ML20099L245
| ML20099L245 | |
| Person / Time | |
|---|---|
| Site: | Vogtle  |
| Issue date: | 09/06/1995 |
| From: | GEORGIA POWER CO. |
| To: | |
| References | |
| OLA-3-A-171H, NUDOCS 9512200214 | |
| Download: ML20099L245 (8) | |
Text
_ _ _ _ _ _ -.
-3 d"
bW g
e f,1 L Ulac tiKH Ctr15l/l-H
, ;,* * * ~.,
WI3B l'X. C.8 1
(ER 1-90-6 DOCKETED
~
-- ogggc- - -
..f, : -
LOSS OF OFFSITE POWER LEADS TO SITE AREA EMERGFM 95 EVENT DATE: 3-20-90 i
~.
OFFICE (F SENW i
ABSTRACT 4q' DOCKET".;' i " " E l
9 j
5.fi
)
On 3-20-90, Unit 1 was in a refueling outage and Unit 2
was operating at 100% power.
At 0820 CST, the driver of.a fuel truck in the switchyard backed into a
support for the phase "C"
insulator for the Unit 1 Reserve Auxiliary Transformer (RAT) 1A.
I The insulator and line fell to the ground, causing a phase to ground fault.
Both Unit 1 RAT 1A and Unit 2 RAT 2B High Side and i
Low Side breakers
- tripped, causing a loss.of offsite power condition (LOSP).
Unit 1 Diesel Generator (DG) 1A and Unit 2 DG i
28 started, but DG1A tripped, causing a loss'of residual host removal (RHR) to the reactor core since the Unit 1 Train 8
RAT i
and DG were out of service for maintenance. A Site Aree Emergency (SAE) was declared and the site Emergency Plan, was'
'i m pl emen t ed.,
I P
. ine core heated upito 136 degrees F before the DG was emergency FC T started at 0856 CST and RHR was restored.
At 0915 CST, the SAE was downgraded to an Alert after onsite power was restored.
The, direct cause of this series of events was a cognitive f
personnel error.
The truck driver failed to use proper backing procedures and hit a support, causing the phase'to ground fault and LOSP.
The most probable cause of the DG1A trip was the intermittent actuation of the DG Jacket water temperature switches.
-.f Corrective actions include strengthening policies for control of
It c
I NUCLEAR REGULATORY COMMISSION Docket No. 50-424!425-OLA-3 EXHIBITNO. 6/t IT-01 H he the matter of Georale Power Co. et at Voatic Units 1 & 2 k.
O Giaff S APP cant O lntervonor D Othof li
$ Identified S Received O Rejected Reporter 5b De.
ei 06-M wnness We t. L 9512200214 950906 PDR ADOCK 05000424 1
.f 92 PROJECT 057s21 0
.~
A.
REQUIREMENT FOR REPORT This event is reportable per:
a) 10 CFR50.73 (a)(2)(1v), because an unplanned Engineered Saf aty Feature (ESF) actuation occurred when the ESF Actuation System Sequencer started, and b) Technical Specification 4.8.1.1.3, because a valid diesel generator f ailure occurred.
Additionally, t hi s report serves as a summary of the Site Area Emergency event.
- 8. UNIT STATUS AT TIME OF EVENT
~
Unit 1 was in Mode 6 (Refueling) at 0% rated thermal power.
The reactor had been shutdown since 2-23-90 for a 45 day scheduled refueling outage.
The reactor core reload had been completed, the initial tensioning of. the reactor vessel head studs was
- complete, and the outage team was awaiting permission from the to'begin the final tensioning.
Reactor Coolant control room System (RCS) level was being maintained at mid-loop with the Train A
Residual Heat kemoval (Ri12) pump in service for decay a
heat removal.
The temperature of the RCS was being maintained at approximately 90 degrees F.
Due to the refueling outage maintenance activities in
- progress, some equipment was out of service and several systems were in abnormal configurations.
The Train 8 Diesel Generator (DG18) was out of service for a required 36 month maintenance inspection.
l The Train 8
Reserve Auxiliary Transformer (RAT) had been removed f rom service for an oil change. The Train B Class 1E 4160 Volt switchgear, 18A03, was being powered from the Train A
RAT 1A through its alternate supply breaker.
All non-1E switchgear b was being powered from the Unit Auxiliary Transformers (UAT) A 9 4 Steam Generator (S/G) nozzle dams had been
- removed, but only F#
S/G's 1 and 4 had their primary manways secured.
Maintenance personnel were in the process of restoring the primary manways on 4kt S/G's 2 and 3.
