing of diesel generator units during the plant preoperational test program and at least once every 18 months should:
(I) Demonstrate proper startup operation by simulating loss of all a.c. voltage and demonstrate that the diesel generator unit can start automatically and attain the required voltage and frequency within acceptable limits and time.
(2) Demonstrate proper operation for design-accident-loading-sequence.
to design-load require-ments and verify that voltage and frequency are maintained within required limits.
(3) Demonstrate full-load-carrying capability for an interval of not less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, of which 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> should be at a load equivalent to the con-tinuous rating ofthe diesel generator and 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> at a load equivalent to the 2-hour rating of the diesel generator. Verifythat voltage and frequency require-ments are maintained. The test should also verify that the cooling system functions within design limits.
(4) Demonstrate proper operation during diesel generator load shedding, including a test of the loss of the largest single load and ofcomplete loss ofload, and verify that the voltage requirements are.met and that the overspeed limits are not exceeded:.
(S) Demonstrate functional capability at full-load temperature conditions by rerunningthe test phase outlined in Regulatory Positions C.2.a.(l) and (2) above immediately following (3) above.
1.108-2
(6) Demonstrate the ability to (a) synchronize the diesel generator unit with offsite power while the unit is connected to the emergency load, (b) transfer this load to the offsite power, (c) isolate the diesel generator unit, and (d) restore it to standby status.
(7) Demonstrate that the engine will perform properly ifswitching from one fuel oil supply system to another is a
part of the normal operating procedure to satisfy'the 7-day storage requirement.
(8) Demonstrate that the capability of the diesel generator unit to supply emergency power within the required time is not impaired during periodic testing under Regulatory Position C.2.c.
(9} Demonstrate the required reliability by means of any 69 consecutive valid tests'per plant) with no failures, with a minimum of 23 or 69/n tests, whichever is the larger, per diesel generator unit (where n is equal to the number of diesel generator units of the same design and size).
b.
Testing of redundant diesel generator units during normal plant operation should be performed independently (nonconcurrently) to minimize com-mon failure modes resulting from undetected in-terdependences among diesel generator units.
However, during reliability demonstration of diesel generator units during plant preoperational testing and testing subsequent to any plant modiTication where diesel generator unit interdependence may have been affected or every 10 years (during a plant shutdown), whichever is the shorter, a test should be conducted in which redundant units are started simultaneously to help identify certain common failure modes undetected in single diesel generator unit tests.
c.
Periodic testing ofdiesel generator units during normal plant operation should:
(I) Demonstrate proper startup and verify that the required voltage and frequency are automatically attained within acceptable limits and time. This test should also verify that the components of the diesel generator unit required for automatic startup are operable.
(2) Demonstrate full-load-carrying capability (continuous rating) for an interval of not less than one hour. The test should also verify that the cooling system functions within design limits. This test could be accomplished by synchronizing the generator with the offsite power and assuming a load at the max-imum practical rate.
d.
After completion of the diesel generator unit reliability demonstration under Regulatory Postition s Valid test as defined in Regulatory Position C.2.e.
C.2.a.(9),
the interval for periodic testing under Regulatory Position C,2.c (on a per diesel generator unit basis) should be no more than 31 days and should depend on demonstrated performance. If more than one failure has occurred in the last 100 tests (on a per nuclear unit basis), the test interval should be shortened in accordance with the following schedule.:
(I) Ifthe number of failures in the last 100 valid tests is one or zero, the test interest should be not more than 31 days.
(2) Ifthe number of failures in the last 100 valid tests is two, the test interval should be not more than 14 days.
(3) Ifthe number of failures in the last 100 valid tests is three, the test interval should be not more than 7 days.
(4) Ifthe number of failures in the last 100 valid tests is four or more, the test interval should be not more than 3 days.
e.
Yalid tests and failures (under Regulatory Positions C.2.a.(9) and C.2.d) should be based on the following criteria:
(I) All start attempts (automatic, including those from bona fide signals, or manual) that result in a failure to start, except as noted in (2) below, should be considered valid tests and failures.
(2) Unsuccessful start and load attempts that can definitely be attributed to operating error, to spurious operation of a trip that is bypassed in the emergency operating mode, to malfunction of equip-ment that is not operative in the emergency operating mode (e.g., synchronizing circuitry) or is not part of the defined diesel generator unit design should not be considered valid tests or failures.
(3) Successful starts, including those initiated by bona fide signals, followed by successful loading (se-quential or manual) to al least 50% of.continuous rating and continued operation for at least one hour should be considered valid successful tests.
