ML20309A735

From kanterella
Jump to navigation Jump to search
2 to Updated Final Safety Analysis Report, Chapter 8, Appendix 8A, Tables
ML20309A735
Person / Time
Site: Mcguire, McGuire  Duke Energy icon.png
Issue date: 10/08/2020
From:
Duke Energy Carolinas
To:
Office of Nuclear Reactor Regulation
Shared Package
ML20309A875 List: ... further results
References
RA-19-0424
Download: ML20309A735 (48)


Text

McGuire Nuclear Station UFSAR Appendix 8A. Tables Appendix 8A. Tables

McGuire Nuclear Station UFSAR Table 8-1 (Page 1 of 12)

Table 8-1. Maximum Loads to be Supplied from One of the Redundant Essential Auxiliary Power System Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks SEQ 1: Centrifugal 600 HP 500 HP 11 sec. 680 HP (18) 11 sec. 4160V 1ETA, One per Charging 1ETB, diesel Pump 2ETA, 2ETB Motor 112 KW(1) 112 KW(1) 11 sec. 112 KW(1) 11 sec. 575V 1EMXA, Estimated Operated 1EMXB, Valves 2EMXA, 2EMXB 1500 KVA, 600 (2) (2) 11 sec. (2) 11 sec. 575V 1ELXA, Additional VAC Essential 1ELXB, load Aux. Power 2ELXA, center in Sys. Load 2ELXB Sequence Center 2 600/120 V 15 KVA 14.8 KVA 11 sec. 14.8 KVA 11 sec. 575V 1EMXH, Two per Power 2EMXH station Panelboard Vital AC-DC 100 KVA 60 KVA 11 sec. 60 KVA 11 sec. 575V 1EMXA, Two per Sys. Batt. 1EMXB, diesel Chgrs. 2EMXA, 2EMXB VC/YC System 50 HP 40 HP 11 sec. 40 HP 11 sec. 575V 1EMXH, Two per Control Room 2EMXH station Air Handling Unit Fans (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 2 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks VC/YC System 10 HP 5 HP 11 sec. 5 HP 11 sec. 575V 1EMXH, Two per Pressure Filter 2EMXH station Fan VC/YC System 10 KW 10 KW 11 sec. 10 KW 11 sec. 575V 1EMXH, Two per Pressure Filter 2EMXH station Heater VC/YC Sys. 15 HP 15 HP 11 sec. 15 HP 11 sec. 575V 1EMXA, Two 7.5 Swgr. Rm. Air 1EMXB, HP fans Handling Unit 2EMXA, per diesel Fans 2EMXB Diesel 20 HP 19 HP 11 sec. 19 HP 11 sec. 575V 1EMXE, One per Jacket/Interco 1EMXF, diesel oler Pump 2EMXE, 2EMXF Diesel 5 KVA 5 KVA 11 sec. 5 KVA 11 sec. 575V 1EMXE, One per Generator 1EMXF, diesel Battery 2EMXE, Charger 2EMXF SEQ 1: Diesel Air 30 HP 30 HP 11 sec. 30 HP 11 sec. 575V 1EMXE, Two 15 (cont'd) Compressors 1EMXF, HP 2EMXE, comps.

2EMXF per diesel Diesel Lube 10 HP 9.5 HP 11 sec. 9.5 HP 11 sec. 575V 1EMXE, One per Oil Before & 1EMXF, diesel After Pump 2EMXE, 2EMXF (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 3 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks Diesel 5 KVA 3.7 KVA 11 sec. 3.7 KVA 11 sec. 575V 1EMXE, One per 600/120V 1EMXF, diesel Panelboard 2EMXE, 2EMXF Diesel Lube 5 HP 5 HP 11 sec. 5 HP 11 sec. 575V 1EMXE, One per Oil Heater 1EMXF, diesel Pump 2EMXE, 2EMXF Diesel Bldg. 40 HP 40 HP 11 sec. 40 HP 11 sec. 575V 1EMXE, Two 20 General Vent. 1EMXF, HP fans Supply Fans 2EMXE, per diesel 2EMXF Diesel Fuel Oil 1 HP 1.5 HP 11 sec. 1.5 HP 11 sec. 575V 1EMXE, One per Transfer Pump 1EMXF, diesel 2EMXE, 2EMXF Diesel Crank 0.5 HP 0.5 HP 11 sec. 0.5 HP 11 sec. 575V 1EMXE, One per Case Vacuum 1EMXF, diesel Blower 2EMXE, 2EMXF SEQ 1: Diesel Fuel Oil (15) 0.1 HP 11 sec. 0.1 HP 11 sec. 575V 1EMXE, One per (cont'd) Drip Tank 1EMXF, diesel Pump 2EMXE, 2EMXF Trace Heating 30 KVA 10 KVA 11 sec. --- --- 575V 1EMXA, One per Panelboard 1EMXB, diesel 2EMXA, 2EMXB Deleted Per 2020 Update (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 4 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks Radiation 0.25 HP 0.25 HP 11 sec. 0.25 HP 11 sec. 575V 1EMXH One per Monitoring station R.H.R. & CS 7.5 HP 4.5 HP 11 sec.(14) 4.5 HP 11 sec.(14) 575V 1EMXA, One per Sump Rm. 1EMXB, diesel Sump Pump 2EMXA, 2EMXB Diesel 30 HP 26 HP 11 sec.(14) 26 HP 11 sec.(14) 575V 1EMXE, Two 15 Generator Rm. 1EMXF, HP pumps Sump Pump 2EMXE, per diesel 2EMXF SSFARC 0.75 KVA 0.75 KVA 11 sec. 0.75 KVA 11 sec. 575V 1EMXA-4, Two per Control Power 1EMXH-1, station Transformers 2EMXA-4 Hydrogen 1.4 KVA 1.4 KVA 11 sec. 1.4 KVA 11 sec. 575V 1EMXA, One per Analyzer 1EMXB-3, diesel 2EMXA, 2EMXB-3 Hydrogen 7.5 KVA(3) --- --- 6 KVA(3) 11 sec.(3) 575V 1EMXA-4, One per Mitigation 1EMXB, diesel Pnlbd. 2EMXA-4, 2EMXB SEQ 2: Safety 400 HP --- --- 440 HP (18) 16 sec. 4160V 1ETA, One per Injection Pump 1ETB, diesel 2ETA, 2ETB 1500 KVA, 600 (2) (2) 16 sec. (2) 16 sec. 575V 1ELXC, VAC Essential 1ELXD, Aux. Power 2ELXC, Sys. Load 2ELXD Center (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 5 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks Emerg. AC 30 KVA 30 KVA 16 sec. --- --- 575V 1EMXC, One per Lighting Panel 1EMXD, diesel 2EMXC, 2EMXD Annulus 30 HP --- --- 24 HP 16 sec. 575V 1EMXC, One per Ventilation 1EMXD, diesel System Fan Annulus 30 HP -- -- 30 HP 16 sec. 575V 2EMXC, One per Ventilation 2EMXD diesel System Fan Annulus 43 KW --- --- 43 KW 16 sec. 575V 1EMXC, One per Ventilation 1EMXD, diesel System 2EMXC, Moisture 2EMXD Separator Heaters Radiation (6) (6) 16 sec. (6) 16 sec. 575V 1EMXC, (6)

Monitoring 1EMXD, 2EMXC, 2EMXD Pipe Tunnel 15 HP 15.5 HP 16 sec. --- --- 575V 1EMXC, One per Booster Fans 1EMXD, diesel 2EMXC, 2EMXD Control Rod 100 HP 100 HP 16 sec. --- --- 575V 1EMXC, Two 50 Drive 1EMXD, HP fans Ventilation 2EMXC, per diesel Fans 2EMXD (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 6 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks Lower 275 HP 266.5 HP 16 sec. --- --- 575V 1EMXC, (20)

Containment 1EMXD, Cooling Units 2EMXC, 2EMXD Upper 20 HP 12.8 HP 16 sec. --- --- 575V 1EMXC, Two 10 Containment 1EMXD, HP fans Air Handling 2EMXC, per diesel Units 2EMXD Upper 2 HP 2 HP 16 sec. --- --- 575V 1EMXC, Two 1 HP Containment 1EMXD, fans per Return Air 2EMXC, diesel Fans 2EMXD Incore 3 HP 1.7 HP 16 sec. --- --- 575V 1EMXC, One per Instrumentatio 1EMXD, diesel n Rm. Air Hdlg. 2EMXC, Unit 2EMXD Press Booster 20 HP 8.6 HP 16 sec. --- --- 575V 1EMXC, One per Fan 1EMXD, diesel 2EMXC, 2EMXD SEQ 3: Residual Heat 400 HP --- --- 455 HP (18) 20 sec. 4160V 1ETA, One per Removal 1ETB, diesel Pump 2ETA, 2ETB SEQ 4: Deleted Per 2012 Update SEQ 5: Component 400 HP 380 HP 30 sec. 350 HP 30 sec. 4160V 1ETA, Two 200 Cooling Water 1ETB, HP pumps Pumps 2ETA, per diesel 2ETB (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 7 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks SEQ 6: Nuclear 1000 HP(4) 650 HP 35 sec. 700 HP 35 sec. 4160V 1ETA, One per Service Water 1ETB, diesel Pump 2ETA, 2ETB RN Strainer 15HP 15HP 36 sec. (22) 15 HP 36 sec. (22) 575V 1EMXC, One per Backwash 1EMXD, diesel Pump 2EMXC, 2EMXD SEQ 7: Auxiliary 500 HP 510 HP 40 sec. 580 HP (18) 40 sec. 4160V 4160V One per Feedwater 1ETA, diesel Pump (Motor 1ETB, Driven) 2ETA, 2ETB SEQ 8: Containment 30 HP --- --- 28 HP 10 min. 575V 1EMXC, One per Air Return Fan 1EMXD, diesel 2EMXC, 2EMXD Hydrogen 40 HP --- --- 44 HP 10 min. 575V 1EMXC, One per Skimmer Fan 1EMXD, diesel 2EMXC, 2EMXD Inverter KS 15 KVA 15 KVA 10 min --- --- 575V 1EMXG, Two per Backup Transf. 2EMXG station VC/YC System 1 HP 1 HP 10 min. 1 HP 10 min. 575V 1EMXG, Two per Battery Rm. 2EMXG station Exhaust Fans (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 8 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks VC/YC System 40 HP 36 HP 10 min. 36 HP 10 min. 575V 1EMXG, Two per Control Rm. & 2EMXG station Control Rm.