RCS level was being maintained at mid-loop for p.9' W
valve repa. irs and the S/G manway restorations.
In addition, the pressurizer manway was removed to provide a RCS vent path.
l i
C.
DESCRIPTION OF EVENT On March 20, 1990, at approximately 0817 CST, a truck driver and i
~
security escort entered the protected area driving a fuel truck.
Although t a member of the plant operating staff, the driver was a Geo ia Powse, Company employee belonging to a group ^under contract to perforE various plant services.
ed d M "
The driver, c ac3d t:he welding m[ chine that was in the area and f ound that it did not need fuel.
He returned to the fuel truck and was in the process of backing when he hit a support holding the phase "C" insulator for the RAT 1 A.
The insulator and line fell to the ground, causing a phase to ground
- fault, and the j
0 transf ormer tripped.-
g, 2
92 PROJECT 057622
I h
a g
UNI A At 0820 CST, both' RAT 1A ond the Unit 2 RAT 28 High Sido and Low Side breakers tripped causing a loss of offsite power. condition j
(LOSP) to the Unit 1 Train A Class 1E 4160 volt buss
- 1AA02, the Unit 2 Train 8 Class 1E buss 28A03, and the 480 volt busses l
supplied by 1AA02 and 28A03.
The Unit 1 Train 8 Class 1E 4160-t j
volt buss 18A03. also lost power since RAT 1A was feeding both j
Trains of Class 1E 4160 volt busses. The loss of power caused the
[
j assopiated ESF,pctuation System Sequencers to send a start signal l
to# nit 1 and' Unit 2 Diesel Generator #, DG1A and DG28 started and
- 4 j
U i
sequenced the loads to their respective busses.
Further 4-description of the Unit 2 response to this event is provided in l
LER 50-425/1990-002.
t One minute and twenty seconds after the DG1A engine started and
[
i sequenced the loads to the Class 1E bus, the engine tripped.
This again caused an undervoltage (UV) condition to class 1E bus j
j 1AA02.
The UV signal is a maintained signal at the sequencer.
)
- However, since DG1A was coasting down from the
- trip, the shutdown logic did not allow the DG fuel racks or starting air j
solenoids to open and start the engine.
This caused the engine starting logic to lockup, a condition that existed until the UV signal was reset.
For this reason, DG1A did not re-start by i
j itself after it tripped.
l t
j After the trip, operators were dispatched to the engine control
[
panel to investigate the cause of the trip.
According to the j
i operators, several annunciators were lit.
Without fully i
i evaluating the condition, the operators reset the annunciators.
j During this
- time, a Shift Supervis'or (SS) and Plant Equipment I
Operator (PEO) went to the sequencer panel to determine if any l
problems were present on the 1A sequencer.
The SS quickly pushed 4
L F
the UV reset button, then reset the sequencer by deenergizing and i
J energizing the power supply to the sequencer.
This caused the i
air solenoid to energize for another 5 seconds which caused the I
engine to start.
This happened 19 minutes after the DG tripped the first time.
The engine started and the sequencer sequenced I
the loads as designed.
After 1 minute and 10
- seconds, the l
breaker and the engine tripped a second time.
It did not automatically re-start due to the starting logic being blocked as 2
described above.
By this time, operators, a maintenance foreman 1
l and the diesel generator vendor representative were in the DG 1
room.
The initial report was that the Jacket water pressure trip I
l was the cause of the trip.
The maintenance foreman and vendor i
representative observed that the Jacket water pressure at the i
The trip set point is 6 PSIG and the alarm setpoint is e PSIG.
Also, the control room observed a lube oil sensor malfunction alarm.
I
)
l l
1 I,*
! \\.
i 1
L 3
92 PlclECT 057623
]
\\
l________________.__,
1
e i
Fif toen minutco of ter the second DG1 A trip, DG1A was started from the engine control panel using the emergency start breakglass button.
The engine started and loads were manually loaded.
When the DG is started in emergency mode, all the trips except four are bypassed.
- However, all alarms will be annunciated.
During the emergency run, no trip alarms were noticed by the personnel either at the control room or at the engine control panel.
The only alarms noted by the control room operator assigned for DG operation were lube oil pressure sensor malfunction and fuel oil level High/ Low alarm.
At 1040
DGIA supplied power to the 4160 volt buss 1AA02 until 1157 CST, at which time the 1AA02 buss was tied to RAT 18.
A Site Area Emergency was declared at 0840 CST, due to a loss of all of f-site and on-site AC power for more than 15 minutes.
