ML18026A242: Difference between revisions

From kanterella
Jump to navigation Jump to search
(Created page by program invented by StriderTol)
(Created page by program invented by StriderTol)
 
(2 intermediate revisions by the same user not shown)
Line 3: Line 3:
| issue date = 10/24/1991
| issue date = 10/24/1991
| title = Forwards Response to Generic Ltr 91-06, Resolution of Generic Issues A-30, 'Adequacy of Safety-Related DC Power Supplies.'
| title = Forwards Response to Generic Ltr 91-06, Resolution of Generic Issues A-30, 'Adequacy of Safety-Related DC Power Supplies.'
| author name = KEISER H W
| author name = Keiser H
| author affiliation = PENNSYLVANIA POWER & LIGHT CO.
| author affiliation = PENNSYLVANIA POWER & LIGHT CO.
| addressee name = MILLER C L
| addressee name = Miller C
| addressee affiliation = NRC OFFICE OF NUCLEAR REACTOR REGULATION (NRR)
| addressee affiliation = NRC OFFICE OF NUCLEAR REACTOR REGULATION (NRR)
| docket = 05000387, 05000388
| docket = 05000387, 05000388
Line 17: Line 17:


=Text=
=Text=
{{#Wiki_filter:ACCELERATED DTRIBUTION DEMONS~TION SYSTEMREGULATORY INFORMATION DISTRIBUTION SYSTEM(RIDS)ACCESSION NBR:9111010196 DOC.DATE:91/10/24NOTARIZED:
{{#Wiki_filter:ACCELERATED DTRIBUTION DEMONS~TION SYSTEM REGULATORY INFORMATION DISTRIBUTION SYSTEM (RIDS)
NOFACIL:50-387 Susquehanna SteamElectricStation,Unit1,Pennsylva 50-388Susquehanna SteamElectricStation,Unit2,Pennsylva AUTH.NAMEAUTHORAFFILIATION KEISER,H.W.
ACCESSION NBR: 9111010196           DOC. DATE:   91/10/24          NOTARIZED: NO        DOCKET FACIL:50-387 Susquehanna         Steam  Electric Station, Unit            1, Pennsylva 05000387 50-388 Susquehanna        Steam  Electric Station, Unit            2, Pennsylva 05000388 AUTH. NAME          AUTHOR    AFFILIATION KEISER,H.W.         Pennsylvania Power       & Light Co.
Pennsylvania Power&LightCo.RECIP.NAME RECIPIENT AFFILIATION MILLER,C.L.
RECIP.NAME           RECIPIENT AFFILIATION MILLER,C.L.             Project Directorate I-2
ProjectDirectorate I-2


==SUBJECT:==
==SUBJECT:==
ForwardsresponsetoGenericLtr91-06,"Resolution ofGenericIssuesA-30,'Adequacy ofSafety-Related DCPowerSupplies.'"
Forwards response to Generic Ltr 91-06, "Resolution of Generic Issues A-30, 'Adequacy of Safety-Related DC Power Supplies.'"                                                                               D DISTRIBUTION CODE: AOOID COPIES RECEIVED:LTR 7 ENCL / SIZE:
DISTRIBUTION CODE:AOOIDCOPIESRECEIVED:LTR 7ENCL/SIZE:TITLE:ORSubmittal:
TITLE: OR Submittal: General Distribution
GeneralDistribution DOCKET0500038705000388DCOPIESLTTRENCL1122NOTES:LPDR 1cyTranscripts.
                                                                                                      /
~'PDR1cyTranscripts.
NOTES:LPDR 1 cy Transcripts.                                                             05000387
5:~~8~~r>>RECIPIENT IDCODE/NAME PDl-2LARALEIGH,J.
  ~ 'PDR 1 cy Transcripts.                                                               05000388 A 5:~~   8~~r>>                                                                                 D RECIPIENT              COPIES            RECIPIENT               COPIES            i ID CODE/NAME           LTTR ENCL        ID        CODE/NAME    LTTR ENCL            D PDl-2 LA                    1    1      PD1-2 PD                    1    1 RALEIGH,J.                 2    2 INTERNAL: ACRS                        6    6      NRR/DET/ECMB 7D              1    1 NRR/DET/ESGB               1    1      NRR/DOEA/OTS B1 1            1    1 NRR/DST        8E2        1    1      NRR/DST/SELB 7E              1    1 NRR/DST/SICB8H7             1    1      NRR/DST/SRXB 8E              1    1 NUDOCS-ABSTRACT             1    1      OC/LF                        1    0 OGC/HDS2                    1    0      QE                          1    1 RES/DSIR/EIB               1    1            F-Kl'SIC EXTERNAL: NRC PDR                      1    1 NOTES:                                  2    2 R
RECIPIENT IDCODE/NAME PD1-2PDCOPIESLTTRENCL11/0500038705000388ADiDINTERNAL:
D D
ACRSNRR/DET/ESGB NRR/DST8E2NRR/DST/SICB8H7 NUDOCS-ABSTRACT OGC/HDS2RES/DSIR/EIB EXTERNAL:
D NOTE TO ALL "RIDS" RECIPIENTS:
NRCPDRNOTES:661111111110111122NRR/DET/ECMB 7DNRR/DOEA/OTS B11NRR/DST/SELB 7ENRR/DST/SRXB 8EOC/LFQEF-Kl'SIC111111111011RDNOTETOALL"RIDS"RECIPIENTS:
PLEASE HELP US TO REDUCE XVASTE! CONTACT THE DOCUMENT CONTROL DESK, ROOM Pl-37 (EXT. 20079) TO ELIMINATEYOUR NAME FROM DISTRIBUTION LISTS FOR DOCUMENTS YOU DON'T NEED!
DDPLEASEHELPUSTOREDUCEXVASTE!CONTACTTHEDOCUMENTCONTROLDESK,ROOMPl-37(EXT.20079)TOELIMINATE YOURNAMEFROMDISTRIBUTION LISTSFORDOCUMENTS YOUDON'TNEED!TOTALNUMBEROFCOPIESREQUIRED:
TOTAL NUMBER OF COPIES REQUIRED: LTTR              26          ENCL  24
LTTR26ENCL24 0Pennsylvania Power8LightCompanyTwoNorthNinthStreet~Allentown, PA,18101-1179,~,215/774-5151 HaroldW.KeiserSeniorVicePresident-Nuclear 215/7744194 1'CT24jtIQ)DirectorofNuclearReactorRegulation Attention:
Hr.C.L.Hiller,ProjectDirectorProjectDirectorate I-2DivisionofReactorProjectsU.S.NuclearRegulatory Commission Washington, D.C.20555SUSQUEHANNA STEANELECTRICSTATIONRESPONSETOGENERICLETTER91-06LA-3673FILESR41-1DDocketNos.50-387and50-388


==DearHr.Hiller:==
0 Pennsylvania Power 8 Light Company Two North Ninth Street ~Allentown, PA,18101-1179,~,215/774-5151 Harold W. Keiser Senior Vice President-Nuclear                                                  1'CT 215/7744194                                                                          2 4 jtIQ)
EnclosedisourresponsetoGenericLetter91-06,"Resolution ofGenericIssueA-30".Inanefforttoavoidconfusion causedbyextensive explanatory remarksprovidedforeachDCsystem,ourresponseisdividedintofourparts:ATTACHMENT I:24VDCSYSTEMATTACHMENT II:125VDCSYSTEMATTACHMENT III:250VDCSYSTEMATTACHMENT IV:DG'-E125VDCSYSTEMShouldyouhaveanyquestions, pleasecontactHr.W.W.Williams, at(215)774-7910.
Director of Nuclear Reactor Regulation Attention: Hr. C. L. Hiller, Project Director Project Directorate I-2 Division of Reactor Projects U.S. Nuclear Regulatory Commission Washington, D.C.             20555 SUSQUEHANNA STEAN ELECTRIC STATION RESPONSE TO GENERIC LETTER 91-06                                                      Docket Nos. 50-387 LA- 3673                      FILES R41-1D                                                    and 50-388
Verytrulyyours,glH.W.KeiserEnclosure 9111p1Kp5ppp38701'9691102%PDRADOCP OCT24lg01FILESA17-8/so-24 PLA-'3673 Mr.C.L.Millercc:iiiLCD~ocumen.
Control-Desk-(original.)P NRCRegionIMr.G.S.Barber,NRCSr.ResidentInspector Mr.J.J.Raleigh,NRCProjectManagerWWW:llrPLA/021.WWW SUSUEHANNAS.E.S.24VDCSYSTENATTACHMENT IPage1ENCLOSURE 1Thefollowing information isapplicable toeitherUnit1or2atSusquehanna SES.l.UnitSusuehannaS.E.S.Unit1or224VDC2.a~Thenumberofindependent redundant divisions ofClasslEorfty-lddtftllyltl~t.(lldanyseparateClasslEorsafety-related dc,suchasanydcdedicated tothedieselgenerators.)
b.Thenumberoffunctional safety-related divisions ofdcpowerytttlfttdftllltd3.Doesthecontrolroomatthisunithavethefollowing
: separate, independently annunciated alarmsandindications foreachdivisionofdcpower?a.Alarms1.Batterydisconnect orcircuitbreakeropen?No2.Batterychargerdisconnect orcircuitbreakeropen(bothinputacandoutputdc)?No3.dcsystemground?No4.dcbusundervoltage?
No5.dcbusovervoltage?
No6.Batterychargerfailure?No...9111010196 C4' SUSUEHANNAS.E.S.24VDCSYSTEMATTACHMENT I7.Batterydischarge?
NoPage2b.Indications 1.Batteryfloatchargecurrent?No2.Batterycircuitoutputcurrent?No3.Batterydischarge?
No4.Busvoltage?Noc.Doestheunithavewrittenprocedures forresponsetotheabovealarmsandindications?
No4.Doesthisunithaveindication ofbypassedandinoperable statusofcircuitbreakersorotherdevicesthatcanbeusedtodisconnect thebatteryandbatterychargerfromitsdcbusandthebatterychargerfromitsacpowersourceduringmaintenance ortesting?NoSeeremarktl5.Iftheanswertoanypartofquestion3or4isno,thenprovideinformation justifying theexistingdesignfeaturesofthefacility's safety-related dcsystems.*Seenotebelow.SeeremarkOl6.(I)Haveyouconducted areviewofmaintenance andtestingactivities tominimizethepotential forhumanerrorcausingmorethanonedcdivisiontobeunavailablet
~esand(2)doplantprocedures prohibitmaintenance ortestingonredundant DCdivisions atthesametime'I~esIfthefacilityTechnical Specifications haveprovisions equivalent tothosefoundintheWestinghouse andCombustion Engineering StandardTechnical Specifications formaintenance andsurveillance, thenquestion7maybeskippedandastatement tothateffectmaybeinsertedhere.
SUSUEHANNAS.E.S.~YYTATTACHMENT IPage37.Aremaintenance, surveillance andtestprocedures regarding stationbatteries conducted routinely atthisplant?Specifically:
a.Atleastonceper7daysarethefollowing verifiedtobewithinacceptable limits:1.Pilotcellelectrolyte level?Yes2.Specifygravityorchargingcurrent?Yes3.Floatvoltage?Yes4.Totalbusvoltageonfloatcharge?Yes5.Physicalcondition ofallcells?Yesb.Atleastonceper92days,orwithin7daysafterabatterydischarge, overcharge, orifthepilotcellreadingsareoutsidethe7-daysurveillance requirements arethefollowing verifiedtobewithinacceptable limits:l.Electrolyte levelofeachcell?Yes2.Theaveragespecificgravityofallcells?Yes3.Thespecificgravityofeachcell?Yes4.Theaverageelectrolyte temperature ofarepresentative numberofcells?Yes5.Thefloatvoltageofeachcell?Yes6.Visuallyinspectormeasureresistance ofterminals andconnectors (including theconnectors atthedcbus)?Yes SUSUEHANNAS.E.S.24VDCSYSTEMATTACHMENT Ic.Atleastevery18monthsarethefollowing verified:
Page41.Lowresistance ofeachconnection (bytest)?Yes2.Physicalcondition ofthebattery?Yes3.Batterychargercapability todeliverratedampereoutputtothedcbus?Yes4.Thecapability ofthebatterytodeliveritsdesigndutycycletothedcbus?Yes5.Eachindividual cellvoltageiswithinacceptable limitsduringtheservicetest?Yesd.Atleastevery60months,iscapacityofeachbatteryverifiedbyperformance ofadischarge test?Yese.Atleastannually, isthebatterycapacityverifiedbyperformance discharge test,ifthebatteryshowssignsofdegradation orhasreached85Xoftheexpectedservicelife?Yes8.Doesthisplanthaveoperational featuressuchthatfollowing lossofonesafety-related dcpowersupplyorbus:a.Capability ismaintained forensuringcontinued andadequatereactorcooling?Yesb.Reactorcoolantsystemintegrity andisolation capability aremaintained?
Yesc.Operating procedures, instrumentation (including indicators andannunciators),
andcontrolfunctions areadequatetoinitiatesystemsasrequiredtomaintainadequatecorecooling?Yes9.Iftheanswertoanypartofquestion6,7or8isno,thenprovideyourbasisfornotperforming themaintenance, surveillance andtestprocedures described and/orthebasesfornotincluding theoperational featurescited.*Seenotebelow.
N SUSUEHANNAS.E.S.24VDCSYSTEMATTACHMENT IPage5*Note:Forquestions involving supporting typeinformation (question numbers5and9)insteadofdeveloping andsupplying theinformation inresponsetothisletter,youmaycommittofurtherevaluatetheneedforsuchprovisions duringtheperformance ofyourindividual plantexamination forsevereaccidentvulnerabilities (IPE).Ifyouselectthisoption,youarerequiredto:(1)Sostateinresponsetothesequestions, and(2)Committoexplicitly addressquestions 5and9inyourIPEsubmittal pertheguidelines outlinedinNUREG-1335 (Section2.1.6,Subitem7),"Individual PlantExamination:
Submittal Guidance."
c:iwp51idocsi24VDCSYS.PCD (18)10/24/919:20am RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE1REMARK1:1.0Thefollowing indications andalarmsforthe24Vdcclass1Esubsystem areprovided.
Justification forthisdesignhasbeenpreviously providedinPLA-959totheNRCdated11/6/81,regarding ControlRoommonitoring ofClasslEdcpowersystems.Each24Vdcsubsystem consistsoftwo24voltbatterybanksconnected inserieswithacommongroundbusconnected tothecommon(center)pointofthetwobatterybanks.Thegroundbusissolidlygroundedtothestationgroundgrid.Each24voltbatterybankisdesignated aseitherthepositiveornegativebusasreferenced toground.Thealarms/indications inthefollowing tableanddiscussion aretypicalforeachpositiveandnegativebus.AlarmorIndication
,LocationLocalControlRoomNotesBusUndervoltage AlarmBatteryMonitorAlarmBatteryChargerTroubleAlarmBusOvervoltage AlarmBusVoltmeter BatteryChargerAmmeterBatteryChargerVoltmeter DCSystemTroubleAlarm1,21,2,41,2,51,23NOTES:1.SeeTable1andFigure2forspecificlocalalarmindication.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE22.Thesearelocallyindicated andactuatedcsubsystem troublealarm,seeTable1andFigure1.3.Hetersareprovidedlocally.SeeFigure3.4.Batterymonitor'compares batterycenterpointvoltagewithhighandlowthreshold reference pointsofthehighandlowvoltagecomparators.
Thedegradedcellconditions (suchasashortedcell)oranopencircuitcondition (suchasanopenfuse)aredetectedbythebatterymonitor.5.Batterychargertroublealarmindication isprovidedforbatterychargerACpowerfailure,DCoutputbreakeropen,batterychargerfailurealarmoperation.
6.Oneannunciator windowforeach24Vdcsubsystem isprovided.
(Includes inputsfromeitherthepositiveornegativebus).2.0Themonitoring schemeprovidedforthedcpowersubsystem isbasedonthedegreeofcontrolprovidedtothecontrolroomoperator.
Sincethedcpowersystemequipment cannotberemotelycontrolled, asingledcsystemtroubleannunciator windowforeachsubsystem isprovidedinthecontrolroom,consistent withthesystemlevelalarmcriteriasetforthinSection8ofR.G.1.47.TheSSESdesignisbasedonthegeneralcriteriathat,iftheoperatorcanperformsomecorrective actioninthecontrolroominresponsetoaspecificinput,thatinformation isspecifically provided.
Thedcpowersystemequipment cannotbecontrolled fromthecontrolroom.Annunciating specificinputsfromthe24Vdcsysteminthecontrolroomdoesnotenhancethecontrolroomoperators's abilitytodealwiththesituation anditwouldnotbeconsistent withSSESalarmdesignphilosophy.
However,iftheonlyresponserequiredistodispatchanoperatortoanarearemovedfromthecontrolroom,thentheonlyinformation requiredinthecontrolroomisgeneralinformation withonlythelevelofspecificity requiredtodirectthatoperatortotheproperlocation.
Thismethodisfasterandmorereliablesinceabnormal