Area Chilled Water Pump VC/YC System 75 HP 70 HP 10 min. 70 HP 10 min. 575V 1EMXG, Two per Control Room 2EMXG station Area AHU Fans VC/YC Sys. 1.5 HP 1.5 HP 10 min. 1.5 HP 10 min. 575V 1EMXG, Two per Comp. Oil 2EMXG station Pump SEQ 9: VC/YC System 495 HP 353 HP 11 min.(13) 353 HP (18) 12 min.(13) 4160V 1ETA, Two per Compressor 1ETB, station 2ETA, 2ETB SEQ 10: Back-up 416 KW (16) 416 KW (16) (7) (16) --- --- 575V 1ELXA, One Pressurizer 1ELXB, group per Heaters 2ELXA, diesel 2ELXB Boric Acid 15.5 KW 11.25 KW 60 min.(7) --- --- 575V 1EMXA, One per Transfer Pump 1EMXB, diesel 2EMXA, 2EMXB Fuel Pool 200 HP 200 HP 60 min.(7) 200 HP (18) (7) (18) 4160V 1ETA, One per Cooling Pump 1ETB, diesel 2ETA, 2ETB (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 9 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks Hydrogen 64 KW --- --- 64 KW 24 hrs.(7) 575V 1EMXC, One per Recombiner 1EMXD, diesel 2EMXC, 2EMXD OTHER: Containment 400 HP --- --- 420 HP (18) (23) 4160V 1ETA, One per Spray Pump 1ETB, diesel 2ETA, 2ETB Nuclear 3 HP(8) 3 HP (8) (8) 3 HP(8) (8) 575V 1EMXA, One per Service Water 1EMXB, diesel Strainer 2EMXA, Backflush 2EMXB Drum Residual Heat 1.5 HP 1.2 HP (9) 1.2 HP (9) 575V 1EMXA, One per Removal 1EMXB, diesel Pump Air 2EMXA, Handling Unit 2EMXB Containment 1.5 HP 1.2 HP (9) 1.2 HP (9) 575V 1EMXA, One per Spray Pump 1EMXB, diesel Air Handling 2EMXA, Unit 2EMXB OTHER: Fuel Pool 1.5 HP 1.3 HP (9) 1.3 HP (9) 575V 1EMXA, One per (cont'd) Cooling Pump 1EMXB, diesel Air Handling 2EMXA, Unit 2EMXB Ground Water 30 HP 30 HP (10) 30 HP (10) 575V (10) Three 10 Drainage HP per System Pumps diesel (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 10 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks Aux. Bldg. 90 HP 90 HP (11) 90 HP (11) 575V (11) One per Filtered diesel Exhaust Fans Diesel Jacket 1 HP (12) --- (12) --- 575V 1EMXE, One per Water Heater 1EMXF, diesel Pump 2EMXE, 2EMXF Diesel Jacket 30 KW (12) --- (12) --- 575V 1EMXE, One per Water Heater 1EMXF, diesel 2EMXE, 2EMXF Diesel Barring 3 HP (12) --- (12) --- 575V 1EMXE, One per Gear Motor 1EMXF, diesel 2EMXE, 2EMXF Diesel Lube 15 KW (12) --- (12) --- 575V 1EMXE, One per Oil Heater 1EMXF, diesel 2EMXE, 2EMXF Diesel 4.6 KW (12) --- (12) --- 575V 1EMXE, One per Generator 1EMXF, diesel Space Heater 2EMXE, 2EMXF SOURCE SIZE (Per Diesel) 4000 KW 5000 KVA Continuous 4400 KW 5500 KVA 2 Hrs/Day (without affecting life of the unit)

Note: Loads will be started automatically according to sequence number.

1. This load will not exist after first 5 minutes and hence is not included in total load.
2. Transformers magnetizing inrush KVA 6 to 10 times its rating.
3. Intermittent load used during LOCA on an as needed basis. MCC energized after 11 sec. However, load requires manual operator action (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 11 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks to energize.

4. Equipment rating is larger than load required during LOCA or Blackout.
5. Deleted Per 2018 Update
6. One 0.25 HP and one 0.5 HP fans connected to 1EMXC; two 0.25 HP and one 0.75 HP fans connected to 1EMXD for Unit 1; and one 0.5 HP fan connected to 2EMXC; one 0.25 HP and one 0.75 HP fans connected to 2EMXD for Unit 2.
7. Loads can be started after 12 minutes, if desired.
8. Nuclear service water strainer backflush drum motor will start at the same time as the respective RN pump motor to which it serves starts.
9. ES Air Handling Unit loads will start at the same time the respective pump motor to which it serves starts. (See FSAR Figure 8-3).
10. Two 10 HP pumps connected to 1EMXH-1, Seq. 1 (11 sec.) and one 10 HP pump connected to 1EMXG, Seq. 8 (10 min.) for Unit 1. Three 10 HP pumps connected to 2EMXG, Seq. 8 (10 min.) for Unit 2.
11. 90 HP req'd for LOCA and BLACKOUT per unit; one 50 HP (50 HP req'd) fed from 1EMXH, Seq. 1 (11 sec.); one 40 HP (40 HP req'd) fed from 1EMXG, Seq. 8 (10 min.) for Unit 1 and one 50 HP (50 HP req'd) fed from 2EMXG, Seq. 8 (10 min.); one 40 HP (40 HP req'd) fed from 2EMXH, Seq. 1 (11 sec.) for Unit 2.
12. The diesel loads categorized under "OTHER" are not connected when the diesel is operating.
13. Upon LOCA compressor receives immediate start permissive, upon BLACKOUT compressor receives start permissive after 8.5 second delay. Breaker closes following BLACKOUT after 11 minute delay (Sequence 9). Compressor receives sequencer start signal upon a BLACKOUT or LOCA following a 12 minute delay (Sequence 10). Additional delays for compressor pre-lube and motor short cycle protection are engineered in the chiller controls. These will not affect the operation of the sequencer timer as described.
14. These loads are sequenced on but do not auto-start. Level controls start/stop loads as required.
15. One 0.33 HP pump connected to 1EMXE; one 0.33 HP pump connected to 1EMXF for Unit 1 and one 0.25 HP pump connected to 2EMXE; one 0.25 HP pump connected to 2EMXF for Unit 2.
16. Nominal, initial capacity. Minimum capacity of 150 KW is required within four hours in order to establish and maintain natural circulation in hot standby.
17. Deleted Per 2012 Update
18. The Motor Driven Auxiliary Feedwater Pump (MDCAP) must be throttled to minimum flow prior to starting the Fuel Pool Cooling Pump to provide diesel generator load margin. Alternatives to throttling the MDCAP are securing the MDCAP, any ECCS pump, or YC chiller, which maybe more desirable and provide more margin than throttling the MDCAP. Also, the YC chiller maybe aligned to the opposite unit as another alternative. Cumulative load on diesel is actually less than noted in loading calculation (Reference MCC-1381.05-00-0260 & 0266).
19. Once Safety Injection Signal is Reset, management of diesel load to manually start and/or secure equipment is assumed by Operations.
20. One 125 HP and one 150 HP fans are connected to 1EMXC and 1EMXD for Unit 1. One 125 HP and one 150 HP fans are connected to 2EMXC and 2EMXD for Unit 2.
21. Deleted Per 2018 Update.

(13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-1 (Page 12 of 12)

Reqd. Load Reqd. Load Init Time Init Time SWGR.

Required After Required After LOCA GR./

Sequence Equipment Or Connected During Blackout During Safety L.C./M.C.C Number Application Per Diesel Blackout Signal LOCA Signal Voltage . Number Remarks

22. If the pump control switch is in the auto position (normal operating position) during a BLACKOUT, the RN Strainer Backwash Pump will start approximately one-second after the Nuclear Service Water Pump start in load sequence 6. If the pump control switch is in the manual position (used during testing) during a BLACKOUT, the RN Strainer Backwash Pump will start in load sequence 2 when power is restored to the associated motor control center. During a SI only, the RN Strainer Backwash Pump will remain running if it was previously running or it will start approximately one-second after the Nuclear Service Water Pump start in load sequence 6.
23. The Containment Spray Pump's start is blocked when the load sequencer is actuated. The Containment Spray Pumps can be started following load sequencer reset and initiation of ECCS recirculation mode.

