NRC Generic Letter 79-36, Adequacy of Station Electric Distribution Systems Voltages

text

August 8, 1979

TO ALL POWER REACTOR LICENSEES (Except Humboldt Bay)

RE: ADEQUACY OF STATION ELECTRIC DISTRIBUTION SYSTEMS VOLTAGES

We are currently reviewing the licensee's submittals in response to the NRC generic letter of 6/2/77 regarding undervoltage protection of the safety related electric equipment from loss of capability of redundant safety loads, their control circuitry, and associated electrical components required for performing safety functions as a result of sustained degraded voltage from the offsite electric grid system. This generic action was based on the Millstone Event which occurred on July 5, 1976.

The recent event at Arkansas Nuclear One (ANO) station on 9/16/78 brought into question the conformance of the station electric distribution system to GDC-17, in two separate regards. Each of two units at the ANO station has a dedicated startup transformer powered through a single shared autotransformer (common source of offsite power) from the station switchyard. Operation of an autotransformer overcurrent relay caused the loss of the two dedicated startup transformers. The station electrical distribution system thus automatically transferred the full auxiliary loads of both units to the backup startup transformer exceeding its rated capacity and degrading the voltage level at the safety buses. Secondly, during our review of the electrical system at the ANO station, the licensee's analysis indicated that the "immediate access offsite power circuit" (dedicated startup transformer) lacked "sufficient capacity and capability" to accommodate the simultaneous starting demands of the emergency loads concurrent with the full house loads, in the event of a loss of coolant accident (LOCA). The condition would result in all safety loads remaining on the dedicated startup transformer with unacceptably degraded voltage. A voltage degradation during the electrical starting condition becomes a safety concern either if the degradation causes the starting condition to be prolonged so as to become a sustained undervoltage or if the voltage degradation causes frequent spurious shedding of the ESF loads from the preferred power source, the offsite electric grid. This event was described in NRC's IE Information Notice No 79-04. Additional background information is provided in Enclosure 1.

The IE Information Notice No. 79-04 stated that NRC would follow with specific actions to be taken by licensees. This letter identifies those actions.- 2 -

Based on the ANO event, the NRC has expanded its generic review of the adequacy of the electric power systems for all operating nuclear power facilities. Specifically, we must now confirm the acceptability of the voltage conditions on the station electric distribution systems with regard to both

(1) potential overloading due to transfers of either safety or non-safety loads, and

(2) potential starting transient problems in addition to the concerns expressed in our June 2, 1977 correspondence with regard to degraded voltage conditions due to conditions originating on the grid.

Based on the experience at ANO, the NRC is requiring all licensees to review the electric power systems at each of their nuclear power plants to determine analytically if, assuming all onsite sources of AC power are not available, the offsite power system and the onsite distribution system is of sufficient capacity and capability to automatically start as well as operate all required safety loads. Within their required voltage ratings in the event of

(1) an anticipated transient (such as unit trip) or

(2) an accident (such as a LOCA)

regardless of other actions the electric power system is designed to automatically initiate and without the need for manual shedding of any electric loads. Protection of safety loads from undervoltage conditions must be designed to provide the required protection without causing voltages in excess of maximum voltage ratings of safety loads and without causing spurious separations of safety buses from offsite power. NRC should be informed of any required sequential loading of any portion of the offsite power system or the onsite distribution system which is needed to assure that power provided to all safety loads is within required voltage limits for these safety loads. Guidance on evaluating the performance of electric power systems with regard to voltage drops is provided in Enclosure 2.

The adequacy of the onsite distribution of power from the offsite circuits shall be verified by test to assure that analysis results are valid. Please provide:

(1) a description of the method for performing this verification, and

(2) the test results. If previous tests verify the results of the analysis, then test results should be submitted and additional tests need not be performed.

In addition, you are requested to review the electric power systems of your nuclear station to determine if there are any events or conditions which could result in the simultaneous or consequential loss of both required circuits to the offsite network to determine if any potential exists for violation of GDC-17 in this regard. These reviews should be completed, and a copy of the analyses provided to NRC within 60 days of the date of this letter.

.

- 3 -

In the event that any violation or potential violations of GDC-17 or voltage requirements of safety loads are discovered remedial action should be taken immediately. You should provide the Commission with Prompt Notification with Written Followup pursuant to the reporting requirements of your Technical Specifications.

If the above required reviews have been completed by you as part of your response to our June 2, 1977 request, NRC should be informed within 30 days of the date of this letter. Approved by GOA, B-180225 (R0072), clearance expires 7/31/80. Approval was given under a blanket clearance specifically for identified generic problems.

Sincerely,

William Gammill, Acting Assistant Director for Operating Reactors Projects Division of Operating Reactors

Enclosures:

1.

Background Information

on ANO Event

2. Guidelines for Voltage Drop Calculations

cc: Service List

.

ENCLOSURE 1

BACKGROUND INFORMATION

ON ANO EVENT

The event that occurred at the Arkansas Nuclear One Station on September 16, 1978, brought into question the conformance of the station electric distribution system design to GDC-17 with regard to the capacity and the capability of the onsite systems.