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE3conditions areautomatically alarmed.Furthermore, thisapproachisconsistent withthehumanfactorsengineering goaltonotoverburdentheoperatorwithunnecessary information.
==Dear Hr. Hiller:==
24Vdcsysteminstrumentation, locallyprovided, isinfullcompliance withtherequirement ofIEEE308-1974andRegulatory Guide1.47.TheDCsystemgeneraltroublealarmsandspecificlocalindicators inconjunction withtheroutineoperatorsurveillance providepositiveassurance thattheClasslEdcpowersystemaremaintained inasteadystatereadytoperform-the requiredsafetyfunction.


==3.0 Following==
Enclosed    is our response to Generic Letter 91-06, "Resolution of Generic Issue A-30".     In an effort to avoid confusion caused by extensive explanatory remarks provided for each DC system, our response is divided into four parts:
isthejustification foreachalarmandindication listedinGenericLetter91-06.3.1BatterDisconnect orCircuitBreaker0enAlarm:TheSusquehanna S.E.S.(SSES)24Vdcsubsystem utilizesfusesasthebatterydisconnect.
I ATTACHMENT ATTACHMENT ATTACHMENT II:
Thiscondition isdetectedbythebatterymonitor.Thebatterymonitorutilizesavariablethreshold circuittogetherwithtwocomparators (highandlow)todetectthelossofbatterycapability duetoanopencircuit(i.e.,anopenfuseordegradedcellcondition).
III:
Avariablethreshold circuitacceptsthebatterychargervoltageanddevelopstwothreshold voltagesforusewiththecomparators.
:     24V DC SYSTEM 125V DC SYSTEM 250V DC SYSTEM ATTACHMENT        IV  :    DG'-E 125V DC SYSTEM Should you have any questions,             please contact Hr.         W. W. Williams, at (215) 774-7910.
Whenthemonitored voltagesgoaboveorbelowthethresholds, thebatterymonitoroutputrelaycontactsinitiatealocalbatterymonitoralarmwhichisreflashed tothecontrolroomasa24Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.2BatterCharerDisconnect orCircuitBreaker0enBothInutACandOututDCAlarm3.2.1BatteryChargerACInputDisconnect orCircuitBreaker:SSESutilizesacircuitbreakerinthebatterychargerasadisconnect fortheacinputpowersupply.Anacpower RESPONSETOGENERIC.LETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEN PAGE4failurealarmrelayisinstalled internaltothebatterychargertodetectlossofacinputpower.Thiscondition couldbecausedbyanopeninputcircuitbreakerorlossofthe120Vacpowersupplytothecharger.Theacpowerfailurealarmrelayinitiates abatterychargertroublealarmatthelocalreflasher panel,whichisreflashed tothecontrolroomasa24Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed insection2.0.3.2.2BatteryChargerDCOutputCircuitBreakerSSESutilizesacircuitbreakerinthebatterychargerasadisconnect forthedcoutputcircuit.Thecircuitbreakerisprovidedwithanauxiliary positionindicating switch.Aswitchcontactwhichisclosedwhenthecircuitbreakerisopenisusedtoinitiateabatterychargertroublealarmatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroombythelocalreflasher panel.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.3DCSstemGroundAlarmThe24Vdcsubsystem isasolidlygroundedsystem.Therefore, asystemgroundalarmisnotrequired.
Very  truly yours, gl H. W. Keiser Enclosure 9111p1 01'96K 91102%
Asecondgroundoneitherthepositiveornegativebuswillcauseprotective devicesinthecircuittooperate.Thiscondition willbedetectedatthelocalreflasher panelbyeitherthebatterymonitoralarm(forbatteryfuseopen)orthebatterychargertroublealarm(forbatterychargerDCoutputbreakeropen).Ineithercase,thelocalreflasher panelwillreflasha24Vdcsystemtroublealarmtothecontrolroomannunciator.
PDR    ADOC p5ppp387 P
Thisisconsistent withthegeneraldesignphilosophy discussed inSection'.0.
RESPONSETOGENERICLETTER91-0624VDCSUBSYSTEM SUSUEHANNAS.E.S.PAGE53.4DCBusUndervolta eAlarmThe24Vdcsubsystem isprovidedwithpositiveandnegativedcbusundervoltage relays.Eachrelayisconnected acrossthesystembuses(positive bustoground,negativebustoground).Therelaysarenormallyenergized and,settodropoutatthespecified setpoint.
Apositivebusornegativebuslowvoltagealarmatthelocalreflasher panelisinitiated aftertheundervoltage relaydropsout.Thelocalreflasher panel,inturn,reflashes thealarmtothecontrolroomannunciator asadcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.5DCBusOvervolta eAlarmThe24Vdcsubsystems areprovidedwithovervoltage relays.Therelaysarelocatedinsidethe24Vdcdistribution panels.Eachrelayisconnected acrossthesystembuses(positive bustoground,negativebustoground)andsettopickupatthespecified setpoint.
Anormallyopencontactoftheover'voltage relay,whenclosed,initiates apositivebusornegativebushighvoltagealarmatthelocalreflasher panelwhichinturnwillreflashadcsystemtroubletothecontrolroomannunciator.
Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.6BatterCharerFailureAlarmEach24Vdcsubsystem batterychargerisprovidedwithabatterychargerfailurerelay.Thisrelaywilldetectthelossofthechargeroutputcurrentwiththeinputandoutputcircuitbreakersclosed.Thiscondition isindicative ofabatterychargerfailureanditinitiates abatterychargertroublealarmatthelocalreflasher RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE6panelwhichinturnwillreflashadcsystemtroublealarmtothecontrolroomannunciator.
Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.7BatterDischareAlarmThebatterycanonlydischarge whenits.terminal voltageislessthanthenominalopencircuitvoltage.Thisisindicative ofabatterychargerfailureorsystemcurrentinexcessofthechargercapability.
Abatterychargerfailurealarmisprovidedanditsoperation isdiscussed inSection3.6.Whensystemcurrentexceedsbatterychargercapability, adcsystemundervoltage condition willoccur,andwillbedetectedbythedcbusundervoltage relay(seeSection3.4).Chargerfailureandbusundervoltage initiatealarmsatthelocalreflasher panelwhichinturnwillreflashadcsystemtroublealarmtothecontrolroomannunciator.
Thisisconsistent withthegeneraldesignphilosophy asdiscussed inSection2.0.3.8BatterFloatChareCurrentIndication Undernormalconditions, thebatteryfloatchargecurrentisverysmallcomparedtobatterydischarge current.Measurement ofthiscurrentrequiresaverysensitive ammeter.Shuntbypassesareemployedtoprotecttheammetermovementfromthemuchlargerbatterydischarge currentpossibleinthiscircuit.Theseshuntsmustbemanuallyremovedwhenreadingnormalsmallfloatcurrent.Thusthisreadingcannotbecontinuous andnoautomatic indication oralarmscanbegiven.Sincetheintentofindicating "BatteryFloatChargeCurrent"istodetermine thebatterycondition, themethodusedtoaccomplish thispurposeshouldnotbeimportant.
Thebusundervoltage, batterymonitorandbatterychargerfailure RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE7alarms(previously described) providecontinuous monitoring todetectdegradation ofbatterycapability.
Thesealarmswillreflashthedcsystemtroublealarminthecontrolroom,andanoperatorisdispatched locallytodetermine thecauseofthecondition andinitiatecorrective action.Specificindication isprovidedonthelocalreflasher panel.Thisresponseisexactlywhatwould'beachievedifanimproperstateofbatterycurrentwereindicated onanammeterinthecontrolroom.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.9BatterCircuitOututCurrentIndication Innormalcondition whenthebatterychargerissupplying the24Vdcpower,thebatterycircuit(batteryandthebatterycharger)outputcurrentisindicated byanammeterlocatedatthebatterycharger.Inthecondition ofabatterychargerfailure,thebatterysuppliesthedcpower.Inthiscondition thebatterycircuitoutputcurrentcannotbedetermined sinceanammeterisnotprovidedatthe24Vdcdistribution panels.Asindicated inSection3.8,theintentofindicating "batterycurrent"istodetermine thebatterycondition, andtherefore themethodusedtoaccomplish thispurposeshouldnotbeimportant.
3.10BatterDischareIndication Aspreviously discussed inSection3.7,abatterydischarge willoccurasaresultofabatterychargerfailureorsystemcurrentinexcesstobatterychargercapability.
Sincetheseconditions areautomatically alarmedinthecontrolroom(viathesystemtroublealarm),anoperatorwillbedispatched locallyto IRESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE8determine thecauseofthecondition andinitiatecorrective action.Thisresponseisexactlywhatwouldbeachievedifbatterydischarge currentwasindicated onanammeterinthecontrolroom.3.11BusVoltaeIndication Thebattery,thebatterychargerandthe24Vdcdistribution panelarelocatedincloseproximity ofeachother.Thebatterychargerandthedcdistribution panelareeachprovidedwithavoltmeter.
Thepurposeofabusvoltmeter atthecontrolroomwouldbetoenabletheoperatortodispatchsomeonetotakecorrective actionlocallytocorrectabnormalbusvoltage.AtSSESbusundervoltage andovervoltage ismonitored directlyatthedistribution panel.Thebusundervoltage andovervoltage conditions areannunciated as24Vdcsystemloworhighvoltageatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalreflasher panel.Thisdesignautomatically alertsthecontrolroomoperatortounusualvoltageconditions withoutunnecessarily requiring hisperiodicattention andanalysis.
Asaresult,24Vdcbusvoltageindication isnotprovidedinthecontrolroomandhasbeenprovidedonthefrontofthedistribution panelwhereitprovidesusefulinformation duringsurveillance andmaintenance activities.
Avoltmeter islocatedonthefrontofthebatterychargerpanel.Withthechargeroutputcircuitbreakerclosed,thechargeroutputandthebusvoltagesareessentially thesameduetothecloseproximity ofthechargertotheloadcenter.Allabnormalvoltageconditions ofthebatterychargerareannunciated atthelocalreflasher panelwhichisreflashed tothecontrolroomasadcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEN PAGE93.12AlarmResonseProcedure Controlroomalarmresponseprocedures fora24Vdcsystemtroublealarmdirecttheoperatortorespondtothelocalreflasher paneltodetermine thecondition whichcausedthealarm.Localalarmresponseprocedures forthereflasher panelareprovidedtodirecttheoperatortodetermine thecauseofthecondition andtoinitiatecorrective action.3.13Indication ofBassedandInoerableStatusofCircuitBreakersorOtherDisconnectin DevicesAlthoughindication ofbypassedandinoperable statusofcircuitbreakersorotherdisconnecting devicesisnotprovidedasapartoftheBypassIndication System,the24VdcSystemTroubleAlarminthecontrolroomisinitiated forthefollowing condition (whicharedisconnecting devicesinthesystem):Hainbatteryfuseopen.Batterychargeracinputcircuitbreakeropen.Batterychargerdcoutputcircuitbreakeropen,ordcdistribution panelfeederbreakeropen.
OCT  24  lg01 FILES A17-8/so-24 PLA-'3673 Mr. C. L. Miller cc:  iiiLC D~ocumen. Control-Desk-(original.)P NRC  Region I Mr. G. S. Barber,    NRC Sr. Resident Inspector Mr. J. J. Raleigh,   NRC Project Manager WWW:llr PLA/021. WWW
P RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.24VDCSUBSYSTEM PAGE10TABLE124VDCSstemReflashPanelIndicators 1L610(Typicalforpositiveandnegativebuses)l.24VDCSystemLowVoltage2.,24VDCSystemHighVoltage3.BatteryHonitor(indicates batterydegradation oropenbatteryfuses)4.BatteryChargerTroubleindicates (1)ACpowerfailure,(2)DCoutputbreakeropen,or(3)batterychargerfailureC:KWP51%00CSK24VDCSS
~PGO(18)10/24/919:168AI 124DCLOCALREHASHPANELWITHINDICATION 1L670MULTIPLEALARMINPUTSFROM%24VDCPOWERSYSTEMPERTABLE1DCSYSTEMAlARMINPUTSFROMOTHERREFLASHPANELS(8MILARTOABOVE)CONTROLROOMPANEL1C651ANNUNCIATOR
+24VDCSYSTEMTROUBLE1L670FIGURE1