(13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-2 (Page 1 of 1)

Table 8-2. Single Failure Analysis for the Offsite Power Systems Component Malfunction Resulting Consequences

1. Duke Energy Loss of power due to a. The switchyard PCBs connecting the unit Transmission blackout to the system (switchyard) trip System automatically.
b. The onsite diesel generators start and blackout loads are sequenced on automatically. The Essential Systems continue to receive an uninterrupted flow of power.
2. Switchyard red or Loss of one a. No consequence. The red or yellow bus yellow bus power circuit breakers (as applicable) trip.

The unit is still connected to the system through two independent circuits from the remaining switchyard bus.

3. Switchyard power Loss of one due to a a. The faulted equipment is isolated by circuit breakers fault protective relaying and protective connecting the equipment.

stepup transformers

b. The other independent offsite circuit to switchyard remains unaffected.

or

c. The two auxiliary switchgears normally Circuit from supplied from the faulted circuit are switchyard to either connected in a rapid bus transfer to the main transformer other auxiliary transformer in the second or independent circuit of that unit within a maximum of 8 cycles dead time and all Main transformer unit and essential auxiliaries continue to receive uninterrupted offsite power.
d. The unit generator automatically runs back to 56 percent rated output, or generator trips.
e. One of the two independent offsite circuits to each unit is available.
4. Busline circuits Collaspe of Rock a. The faulted lines are isolated by from 230 kV Springs Line onto both protective relaying and protective switchyard to main busline circuits. equipment..

transformer or Unit

b. An alternate offsite power source which is 1.

completely independent of the two Unit 1 overhead transmission circuits is provided through an intertie with the Unit 2 offsite power system (05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-3 (Page 1 of 1)

Table 8-3. Protective Relaying Breakdown - By Relay Zones Relaying Zones Protective Relays 1 Generator Differential, generator neutral overvoltage, generator neutral overcurrent, loss of excitation, voltage restrained overcurrent, negative sequence, overfrequency, volts/hertz, reverse power, breaker failure, out-of-step, inadvertent energization.

Deleted Per 2011 Update 2, 5 Transformer differential, transformer neutral overcurrent, transformer fault pressure, transformer loss of cooler power, transformer overcurrent.

3, 6 Phase directional distance, ground directional distance, phase overcurrent, ground overcurrent.

4, 7 Transformer differential, transformer neutral overvoltage, breaker failure, transformer fault pressure.

8, 9, 11, 12 Transformer differential, phase and ground fault overcurrent.

10, 13 Generator differential, voltage controlled overcurrent.

(05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-4 (Page 1 of 3)

Table 8-4. Monitoring Systems Analysis Action Taken Description of By Consequence of Monitoring System System Monitored Monitor Operation Automatically Operator Failure I - Generator PCB's

1. Low Air Separate pressure On falling air pressure the None Loss of alarm and possible damage of Pressure switches monitor breaker is either tripped or breaker.

System for the minimum air locked out from oper- ating pressure for closing pressures. Actions are and tripping the alarmed.

circuit breaker

2. High Air Pressure switch Alarm is initiated None No alarm is initiated. However, Low Air Pressure monitors the High Pressure is unaffected.

System pressure storage tank for low pressure

3. Pole position If all poles of all Trips the breaker and None Does not trip breaker and no alarm is bkr. do not agree, alarms initiated.

then the alarm relay is energized.

Deleted Per 2009 Update II - Main Step-up Transformer

1. Hot spot Alarm initiated Alarm initiated None No alarm, however, redundant alarm (winding temp.) when temp. (item 2) available reaches 100°C.
2. Hot spot temp. All MSUs have 6 Alarm initiated None No alarm, however, redundant alarm (analog) channels of direct (item 1) available contact fiber optic The above two systems are backup temperature probes for each other.

and no RTD.

(13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-4 (Page 2 of 3)

Action Taken Description of By Consequence of Monitoring System System Monitored Monitor Operation Automatically Operator Failure

3. Oil temp. Alarm initiated Alarm initiated None No alarm, however, there are two (two channels) when oil temp. independent instruments reaches 75°C for one channel and 80°C for other channel.
4. Oil temp. RTD input to Alarm initiated, None No alarm, however there are three (analog) computer to reach independent instrument strings (three channels) pre-set limit
5. Cooler power Undervoltage Alarm initiated None No alarm, however, oil flow alarm (Group 1 or 2) Relays monitor the provides back up. In addition, each MSU except 2A & 2B, which power Loss of has cooler AC current alarms to detect also runs unit back to 55%

power to either one loss of power or failed cooler components and isolates generator initiates alarm

6. Cooler power Alarm initiated Alarm initiated None No alarm, however, oil flow alarm (total loss) upon loss of power provides back up. In addition, each MSU except 2A & 2B, which has to both has cooler AC current alarms to detect the same runback/trip loss of power or failed cooler components response as item 5
7. Mech pressure Alarm initiated due Alarm initiated None No alarm, however, item 10 provides relief to excess pressure alarm. Unit 1 has two devices with alarms, and Unit 2 has three devices with alarms
8. Oil flow Alarm initiated Alarm initiated None No alarm, however, items 3 and 4 provide upon failure of one alarm. In addition, each MSU has cooler or more oil pumps. AC current alarms to detect pump failures or obstructions (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-4 (Page 3 of 3)

Action Taken Description of By Consequence of Monitoring System System Monitored Monitor Operation Automatically Operator Failure

9. Gas Accumulated gas Alarm initiated None No alarm, however, covered under accumulation forces oil down to maintenance procedures.Unit 1 has one initiate relay channel of detection and Unit 2 has two channels of detection. Item 12 also provides backup.
10. Fault Pressure Contact closure Trip the transformer off None No trip from a single fault pressure relay, upon sudden rise and initiate alarm however, items 7 and 9 provide alarm.

of transformer Each MSU has three alarming sensors, internal pressure with 2 out of 3 logic to operate trip.

11. Oil level Contact closure Trip the transformer off None No trip from oil level switch.

when the oil level and initiate alarm Each MSU has three alarming sensors, reaches the lowest with 2 out of 3 logic to operate trip.

safe level

12. Gas generation Contact closure Alarm initiated None No alarm on gas generation. Item 9 when any of 8 provides backup alarm.

monitored gasses exceeds alarm levels (13 APR 2020)

McGuire Nuclear Station UFSAR Table 8-5 (Page 1 of 1)

Table 8-5. Deleted Per 1999 Update (14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-6 (Page 1 of 1)

Table 8-6. Equipment Shared by Both Units No. Equipment Identification 1 *Air Conditioning Equipment and Cable Room Pressurizing Fans No. A & B 2 *Air Conditioning System Control Room Pressurizing Fans No. A & B 3 *Control Room Air Conditioning Fans No. A & B 4 *Air Conditioning System Chiller Water Pumps No. A & B 5 *Air Conditioning System Compressors No. A & B 6 *Equipment and Cable Room A/C Fans No. A & B 7 Selected Trace Heating 8 Auxiliary Control Power System Chargers # CXA, CXB, CXS (Spare) 9 Regulated Dist. Centers 1KRP and 2KRP 10 *Vital AC - DC System Battery Chargers, EVCA, EVCB, EVCC, EVCD, EVCS (Spare) 11 600 Volt Load Centers No. 1SLXA, 1SLXB, 1SLXC, 1SLXD, 1SLXF, 1SLXG, 1SLXH 2SLXA, 2SLXB, 2SLXC, 2SLXD, 2SLXF, 2SLXG, 2SLXH, 2SLXI 12 600 Volt Motor Control Centers 1EMXG, 1EMXH, 1EMXH1, 2EMXG, 2EMXH 13 Electrical Computer Support System Uninterruptible Power Supply SKDCS (Spare) 14 Nuclear Service Water System valve 1RN1 and valves with 'ORN' designators Note:

1. The majority of the equipment identified is installed with Unit 1 and is fed power by Unit 1 at the time of startup. Alternate feeds with manual transfer capability are provided, as appropriate, to the shared systems, such that either Unit 1 or Unit 2 can be used to feed power to the shared loads.
2. Asterisk (*) indicates Engineered Safety Features load.
3. SKDCS Uninterruptible Power Supply (UPS) functions as an installed spare for the replacement of either 1KDCS UPS or 2KDCS UPS in supplying assigned Unit 1 or Unit 2 Control System Infrastructure loads.