The Emergency Director signed the notification form used to inform off-site ' government agencies of the emergancy at 0848 CST and notifications began at 0857 CST.
Due to the loss of power, which rendered the primary Emergency Notification Network (ENN) i nope ra bl e,
and some mis-communication, the initial notification was not received by all agencies until 0935 CST.
Subsequent notifications were made without difficulty.
l The Emergency Director instructed personnel to complete various tasks for restoring containment and RCS integrity. All work was 2
accomplished and maintenance personnel exited containment by 1050 CST.
The SAE was downgraded to an Alert Emergency at 0915 CST after i
restoration of core cooling and one train of electrical power. By 1200
- CST, plant conditions had stabilized with both trains of electrical power being supplied from off-site sources (RAT 18)
Af ter discussions with the NRC and local government agencies, the emergency was terminated at 1247 CST and all agencies were notified by 1256 CST.
D.
CAUSE OF EVENT Direct Causes:
- 1) The dir'ect cause of the loss of offsite class 1E AC power f or RAF@.1 A.
was t
fuel truck hitting a pole supporting a 230kV line
- DG1A, to start and load the LOSP loads on bus 1AA02.
lf
'(;
4 92 PROJECT 057624
i
{
k Root'Causes l
l
- 1) The truck driver met all current site training and j
qualification requirements, including holding a
Class 2
i Georgia driver's license.
- 2) The root cause for the failure of DG1A has not been i
conclusively determined. There is no record of the trips that j
were annunciated after the first trip because the l
annunciators were reset before the condition was fully l
evaluated. Therefore, the cause of the first trip can only be postulated, but it was most likely the same as that which r
caused the second trip.
The second trip occurred at the end
]
of the timed sequence of the group 2 block logic.
This logic i
allows the DG to achieve operating conditions before the I
trips become active.
The block logic timed out and the trip
~
occurred at about 70 seconds.
The annunciators observed at l._
the second trip included Jacket water high temperature along with other active trips.
In conducting an investigation, the trip conditions that were observed on the second DG trip on 3-20-90 could b duplicated by venting 2 out of 3 Jacket water tem
- sensors, simulating a
tripped condition.
The simulation duplicated both the annunciators and the 70 sec.
trip time.
The most likely cause of the DG trips was intermittent actuation of Jacket water temperature switches.
i l (~
Following the 3-20-90
- event, all three Jacket water i
temperaturo switches were bench tested.
Switch TS-19110 was i
found to have a
setpoint of 197 degrees F,
which was approximately 6 degrees below its previous setting.
Switch TS-19111 was found to have a setpoint of 199 degrees F, which was approximately the same as the original setting.
Switch TS-19112 was found to have a setpoint of 186 degrees F, which i
was approximately 17 degrees F below the previous setting and i
was re-adjusted.
Switch TS-19112 also had a small leak which was Judged to be acceptable to support diagnostic engine i
tests and was reinstalled.
The switches were recalibrated j
with the manufacturer's assistance to ensure a
consistent calibration technique.
s t
During the subsequent test run of the DG on 3-30-90, one of the switches (TS-19111) tripped and would not reset.
This l'
appeareg to be an intermittent failure because it subsequently reset.
This switch and the leaking switch (TS-19112) were replaced with new switches.
All subsequent testing was conducted with no additional problems.
5 4
g e
e 92 PRCuECT 057625
A test of the Jacket water system temperature transient during engine starts was conducted.
The purpose of this test was to determine the actual Jacket water temperature at the switch locations with the engine in a normal standby lineup, and then followed by a series of starts without air rolling the engine to replicate the starts of 3-20-90.
The test i
showed that Jacket water temperature at the switch location decreased from a
standby temperature of 163 degrees F
to approximately 156 degrees F and remained steady.
1 Numerous sensor calibrations (including Jacket water temperatures),
special pneumatic leak testing, and multiple engine starts and runs were performed under various conditions.
Since 3-20-90, DG1A and DG18 have been started several times and no failures or problems have occurred during any of these starts.
In addition, an undervoltage start test without air roll was conducted on 4-6-90 and DG1A started and loaded properly.
Based on the above facts, it is concluded that the Jacket water high temperature switches were the most probable cause of both trips on 3-20-90.
4.
ANALYSIS OF EVENT a
j
~
The loss of offsite power to Class ~
coupled with DG18 and 1E buss 1GA03 and the failure of DG1A to start and operate successfully, 4
i f-RAT 18 being out of service for maintenance, resulted.in Unit 1 being without AC power to both Class 1E busses.