INDICATOR UGHI'ERASHER PANELPOWERFAILUREPOSITIVEBUSLOWVOLTAGENEGATIVEBUSHIGHVOLTAGEBATlERYCHARGER41TROUBLE0NEGATIVEBUSLOWVOLTAGEBATTERYPOSITIVEMONITORBATIERYCHARGERWTROUBLE0POSITIVEBUSHIGHVOLTAGEBATlERYNEGATIVEMONITOR224VDCSYSTEMLOCALREHASHERPANELQYPICAOFIGURE2 IBATIERYBANK1D670I+24-24I96PCLQ>0+24VDCBA11ERYCHARGERDCBKRQvQ~-24VDCBA11ERYCHAI&ERDCBKRQvQA59y27P27y69NNSPARECOMPOUTPUTAMPPOSVOLTSNEG}VOLTSNEGSPAREMPUIEROUTPUTPROCESSRADIATION MONITORSSOURCERNG.MON'SINIERMRNG.MON'S1RIP.AUX,UNITSNOTE1+24VCOMMON-24V24VDCSYSTEMOYPICAQNOTE1:COMMONBUSGROUNDED SUSUEHANNAS.E.S.125VDCSYSTEMATTACHMENT IIPage1ENCLOSURE 1Thefollowing information isapplicable toeitherUnit1or2atSusquehanna SES.1.UnitSUSUEHANNAS.E.S.UNIT-1or2125VDCSYSTEM2.a0Thenumberofindependent redundant divisions ofClasslEorsafety-related DCpowerforthisplantisSeeRemark1(IncludeanyseparateClass1Eorsafety-related DC,suchasanyDCdedicated tothedieselgenerators).
SUS UEHANNA S.E.S.                         ATTACHMENT  I 24V DC SYSTEN Page 1 ENCLOSURE  1 The  following information is applicable to either Unit          1  or  2  at Susquehanna SES.
b.Thenumberoffunctional safety-related divisions ofDCpowernecessary toattainsafeshutdownforthisunitisSeeRemark2.3.Doesthecontrolroomatthisunithavethefollowing
: l. Unit    Sus uehanna  S.E.S. Unit    1  or  2 24V DC
: separate, independently annunciated alarmsandindications foreachdivisionofDCpower?a~3.5.Alarms1.Batterydisconnect orcircuitbreakeropen?No2.Batterychargerdisconnect orcircuitbreakeropen(bothinputACandoutputDC)?NoDCsystemground?NoDCbusundervoltage?
: 2. a ~    The number fty-   l    ddt          f    tll  yl  tl any separate Class lE or safety-related dc, such dedicated to the diesel generators.)
NoDCbusovervoltage?
                                                                ~t.(l of independent redundant divisions of Class lE or as any dc ld
No6.Batterychargerfailure?No7.Batterydischarge?
: b. The number  of functional safety-related divisions of          dc power yt ttl          f    ttd      f    tll    ltd
Nob.Indications l.2.3.Batteryfloatchargecurrent?NoBatterycircuitoutputcurrent?NoBatterydischarge?
: 3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of dc power?
NoBusvoltage?No SUSUEHANNAS.E.S.125VDCSYSTENATTACHMENT II4.Page2c.Doestheunithavewrittenprocedures forresponsetotheabove'alarmsandindications?
: a. Alarms
NoI*,IDoesthisunithaveindication ofbypassedandinoperable'status ofcircuitbreakersorotherdevicesthatcanbeusedtodisconnect thebatteryandbatterychargerfromitsDCbus,andthebatterychargerfromitsACpowersourceduringmaintenance ortes'ting?
: 1. Battery disconnect or      circuit  breaker open?
NoSeeremark¹35.Iftheanswertoanypartofquestion3or4isno,thenprovideinformation justifying theexistingdesignfeaturesofthefacility's safety-related DCsystems.*Seeendnote.Seeremark¹36.(I)Haveyouconducted areviewofmaintenance andtestingactivities tominimizethepotential forhumanerrorcausingmorethanoneDCdivisiontobeunavailablet
No
~esand(2)Doplantprocedures prohibitmaintenance ortestingonredundant DCdivisions atthesametime?~esIfthefacilityTechnical Specifications haveprovisions equivalent tothosefoundintheWestinghouse andCombustion Engineering StandardTechnical Specification formaintenance andsurveillance, thenquestion7maybeskippedandastatement tothateffectmaybeinsertedhere.7.Aremaintenance, surveillance andtestprocedures regarding stationbatteries conducted routinely atthispoint?Specifically:
: 2. Battery charger disconnect or      circuit  breaker open (both input ac and output dc)?         No
a.Atleastonceper7daysarethefollowing verifiedtobewithinacceptable limits:I.2.3.4.5.Pilotcellelectrolyte level?YesSpecificgravityorchargingcurrent?YesFloatvoltage?YesTotalbusvoltageonfloatcharge?YesPhysicalcondition ofallcells?Yes
: 3. dc system ground?         No
: 4. dc bus undervoltage?         No
: 5. dc bus overvoltage?         No
: 6. Battery charger failure?         No
                                                                    ...9111010196


SUSUEHANNAS.E.S.125VDCSYSTEMATTACHMENT IIb.Page3Atleastonceper92days,orwithin7daysafterabatterydischarge, overcharge, orifthepilotcellreadingsareoutsidethe7-daysurveillance requirements arethefollowing verifiedtobewithinacceptable limits:l.2.3.4.5.6.Electrolyte levelofeachcell?YesTheaveragespecificgravityofallcells?YesThespecificgravityofeachcell?YesTheaverageelectrolyte temperature ofarepresentative numberofcells?YesThefloatvoltageofeachcell?YesVisually.inspectormeasureresistance ofterminals andconnectors (including theconnectors attheDCbus)?Yesc.Atleastevery18monthsarethefollowing verified:
C 4'
2.3.5.Lowresistance ofeachconnection (bytest)?YesPhysicalcondition ofthebattery?YesBatterychargercapability todeliverratedampereoutputtotheDCbus?YesThecapability ofthebatterytodeliveritsdesigndutycycletotheDCbus'?YesEachindividual cellvoltageiswithinacceptable limitsduringtheservicetest?Yesd.Atleastevery60months,iscapacityofeachbatteryverifiedbyperformance ofadischarge test'?Yese.Atleastannually, isthebatterycapacityverifiedbyperformance discharge test,ifthebatteryshowssignsofdegradation orhasreached85Xoftheexpectedservicelife?Yes8.Doesthisplanthaveoperational featuressuchthatfollowing lossofonesafety-related DCpowersupplyorbus:a.Capability ismaintained forensuringcontinued andadequatereactorcooling?Yes SUSUEHANNAS.E.S.125VDCSYSTENATTACHMENT IIPage4b.Reactorcoolantsystemintegrity andisolation capability aremaintained7 Yesc.Operating procedures, instrumentation (including indicators andannunciators),
andcontrolfunctions areadequatetoinitiatesystemsasrequiredtomaintainadequatecorecooling7Yes9.Iftheanswertoanypartofquestion6,7,or8isno,thenprovideyourbasisfornotperforming themaintenance, surveillance andtestprocedures described and/orthebasesfornotincluding theoperational featurescited.*SeeNotebelow.*Note:Forquestions involving supporting typeinformation (question numbers5and9)insteadofdeveloping andsupplying theinformation inresponsetothisletter,youmaycommittofurtherevaluatetheneedforsuchprovisions duringtheperformance ofyourindividual plantexamination forsevereaccidentvulnerabilities (IPE).Ifyouselectthisoption,youarerequired, to:1)Sostateinresponsetothesequestions, and2)Committoexplicitly addressquestions 5and9inyourIPEsubmittal pertheguidelines outlinedinNUREG-1335 (section2.1.6,Subitem7),"Individual PlantExamination:
Submittal Guidance."
C:KIIP51I,docshadeqofsa.pgd (18)10/24/918:57am


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE1REMARK1:TheUnit1Class1Edirectcurrent,(dc)systemconsistsoffourindependent 125voltdcsubsystems.
SUS UEHANNA S.E.S.                     ATTACHMENT  I 24V DC SYSTEM Page 2
Thesefoursubsystems areidentified aschannelsA,B,C,andD.Eachsubsystem providesthecontrolpowerforitsassociated classlEacpowerloadgroupconsisting of:'.16kVswitchgear, 480Vloadcenters,andastandbydieselgenerator.
: 7. Battery discharge?        No
The125Vdcsubsystems alsoprovidedcpowerforsafetyfeaturevalveactuation, dieselgenerator auxiliaries, andplantalarmandindication circuits.
: b. Indications
REMARK2:Fourseparateandindependent class1E125Vdcsubsystems supplycontrolpowerforeachoftheclass1Eloadgroups.Lossofanyoneofthesubsystems doesnotpreventtheminimumsafetyfunctionfrombeingperformed (i.e.,threeoutoffoursubsystems arenecessary toattainsafeshutdownforUnit1).REMARK3:1.0Thefollowing indications andalarmsforthe125VdcclasslEsubsystem areprovided.
: 1. Battery float charge current?          No
Justification forthisdesignhasbeenpreviously providedinPLA-959totheNRCdatedll/6/81,regarding ControlRoommonitoring ofClass1Edcp'owersystems.
: 2. Battery  circuit output current?        No
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE2AlarmorIndication LocationLocalControlRoomNotesBusUndervoltage AlarmBusGroundAlarmBatteryMonitorAlarmBatteryChargerTroubleAlarmBusAmmeterBusVoltmeter BatteryChargerAmmeterBatteryChargerVoltmeter DCSystemTroubleAlarm1,21,21,2,41,2,5NOTES:1.SeeTable1andFigure2forspecificlocalalarmindication.
: 3. Battery discharge?        No
2.Thesearelocallyannunciated andactuatedcsubsystem troublealarm,seeTable1andFigurel.3.Hetersareprovidedlocally.SeeFigure3.Batterymonitorcomparesbatterycenterpointvoltagewithhighandlowthreshold reference pointsofthehighandlowvoltagecomparators.
: 4. Bus  voltage?      No
Thedegradedcellconditions (suchasashortedcell)oranopencircuitcondition (suchasanopenfuse)aredetectedbythebatterymonitor.  
: c. Does  the unit have written procedures for response to the above alarms and indications?        No
: 4. Does  this unit  have  indication of    bypassed and inoperable status of circuit breakers or other devices that can be used to disconnect the battery and battery charger from its dc bus and the battery charger from its ac power source during maintenance or testing?
No          See remark  tl
: 5. If the  answer to any    part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related dc systems.
* See note below.
See remark Ol
: 6.     (I) Have you conducted    a  review of maintenance and testing activities to minimize the potential for human error causing more than one dc division to be unavailablet    ~es        and (2) do plant procedures prohibit maintenance or testing on redundant DC divisions at the same time'I ~es If the facility Technical      Specifications    have  provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specifications for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE35.Batterychargertroublealarmindication isprovidedforbatterychargerACpowerfailure,DCoutputbreakeropen,batterychargerfailurealarmoperation, andbusovervoltage.
I
6.Oneannunciator windowforthe125Vdcsubsystem isprovided.
                                ~YYS.E.S.
SUS UEHANNA T
ATTACHMENT Page 3
: 7. Are maintenance, surveillance and test procedures regarding          station batteries conducted routinely at this plant? Specifically:
: a. At least once per 7 days are the following verified to        be  within acceptable limits:
: 1. Pilot cell electrolyte level?        Yes
: 2. Specify gravity or charging current?        Yes
: 3. Float voltage?    Yes
: 4. Total bus voltage  on  float  charge?    Yes
: 5. Physical condition of  all cells?      Yes
: b. At least once per 92 days, or within 7 days after a battery discharge, overcharge, or    if  the pilot cell readings are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
: l. Electrolyte level of  each  cell?    Yes
: 2. The average  specific gravity of all cells?        Yes
: 3. The specific gravity of    each  cell?    Yes
: 4. The average electrolyte temperature      of a representative number of cells?    Yes
: 5. The float voltage of  each  cell?    Yes
: 6. Visually inspect or measure resistance of terminals and connectors (including the connectors at the dc bus)?          Yes