(30 NOV 2012)

McGuire Nuclear Station UFSAR Table 8-7 (Page 1 of 5)

Table 8-7. Single Failure Analysis for the Onsite Power Systems Component Malfunction Resulting Consequences

1. Isolated phase Loss of one due to a. The faulted equipment is isolated by protective bus from main a fault relaying and protective equipment..

transformer to

b. The other independent offsite circuit remains the generator unaffected breaker or to the auxiliary c. The two auxiliary switchgears normally supplied transformer from the faulted circuit are connected in a rapid bus transfer to the other auxiliary transformer in the or second independent circuit of that unit within a Auxiliary maximum of 8 cycles dead time and all unit and transformer essential auxiliaries continue to receive uninterrupted offsite power.
d. The unit generator automatically runs back to 56 percent rated output, or generator trips.
e. One of the two independent offsite circuits to the affected unit is available
2. Isolated phase Loss of one a. Both generator breakers trip.

bus

b. The unit generator trips automatically.

connecting the generator c. The reactor trips automatically.

circuit

d. All unit and essential auxiliaries continue to receive breakers and uninterrupted offsite power from the two the unit independent offsite circuits.

generator or Unit generator

3. Generator Loss of one pole a. The other two poles of the affected breaker, the other breaker of one breaker generator breaker and the respective switchyard coincident with a power circuit breakers trip.

malfunction

b. The two auxiliary switchgears normally supplied described in 4 or 5 from the faulted circuit are connected to the auxiliary transformer in the second independent circuit of that unit within a maximum of 8 cycles deadtime and all unit and essential auxiliaries continue to receive uninterrupted power through one offsite circuit.
c. The unit generator trips automatically.
d. The reactor trips automatically.
4. Isolated Phase Loss of Cooling a. Within 15 minutes the operator must open the bus Bus Cooling Water dampers to utilize the once-through system feature..

System

b. No reduction in unit output is required (05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-7 (Page 2 of 5)

Component Malfunction Resulting Consequences Loss of the a. Within 15 minutes the operator must reduce unit Normal Cooling output to 2000 amps. The unit and essential Fan auxiliaries continue to receive uninterrupted power from the two offsite circuits.

5. Auxiliary Loss of one of the a. No consequence. Each auxiliary transformer is Transformer two cooler banks normally loaded to half of its self-cooled rating with Cooling the unit at rated 100 percent MVA output. The unit System receive uninterrupted flow of power from the two independent offsite circuits.
6. Main Loss of one of the a. 28 min. 45 sec after failure, turbine will Transformer two cooler banks automatically be run back to half load. 30 minutes Cooling after failure, associated generator breaker will be System tripped. Transformer will remain energized from (Unit 2) switchyard. The unit and the essential auxiliaries continue to receive uninterrupted flow of power from the two independent offsite circuits.
7. Auxiliary Loss of one due to a. The faulted equipment is isolated by protective transformer a fault relaying and protective equipment.

or Non- b. The two 6.9 kV Normal Auxiliary System segregated bus switchgear normally supplied from the faulted from the circuit is connected in a rapid bus transfer to the auxiliary other auxiliary power transformer of that unit within transformer to a maximum of 8 cycles dead time and all unit and the 6900V essential auxiliaries continue to receive Normal uninterrupted offsite power..

Auxiliary

c. The unit generator automatically runs back to 56 System percent MVA rated output.

switchgear

8. 6900V Breaker fault or a. The alternate source breaker locks open.

Normal failure to open

b. The applicable generator PCB trips isolating the unit Auxiliary during a fault generator from the fault.

System switchgear c. The two applicable switchyard PCBs trip isolating source the system from the fault.

breakers

d. The unit generator automatically runs back to 56 percent rated output.
e. The other 6900V Normal Auxiliary Power System switchgear supplied from the faulted circuit is connected in a rapid bus transfer to the other unit auxiliary power transformer in the second independent circuit of that unit within a maximum of 8 cycles dead time.

(05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-7 (Page 3 of 5)

Component Malfunction Resulting Consequences

f. If the generator unit is above approximately 48 percent power, the generator and the reactor trip due to the loss of one reactor coolant pump.

The other generator PCB trips maintaining uninterrupted offsite power to the unit and essential auxiliaries through one independent circuit.

g. If the unit generator is below approximately 48 percent power, the unit generator is not tripped.
h. Assuming that one 4160V Essential Auxiliary Power System switchgear is connected to the affected 6900V Normal Auxiliary Power System switchgear, then it is deenergized. Sufficient redundant Engineered Safety Features loads remain operable from the redundant 4160V Essential Auxiliary Power System switchgear for the safe operation of the reactor. An onsite diesel generator starts and is automatically connected to the de-energized Essential Auxiliary Power System switchgear and the required loads are sequenced on automatically.
9. 6900V Bus shorted a. The 6900V Normal Auxiliary System switch gear Normal source breaker trips. The alternate source breaker Auxiliary locks open.

System switchgear bus or or 6900V Normal Breaker fault or b. If the generator unit is above approximately 48 Auxiliary failure to open percent power, the generator and the reactor trip due System during a fault to the loss of one reactor coolant pump.

switchgear feeder breakers Both generator PCBs trip maintaining power to the unit and essential auxiliaries through two independent circuits.

c. If the generator unit is below approximately 48 percent power, the unit generator is not tripped.

(05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-7 (Page 4 of 5)

Component Malfunction Resulting Consequences

d. Assuming that one 4kV Essential Auxiliary Power System switchgear is connected to the faulted 6900V Normal Auxiliary Power switchgear, then it is de-energized. Sufficient redundant Engineered Safety Feature loads remain operable from the redundant 4160V Essential Auxiliary Power System bus, for the safe operation of the reactor. The onsite diesel generator dedicated to the de-energized switchgear starts and blackout loads are sequenced on that switchgear automatically.
10. Feeder cable Fault a. The affected 6900V Normal Auxiliary Power to the 4160V System switchgear and 4160V switchgear breakers Essential trip. Sufficient redundant auxiliaries remain Auxiliary operable from the redundant essential bus for the Power safe operation of the reactor.

switchgear or b. The diesel generator dedicated to the affected 4kV Essential Auxiliary Power System switchgear starts 6.9/4kV and blackout loads are sequenced on that switchgear auxiliary automatically.

power transformer

11. 4kV Essential Fault a. The affected 4kV EAP switchgear is deenergized.

Auxiliary The feeder breaker in the 6900V auxiliary Power (EAP) switchgear trips and the diesel generator breaker System locks out. Sufficient redundant auxiliaries remain switchgear operable from the redundant essential switchgear bus source breaker for the safe operation of the reactor.

12. 4kV Essential Fault a. The affected 4kV EAP switchgear is deenergized.

Auxiliary The 4kV EAP switchgear normal source breaker and Power (EAP) the diesel generator breaker lock out. Sufficient System redundant auxiliaries remain operable from the switchgear redundant essential bus for the safe operation of the bus reactor.

or 4kV EAP switchgear feeder breaker (05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-7 (Page 5 of 5)

Component Malfunction Resulting Consequences

13. 4kV Essential Fault on one a. The associated load feeder breaker trips and isolates Auxiliary the fault from the system. Sufficient redundant Power (EAP) auxiliaries remain operable from the redundant System Essential Power System for safe operation of the Switchgear reactor.

feeder cables or 4160/600 Volt EAP load center transformer or 600V EAP load center source breakers

14. 600 volt EAP Fault a. The 600 Volt EAP load center source circuit breaker load center trips. Sufficient redundant auxiliaries remain bus operable from the redundant Essential Auxiliary Power System for the safe operation of the reactor.

or 600V EAP load center feeder breaker

15. 600 volt EAP Fault a. The 600 volt EAP load center feeder breaker trips.

load center Sufficient redundant auxiliaries remain operable feeder cable from the redundant Essential Auxiliary Power System for the safe operation of the reactor.

or 600 Volt EAP motor control center bus

16. 600 Volt EAP Fault a. The 600 Volt EAP motor control center feeder motor control breaker trips. Sufficient redundant auxiliaries center feeder remain operable from the redundant system for the cable safe operation of the unit.

(05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-8 (Page 1 of 1)

Table 8-8. Major Loads Connected to the Diesel Length of Time Each Load Time Required is Required Inrush Equipment Blackout LOCA Size of Load Current Blackout LOCA Safety injection pump Not Required 16 sec 400 HP 345 Amps - 3 days Centrifugal charging pump 11 sec 11 sec 600 HP 472 Amps 7 days 7 days Residual heat removal pump Manual Start 20 sec 400 HP 397 Amps year year Containment spray pump When (2) 400 HP 403 Amps - 3 days Required Component cooling water pump 30 sec 30 sec 200 HP 148 Amps year year Nuclear service water pump 35 sec 35 sec 700 HP 665 Amps year year Auxiliary feedwater pump (Unit 1) 40 sec 40 sec 500 HP 430 Amps 254 min. 254 min.

Auxiliary feedwater pump (Unit 2) 40 sec 40 sec 500 HP 393 Amps 254 Min. 254 Min.

Fuel pool cooling pump 60 min 60 min 200 HP 158 Amps 3 months 3 months A/C system compressor 12 min 12 min 495 HP 308 Amps year year

1. Deleted Per 2018 Update.
2. The Containment Spray Pump's start is blocked when the load sequencer is actuated. The Containment Spray Pumps can be started following load sequencer reset and initiation of ECCS recirculation mode.