With both Class 1E busses deenergized, the RHR System could not perform its i
required safety function.
Based on a noted rate of rise in the RCS temperature of 16 degrees F, measured at the core exit j
thermocouples over a fifteen minute period, the RCS water would not have been expected to begin boiling until approximately 1
hour and 50 minutes after the beginning of the event.
Restoration of RHR and closure of the containment equipment hatch were completed well within the estimated 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and 50 minutes for the projected onset of boiling in the RCS.
A review of information obtained from the Process and Effluent Radiation Monitoring System (PERMS) and grab sample analysis indicated 611 normal values.
As a
result of this
- event, no increase in radioactive releas'es to either the containment or the environment occurred. 4 a
g e
O f
e e
.-l-6 92 PROJECT 057626 c
I
'Addicianol systcm3 woro oithor availcblo or could havo bsen medo
[
available to ensure the continued safe operation of the plant.
4 h
f 4
' returned to service approximately 2 hour2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />s-into the event.
- 2) Offs 1te power was available to non-1E equipment through i
the generator step-up transformers which were being j
used to "back-feed" the Unit Auxiliary Transformers (UAT) and supply the non-1E busses. Provided that the phase to ground fault was cleared, Class 1E busses 1AA02 and 18A03 could have been powered by feeding through non-1E bus 1NA01.
j
- 3) The Refueling Water Storage Tank could have been used to l
manually establish gravity feed to the RCS to maintain a
supply of cooling water to the reactor.
Consequently, neither plant safety nor the health and safety of 1
the public was adversely affected by this. event.
A more detailed i
assessment of this event and an assessment of potentially more 2.
severe circumstances will be performed and included in a
supplemental LER.
l F
M F.
CORRECTIVE ACTIONS
- gg se 1) jitM y
a)Onsite truck dei e license requirements will be changed to match, state requirements by 6-1-90.
i l
b) Sensitive and vulnerable areas inside the the protected are M
will be evaluated by 7-1-90 and appropriate barriers erected or controls established.
l 2) a)The Loss of Off-site Power (LOSP) diesel start and trip logic g has been modified so that an automatic " emergency" start will 4 j
occur upon LOSP.
Therefore, non-essential diesel engine trips p;ff l.
S.
are blocked upon LOSP.
jgQ v-t b)DG operating procedures will e revised by 7-1-90 to include g
j specific instructions for ce arts following a DG trip during LOSP.
h c)Operato
_ guidance on r
ording pertinent alarms and W
indicat ons~
is being d
eloped in order to assist in p investigations of future plant events and will be in place by 5-1-90.-
l 8
h 4
l m..
7 92 PRCMECT 057627 m
s m--
3 d)The DG1A test frequency will be increased to once every 7 days in accordance with Technical Specification Table 4.0-1.
This frequency will be continued until 7 consecutive valid tests are completed with no more than one valid failure in the last 20 valid tests.
Including the two valid failures of this
- event, there have been a total of four valid failures'in 66 valid tests of DG1A.
G.
ADDITIONAL INFOREATION 1.
Failed Components:
Jacket Water High Temperature Sw1'tches manufactured by California Controls Company.
Model # A-3500-W3
.h 2.
Previous Similar Events:
None 3.
Energy Industr.y Identification System Code:
7.M '[
.A8 Residual Heat;,,R'emoval. System - 8P Diesel Generator, Lube Oil System - LA Diesel Genera' tor.Stari!ing Air System - LC Diesel Gene'rator Cooling Water System - LB Diesel Gener'ator Powe'r Supply System - EK
~
~
Safety Inject 1'on System - 8Q 13.8'kV Powed S'ystem*2. EA
'4160 volt non'.1E pow'effsystem - EA 416 0 vol t Cl a s s ' 1 E po'wer,,sys t em - EB Chemical and. Volume Control System - CB Conteinment Bu'11 ding "- NH 480 volt Cla'ss.1E PoNor System - ED Engineered Safety' FestiJres Actuati n System - JE Radiation Monitoring System - IL
.;, v.
g
-.i;.V..t.f.gy$ *::._
y?io~'
p
.? mv -
.a ',*
v
,,t, W
L Q
p
~
.r-
- t"*4 c.
.h-b A
e 4
..1-.
s
(
~. *,
f.'"f f';..' -
f g
- ~
m
~ wn.
". '?
j.gp~,!.A.Gf-7 f
Q@Q h b
- .9
.i;.
h 92 PROJECT 057628
.-s w#
r sc
-