==2.0 Themonitoring==
SUS UEHANNA S.E.S.                       ATTACHMENT    I 24V DC SYSTEM Page 4
schemeprovidedforthedcpowersubsystem isbasedonthedegreeofcontrolprovidedtothecontrolroomoperator.
: c. At least every    18 months    are the following  verified:
Sincethedcpowersystemequipment cannotberemotelycontrolled, asingledcsystemtroubleannunciator windowforeachsubsystem isprovidedinthecontrolroom,consistent withthesystemlevelalarmcriteriasetforthinSectionBofR.G.1.47.TheSSESdesignisbasedonthegeneralcriteriathat,iftheoperatorcanperformsomecorrective actioninthecontrolroominresponsetoaspecificinput,thatinformation isspecifically provided.
: 1. Low  resistance of each connection (by test)?          Yes
Thedcpowersystemequipment cannotbecontrolled fromthecontrolroom.Annunciating specificinputsfromthe125Vdcsysteminthecontrolroomdoesnotenhancethecontrolroomoperators's abilitytodealwiththesituation anditwouldnotbeconsistent withSSESalarmdesignphilosophy.
: 2. Physical condition of the battery?          Yes
However,iftheonlyresponserequiredistodispatchanoperatortoanarearemovedfromthecontrolroom,thentheonlyinformation requiredinthecontrolroomisgeneralinformation withonlythelevelofspecificity requiredtodirectthatoperatortotheproperlocation.
: 3. Battery charger capability to deliver rated        ampere output to the dc bus?      Yes
Thismethodisfasterandmorereliablesinceabnormalconditions areautomatically alarmed.Furthermore, thisapproachisconsistent withthehumanfactorsengineering goaltonotoverburdentheoperatorwithunnecessary information.
: 4. The  capability of the battery to deliver its design duty cycle to the dc bus?        Yes
125Vdcsysteminstrumentation, locallyprovided, isinfullcompliance withtherequirement of,IEEE308-1974andRegulatory Guide1.47.TheDCsystemgeneraltroublealarmsandspecificlocalindicators inconjunction withtheroutineoperatorsurveillance providepositiveassurance thattheClass1Edcpowersystemaremaintained inasteadystatereadytoperformtherequiredsafetyfunction.
: 5. Each  individual cell voltage is within acceptable limits during the service test?        Yes
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE43.0Following isthejustification foreachalarmandindication listedinGenericLetter91-06.3.1BatterDisconnect orCircuitBreaker0enAlarm:TheSusquehanna S.E.S.(SSES)125Vdcsubsystem utilizesfusesasthebatterydisconnect.
: d. At least every    60 months,   is capacity of  each  battery verified  by performance of    a  discharge test?    Yes
Thiscondition isdetectedbythebatterymonitor.Thebatterymonitorutilizesavariablethreshold circuittogetherwithtwocomparators (highandlow)todetectthelossofbatterycapability duetoanopencircuit(i.e.,anopenfuseordegradedcellcondition).
: e. At least annually, is the battery capacity verified by performance discharge test,     if the battery shows signs of degradation or has reached 85X of the expected service life?          Yes
Avariablethreshold circuitacceptsthebatterychargervoltageanddevelopstwothreshold voltagesforusewiththecomparators.
: 8. Does  this plant  have operational features such      that following loss of one  safety-related dc power supply or bus:
Whenthemonitored voltagesgoaboveorbelowthethresholds, thebatterymonitoroutputrelaycontactsinitiatealocalbatterymonitoralarmwhichisreflashed tothecontrolroomasa125Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.2BatterCharerDisconnect orCircuitBreaker0enBothInutACandOututDCAlarm3.2.1BatteryChargerACInputDisconnect orCircuitBreaker:SSESutilizesacircuitbreakerinthebatterychargerasadisconnect fortheacinputpowersupply.Anacpowerfailurealarmrelayisinstalled internaltothebatterychargertodetectlossofacinputpower.Thiscondition couldbecausedbyanopeninputcircuitbreakerorlossofthe480Vacpowersupplytothecharger.Theacpowerfailurealarmrelayinitiates abatterychargertroublealarmatthelocalreflasher panel,whichisreflashed tothecontrolroomasa125Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.
: a. Capability is maintained for ensuring continued          and adequate reactor cooling?      Yes
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEN PAGE53.2.2BatteryChargerDCOutputCircuitBreakerSSESutilizesacircuitbreakerinthebatterychargerasadisconnect forthedcoutputcircuit.Thecircuitbreakerisprovidedwithanauxiliary positionindicating switch.Aswitchcontactwhichisclosedwhenthecircuitbreakerisopenisusedtoinitiateabatterychargertroublealarmatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroombythelocalreflasher panel.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.3DCSstemGroundAlarmThe125Vdcsubsystem isungrounded andisprovidedwithagrounddetection circuit.Itconsistsofarelayhavingacentertappedcoil.Thecoilisconnected acrossthepositiveandnegativebusanditscenterpointisgrounded.
: b. Reactor coolant system      integrity and  isolation capability are maintained?      Yes
Thegrounddetection relaycoilisnotactuatedduringnormaloperation ofthe125Vdcsubsystem whenagroundisnotpresent.Agroundoneitherthepositiveornegativebusofthe125Vdcsubsystem causesone-halfoftherelaycoiltobeshortcircuited, thusproviding sufficient voltagetotheremaining relaycoilhalftopickuptherelay.Anormallyopencontactoftherelayclosesandinitiates a125Vdcsystem.groundalarmatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalreflasher panel.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.4DCBusUndervolta eAlarmThe125Vdcsubsystem isprovidedwithadcbusundervoltage relay.Therelayisconnected acrossthepositiveandnegativebusofthe125Vdcsubsystem.
: c. Operating procedures,     instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core cooling?            Yes
Therelayisnormallyenergized andsettodropoutatthespecified setpoint.
: 9. If the  answer to any    part of question 6,   7  or 8 is no, then provide your basis for not performing the maintenance, surveillance and test procedures described and/or the bases for not including the operational features cited.
A125Vdcbusundervoltage alarmatthelocalreflasher panelisinitiated aftertheundervoltage relaydropsout.
* See note below.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEN PAGE6Thelocalreflasher panel,inturn,reflashesthealarmtothecontrolroomannunciator asadcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.5DCBusOvervolta eAlarmThe125Vdcsubsystem isprovidedwithanovervoltage relay.Therelayislocatedinsidethebatterychargercabinet.Itisconnected acrossthepositiveandnegative125Vdcbusofthebatterychargerandsettopickupatthespecified setpoint.
Anormallyopencontactoftheovervoltage relay,whenclosed,initiates abatterychargertroublealarmatthelocalreflasher panelwhichinturnwillreflashadcsystemtroubletothecontrolroomannunciator.
Sincethebattery,thebatterychargerandthedcloadcenterareincloseproximity ofeachother,thebatterychargervoltageisrepresentative ofthe125Vdcbusvoltage.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.6BatterCharerFailureAlarmThe125Vdcsubsystem batterychargerisprovidedwithabatterychargerfailurerelay.Thisrelaywilldetectthelossofthechargeroutputcurrentwiththeinputandoutputcircuitbreakersclosed.Thiscondition isindicative ofabatterychargerfailureanditinitiates abatterychargertroublealarmatthelocalreflasher panelwhichinturnwillreflashadcsystemtroublealarm'tothecontrolroomannunciator.
Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.  


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE73.7BatterDischareAlarmThebatterycanonlydischarge, whenitsterminalvoltageislessthanthenominalopencircuitvoltage.Thisisindicative ofabatterychargerfailureorsystemcurrentinexcessofthechargercapability.
N SUS UEHANNA S.E.S.                 ATTACHMENT  I 24V DC SYSTEM Page 5
Abatterychargerfailurealarmisprovidedanditsoperation isdiscussed inSection3.6.'Whensystemcurrentexceedsbatterychargercapability, adcsystemundervoltage condition willoccur,andwillbedetectedbythedcbusundervoltage relay.(SeeSection3.4.)Chargerfailureandbusundervoltage initiatealarmsatthelocalreflasher panelwhichinturnwillreflashadcsystemtroublealarmtothecontrolroomannunciator.
          *Note:    For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance      of your individual plant examination for severe accident vulnerabilities (IPE). If you select this option,       you are required to:
Thisisconsistent withthegeneraldesignphilosophy asdiscussed inSection2.0.3.8BatterFloatChareCurrentIndication Undernormalconditions, thebatteryfloatchargecurrentisverysmallcomparedtobatterydischarge current.measurement ofthiscurrentrequiresaverysensitive ammeter.Shuntbypassesareemployedtoprotecttheammetermovementfromthemuchlargerbatterydischarge currentpossibleinthiscircuit.Theseshuntsmustbemanuallyremovedwhenreadingnormalsmallfloatchargecurrent.Thusthisreadingcannotbecontinuous andnoautomatic indication oralarmscanbegiven.Sincetheintentofindicating "BatteryFloatChargeCurrent"istodetermine thebatterycondition, themethodusedtoaccomplish thispurposeshouldnotbeimportant.
(1) So  state in response to these questions,     and (2) Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (Section
Thebusundervoltage, busground,batterymonitorandbatterychargerfailurealarms(previously described) providecontinuous monitoring todetectdegradation ofbatterycapability.
: 2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."
Thesealarmswillreflashthedcsystemtroublealarminthecontrolroom,andanoperatorisdispatched locallytodetermine thecauseofthecondition andinitiatecorrective action.
c:iwp51idocsi24VDCSYS.PCD (18) 10/24/91 9:20am
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE8Specificindication isprovidedonthelocalreflasher panel.Thisresponseisexactlywhatwouldbeachievedifanimproperstateofbatterycurrentwereindicated onanammeterinthecontrolroom.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.9BatterCircuitOututCurrentIndication.
Innormalcondition whenthebatterychargerissupplying the125Vdcpower,thebatterycircuit(batteryandthebatterycharger)outputcurrentisindicated byanammeterlocatedatthebatterycharger.Inthecondition ofabatterychargerfailure,thebatterysuppliesthedcpower.Inthiscondition thebatterycircuitoutputcurrentisindicated byanammeterlocatedatthedcloadcenter.Asindicated inSection3.8,theintentofindicating "batterycurrent"istodetermine thebatterycondition, andtherefore themethodusedtoaccomplish thispurposeshouldnotbeimportant.
3.10BatterDischareIndication Aspreviously discussed inSection3.7,abatterydischarge willoccurasaresultofabatterychargerfailureorsystemcurrentinexcesstobatterychargercapability.
Sincetheseconditions areautomatically alarmedinthecontrolroom(viathesystemtroublealarm),anoperatorwillbedispatched locallytodetermine thecauseofthecondition andinitiatecorrective action.Thisresponseisexactlywhatwouldbeachievedifbatterydischarge currentwasindicated onanammeterinthecontrolroom.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEM PAGE93.11BusVoltaeIndication Thebattery,thebatterychargerandthedcloadcenterof125Vdcsubsystem arelocatedincloseproximity ofeachother.Thebatterychargerandthedcloadcenterareeachprovidedwithavoltmeter.
Thepurposeofabusvoltmeter atthecontrolroomwouldbetoenabletheoperatortodispatchsomeonetotakecorrective actionlocallytocorrectabnormalbusvoltage.AtSSESthebusundervoltage ismonitored directlyandthebusovervoltage conditions aremonitored atthebatterychargeroutput.Thebusundervoltage andthebatterychargeroutputovervoltage conditions areannunciated as125Vdcsystemlowvoltageorbatterychargertroubleatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalreflasher panel.Thisdesignautomatically alertsthecontrolroomoperatortounusualvoltageconditions withoutunnecessarily requiring hisperiodicattention andanalysis.
Asaresult,125Vdcbusvoltageindication isnotprovidedinthecontrolroomandhasbeenprovidedonthefrontoftheloadcenterwhereitprovidesusefulinformation duringsurveillance andmaintenance activities.
Avoltmeter islocatedonthefrontofthebatterychargerpanel.Withthechargeroutputcircuitbreakerclosed,thechargeroutputandthebusvoltagesareessentially thesameduetothecloseproximity ofthechargertotheloadcenter.Allabnormalvoltageconditions ofthebatterychargerareannunciated atthelocalreflasher panelwhichisreflashed tothecontrolroomasadcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.12,AlarmResonseProcedure Controlroomalarmresponseprocedures fora125Vdcsystemtroublealarmdirecttheoperatortorespondtothelocalreflasher paneltodetermine thecondition whichcausedthealarm.