(13 OCT 2018)

McGuire Nuclear Station UFSAR Table 8-9 (Page 1 of 1)

Table 8-9. Diesel-Generator Modeling Program Verification Data Voltage Dip Volts Frequency Dip Hertz Motor Start HP Time & KW Percent Percent Seconds Load DGMP Test Difference DGMP Test Difference 2000 HP 1

t 2480 KW 3211 3300 -2.70 57.56 57.24 0.56 1000 HP t+5 900 KW 3636 3785 -3.94 58.97 59.32 -0.59 800 HP t + 10 1400 KW 3771 4100 -8.02 58.89 59.41 -0.88 300 HP t + 15 950 KW 4022 4075 -1.30 59.97 59.28 1.16 Note:

1. t is the time when the machine reaches rated voltage and frequency. t is not a pre-set time.

(14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-10 (Page 1 of 2)

Table 8-10. Single Failure Analysis of the Switchyard 125 VDC System Component Malfunction Comments and Consequences

1. 600 AC power Loss of power to No consequence - power from battery is available to supply supply to one power without interruption.

charger

2. Battery Loss of power a. The 125 volt DC bus does continue to receive power charger from one from its respective battery without interruption except as in (2c).
b. Standby battery charger is available.
c. Several internal faults may cause high short circuit currents to flow with the resulting voltage reduction on the 125 volt DC bus until the fault is cleared by the isolating circuit breakers. Complete loss of voltage on the 125 volt DC bus may result if the battery circuit breakers open. However, redundant protective relaying and panelboards are provided and are supplied from the other redundant 125 volt DC bus.
3. 125V DC Loss of power Only those 125 volt DC control panelboards supplied from battery from one the affected bus are lost. However, the redundant paneboards supplied from the other 125 volt DC bus is unaffected and continue to provide power for protection and control.
4. DC Bus shorted Same comment as 3.

switchgear busses P-N

5. 125V DC bus Grounding a a. The 125 volt DC system is an ungrounded electrical SY-1, SY-2 single bus system. Ground detector equipment monitors and alarms a ground anywhere on the 125 volt DC system. A single ground does not cause any malfunction or prevent operation of any safety feature.
6. 125V DC bus Gradual decay a. Each 125 volt bus is monitored to detect the voltage SY-1, SY-2 voltage on one bus decay on the bus and initiate an alarm at a voltage setting where the battery can still deliver power for safe and orderly shutdown of the station. Upon detection, power is restored by correcting the deficiency.
7. DC Cables shorted Same comments as 3.

switchgear load feeder cables (14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-10 (Page 2 of 2)

Component Malfunction Comments and Consequences

8. 125V DC Bus shorted in one a. Voltage on associated 125 volt DC bus decays until primary or isolated by isolating circuit breakers.

backup panelboards

b. Protective relaying connected to the affected panelboards are lost; however, redundant protective relaying supplied from the other 125 volt DC bus provide protection.
c. One source of control power is lost to the switching station power circuit breakers; however, a redundant source of control power is provided from the other 125 volt DC bus.

(14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-11 (Page 1 of 1)

Table 8-11. 250 VDC Auxiliary Power System Loads Used for Battery Sizing1 Total Amperes Load Rating of Load Inrush/Continuous Turbine emergency bearing 75 HP 783/261 oil pump motor Deleted per 2015 update Unit 1 (only) Generator air 25 HP 270/90 side seal oil backup pump motor Unit 2 (only) Seal oil pump 15 HP 202.7/51.2 motor Feedwater pump turbine No. 7.5 HP 87/29 1A emergency oil pump motor Feedwater pump turbine No 7.5 HP 87/29 1B emergency oil pump motor Lighting (U1&U2) and seal 203.4/203.4 oil starter motor monitoring (Unit 2 only)

Bus Voltage & System 2/2 Failure Circuits Turbine Backup Vapor 1.5 HP 17.25/5.75 Extractor Note:

1. Batteries are sized to supply seal oil pump, vapor extractor and remaining DC lights for four hours along with the FWPT Emergency Oil (backup) Pumps (EOPs) which run for three hours, provided the Reactor Bldg. and Admin. Bldg. DC lights are removed within two hours.

Loads on Unit 1 and 2 are similar except as noted.

(09 OCT 2015)

McGuire Nuclear Station UFSAR Table 8-12 (Page 1 of 1)

Table 8-12. 125 VDC Auxiliary Control Power System Loads Used for Battery Sizing Load Total Amperes Inrush1/Continuous Inverter (computer) 139.5/139.5 Inverter (auxiliary power panelboard) 435.5/379.9 600V load centers 12.2/12.2 6.9 kV switchgear 11/1.4 Cond Sys Controls 32.7/2.9 H2 Recomb Cnt Pnl 12/12 Feed water pump controls 5.8/5.7 Protective relaying 61.8/61.8 Sub Panel DCA-1 155.2/67.1 Annunicators 17.3/17.3 Event recorder 5/5 Generator breaker control 51.6/1.2 Miscellaneous Controls 68.9/56.1 Note:

1. Inrush upon loss of AC power.

(14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-13 (Page 1 of 2)

Table 8-13. Single Failure Analysis of the 125 VDC Vital Instrumentation and Control Power System Component Malfunction Comments and Consequences

1. 600V AC power Loss of power to No consequence - power from battery is available to supply supply to one power without interruption.

chargers EVCA, EVCB, EVCC and EVCD

2. Battery chargers Loss of power a. Several internal faults may cause high short circuit EVCA, EVCB, from one currents to flow with the resulting voltage reduction EVCC and on the 125 volt DC bus until the fault is cleared by EVCD the isolating circuit breakers.
b. the 125 volt DC bus continues to receive power from its respective battery without interruption
c. A spare charger is available to replace the non-functioning charger.
3. 125V DC Short circuit on Power is lost to the instrumentation and control channel batteries EVCA, one serviced by the battery.

EVCB, EVCC EVCD

4. 125 DC P and N Buses Power is lost to the instrumentation and Control channel distribution shorted on one serviced by the distribution center.

centers EVDA, distribution EVDB, EVDC, center EVDD

5. 125V DC Grounding of The 125 volt DC system is an ungrounded electrical system.

distribution single bus Ground detector equipment monitors and alarms a ground centers EVDA, anywhere on the 125 volt DC system. A single ground will EVDB, EVDC, not cause any malfunction or prevent operation of any safety EVDD feature.

6. 125V DC Gradual decay of Each 125 volt bus is monitored to detect the voltage decay distribution voltage on one on the bus and initiate an alarm at a voltage setting where centers EVDA, bus the battery can still deliver power for safe and orderly EVDB, EVDC, shutdown of the station. Upon detection, power is restored EVDD either by correcting the deficiency by switching to a redundant source or by employing one of the redundant circuits.
7. DC distribution Cables shorted Charger incoming cables -

center incoming

a. Voltage on one of the 125 Volt DC Bus Systems feeder cables Decays until isolated by an over current protective device.

(14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-13 (Page 2 of 2)

Component Malfunction Comments and Consequences

b. The 125 Volt DC Bus continues to receive power from its respective battery.

Battery incoming cables - Same comments as item 3 of this table.

8. 125V DC Bus shorted on a. Voltage on one of the 125 volt DC bus systems instrumentation one panelboard decays until isolated by the isolating circuit and control breakers.

power panelboards b. For a short in panelboard 1EVDA or 1EVDD, for 1EVDA, Unit 1, one-half of the 4160 volt switchgear control 1EVDB, power is lost. The remaining redundant switchgear 1EVDC, is adequate and is supplied control from the other 1EVDD DC panelboard.

c. For Unit 1, one-half of the 600 Volt Essential Auxiliary Power System load centers lose DC control power
9. 125VDC Bus shorted on a. Voltage on one of the 125 volt DC bus systems Instrumentation one panelboard decays until isolated by the isolating circuit and control breakers.

power paneboards b. For a short in panelboard 2EVDA or 2EVDD, for 2EVDA, Unit 2 one-half of the 4160 volt switchgear closing 2EVDB, control power is lost. The remaining redundant 2EVDC, and switchgear is adequate and is supplied control 2EVDD power from the other DC panelboard.

c. For Unit 2, one-half of the 600 Volt Essential Auxiliary Power System load centers lose DC control power.

(14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-14 (Page 1 of 1)

Table 8-14. Deleted Per 1991 Update. The information is available in Figure 8-39 (14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-15 (Page 1 of 1)

Table 8-15. Single Failure Analysis of the 120 Volt AC Vital Instrumentation and Control Power System Component Malfunction Comments and Consequences

1. 125V DC P and N buses One static inverter per unit is lost and power to one distribution shorted on one instrument is lost temporarily until a manual transfer could centers be made to a regulated instrument bus. The temporary loss of EVDA, one vital instrument bus per unit results in the temporary loss EVDB, of one channel per unit of reactor protection and instrument EVDC, systems and engineered safety systems. Other remaining EVDD channels receive vital instrument control power from the other panelboards.
2. Static inverter Failure One static inverter is lost and power to one instrument bus is feeder cable lost temporarily until a manual transfer could be made to a regulated instrument bus. The temporary loss of one vital instrument bus results in the temporary loss of one channel of reactor protection and instrument systems and engineered safety systems. Other remaining channels receive vital instrument control power from the other panelboards.
3. Static inverter Failure Same as comment 2.
4. Vital Failure of one For any one bus failure, only one channel of any system instrumentation associated with reactor protective systems or engineered and control safety features actuation system is lost. Sufficient redundant power channels supplied from other vital instrument buses provided panelboards, adequate protection.