Each of two units at the ANO station has a dedicated startup transformer connected to a single shared autotransformer (common source of offsite power)

from the station switchyard. The incident was initiated by Unit 1 reactor trip concurrent with trip of the unit's turbine-generator. The Unit 1 auxiliary loads were automatically transferred to Startup Transformer 1. The power being supplied to Startup Transformer 3 (Unit 2 dedicated startup transformer), which was feeding Unit 2, and being supplied to Startup Transformer 1 resulted in operation of an autotransformer overcurrent relay and consequent tripping of the incoming circuit breaker of the autotransformer. The autotransformer has a capacity to provide power for both units, but due to an error, the overcurrent relay was still set for the operation of Unit 1 only. Loss of input power to the two Startup transformers automatically transferred the auxiliary loads for both Units to the backup Startup Transformer, ST 2. However this transformer is designed as an alternate supply for one unit and is not designed to carry full auxiliary loads for both units. This overload caused a voltage degradation at the safety buses. The event to this point demonstrated that the design of the offsite power system to the ANO station Units 1 and 2 did not fully meet GDC-17. In the circumstances experienced at ANO the failure of one of the two offsite electric power circuits resulted in the failure of the other electric power circuit. GDC-17 requires, in part, that

(1) electric power from the transmission network to the onsite distribution system shall be supplied by two physically independent circuits (not necessarily on separate rights of way) designed and located so as to minimize to the probability of losing electric power from any of the remaining supplies as a result of, or coincident with, the loss of power generated by the nuclear unit, or the loss of power generated by the nuclear unit, or the loss of power from the transmission network. The ANO did not fully meet these requirements.

Initially, the sequence of events on September 16, 1978 did not indicate any problem with the electrical distribution system of Unit 1. However, subsequent analysis by the licensee indicated that in the event of a LOCA at Unit 1 during which time Startup Transformer No 1 would be required to provide power to both the non-safety auxiliary electrical

.

- 2 -

loads and start the safety loads a voltage degradation would result. The safety loads might not transfer to the Unit 1 diesel-generators but could remain on the startup transformer with unacceptably degraded voltage. Although there is margin in the thermal capability of equipment such a situation could result in thermal damage in the safety equipment and/or blown fuses in control circuits for these safety loads. Either event could result in disabling these loads during a LOCA. GDC-17 requires, in part, that electric power supplies for nuclear power plants provide sufficient capacity and capability to assure that certain limits are not exceeded in the event of anticipated operational occurrences and that the core is cooled and containment integrity and other vital functions are maintained in the event of postulated failures. The ANO design was not capable of providing the electric power of "sufficient capacity and capability."

.

Enclosure 2

GUIDELINES FOR VOLTAGE DROP CALCULATIONS

1. Separate analyses should be performed assuming the power source to safety buses is

(a) the unit auxiliary transformer;

(b) the startup transformer; and

(c) other available connections to the offsite network one by one assuming the need for electric power is initiated by

(1) an anticipated transient (e.g.,

unit trip) or

(2) an accident, whichever presents the largest load demand situation.

2. For multi-unit stations a separate analysis should be performed for each unit assuming

(1) an accident in the unit being analyzed and simultaneous shutdown of all other units at the station; or

(2) an anticipated transient in the unit being analyzed (e.g., unit trip) and simultaneous shutdown of all other units at that station, whichever presents the largest load situation.

3. All actions the electric power system is designed to automatically initiate should be assumed to occur as designed (e.g., automatic bulk or sequential loading or automatic transfers of bulk loads from one transformer to another). Included should be consideration of starting of large non-safety loads (e.g., condensate pumps).

4. Manual load shedding should not be assumed.

5. For each event analyzed, the maximum load necessitated by the event and the mode of operation of the plant at the time of the event should be assumed in addition to all loads caused by expected automatic actions and manual actions permitted by administrative procedures.

6. The voltage at the terminals of each safety load should be calculated based on the above listed consideration and assumptions and based on the assumption that the grid voltage is at the "minimum expected value". The "minimum expected value" should be selected based on the least of the following:

a. The minimum steady-state voltage experience at the connection to the offsite circuit.

b. The minimum voltage expected at the connection to the offsite circuit due to contingency plans which may result in reduced voltage from this grid.

c. The minimum predicted voltage from grid stability analysis. (e.g.,

load flow studies).

In the report to NRC on this matter the licensee should state planned actions, including any proposed "Limiting Conditions for Operation" for Technical Specifications, in response to experiencing voltage at the connection to the offsite circuit which is less than the "minimum expected value." A copy of the plant procedure in this regard should be provided.

.

- 2 -

7. The voltage analysis should include documentation for each condition analyzed, of the voltage at the input and output of each transformer and at each intermediate bus between the connection of the offsite circuit and the terminals of each safety load.

8. The analysis should document the voltage setpoint and any inherent or adjustable (with nominal setting) time delay for relays which

(1) initiate or execute automatic transfer of loads form one source to another;

(2) initiate or execute automatic load shedding; or

(3) initiate or execute automatic load sequencing.

9. The calculation voltages at the terminals of each safety load should be compared with the required voltage range for normal operation and starting of that load. Any identified inadequacies of calculated voltage require immediate remedial action and notification of NRC.

10. For each case evaluated the calculated voltages on each safety bus should be compared with the voltage-time settings for the under voltage relays on these safety buses. Any identified inadequacies in undervoltage relay settings require immediate remedial action and notification of NRC.

11. To provide assurance that actions taken to assure adequate voltage levels for safety loads don not result in excessive voltage, assuming the maximum expected value of voltage at the connection to the offsite circuit, a determination should be made of the maximum voltage expected at the terminals of each safety load and its starting circuit. If this voltage exceeds the maximum voltage rating of any item of safety equipment immediate remedial action is required and NRC shall be notified.

12. Voltage-time settings for undervoltage relays shall be selected so as to avoid spurious separation of safety buses from offsite power during plant startup, normal operation and shutdown due to startup and/or operation of electric loads.

13. Analysis documentation should include a statement of the assumptions for each case analyzed.