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEH PAGE10Localalarmresponseprocedures forthereflasher panelareprovidedtodirecttheoperatortodetermine thecauseofthecondition andtoinitiatecorrective action.3.13Indication ofBassedandInoerableStatusofCircuitBreakersorOtherOisconnectin DevicesAlthoughindication ofbypassedandinoperable statusofcircuitbreakersorotherdisconnecting devicesisnotprovidedasapartoftheBypassIndication System,the125VdcSystemTroubleAlarminthecontrolroomisinitiated forthefollowing condition (whicharedisconnecting devicesinthesystem):Hainbatteryfuseopen.Batterychargeracinputcircuitbreakeropen.Batterychargerdcoutputcircuitbreakeropenor125Vdcloadcenterinputbreakeropen.125Vdcloadcenterfeederbreakerto125Vdcdistribution panelsopen.r(Theundervoltage relayatthedistribution panelsinitiates thedistribution panellowvoltagealarmatthelocalreflasher panelwhichisreflashed tothecontrolroom125Vdcsystemtroublealarm.)
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.125VDCSUBSYSTEN PAGE11TABLE1125VDCSstemReflashPanelAlarms1L6101.125VDCSystemLowVoltage2.125VDCSystemGround3.BatteryMonitor(indicates batterydegradation oropenbatteryfuses)4.BatteryChargerTroubleindicates (1)ACpowerfailure,(2)DCoutputbreakeropen,(3)batterychargerfailure,or(4)busovervoltage 5.125VDCDistribution Panel1D614LowVoltage6.125VDCDistribution Panel1D615LowVoltageC:XWP51XDDCSX125VDCSS.PGD (18)10/24/919:00am CHANNELA125VDCLOCALREHASHPANELWITHINDICATION 1L610MULTIPLEAIARMINPUTSFROM125VDCCHANNELAPOWERSYSTEMPERTABK1DCSYSTEMALARMINPUTSFROMOTHERREFLASHPANELS(SIMILARTOABOVE)CONTROLROOMPANEL1C651ANNUNCIATOR 125VDCSYSTEMTROUBLE1L610FIGURE1 INDICATOR UGHTREFLASHER PANELPOWERFAILURENAMEPlATE 125VDCSYSTEMLOWVOLTAGEBATTERYCHARGERSPARE125VDCSYSTEMGROUND125VDCDISTPANEL10614LOWVOLTAGESPAREBATTERYMONITOR125VDCPANEL1D615LOWVOLTAGESPARE125VDCSYSTEMLOCALREFlASHER PANELOYPfCADFIGURE2 59BATTERYCHARGERAMMETERVOLTMETER BATTERYBANKFUSEBATTERYMONITORAMMETERQVOLTMETER 27SYSTEMGROUNDINDICATORS DCLOADCENTERLOADSLOADSSEETABLE1FORALARMS125VDCSYSTEMQYPICADFIGURE3 SUSUEHANNAS.E.S.250DCSYSTEMATTACHMENT IIIPage1ENCLOSURE 1Thefollowing information isapplicable toeitherUnit1orUnit2atSusquehanna SES.1.UnitSusuehannaS.E.S.Unit-1or2250VDC2.,Thenumberofindependent redundant divisions ofClass1Eorsafety-related dcpowerforthisplantis~2two.(IncludeanyseparateClasslEorsafety-related dc,suchasanydcdedicated to,thedieselgenerators.)
24V  DC SUBSYSTEM PAGE  1 REMARK    1:
b.Thenumberoffunctional safety-related divisions ofdcpowernecessary toattainsafeshutdownforthisunitis~1one3.Doesthecontrolroomatthisunithavethefollowing
1.0    The  following indications  and alarms    for the  24V dc  class 1E subsystem are provided. Justification for this design has been previously provided in PLA-959 to the NRC dated 11/6/81, regarding Control Room monitoring of Class lE dc power systems.
: separate, independently annunciated alarmsandindications foreachdivisionofdcpower?a.Alarms1.Batterydisconnect orcircuitbreakeropen?No2.Batterychargerdisconnect orcircuitbreakeropen(bothinputacandoutputdc)?No3.dcsystemground?No4.dcbusundervoltage?
Each 24V dc subsystem  consists of two    24 volt battery  banks connected  in series with a common ground bus connected to the common (center) point of the two battery banks. The ground bus is solidly grounded to the station ground grid. Each 24 volt battery bank is designated as either the positive or negative bus as referenced to ground. The alarms/indications in the following table and discussion are typical for each positive and negative bus.
No5.dcbusovervoltage?
                                          , Location Alarm or Indication                    Local          Control  Room              Notes Bus  Undervoltage Alarm                                                          1,2 Battery Monitor Alarm                                                            1,2,4 Battery Charger Trouble Alarm                                                    1,2,5 Bus  Overvoltage Alarm                                                            1,2 Bus  Voltmeter Battery Charger Ammeter                                                          3 Battery Charger Voltmeter DC  System Trouble Alarm NOTES:
No6.Batterychargerfailure?No SUSUEHANNAS.E.S.250DCSYSTENATTACHNENT III7.Batterydischarge?
: 1. See  Table 1 and Figure  2 for specific local    alarm indication.
NoPage2b.Indications 1.Batteryfloatchargecurrent?No2.Batterycircuitoutputcurrent?No3.Batterydischarge?
No4.Busvoltage?Noc.Doestheunithavewrittenprocedures forresponsetotheabovealarmsandindications?
NoDoesthisunithaveindication ofbypassedandinoperable statusofcircuitbreakersorotherdevicesthatcanbeusedtodisconnect thebatteryandbatterychargerfromitsdcbusandthebatterychargerfromitsacpowersourceduringmaintenance ortesting?NoSeeremark¹15.Iftheanswertoanypartofquestion3or4isno,thenprovideinformation justifying theexistingdesignfeaturesofthefacility's safety-related dcsystems.*Seenotebelow.SeeRemark¹16.(1)Haveyouconducted areviewofmaintenance andtestingactivities tominimizethepotential forhumanerrorcausingmorethanonedcdivisiontobeunavai1ablet
~esand(2)doplantprocedures prohibitmaintenance ortestingonredundant dcdivisions atthesametime?~es(Seeresponsefromthesite)IfthefacilityTechnical Specifications haveprovisions equivalent tothosefoundintheWestinghouse andCombustion Engineering StandardTechnical Specifications formaintenance andsurveillance, thenquestion7maybeskippedandastatement tothateffectmaybeinsertedhere.
SUSUEHANNAS.E.S.250OCSYSTENATTACHMENT IIIPage37.Aremaintenance, surveillance andtestprocedures regarding stationbatteries conducted routinely atthisplant?Specifically:
a.Atleastonceper7daysarethefollowing verifiedtobewithinacceptable limits:1.Pilotcellelectrolyte level?Yes2.Specifygravityorchargingcurrent?Yes3.Floatvoltage?Yes4.Totalbusvoltageonfloatcharge?Yes5.Physicalcondition ofallcells?Yesb.Atleastonceper92days,orwithin7daysafterabatterydischarge; overcharge, orifthepilotcellreadings, areoutsidethe7-daysurveillance requirements arethefollowing verifiedtobewithinacceptable limits:l.Electrolyte levelofeachcell?Yes2.Theaveragespecificgravityofallcells?Yes3.Thespecificgravityofeachcell?Yes4.Theaverageelectrolyte temperature ofarepresentative numberofcells?Yes5.Thefloatvoltageofeachcell?Yes6.Visuallyinspectormeasureresistance ofterminals andconnectors (including theconnectors atthedcbus)?Yes SUSUEHANNAS.E.S.250DCSYSTEMATTACHMENT IIIc.Atleastevery18monthsarethefollowing verified:
Page41.Lowresistance ofeachconnection (bytest)?Yes2.Physicalcondition ofthebattery?Yes3.Batterychargercapability todeliverratedampereoutputtothedcbus?Yes4.Thecapability ofthebatterytodeliveritsdesigndutycycletothedcbus?Yes5.Eachindividual cellvoltageiswithinacceptable limitsduringtheservicetest?Yesd.Atleastevery60months,iscapacityofeachbatteryverifiedbyperformance ofadischarge test?Yese.Atleastannually, isthebatterycapacityverifiedbyperformance discharge test,ifthebatteryshowssignsofdegradation orhasreached85Koftheexpectedservicelife?Yes8.Doesthisplanthaveoperational featuressuchthatfollowing lossofonesafety-related dcpowersupplyorbus:a.Capability ismaintained forensuringcontinued andadequatereactorcooling?Yesb.Reactorcoolantsystemintegrity andisolation capability aremaintained?
Yesc.Operating procedures, instrumentation (including indicators andannunciators),
andcontrolfunctions areadequatetoinitiatesystemsasrequiredtomaintainadequatecorecooling?Yes9.Iftheanswertoanypartofquestion6,7or8isno,thenprovideyourbasisfornotperforming themaintenance, surveillance andtest SUSUEHANNAS.E.S.250DCSYSTEMATTACHNENT IIIPage5procedures described and/orthebasesfornotincluding theoperational featurescited.*Seenotebelow.*Note:Forquestions involving supporting typeinformation (question numbers5and9)insteadofdeveloping andsupplying theinformation inresponsetothisletter,youmaycommittofurtherevaluatetheneedforsuchprovisions duringtheperformance ofyourindividual plantexamination forsevereaccidentvulnerabilities (IPE).Ifyouselectthisoption,youarerequiredto:(1)Sostateinresponsetothesequestions, and(2)Committoexplicitly addressquestions 5and9inyourIPEsubmittal pertheguidelines outlinedinNUREG-1335 (Section2.1.6,Subitem7),"Individual PlantExamination:
Submittal Guidance."
c:~sp51~docsQR106001.PGD (18)10/24/919:06am RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE1REMARK1:1.0Thefollowing indications andalarmsforthe250VdcclasslEsubsystem areprovided.
Justification forthisdesignhasbeenpreviously providedinPLA-959totheNRCdated11/6/81,regarding ControlRoommonitoring ofClass1Edcpowersystems.AlarmorIndication BusUndervoltage AlarmBusGroundAlarmBatteryMonitorAlarmBatteryChargerTroubleAlarmBusAmmeterBusVoltmeter BatteryChargerAmmeterBatteryChargerVoltmeter DCSystemTroubleAlarmLocalLocationControlRoomNotes1,21,21,2,41,2,5NOTES:1.SeeTable1andFigure2forspecificlocalalarmindication.
2.Thesearelocallyindicated andactuatedcsubsystem troublealarm,seeTable1andFigurel.3.Metersareprovidedlocally.SeeFigure3.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE24.Batterymonitorcomparesbatterycenterpointvoltagewithhighandlowthreshold reference pointsofthehighandlowvoltagecomparators.
Thedeg}adedcellconditions (suchasashortedcell)oranopencircuitcondition (suchasanopenfuse)aredetectedbythebatterymonitor.5.Batterychargertroublealarmindication isprovidedforbatterychargerACpowerfailure,DCoutputbreakeropen,batterychargerfailurealarmoperation, andbusovervoltage.
6.Oneannunciator windowforeach250Vdcsubsystem isprovided.