1EKVA, 1EKVB, 1EKVC, 1EKVD

5. Vital Failure of one Same as 4.

instrumentation and control power panelboards, 2EKVA, 2EKVB, 2EKVC and 2EKVD (14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-16 (Page 1 of 1)

Table 8-16. Load Sequencing Times LOAD GROUP SEQUENCE TIME NUMBER (Seconds)

Initiate Timer (To) 9.7 +/- 0.3 1 (T1) To + 0.9 +/- 0.1 2 (T2) To + 5.6 +/- 0.4 3 (T3) To + 9.4 +/- 0.6 4 (T4) To + 14.1 +/- 0.9 5 (T5) To + 18.4 +/- 1.2 6 (T6) To + 23.1 +/- 1.4 7 (T7) To + 28.3 +/- 1.7 8 (T8) To + 530.0 +/- 60.0 9 (T9) T8 + 56.0 +/- 4.0 10 (T10) T8 + 112.3 +/- 7.0 (14 OCT 2000)

McGuire Nuclear Station UFSAR Table 8-17 (Page 1 of 6)

Table 8-17. Exception to Regulatory Guide 1.9, Rev. 3 and IEEE Std 387-1984 Regulatory Position or IEEE Std. Guidance Exception IEEE Std 387-1984 Exclusion 1.3: The following item is MNS takes exception to this exclusion.

outside of the scope of this standard: MNS includes the entire fuel oil system as part of the EDG super system. This (3) The fuel oil storage system (day tank, storage tank, configuration follows the methodology set transfer pumps and filters, and strainers between the forth in RG 1.9 Rev.3.

storage tank and the day tank)

IEEE Std 387-1984 Exclusion 1.3: The following item is MNS takes exception to this exclusion.

outside of the scope of this standard: MNS includes the listed portions of the auxiliary power system, as part of the EDG (4) The auxiliary power system beyond the generator super system. These portions are considered terminals of the diesel-generator unit, including:

vital to EDG functionality. This (a) The conductors for transmitting power from the configuration follows the methodology set generator forth in RG 1.9 Rev.3.

(b) The diesel-generator unit main disconnecting and protective device (c) The generator circuit instrument transformers, whether furnished with the diesel-generator unit or not (d) The generator protective relays RG 1.9 Rev. 3 Regulatory Position 1.2: When the MNS used 92% motor effeciency at characteristics of the required emergency diesel generator licensing (UFSAR 8.3.1.2.4). Today, the loads are not accurately known, such as during the station does not have the recommended 10 construction permit state of design, each emergency diesel to 15 percent margin indicated in RG 1.9 generator unit of an onsite power supply system should be Rev. 3, but is able to carry its designed loads selected to have a continuous load rating (as defined in as previously recommended by IEEE Std Section 3.7.1 of IEEE Std 387-1984) equal to the sum of 387-1972.

the conservatively estimated loads (nameplate) needed to be powered by that unit at any one time plus a 10 to 15 percent margin. In the absence of fully substantiated performance characteristics for mechanical equipment such as pumps, the electric motor drive ratings should be calculated using conservative estimates of these characteristics, e.g., pump runout conditions and motor efficiencies of 90 percent or less, and power factors of 85 percent or lower.

IEEE Std 387-1984 Design Criterion 5.1.2(1): The unit No purchase specification describing the shall be capable of operating during and after any design engines capabilities was prepared. MNS basis event without support from the preferred power takes exception, per former Nordberg supply. The following design condition, including engineers. EDGs designed for life of appropriate margins as required by IEEE Std 323-1983, station.

6.3.1.5 shall be specified by those individuals responsible for the system application and, as a minimum, shall include: (a) Operational cycles (4000 starts over a period of 40 years, unless otherwise specified (27 MAR 2002)

McGuire Nuclear Station UFSAR Table 8-17 (Page 2 of 6)

Regulatory Position or IEEE Std. Guidance Exception IEEE Std 387-1984 Design Criterion 5.1.2(1): The unit No purchase specification describing the shall be capable of operating during and after any design engines capabilities was prepared. MNS basis event without support from the preferred power takes exception, per former Nordberg supply. The following design condition, including engineers. EDGs designed for life of appropriate margins as required by IEEE Std 323-1983, station.

6.3.1.5 shall be specified by those individuals responsible for the system application and, as a minimum, shall include: (b) Operating hours (4000 hours0.0463 days <br />1.111 hours <br />0.00661 weeks <br />0.00152 months <br /> over a period of 40 years, unless otherwise specified IEEE Std 387-1984 Design Criterion 5.1.2(1): The unit MNS takes exception to specifying a load shall be capable of operating during and after any design profile with allowable voltage and basis event without support from the preferred power frequency variations. The MNS design supply. The following design condition, including criteria complied with IEEE Std 387-1972.

appropriate margins as required by IEEE Std 323-1983, Additionally, a diesel generator dynamic 6.3.1.5 shall be specified by those individuals responsible loading computer program was developed for the system application and, as a minimum, shall and the results compared to actual include: include (g) Load profile (including allowable sequential loading test data. The comparison voltage and frequency variations) see 3.5 demonstrated the acceptability of the computer program as an aid in dynamic diesel generator analysis.

IEEE Std 387-1984 Design Criterion 5.1.2(1): The unit No purchase specification describing the shall be capable of operating during and after any design engines capabilities was prepared. MNS basis event without support from the preferred power takes exception due to lack of manufacturer supply. The following design condition, including design information.

appropriate margins as required by IEEE Std 323-1983, 6.3.1.5 shall be specified by those individuals responsible for the system application and, as a minimum, shall include: (h) Absolute barometric pressure (altitude and tornado depressurization, duration, and magnitude)

IEEE Std 387-1984 Design Criterion 5.1.2(1): The unit No purchase specification describing the shall be capable of operating during and after any design engines capabilities was prepared. MNS basis event without support from the preferred power takes exception, no specification from supply. The following design condition, including manufacturer.

appropriate margins as required by IEEE Std 323-1983, 6.3.1.5 shall be specified by those individuals responsible for the system application and, as a minimum, shall include: (i) Combustion air contaminant (salt, sand, etc)

IEEE Std 387-1984 Design Criterion 5.1.2(1): The unit No purchase specification describing the shall be capable of operating during and after any design engines capabilities was prepared. MNS basis event without support from the preferred power takes exception to specifying quality of supply. The following design condition, including service water because appropriate water appropriate margins as required by IEEE Std 323-1983, filtration and monitoring of EDG heat 6.3.1.5 shall be specified by those individuals responsible exchanger DP ensures sufficient heat for the system application and, as a minimum, shall transfer.

include: (m) Service water quality (27 MAR 2002)

McGuire Nuclear Station UFSAR Table 8-17 (Page 3 of 6)

Regulatory Position or IEEE Std. Guidance Exception IEEE Std 387-1984 Design Criterion 5.1.2(3): The unit Quality Report MCS 1301.00-1 documents shall be capable of accepting design load following successful testing by operating an EDG for operation at light load or no load for the time required by 18 hours2.083333e-4 days <br />0.005 hours <br />2.97619e-5 weeks <br />6.849e-6 months <br /> at no load followed by a step the equipment specification. loading of > 50% load (with the water rheostat). MNS takes exception to this test because it is detrimental to the EDG.

RG 1.9 Rev. 3 Regulatory Position 1.8: Section 5.5.4(2) MNS takes exception to this paragraph. The of IEEE Std 387-1984, on retaining all protective devices "simulated accident conditions test" should during emergency diesel generator testing, does not apply not be allowed to cause unnecessary damage to a periodic test that demonstrates diesel generator system to an EDG if that EDG has an unforeseen response under simulated accident conditions per problem. UFSAR Section 8.3.1.1.7 Regulatory Positions 2.2.5, 2.2.6, and 2.2-12. identifies 4 trips that are provided to protect the diesel at all times, and are not bypassed during starting of the diesel generator by an engineered safeguards signal. It is also recommended that the "trips bypass test" be used to verify the EDG does not trip on the bypass trip signals.

RG 1.9 Rev. 3 Regulatory Position 2.2.6: Demonstrate MNS takes exception to performing this test that the emergency diesel generator can satisfactorily in any order that the event can occur. This respond to a LOOP in conjunction with SIAS in whatever test is typically performed with the sequence they might occur (e.g., loss-of-coolant accident simultaneous LOOP and SIAS signal given.

(LOCA) followed by delayed LOOP or LOOP followed Additional testing beyond the simultaneous by LOCA). A simultaneous LOOP/LOCA event would be signal test is not required per the station demonstrated by simulating a LOOP and SIAS and Tech. Specs.and unnecessarily puts the plant verifying that (1) the emergency buses are deenergized through unnecessary transients.

and loads are shed from the emergency buses, and (2) the emergency diesel generator starts on the autostart signal from its standby conditions, attains the required voltage and frequency and energizes permanently connected loads within acceptable limits and time, energizes autoconnected loads through the load sequencer, and, operates for greater than or equal to 5 minutes.