(4) Successful starts that are terminated inten-tionally without loading, as defined in (3) above, should not be considered valid tests or failures.
(5) Successful starts followed by an unsuccessful loading attempt should be considered valid tests and failures, except as noted in (2) above.
(6) Tests that are terminated intentionally before completion as defined in (3) above because of an alarmed abnormal condition that would ultimate-ly have resulted in diesel generator damage or failure should be considered valid tests and failures.
1.108-3
(7) Tests performed in the process of troubleshooting should not be considered valid tests.
Tests that are performed to verify correction of the problem should be considered valid tests and succes-ses or failures, as appropriate.
(8) Cranking and venting procedures that lead to the discovery ofconditions (e.g., excessive water or oil in a cylinder) that would have resulted in the failure of the diesel generator unit during test or dur-ing response to a bona fide signal should be con-sidered a valid test and failure.
- 3. Records and Reports
- a. All start attempts, including those from bona fide
- signals, should be logged.
The log should describe each occurrence in sufficient detail to permit independent determination of statistical validity in accordance with Regulatory Position C.2.e.
Maintenance,
- repair, and out-of-service-time histories, as well as cumulative maintenance and operating data, should also be logged. Cumulative statistical analyses of diesel generator unit test results, together with results ofoperation ofthe diesel generator unit when required by actual
- demand, should be maintained. These analyses should include examination of the'rend of critical failure mechanisms, human
- errors, and common mode failures.
t generator units requires special evaluation, and the information provided on the report form should be supplemented, as
- needed, by additional narrative material that:
~
(I) IdentiTies the reported failure as the 7th or greater failure in the last 100 valid tests,
~~
(2) Describes corrective
- measures, taken or planned, to increase the reliability of the generator
- units, (3) Provides an assessment of the existing reliability of electric power to engineered-safety-feature equipment, (4) Provides the licensee's basis for continued plant operation if that is planned, and (5) Provides a summary ofall tests (valid and in-valid) that occurred within the time period over which the last 100 valid tests were performed, and veriTies that surveillance testing during this period was in conformance with the schedule of Regulatory Position C.2.d.
Invalid failures experienced during trouble-shooting should be included in the report of the failure (valid or invalid) that made the troubleshooting necessary.
- b. All diesel generator unit failures, valid or in-
,valid, should be reported'onsistent with the licensee's reporting requirements. This report should (I) identify the diesel generator unit involved, (2) identify the failure as being the nth failure in the last 100 valid tests, (3) describe the cause of failure, (4) describe the corrective measures taken, (5) indicate the length of time the diesel generator unit was un-available, (6) define the current surveillance test inter-val, and (7) verify that the test interval is in confor-mance with the schedule of Regulatory Position C.2.d. Ifthe number of failures in the last 100 valid tests is seven or more, the reliability of the diesel t See Regulatory Guide I.I6, "Reporting of Operating Infor-tnation."
D. IMPLEMENTATION The purpose of this section is to provide informa-tion to applicants regarding the NRC staff's plans for using this regulatory guide.
This guide reflects current NRC staff practice.
Therefore, except in those cases in which the appli-cant proposes an acceptable alternative method for complying with the specified portions ofthe Commis-sion's regulations, the method described herein is be-ing and will continue to be used in the evaluation of submittals for construction permit applications until this guide is revised as a result ofsuggestions from the public or additional staff review.
1.1084
S 4
P gR,S REgy (4
0 Op A
OO IIA
'S
+~
~O
+a*++
UNITEDSTATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D. C. 20555 September 1977 ERRATA Regulatory Guide 1.108, Revision 1, August 1977 "PERIODIC TESTING OF DIESEL GENERATOR UNITS USED AS ONSITE ELECTRIC POWER SYSTEMS AT NUCLEAR POWER PLANTS" The demonstration of diesel generator unit reliability (Regulatory Position C.2.a(9))
was inadvertently placed in Revision 1 of Regu-latory Guide 1.108 so that such demonstrations appeared to be called for at least every 18 months in addition to the intended demonstration during the plant preoperational test program.
Therefore, Regulatory Position C.2.a(9) should be revised to read:
(9)
During the plant preoperational test program only, demonstrate the required reliability by means of any 69 consecutive valid tests (per plant) with no failures, with a minimum of 23 or 69/n tests, whichever is the larger, per diesel generator unit (where n is equal to the number of diesel generator units of the same design and size).