==2.0 Themonitoring==
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA S.E.S.
schemeprovidedforthedcpowersubsystem isbasedonthedegreeofcontrolprovidedtothecontrolroomoperator.
24V DC SUBSYSTEM PAGE 2
Sincethedcpowersystemequipment cannotberemotelycontrolled, asingledcsystemtroubleannunciator windowforeachsubsystem isprovidedinthecontrolroom,consistent withthesystemlevelalarmcriteriasetforthinSectionBofR.G.1.47.TheSSESdesignisbasedonthegeneralcriteriathat,iftheoperatorcanperformsomecorrective actioninthecontrolroominresponsetoaspecificinput,thatinformation isspecifically provided.
: 2. These are locally indicated and actuate dc subsystem      trouble alarm, see Table 1 and Figure 1.
Thedcpowersystemequipment cannotbecontrolled fromthecontrolroom.Annunciating specificinputsfromthe250Vdcsysteminthecontrolroomdoesnotenhancethecontrolroomoperators's abilitytodealwiththesituation anditwouldnotbeconsistent withSSESalarmdesignphilosophy.
: 3. Heters are provided   locally. See Figure 3.
However,iftheonlyresponserequiredistodispatchanoperator, toanarearemovedfromthecontrolroom,thentheonlyinformation requiredinthecontrolroomisgeneralinformation withonlythelevelofspecificity requiredtodirectthatoperatortotheproperlocation.
: 4. Battery monitor 'compares battery center point voltage with high and low threshold reference points of the high and low voltage comparators. The degraded cell conditions (such as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.
Thismethodisfasterandmorereliablesinceabnormalconditions areautomatically alarmed.Furthermore, thisapproachisconsistent withthehumanfactorsengineering goaltonotoverburdentheoperatorwithunnecessary information.
: 5. Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation.
250Vdcsysteminstrumentation, locallyprovided, isinfullcompliance withtherequirement ofIEEE308-1974andRegulatory Guide1.47.
: 6. One  annunciator window for each 24V dc subsystem is provided.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE3TheDCsystemgeneraltroublealarmsandspecificlocalindicators inconjunction withtheroutineoperatorsurveillance providepositiveassurance thattheClasslEdcpowersystemaremaintained inasteadystatereadytoperformtherequiredsafetyfunction.
(Includes inputs from either the positive or negative bus).
2.0 The  monitoring  scheme  provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section 8 of R.G. 1.47.
The SSES design    is based on the general criteria that, if the operator can perform some    corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.
Annunciating specific inputs from the 24V dc system in the control room does not enhance the control room operators's ability to deal with the situation and  it  would not be consistent with SSES alarm design philosophy. However,      if the only response required is to dispatch an operator to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity required to direct that operator to the proper location. This method is faster and more reliable since abnormal


==3.0 Following==
RESPONSE TO GENERIC LETTER      91-06      SUS UEHANNA  S.E.S.
isthejustification foreachalarmandindication listedinGenericLetter91-06.3.1BatterDisconnect orCircuitBreaker0enAlarm:TheSusquehanna S.E.S.(SSES)250Vdcsubsystem utilizesfusesasthebatterydisconnect.
24V DC SUBSYSTEM PAGE 3 conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 24V dc system instrumentation, locally provided, is in full compliance with the requirement of IEEE 308-1974 and Regulatory Guide 1.47.
Thiscondition isdetectedbythebatterymonitor.Thebatterymonitorutilizesavariablethreshold circuittogetherwithtwocomparators (highandlow)todetectthelossofbatterycapability duetoanopencircuit(i.e.,anopenfuseordegradedcellcondition).
The  DC  system general    trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class lE dc power system are maintained in a steady state ready to perform-the required safety function.
Avariablethreshold circuitacceptsthebatterychargervoltageanddevelopstwothreshold voltagesforusewiththecomparators.
3.0 Following is the justification for each alarm and indication listed in Generic Letter 91-06.
Whenthemonitored voltagesgoaboveorbelowthethresholds, thebatterymonitoroutputrelaycontactsinitiatealocalbatterymonitoralarmwhichisreflashed tothecontrolroomasa250Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.2BatterCharerDisconnect orCircuitBreaker0enBothInutACandOututDCAlarm3.2.1BatteryChargerACInputDisconnect orCircuitBreaker:SSESutilizesacircuitbreakerinthebatterychargerasadisconnect fortheacinputpowersupply.Anacpowerfailurealarmrelayisinstalled internaltothebatterychargertodetectlossofacinputpower.Thiscondition couldbecausedbyanopeninputcircuitbreakerorlossofthe480Vacpowersupplytothecharger.Theacpowerfailurealarmrelayinitiates abatterychargertroublealarmatthelocalreflasher panel,whichisreflashed to
: 3. 1    Batter    Disconnect or  Circuit Breaker  0 en Alarm:
The Susquehanna    S.E.S. (SSES) 24V dc subsystem  utilizes  fuses as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or degraded cell condition). A variable threshold circuit accepts the battery charger voltage and develops two threshold voltages for use with the comparators. When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor alarm which is reflashed to the control room as a 24V dc system trouble alarm.
This is consistent with the general design philosophy discussed in Section 2.0.
3.2    Batter    Char er Disconnect or    Circuit Breaker  0 en  Both In ut  AC and Out  ut DC  Alarm 3.2. 1 Battery Charger    AC Input Disconnect or Circuit Breaker:
SSES  utilizes a circuit breaker in the battery charger      as a disconnect for the ac input power supply. An ac power


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE4thecontrolroomasa250Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed insection2.0.3.2.2BatteryChargerDCOutputCircuitBreakerSSESutilizesacircuitbreakerinthebatterychargerasadisconnect forthedcoutputcircuit.Thecircuitbreakerisprovidedwithanauxiliary positionindicating switch.Aswitchcontactwhichisclosedwhenthecircuitbreakerisopenisusedtoinitiateabatterychargertroublealarmatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroombythelocalreflasher panel.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.3DCSstemGroundAlarmThe250Vdcsubsystem isungrounded andisprovidedwithagrounddetection circuit.Itconsistsofarelayhavingacentertappedcoil.Thecoilisconnected acrossthepositiveandnegativebusanditscenterpointisgrounded.
RESPONSE TO GENERIC. LETTER      91-06    SUS UEHANNA S.E.S.
Thegrounddetection relaycoilisnotactuatedduringnormaloperation ofthe250Vdcsubsystem whenagroundisnotpresent.Agroundoneitherthepositiveornegativebusofthe250Vdcsubsystem causesone-halfoftherelaycoiltobeshortcircuited, thusproviding sufficient voltagetotheremaining relaycoilhalftopickuptherelay.Anormallyopencontactoftherelayclosesandinitiates a250Vdcsystemgroundalarmatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalreflasher panel.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.,3.4DCBusUndervolta eAlarmThe250Vdcsubsystem isprovidedwithadcbusundervoltage relay.Therelayisconnected acrossthepositiveandnegative RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE5busofthe250Vdcsubsystem.
24V  DC SUBSYSTEN PAGE 4 failure  alarm relay    is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 120V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local reflasher panel, which is reflashed to the control room as a 24V dc system trouble alarm. This is consistent with the general design philosophy discussed in section 2.0.
Therelayisnormallyenergized andsettodropoutatthespecified setpoint.
3.2.2 Battery Charger      DC  Output  Circuit Breaker SSES  utilizes a circuit breaker in the battery charger as    a disconnect for the dc output circuit. The circuit breaker is provided with    an  auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room by the local reflasher panel.
A250Vdcbusundervoltage alarmatthelocalreflasher panelisinitiated aftertheundervoltage relaydropsout.Thelocalreflasher panel,inturn,reflashes thealarmtothecontrolroomannunciator asadcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.5DCBusOvervolta eAlarmThe250Vdcsubsystem isprovidedwithanovervoltage relay.Therelayislocatedinsidethebatterychargercabinet.Itisconnected acrossthepositiveandnegative250Vdcbusofthebatterychargerandsettopickupatthespecified setpoint.
This is consistent with the general design philosophy discussed   in Section 2.0.
Anormallyopencontactoftheovervoltage relay,whenclosed,initiates abatterychargertroublealarmatthelocalreflasher panelwhichinturnwillreflashadcsystemtroubletothecontrolroomannunciator.
3.3 DC S   stem Ground Alarm The 24V dc subsystem      is a solidly grounded system. Therefore, a system ground alarm    is not required. A second ground on either the positive or negative bus will cause protective devices in the circuit to    operate. This condition will be detected at the local reflasher panel by either the battery monitor alarm (for battery fuse open) or the battery charger trouble alarm (for battery charger DC output breaker open).
Sincethebattery,'he batterychargerand,thedcloadcenterareincloseproximity ofeachother,thebatterychargervoltageisrepresentative of250Vdcbusvoltage.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.6BatterCharerFailureAlarmThe250Vdcsubsystem batterychargerisprovidedwithabatterychargerfailurerelay.Thisrelaywilldetectthelossofthechargeroutputcurrentwiththeinputandoutputcircuitbreakersclosed.Thiscondition isindicative ofabatterychargerfailureanditinitiates abatterychargertroublealarmatthelocalreflasher panelwhichinturnwillreflashadcsystemtroublealarmtothecontrolroomannunciator.
In either case, the local reflasher panel will reflash a 24V dc system trouble alarm to the control room annunciator.         This is consistent with the general design philosophy discussed in Section'.0.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE6Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.7BatterDischareAlarmThebatterycanonlydischarge whenitsterminalvoltageislessthanthenominalopen.circuitvoltage.Thisisindicative ofabatterychargerfailureorsystemcurrentinexcessofthe,chargercapability.
Abatterychargerfailurealarmisprovidedanditsoperation isdiscussed inSection3.6.Whensystemcurrentexceedsbatterycharger'apability, adcsystemundervoltage condition willoccur,andwillbedetectedbythedcbusundervoltage relay.(SeeSection3.4)Chargerfailureandbusundervoltage initiatealarmsatthelocalreflasher panelwhichinturnwillreflashadcsystemtroublealarmtothecontrolroomannunciator.
Thisisconsistent withthegeneraldesignphilosophy asdiscussed inSection2.0.3.8BatterFloatChareCurrentIndication Undernormalconditions, thebatteryfloatchargecurrentisverysmallcomparedtobatterydischarge current.Measurement ofthiscurrentrequiresaverysensitive ammeter.Shuntbypassesareemployedtoprotecttheammetermovementfromthemuchlargerbatterydischarge currentpossibleinthiscircuit.Theseshuntsmustbemanuallyremovedwhenreadingnormalsmallfloatchargecurrent.Thusthisreadingcannotbecontinuous andnoautomatic indication oralarmscanbegiven.Sincetheintentofindicating "BatteryFloatChargeCurrent"istodetermine thebatterycondition, themethodusedtoaccomplish thispurposeshouldnotbeimportant.
Thebusundervoltage, busground,batterymonitorandbatterychargerfailurealarms(previously described) providecontinuous monitoring todetectdegradation ofbatterycapability.
Thesealarmswillreflashthedcsystemtroublealarminthecontrol RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE7room,andanoperatorisdispatched locallytode'termine thecauseofthecondition andinitiatecorrective action.Specificindication isprovidedonthelocalreflasher panel.Thisresponseisexactlywhatwouldbeachievedifanimproperstateofbatterycurrentwereindicated onanammeterinthecontrolroom.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.9BatterCircuitOututCurrentIndication Innormalcondition whenthebatterychargerissupplying the250Vdcpower,thebatterycircuit(batteryandthebatterycharger)outputcurrentisindicated byanammeterlocatedatthebatterycharger.Inthecondition ofabatterychargerfailure,thebatterysuppliesthedcpower.Inthiscondition, thebatterycircuitoutputcurrentisindicated byanammeterlocatedatthedcloadcenter.Asindicated inSection3.8,theintentofindicating "batterycurrent"istodetermine thebatterycondition, andtherefore themethodusedtoaccomplish thispurposeshouldnotbeimportant.
3.10BatterOischareIndication Aspreviously discussed inSection3.7,abatterydischarge willoccurasaresultofabatterychargerfailureorsystemcurrentinexcesstobatterychargercapability.
Sincetheseconditions areautomatically alarmedinthecontrolroom(viathesystemtroublealarm),anoperatorwillbedispatched locallytodetermine thecauseofthecondition andinitiatecorrective action.Thisresponseisexactlywhatwouldbeachievedifbatterydischarge currentwasindicated onanammeterinthe RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE8controlroom.3.11BusVoltaeIndication Thebattery,thebatterychargerandthedcloadcenterof250Vdcsubsystem arelocatedincloseproximity ofeachother.Thebatterychargerandthedcloadcenterareeachprovidedwithavoltmeter.
Thepurposeofabusvoltmeter atthecontrolroomwouldbetoenabletheoperatortodispatchsomeonetotakecorrective actionlocallytocorrectabnormalbusvoltage.AtSSESthebusundervoltage ismonitored directlyand'thebusovervoltage conditions aremonitored atthebatterychargeroutput.Thebusundervoltage andthebatterychargeroutputovervoltage
.conditions areannunciated as250Vdcsystemlowvoltageorbatterychargertroubleatthelocalreflasher panel.Adcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalreflasher panel.Thisdesignautomatically alertsthecontrolroomoperatortounusualvoltageconditions withoutunnecessarily requiring hisperiodicattention andanalysis.
Asaresult,250Vdcbusvoltageindication isnotprovidedinthecontrolroomandhasbeenprovidedonthefrontoftheloadcenterwhereitprovidesusefulinformation duringsurveillance andmaintenance activities.
Avoltmeter islocatedonthefrontofthebatterychargerpanel.Withthechargeroutputcircuitbreakerclosed,thechargeroutputandthebusvoltagesareessentially thesameduetothecloseproximity ofthechargertotheloadcenter.Allabnormalvoltageconditions ofthebatterychargerareannunciated atthelocalreflasher panelwhichisreflashed tothecontrolroomasadcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE93.12AlarmResonseProcedure Controlroomalarmresponseprocedures fora250Vdcsystemtroublealarmdirecttheoperatortorespondtothelocalreflasher paneltodetermine thecondition whichcausedthealarm.Localalarmresponseprocedures forthereflasher panelareprovidedtodirecttheoperatortodetermine thecauseofthecondition andtoinitiatecorrective action.3.13Indication ofBassedandInoerableStatusofCircuitBreakersorOtheDisconnectin DevicesAlthoughindication ofbypassedandinoperable statusofcircuitbreaker's orotherdisconnecting devicesisnotprovidedasapartoftheBypassIndication System,the250VdcSystemTroubleAlarminthecontrolroomisinitiated forthefollowing condition (whicharedisconnecting devicesinthesystem):Mainbatteryfuseopen.Batterychargeracinputcircuitbreakeropen.Batterychargerdcoutputcircuitbreakeropen,or250Vdcloadcenterbreakeropen.250Vdcloadcenterfeederbreakerto250Vdcmotorcontrolcentersopen.(Eachoftheloadcenterfeederbreakerstothe250VdcMCC'sisprovidedwithanauxiliary positionindicating switchwhichinitiates analarmonthelocalreflasher panelwhenthecircuitbreakerisopen.A250Vdcsystemtroublealarmisreflashed tothecontrolroombythelocalreflasher panel.)