(27 MAR 2002)

McGuire Nuclear Station UFSAR Table 8-17 (Page 4 of 6)

Regulatory Position or IEEE Std. Guidance Exception RG 1.9 Rev. 3 Regulatory Position 2.2.7: Demonstrate the MNS takes exceptions to performing this emergency diesel generator's capability to reject a loss of test at a specified power factor. This the largest single load while operating at power factor Surveillance is performed with the DG between 0.8 and 0.9 and verify that the voltage and connected to its bus in parallel with offsite frequency requirements are met and that the unit will not power supply. The DG is tested under trip on overspeed. maximum kVAR loading, which is defined as being as close to design basis conditions as practical subject to offsite power conditions. Design basis conditions have been calculated to be greater than 0.9 power factor. During DG testing, equipment ratings are not to be exceeded (i.e., without creating an overvoltage condition on the DG or 4 kV emergency buses, over-excitation in the generator, or overloading the DG emergency feeder while maintaining the power factor greater than or equal to 0.9).

RG 1.9 Rev. 3 Regulatory Position 2.2.8: Demonstrate the MNS takes exception to performing this test emergency diesel generators capability to reject a load utilizing a specified power factor. This test equal to 90 to 100 percent of its continuous rating while is typically performed with a power factor operating at power factor between 0.8 and 0.9, and verify close to unity. Performing this test at a 0.9 that the voltage requirements are met and that the power factor is considered destructive emergency diesel generator will not trip on overspeed. testing due to excessively high voltage fluctuations in the generator. Although not representative of the design basis inductive loading that the DG would experience, a power factor of approximately unity (1.0) is used for testing. This power factor is chosen in accordance with manufacturer's recommendations to minimize DG overvoltage during testing.

(27 MAR 2002)

McGuire Nuclear Station UFSAR Table 8-17 (Page 5 of 6)

Regulatory Position or IEEE Std. Guidance Exception RG 1.9 Rev. 3 Regulatory Position 2.2.9: Demonstrate MNS takes exception to performing this test full-load carrying capability at a power factor between 0.8 utilizing a specified power factor. This test and 0.9 for an interval of not less than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />, of which is typically performed with a power factor 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> are at a load equal to 105 to 110 percent of the close to unity. Performing this test at a 0.9 continuous rating of the emergency diesel generator, and power factor is considered destructive 22 hours2.546296e-4 days <br />0.00611 hours <br />3.637566e-5 weeks <br />8.371e-6 months <br /> are at a load equal to 90 to 100 percent of its testing due to excessively high voltage continuous rating. Verify that voltage and frequency fluctuations in the generator. This requirements are maintained. Surveillance is performed with the DG connected to its bus in parallel with offsite power supply. The DG is tested under maximum kVAR loading, which is defined as being as close to design basis conditions as practical subject to offsite power conditions. Design basis conditions have been calculated to be greater than 0.9 power factor. During DG testing, equipment ratings are not to be exceeded (i.e., without creating an overvoltage condition on the DG or 4 kV emergency buses, over-excitation in the generator, or overloading the DG emergency feeder while maintaining the power factor greater than or equal to 0.9).

The load band is provided to avoid routine overloading of the DG. Routine overloading may result in more frequent teardown inspections in accordance with vendor recommendations in order to maintain DG OPERABILITY.

IEEE 387-1984 Qualification Requirement 7.3.2: Further MNS takes exception to the aging program classification of the safety-related components identified as described in Table 2 and Appendix B.

in 7.3.1(1) is required to address the potential for age- The aging of components is addressed at related failures. The categories in Table 2 illustrate this MNS by the component classification. preventive/predictive maintenance programs, the material shelf life program, the parts stocking program and component testing programs. These programs are a primary responsibility of the System Engineers and meet the intent of Table 2.

(27 MAR 2002)

McGuire Nuclear Station UFSAR Table 8-17 (Page 6 of 6)

Regulatory Position or IEEE Std. Guidance Exception RG 1.9 Rev. 3 Table 1: Preoperational and Surveillance MNS takes exception to the test intervals Testing. listed in this table for the following:

2.2.9 Endurance and Margin Test: The table specifies Refueling Outage, MNS performs this testing with the unit online, at a frequency equal to the refueling outage interval.

2.2.10 Hot Restart Test: The table specifies Refueling Outage, MNS performs this testing with the unit online, at a frequency equal to the refueling outage interval.

The surveillance test frequencies were initially based on RG 1.9; however, the current surveillance test frequency is controlled by the Surveillance Frequency Control Program.

RG 1.9 Rev. 3 Regulatory Position 2.3.2.4: Ten Year MNS takes exception to the requirement this Testing. test be performed during a plant shutdown.

(27 MAR 2002)

McGuire Nuclear Station UFSAR Table 8-18 (Page 1 of 5)

Table 8-18. Exception to Regulatory Guide 1.137, Rev 1 and ANSI N195-1976 Regulatory Position Duke Position/Exception C. REGULATORY POSITION The McGuire diesel generator fuel oil system was

1. The requirements for the design of fuel-oil systems for designed and installed prior to the writing of ANSI diesel generators that provide standby electrical power for a N195-1976.

nuclear power plant that are included in ANSI N195-1976, The following information provides the McGuire "Fuel Oil Systems for Standby Diesel-Generators," provide a design positions for differences from ANSI N195-method acceptable to the NRC staff for complying with the 1976:

pertinent requirements of General Design Criterion 17 of 5.2 & 5.3) Each McGuire reactor unit is supported Appendix A to 10 CFR Part 50, subject to the following: by 2 independent diesel generator units. The capacity of each fuel storage system of each diesel generator unit is sufficient to operate its associated diesel generator for a period of 5 days at 100%

design load plus margin. The fuel system allows for cross connection between the two diesel generators such that either diesel engine can be aligned fuel from either storage tank. Using this capability, a quantity of fuel in excess of 7 days supply can be made available for one diesel generator.

5.4) Each McGuire diesel fuel storage tank contains a supply of fuel for its diesel generator to support operating at 100% rated capacity for a 5 day period.

Together, both fuel storage tanks provide more than 7 days capacity plus additional margin for one diesel generator.

6.1) The day tank for each diesel engine contains at least 30 minutes of fuel for engine operation at 100% load. The day tank overflow is not connected to the storage tank.

6.3) There is a duplex filter arrangement in the fuel line from the transfer pump to the day tank.

7.1 & 7.2) Portions of the fuel system are designated Safety Class 3 (reference paragraph 3.2.3.3.1.e and Table 3-4). Refer to Table 3-4 for identification of components which were not built to applicable codes and standards, but have been qualified seismically.

7.3) The safety class 3 portion of the fuel system which is required for diesel engine operation is protected from tornados, floods, missiles and other natural phenomena. The recirculation portion of the fuel system is not safety class 3 and therefore is not protected from these events.

7.4) Refer to Table 3-4 for summary of criteria for the diesel fuel system.

7.5) A fill line strainer is not provided. The underground storage tank does not have a flame arrestor.

8.2.d) The underground storage tank is not (05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-18 (Page 2 of 5) equipped with a high level alarm.

a. Throughout ANSI N195-1976, other documents required The McGuire diesel generator fuel oill system was to be included as part of the standard are either identified at designed and installed prior to the writing of ANSI the point of reference or described in Section 7.4, N195-1976.

"Applicable Codes, Standards, and Regulations," or in Section 11, "References," of the standard. The specific Portions of the fuel system are designated Safety acceptability of these listed documents has been or will be addressed separately in other regulatory guides or in Class 3 (reference paragraph 3.2.3.3.1.e and Table Commission regulations, where appropriate. 3-4). Refer to Table 3-4 for identification of components which were not built to applicable codes and standards, but have been qualified seismically.

b. Section 1, "Scope," of ANSI N195-1976 states that the Reference Table 1-4 for McGuire Nuclear Stations standard provides the design requirements for the fuel-oil Regulatory Guide Disposition of Regulatory Guide system for standby diesel generators and that it sets forth 1.28 Quality Assurance Program Requirements other specific design requirements such as safety class, materials, physical arrangement, and applicable codes and regulations. The standard does not specifically address quality assurance, and in this regard ANSI N195-1976 should be used in conjunction with Regulatory Guide 1.28, "Quality Assurance Program Requirements (Design and Construction)," which endorses ANSI N45.2-1977, "Quality Assurance Program Requirements for Nuclear Power Plants,"

for the design, construction, and maintenance of the fuel-oil system.

c. Section 5.4, "Calculation of Fuel Oil Storage The McGuire diesel generator fuel oill system was Requirements," of the standard sets forth two methods for the designed and installed prior to the writing of ANSI calculation of fuel-oil storage requirements. These two N195-1976.

methods are (1) calculations based on the assumption that the diesel generator operates continuously for 7 days at its rated The calculation for determining the minimum fuel capacity, and (2) calculations based on the time-dependent loads of the diesel generator. For the time-dependent load storage requirements is based on method (1) with method, the minimum required capacity should include the the exception that the time interval for continuous capacity to power the engineered safety features. operation without refueling of the storage tank is 5 days at rated capacity.

d. Section 7.3, "Physical Arrangement," of ANSI N195-1976 The McGuire diesel generator fuel oill system was states that "the location of day tanks shall be as required by designed and installed prior to the writing of ANSI the diesel-engine manufacturer." In addition to this N195-1976.

requirement, the physical location of the day tank relative to the engine and design of the engine fuel system should take The day tank is located in such a way that net into account such items as net positive suction head requirements and the potential need for electric fuel pumps positive suction head requirements are met with powered from a reliable power supply to ensure that the installed equipment. A DC powered fuel oil diesel-generator unit can start automatically and attain the booster pump is provided for initial pressurization required voltage and frequency within acceptable limits and of the fuel system on the engine if needed. This time. pump is automatically secured once the engine driven booster pump begins supplying the fuel needs of the engine. This pump will automatically start in the event the engine driven fuel booster pump fails to maintain minimum fuel pressure.

e. Section 7.3 of ANSI N195-1976 states that the The McGuire diesel generator fuel oill system was arrangement of the fuel-oil system "shall provide for designed and installed prior to the writing of ANSI inservice inspection and testing in accordance with ASME N195-1976.

Boiler and Pressure Vessel Code,Section XI, 'Rules for Inservice Inspection of Nuclear Power Plant Components.' "

(05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-18 (Page 3 of 5)

For those portions of the fuel-oil systems for standby diesel The diesel fuel system is tested in accordance with generators that are designed to Section III, Subsection ND of ASME Boiler and Pressure Vessel Code, Section the Code, an acceptable method of meeting the requirements XI, 'Rules for Inservice Inspection of Nuclear of Section 7.3 is to ensure that the system arrangement would Power Plant Components.'

allow:

(1) Pressure testing of the fuel-oil system to a pressure 1.10 times the system design pressure at 10-year intervals. In the case of storage. tanks, recommendations of the tank vendor should be taken into account when establishing the test pressure.

(2) A visual examination to be conducted during the pressure test for evidence of component leakages, structural distress, or corrosion. In the case of buried components, a loss of system pressure during the test constitutes evidence of component leakage.

f. Section 7.3 of ANSI N195-1976 requires that adequate The McGuire diesel generator fuel oill system was heating be provided for the fuel-oil system. Assurance should designed and installed prior to the writing of ANSI be provided that the fuel oil can be supplied and ignited at all N195-1976.

times under the most severe environmental conditions expected at the facility. This may be accomplished by use of Diesel fuel parameters including cloud point are an oil with a "cloud point" lower than the 3-hour minimum soak temperature expected at the site during the seasonal tested and verified to be within the acceptance periods in which the oil is to be used, and/or by maintenance criteria of the Diesel Fuel Oil Testing Program.

of the onsite fuel oil above the "cloud point" temperature.

g. Section 7.5, "Other Requirements," of the standard states The McGuire diesel generator fuel oill system was that "protection against external and internal corrosion shall designed and installed prior to the writing of ANSI be provided" for the fuel-oil system. To amplify this N195-1976.

requirement for buried supply tanks not located within a vault and other buried portions of the system, a protective The underground fuel oil storage tanks were coating and an impressed current-type cathodic protection system should be provided in accordance with NACE externally coated for corrosion protection.

Standard RP-01-69 (1972 Revision), "Recommended Corrosion protection for the fuel oil storage tank Practice-Control of External Corrosion on Underground or adheres to the Procedures of the National Submerged Metallic Piping Systems." In addition, the Association of Corrosion Engineers impressed current-type cathodic protection system should be Recommended Practice-Control of External designed to prevent the ignition of combustible vapors or Corrosion on Underground or Submerged Metallic fuel oil present in the fuel-oil systems for standby diesel Piping System, RP-01-69 (1972 revision). There is generators. no cathodic protection installed on the underground fuel oil storage tanks.

h. Section 7.5 of the standard includes requirements for fire Acceptable as written.

protection for the diesel-generator fuel-oil system. The requirements of Section 7.5 are not considered a part of this regulatory guide since this subject is addressed separately in more detail in other NRC documents. Thus a commitment to follow this regulatory guide does not imply a commitment to follow the requirements of Section 7.5 concerning fire protection.

2. Appendix B to ANSI N195-1976 should be used as a basis Diesel fuel parameters (including cloud point) for a program to ensure the initial and continuing quality of are tested and verified to be within the acceptance fuel oil as supplemented by the following: criteria of the Diesel Fuel Oil Testing Program as
a. The oil stored in the fuel-oil supply tank, and the oil to be outlined in Tech Spec 5.5.13. If test results for used for filling or refilling the supply tank, should meet the viscosity or for water and sediment for fuel oil requirements of Federal Fuel Oil Specification VV-F-800b contained in the supply tanks exceed the limits (05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-18 (Page 4 of 5)

(April 2, 1975); ASTM D975-77, "Standard Specification for specified in the applicable specification, the actions Diesel Fuel Oils;" or the requirements of the diesel-generator of Tech Spec 3.8.3 are applied and the condition is manufacturer, if they are more restrictive, as well as the fuel- evaluated under the McGuire Corrective Action oil total insolubles level specified in Appendix B to the Program. Fuel oil contained in the supply tank not standard. The "cloud point" should be less than or equal to meeting applicable specification requirements is the 3-hour minimum soak temperature or the minimum temperature at which the fuel oil will be maintained during corrected through reconditioning or replacement as the period of time that it will be stored. If test results for determined by the Corrective Action Program.

viscosity or for water and sediment for fuel oil contained in the supply tanks exceed the limits specified in the applicable specification, the diesel should be considered inoperable.

Fuel oil contained in the supply tank not meeting remaining applicable specification requirements should be replaced in a short period of time (about a week).

b. Prior to adding new fuel oil to the supply tanks, onsite McGuire complies with this requirement with the samples of the fuel oil should be taken. As a minimum, prior exception that analysis of the other properties of the to the addition of new fuel, tests for the following properties fuel oil listed in the applicable specification are should be conducted: completed within 31 days of the addition.

(1) Specific or API gravity (2) Water and sediment (3)

Viscosity. Test results for the latter two tests should not exceed the limits specified in the applicable specification.

Analysis of the other properties of the fuel oil listed in the applicable specification should be completed within 2 weeks of the addition.

c. The periodic sampling procedure for the fuel oil should be Periodic sampling is performed in accordance with in accordance with ASTM D270-1975, "Standard Method of the Diesel Fuel Oil Testing Program.

Sampling Petroleum and Petroleum Products."

d. Accumulated condensate should be removed from storage Acceptable as written.

tanks on a quarterly basis or on a monthly basis when it is suspected or known that the groundwater table is equal to or higher than the bottom of buried storage tanks.

e. Day tanks and integral tanks should be checked for water Acceptable as written.

monthly, as a minimum, and after each operation of the diesel where the period of operation was 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> or longer.

Accumulated water should be removed immediately. If it is suspected that water has entered the suction piping from the day or integral tank, the entire fuel-oil system between the day or integral tank and the injectors should be flushed.

f. As a minimum, the fuel oil stored in the supply tanks Acceptable as written.

should be removed, the accumulated sediment removed, and the tanks cleaned at 10-year intervals. To preclude the introduction of surfactants in the fuel system, this cleaning should be accomplished using sodium hypochlorite solutions or their equivalent rather than soap or detergents.

g. If an event should occur that would require replenishment Acceptable as written.

of fuel oil without the interruption of operation of the diesel generators, the method of adding fuel oil should be such as to minimize the creation of turbulence of the accumulated residual sediment in the bottom of the supply tank since stirring up this sediment during the addition of acceptable new incoming fuel has the potential of causing the overall quality of the fuel oil in the storage tank to become unacceptable.

h. For those facilities having an impressed current-type Not applicable to McGuire, no cathodic protection (05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-18 (Page 5 of 5) cathodic protection system, cathodic protection surveillance exists on the underground tanks.

should be conducted according to the following procedures:

(1) At intervals not exceeding 12 months, tests should be conducted on each underground cathodic protection system to determine whether the protection is adequate.

(2) The test leads required for cathodic protection should be maintained in such a condition that electrical measurements can be obtained to ensure the system is adequately protected.

(3) At intervals not exceeding 2 months, each of the cathodic protection rectifiers should be inspected.

(4) Records of each inspection and test should be maintained over the life of the facility to assist in evaluating the extent of degradation of the corrosion protection systems.

(05 APR 2011)

McGuire Nuclear Station UFSAR Table 8-19 (Page 1 of 1)

Table 8-19. Exception to IEEE Standard 450-1995 IEEE Standard Guidance Exception IEEE 450-1995 6.4 - Acceptance, modified MNS takes exception with "restart the test performance, and performance tests: shall not exceed 10% of the total test duration or 6 minutes, whichever is shorter". Six (6) 6.4e) If earlier in the test an individual cell is minutes is not sufficient time to safely remove approaching reversal of its polarity (+1 V or four (4) straps from the eight (8) posts and re-less) but the terminal voltage has not yet connect.

reached its test limit, the test should be stopped, and the weak cell should be MNS will not remove the bad cell during the disconnected from the battery string and test. MNS will continue the test is completed bypassed with a jumper of adequate conductor and jumper out or replace the bad cell prior to ampacity. The new minimum terminal voltage returning to service.

should be determined based on the remaining cells. The test should then be continued in order to determine the capacity of the remaining cells. The time required to disconnect the cell, install the jumper, and restart the test shall not exceed 10% of the total test duration or 6 minutes, whichever is shorter. This "downtime" shall not be included in the test discharge period (i.e., the capacity determination shall be based on the actual test time).

(13 OCT 2018)