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.250VDCSUBSYSTEM PAGE10TABLE1250VDCSstemReflashPanelIndicators Ticall.250VDCSystemLowVoltage2.250VDCSystemGround3.BatteryMonitor(indicates batterydegradation oropenbatteryfuses)4.BatteryChargerTroubleindicates (1)ACpowerfailure,(2)DCoutputbreakeropen,(3)batterychargerfailure,or(4)busovervoltage (Division Ihas2chargers, DivisionIIhas1charger)5.LoadCenterIncomingBreakersTrip6.RCIC&Isolation ValveControlCenter1D254trouble7.TurbineBldg.ControlCenter1D155trouble8.ComputerUPSSupplyBreakerTripC:XMP51%00CSX250VDCSS.PGD (18)10/24/919:08am CHANNELA250VDCLOCALRERASHPANELWITHINDICATION 1L650MULTIPLEALARMINPUISFROM250VDCCHANNELAPOWERSYStEMPERTABLE1DCSYSTEMALARMINPUTSFROMOTHERREFLASHPANELS(SIMILARTOABOVE)CONTROLROOMPANEL1C651ANNUNCIATOR 250VDCSYSTEMTROUBLE1L650FIGURE1 INDICATOR UGHTREFLASHER PANELPOWERFAILURESYSTEMLOWVOLTAGEBATTERYCHAIWERATROUBLERCIC&ISOVLVSCONTROLCENTER1D254TROUBLE250VDCSYSTEMGROUNDBATTERYCHARGERBTROUBLETURBBU)GCONTROLCENTER1D155TROUBLEBATTERYMONITORLCINCOMINGBKR7245212/22 TRIPCOMPUTERUPSSUPPLYBKRTRIP250VDCSYStEMLOCALREFLASHER PANELOYPICAOFIGURE2 59BATTERYCHARGERAMMETERVOLTMETER BATTERYBANKFUSEBATTERYMONITORAMMETERQVOLTMETER 27SYSTEMGROUNDINDICATORS DCLOADCENTERLOADSLOADSSEETABLE1FORALARMS250VDCSYSTEMOYPICAQFIGURE3
RESPONSE TO GENERIC LETTER      91-06    SUS UEHANNA S.E.S.
24V DC SUBSYSTEM PAGE 5 3.4 DC  Bus Undervolta  e  Alarm The 24V dc subsystem      is provided with positive and negative dc bus undervoltage relays. Each relay is connected across the system buses (positive bus to ground, negative bus to ground). The relays are normally energized and, set to drop out at the specified setpoint. A positive bus or negative bus low voltage alarm at the local reflasher panel is initiated after the undervoltage relay drops out.
The  local reflasher panel, in turn, reflashes the alarm to the control room annunciator as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
3.5 DC  Bus Overvolta  e  Alarm The 24V dc subsystems      are provided with overvoltage relays. The relays are located inside the 24V dc distribution panels. Each relay is connected across the system buses (positive bus to ground, negative bus to ground) and set to pick up at the specified setpoint. A normally open contact of the over'voltage relay, when closed, initiates a positive bus or negative bus high voltage alarm at the local reflasher panel which in turn will reflash a dc system trouble to the control room annunciator. This is consistent with the general design philosophy discussed in Section 2.0.
3.6 Batter    Char er  Failure Alarm Each 24V dc subsystem      battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.
This condition is indicative of a battery charger failure and      it initiates a battery charger trouble alarm at the local reflasher


SUSUEHANNAS.E.S.UNIT-1ANDUNIT2DG-E125VDCSYSTEMATTACHMENT IVPage1ENCLOSURE 1Thefollowing information isapplicable toeitherUnitatSusquehanna SES.UnitSusuehannaS.E.S.CommontoUnit1&2DG-E125VDCSYSTEM'a~Thenumberofindependent redundant divisions ofClass1Eorsafety-related dcpowerforthisplantisseeRemarkl.(IncludeanyseparateClass1Eorsafety-related dc,suchasanydcdedicated tothedieselgenerators.)
RESPONSE TO GENERIC LETTER      91-06      SUS UEHANNA  S.E.S.
b.Thenumberoffunctional safety-related divisions ofdcpowernecessary toattainsafeshutdownforthisunitisseeRemark1.3.Doesthecontrolroomatthisunithavethefollowing
24V DC SUBSYSTEM PAGE 6 panel which in turn    will reflash  a dc system  trouble alarm to the control  room  annunciator.
: separate, independently annunciated alarmsandindications foreachdivisionofdcpower?a.alarms1.Batterydisconnect orcircuitbreakeropen?No2.Batterychargerdisconnect orcircuitbreakeropen(bothinputacandoutputdc)?No3.dcsystemground?No4.dcbusundervoltage?
This is consistent with the general design philosophy discussed          in Section 2.0.
No5.dcbusovervoltage?
3.7  Batter  Dischar  e  Alarm The  battery  can only discharge    when  its  .terminal voltage is less than the nominal open circuit voltage. This is indicative of a battery charger failure or system current in excess of the charger capability. A battery charger failure alarm is provided and its operation is discussed in Section 3.6. When system current exceeds battery charger capability, a dc system undervoltage condition will occur, and will be detected by the dc bus undervoltage relay (see Section 3.4). Charger failure and bus undervoltage initiate alarms at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.
No6.Batterychargerfailure?No7.Batterydischarge?
3.8  Batter    Float Char  e  Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. Measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit. These shunts must be manually removed when reading normal small float current.
No 0
Thus this reading cannot be continuous and no automatic indication or alarms can be given.
SUSUEHANNAS.E.S.UNIT-1ANDUNIT2DG-E125VDCSYSTEMb.Indications ATTACHMENT IVPage21.Batteryfloatchargecurrent?No2.Batterycircuitoutputcurrent?No3.Batterydischarge?
Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.
No4.Busvoltage?Noc.Doestheunithavewrittenprocedures forresponsetotheabovealarmsandindications?
The bus  undervoltage,   battery monitor    and  battery charger failure
NoDoesthisunithaveindication ofbypassedandinoperable statusofcircuitbreakersorotherdevicesthatcanbeusedtodisconnect thebatteryandbatterychargerfromitsdcbusandthebatterychargerfromitsacpowersourceduringmaintenance ortesting?NoSeeRemark25.Iftheanswertoanypartofquestion3or4isno,thenprovideinformation justifying theexistingdesignfeaturesofthefacility's safety-related dcsystems.*Seenotebelow.SeeRemark26.(I)Haveyouconducted areviewofmaintenance andtestingactivities tominimizethepotential forhumanerrorcausingmorethanonedcdivisiontobeunavailablet
~esand(2)doplantprocedures prohibitmaintenance ortestingonredundant dcdivisions atthesamatime?~esIfthefacilityTechnical Specifications haveprovisions equivalent tothosefoundintheWestinghouse andCombustion Engineering StandardTechnical Specifications formaintenance andsurveillance, thenquestion7maybeskippedandastatement tothateffectmaybeinsertedhere.


SUSUEHANNAS.E.S.UNIT-1ANDUNIT2DG-E125VDCSYSTEMATTACHMENT IVPage37.Aremaintenance, surveillance andtestprocedures.
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA S.E.S.
regarding stationbatteries conducted routinely atthisplant?'pecifically:
24V DC SUBSYSTEM PAGE 7 alarms (previously described)     provide continuous monitoring to detect degradation of battery capability. These alarms will reflash the dc system trouble alarm in the control room, and       an operator is dispatched locally to determine the cause of the condition and initiate corrective action.
a.Atleast,onceper7daysarethefollowing verifiedtobewithinacceptable limits:1.Pilotcellelectrolyte level?Yes2.Specifygravityorchargingcurrent?Yes3.Floatvoltage?Yes4.Totalbusvoltageonfloatcharge?Yes5.Physicalcondition ofallcells?Yesb.Atleastonceper92days,orwithin7daysafterabatterydischarge, overcharge, orifthepilotcellreadingsareoutsidethe7-daysurveillance requirements arethefollowing verifiedtobewithinacceptable limits:l.Electrolyte levelofeachcell?Yes2.Theaveragespecificgravityofallcells?Yes3.Thespecificgravityofeachcell?Yes4.Theaverageelectrolyte temperature ofarepresentative numberofcells?Yes5.Thefloatvoltageofeachcell?Yes6.Visuallyinspectormeasureresistance ofterminals andconnectors (including theconnectors atthedcbus)?Yes SUSUEHANNAS.E.S.UNIT-1ANDUNIT2DG-'E125VDCSYSTEMc.Atleastevery18monthsarethefollowing verified:
Specific indication is provided on the local reflasher panel.
ATTACHMENT IVPage41.Lowresistance ofeachconnection (bytest)?Yes2.Physicalcondition ofthebattery?Yes3.Batterychargercapability todeliverratedampereoutputtothedcbus?YestThecapability ofthebattery-todeliveritsdesigndutycycletothedcbus?Yes5.Eachindividual cellvoltageiswithinacceptable limitsduringtheservicetest?Yesd.Atleastevery60months,iscapacityofeachbatteryverifiedbyperformance ofadischarge test?Yese.Atleastannually, isthebatterycapacityverifiedbyperformance discharge test,ifthebatteryshowssignsofdegradation orhasreached85Xoftheexpectedservicelife?Yes8.Doesthisplanthaveoperational featuressuchthatfollowing lossofonesafety-related dcpowersupplyorbus:a.Capability ismaintained forensuringcontinued andadequatereactorcooling?Yesb.Reactorcoolantsystemintegrity andisolation capability aremaintained?
This response is exactly what would 'be achieved      if an improper state of battery    current  were indicated  on an ammeter  in the control room.
Yesfc.Operating procedures, instrumentation (including indicators andannunciators),
This is consistent with the general design philosophy discussed        in Section 2.0.
andcontrolfunctions areadequatetoinitiatesystemsasrequiredtomaintainadequatecore,cooling?
3.9    Batter  Circuit  Out  ut Current Indication In normal condition when the battery charger is supplying the 24V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.
Yes SUSUEHANNAS.E.S.UNIT-1ANDUNIT2DG-E125VDCSYSTEMATTACHMENT IVPage59Iftheanswertoanypartofquestion6,7or8isno,thenprovideyourbasisfornotperforming themaintenance, surveillance andtestprocedures described and/orthebasesfornotincluding theoperational featurescited.*Seenotebelow.*Note:Forquestions involving supporting typeinformation (question numbers5and9)insteadofdeveloping andsupplying theinformation inresponsetothisletter,youmaycommittofurtherevaluatetheneedforsuchprovisions duringtheperformance ofyourindividual plantexamination forsevereaccidentvulnerabilities (IPE).Ifyouselectthisoption,youarerequiredto:(1)Sostateinresponsetothesequestions, and(2)Committoexplicitly addressquestions 5and9inyourIPEsubmittal pertheguidelines outlinedinNUREG-1335 (Section2.1.6,Subitem7),"Individual PlantExamination:
In the condition of a battery charger failure, the battery supplies the dc power. In this condition the battery circuit output current cannot be determined since an ammeter is not provided at the 24V dc distribution panels.
Submittal Guidance."
As  indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.
c:Xup51hdocshdg-e125v.pgd (18)10/24/91 8:48am RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE1REMARK1:DieselGenerator Eisaninstalled sparedieselgenerator capableofsubstituting asanemergency powersourceforanyoneoftheexistingemergency dieselgenerators (A,B,C,D).TheDieselGenerator E125Vdcpowersubsystem isidentified asChannelHandisdedicated toproviding dcpowertoESWvalvesforDieselGenerator Ecooling,DieselGenerator Econtrols, andDieselGenerator E4.16kVSwitchgear.
: 3. 10 Batter    Dischar  e  Indication As  previously discussed in Section 3.7, a battery discharge will occur as    a result of a battery charger failure or system current in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator will be dispatched locally to
Thisequipment isalllocatedinaseparateDieselGenerator Ebuilding.
TheDieselGenerator E125VdcSubsystem isrequiredonlywhenthisdieselgenerator issubstituting foroneoftheexistingdieselgenerators.
Itisinadditionto,independent andisolatedfromtheotherfourClasslE125VdcSubsystems.
Lossofanyoneofthe125VdcSubsystems doesnotpreventtheminimumsafetyfunctionfrombeingperformed.
REMARK2:1.0Thefollowing indications andalarmsfortheDG-E125VdcclasslEsubsystem areprovided.
Justification forthisdesignisconsistent withthedesignphilosophy regarding ControlRoommonitoring ofClass1Edcpowersystemsaspreviously providedinPLA-959totheNRCdated11/6/81.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE2AlarmorIndication LocalLocationControlRoomNotesBusUndervoltage AlarmBusGroundAlarmBatteryMonitorAlarmBatteryChargerTroubleAlarmBusAmmeter1,21,21,2,41,2,5BusVoltmeter BatteryChargerAmmeterBatteryChargerVoltmeter DCSystemTroubleAlarmNOTES:1.SeeTable1forspecificlocalalarmannunciation.
2.ThesealarmsarelocallyprovidedonDG-Eannunciator/reflasher panelOC577E.Adcsubsystem troublealarm.isreflashed tothecontrolroombythisannunciator.
SeeTable1,Figure1.3.Hetersareprovidedlocally.SeeFigure2.4.Batterymonitorcomparesbatterycenterpointvoltagewithhighandlowthreshold reference points,,of thehighandlowvoltagecomparators.
Thedegradedcellconditions (such"asashortedcell)oranopencircuitcondition (suchasanopenfuse)aredetectedbythebatterymonitor.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE35.Batterychargertroublealarmindication isprovidedforbatterychargerACpowerfailure,DCoutputbreakeropen,batterychargerfailurealarmoperation, batterychargerhigh/lowvoltageandbatterychargerhighvoltage(shutdown).
6.Oneannunciator windowfortheDG-E125Vdcsubsystem isprovided.


==2.0 Themonitoring==
I RESPONSE TO GENERIC LETTER    91-06    SUS UEHANNA S.E.S.
schemeprovidedforthedcpowersubsystem isbasedonthedegreeofcontrolprovidedtothecontrolroomoperator.
24V DC SUBSYSTEM PAGE 8 determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved    if battery discharge current was indicated on an ammeter in the control room.
Sincethedcpowersystemequipment cannotberemotelycontrolled, asingledcsystemtroubleannunciator windowforeachsubsystem isprovidedinthecontrolroom,consistent withthesystemlevelalarmcriteriasetforthinSectionBofR.G.1.47.TheSSESdesignisbasedonthegeneralcriteriathat,iftheoperatorcanperformsomecorrective actioninthecontrolroominresponsetoaspecificinput,thatinformation isspecifically provided.
3.11  Bus  Volta  e Indication The  battery, the battery charger and the 24V dc distribution panel are located in close proximity of each other. The battery charger and the dc distribution panel are each provided with a voltmeter.
Thedcpowersystemequipment cannotbecontrolled fromthecontrolroom.Annunciating specificinputsfromthe125Vdcsysteminthecontrolroomdoesnotenhancethecontrolroomoperators's abilitytodealwiththesituation anditwouldnotbeconsistent withSSESalarmdesignphilosophy.
The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. At SSES bus undervoltage and overvoltage is monitored directly at the distribution panel.
However,.if theonlyresponserequiredistodispatchanoperatortoanarearemovedfromthecontrolroom,thentheonlyinformation requiredinthecontrolroomisgeneralinformation withonlythelevelofspecificity re'quired todirectthatoperatortotheproperlocation.
The bus undervoltage and overvoltage conditions are annunciated as 24V dc system low or high voltage at the local reflasher panel.     A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel.
Thismethodisfasterandmorereliablesinceabnormalconditions areautomatically alarmed.Furthermore, thisapproachisconsistent withthehumanfactorsengineering goaltonotoverburdentheoperatorwithunnecessary information.
This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 24V dc bus voltage indication is not provided in the control room and has been provided on the front of the distribution panel where    it provides useful information during surveillance and maintenance activities.
125Vdcsysteminstrumentation, locallyprovided, isinfullcompliance withtherequirement ofIEEE308-1974andRegulatory Guide1.47.eTheDCsystemgeneraltroublealarmsandspecificlocalindicators inconjunction withtheroutineoperatorsurveillance providepositiveassurance thattheClass1Edcpowersystemaremaintained inasteadystatereadytoperformtherequiredsafetyfunction.
A  voltmeter is located on the front of the battery charger panel.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE43.0Following isthejustification foreachalarmandindication listedinGenericLetter91-06.3.1BatterDisconnect orCircuitBreaker0enAlarm:TheSusquehanna S.E.S.(SSES)DG-E125Vdcsubsystem utilizesafuseddisconnect asthebatterydisconnect.
With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local reflasher panel which is reflashed to the control room as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
Thiscondition isdetectedbythebatterymonitor.Thebatterymonitorutilizesavariablethreshold circuittogetherwithtwocomparators (highandlow)todetectthelossofbatterycapability duetoanopencircuit(i.e.,anopenfuseor,degradedcellcondition).
Avariablethreshold circuitacceptsthebattery'chargervoltageanddevelopstwothreshold voltagesforusewiththecomparators.
Whenthemonitored voltagesgoaboveorbelowthethresholds, thebatterymonitoroutputrelaycontactsinitiatealocalbatterymonitorannunciator whichisreflashed tothecontrolroomasaDG-E125Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.2BatterCharerDisconnect orCircuitBreaker0enBothInutACandOututDCAlarm3.2.1BatteryChargerACInputDisconnect orCircuitBreaker:SSESutilizesacircuitbreakerinthebatterychargerasadisconnect fortheacinputpowersupply.Anacpowerfailurealarmrelayisinstalled internaltothebatterychargertodetectlossofacinputpower.Thiscondition couldbecausedbyanopeninputcircuitbreakerorlossofthe480Vacpowersupplytothecharger.Theacpowerfailurealarmrelayinitiates abatterychargertroublealarmatthelocalannunciator panel,whichisreflashed tothecontrolroomasaDG-E125Vdcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed insection2.0.
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE53.2.2BatteryChargerDCOutputCircuitBreakerSSESutilizesacircuitbreakerinthebatterychargerasadisconnect forthedcoutputcircuit.Thecircuitbreakerisprovidedwithanauxiliary positionindicating switch.Aswitchcontactwhichisclosedwhenthecircuitbreakerisopenisusedtoinitiateabatterychargertroublealarmatthelocalannunciator panel.ADG-Edcsystemtroublealarmisreflashed tothecontrolroombythelocalannunciator
'anel.Thisisconsistent withthe,generaldesignphilosophy discussed inSection2.0.3.3DCSstemGroundAlarm'heDG-E125Vdcsubsystem isungrounded andisprovidedwithagrounddetection circuit.Itconsistsofarelayhavingacentertappedcoil.Thecoilisconnected acrossthepositiveandnegativebusanditscenterpointisgrounded.
Thegrounddetection relaycoilisnotactuatedduringnormaloperation ofthe125Vdcsubsystem whenagroundisnotpresent.Agroundoneitherthepositiveornegativebusofthe125Vdcsubsystem causesone-halfoftherelaycoiltobeshortcircuited, thusproviding sufficient voltagetotheremaining relaycoilhalftopickuptherelay.Anormallyopencontactoftherelayclosesandinitiates a125Vdcsystemgroundalarmatthelocalannunciator panel.ADG-Edcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalannunciator panel.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.4DCBusUndervolta eAlarmTheDG-E125Vdcsubsystem isprovidedwithabatterychargerundervoltage relay.Therelayisconnected acrossthepositiveandnegativebusofthe125Vdcbatterycharger.Therelayisnormallyenergized andsettodropoutatthespecified setpoint.
Abatterychargertroublealarmatthelocalannunciator panelis


RESPONSETOGENERICLETTER91-06SUSUEMANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEPAGE6initiated aftertheundervoltage relaydropsout.Thelocalannunciator panel,inturn,reflashes thealarmtothecontrolroomannunciator asaDG-Edcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.Inadditiontothebatterychargerundervoltage relay,abusundervoltage relayisprovidedtodetectalossofbusvoltage.ThemostprobablecauseofaDCsystemundervoltage condition isaresultofabatterychargerproblem,whichwillbedetectedbythebatterycharger,failurealarmrelay(seeSection3.6).Thechargerfailurerelayinitiates abatterychargertroublealarmatthelocalannunciator panel,whichinturn,reflashes aDG-Edcsystemtroublealarmtothecontrolroomannunciator.
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S.
Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.5DCBusOvervolta eAlarmTheDG-E125Vdcsubsystem isprovidedwithanovervoltage relay.Therelayislocatedinsidethebatterychargercabinet.Itisconnected acrossthepositiveandnegative125Vdcbusofthebatterychargerandsettopickupatthespecified setpoint.
24V DC SUBSYSTEN PAGE 9
Anormallyopencontactoftheovervoltage relay,whenclosed,initiates abatterychargertroublealarmatthelocalannunciator panelwhichinturnwillreflashaDG-Edcsystemtroublealarmtothecontrolroomannunciator.
: 3. 12 Alarm  Res onse  Procedure Control room alarm response procedures for a 24V dc system trouble alarm direct the operator to respond to the local reflasher panel to determine the condition which caused the alarm.
Sincethebattery,thebatterychargerandthedcloadcenterareincloseproximity ofeachother,thebatterychargervoltageisrepresentative oftheDG-E125Vdcbusvoltage.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.  
Local alarm response    procedures  for the reflasher  panel are provided to direct the operator to      determine the cause of the condition  and to initiate corrective action.
: 3. 13  Indication of  B  assed  and Ino  erable Status of Circuit Breakers or Other Disconnectin      Devices Although indication of bypassed and inoperable status of circuit breakers or other disconnecting devices is not provided as a part of the Bypass Indication System, the 24V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):
Hain battery fuse open.
Battery charger ac input    circuit  breaker open.
Battery charger dc output    circuit  breaker open, or dc distribution  panel feeder breaker open.


RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNITIANDUNIT2DG-E125VDCSUBSYSTEM PAGE73.6BatterCharerFailureAlarmTheDG-E125Vdcsubsystem batterychargerisprovidedwithabatterychargerfailurerelay.Thisrelaywilldetectthelossofthechargeroutputcurrentwiththeinputandoutputcircuitbreakersclosed.Thiscondition isindicative ofabatterychargerfailureanditinitiates abatterychargertroublealarmatthelocalannunciator panelwhichinturnwillreflashaDG-Edcsystemtroublealarmtothecontrolroomannunciator.
P RESPONSE TO GENERIC LETTER          91-06    SUS UEHANNA  S.E.S.
Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.7BatterDischareAlarmThebatterycanonlydischarge whenitsterminalvoltageislessthanthenominalopencircuitvoltage.Thisisindicative ofabatterychargerfailureorsystemcurrentinexcessofthechargercapability.
24V DC SUBSYSTEM PAGE 10 TABLE  1 24V DC    S  stem Ref lash Panel        Indicators    1L610  (Typical for positive and negative buses)
Abatterycharger,failurealarmisprovidedanditsoperation isdiscussed inSection3.6.Whensystemcurrentexceedsbatterychargercapability, adcsystemundervoltage condition willoccur,andwillbedetectedbythebatterychargerundervoltage relay(seeSection3.4).Chargerfailureandbatterychargerundervoltage initiatealarmsatthelocalannunciatorpanelwhichinturnwillreflashaDG-Edcsystemtroublealarmtothecontrolroomannunciator.
: l.      24V DC System Low          Voltage
Thisisconsistent withthegeneraldesignphilosophy asdiscussed inSection2.0.3.8BatterFloatChareCurrentIndication Undernormalconditions, thebatteryfloatchargecurrentisverysmallcomparedtobatterydischarge current.Measurement ofthiscurrentrequiresaverysensitive ammeter.Shuntbypassesareemployedtoprotecttheammetermovementfromthemuchlargerbatterydischarge currentpossibleinthiscircuit.'hese shu'ntsmustbemanuallyremovedwhenreadingnormalsmallfloatchargecurrent.Thusthisreadingcannotbecontinuous andnoautomatic RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE8indication oralarmscanbegiven.Sincetheintentofindicating "BatteryFloatChargeCurrent"istodetermine thebatterycondition, themethodusedtoaccomplish thispurposeshouldnotbeimportant.
: 2.  ,  24V DC System High          Voltage
Thebatterychargerundervoltage, busground,batterym'onitorandbatterychargerfailurealarms(previously described) providecontinuous monitoring todetectdegradation ofbatterycapability.
: 3.      Battery Honitor (indicates battery degradation or              open  battery fuses)
ThesealarmswillreflashtheDG-Edcsystemtroublealarminthecontrolroom,andanoperatorisdispatched locallytodetermine thecauseofthecondition andinitiatecorrective action.Specificindication isprovidedonthelocalannunciator panel.Thisresponseisexactlywhatwouldbeachievedifanimproperstateofbatterycurrentwereindicated onanammeterinthecontrolroom.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.9BatterCircuitOututCurrentIndication Innormalcondition whenthebatterychargerissupplying the125Vdcpower,thebatterycircuit(batteryandthebatterycharger)outputcurrentisindicated byanammeterlocatedatthebatterycharger.Inthecondition ofabatterychargerfailure,thebatterysuppliesthedcpower.Inthiscondition thebatterycircuitoutputcurrentisindicated byanammeterlocatedatthedcswitchboard.
: 4.      Battery Charger Trouble indicates (1) AC power failure, (2)                DC output breaker open, or (3) battery charger failure C:KWP51%00CSK24VDCSS ~ PGO (18) 10/24/91 9:168AI
Asindicated inSection3.8,theintentofindicating "batterycurrent"istodetermine thebatterycondition, andtherefore themethodusedtoaccomplish thispurposeshouldnotbeimportant.
 
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE93.10BatterDischareIndication Aspreviously discussed inSection3.7,abatterydischarge willoccurasaresultofabatterychargerfailureorsystemcurrentinexcesstobatterychargercapability.
124 DC                  MULTIPLE ALARM INPUTS FROM %24V DC LOCAL REHASH PANEL      POWER SYSTEM PER WITH INDICATION 1L670    TABLE 1 DC  SYSTEM AlARM INPUTS FROM OTHER REFLASH PANELS (8MILAR TO ABOVE)
Sincetheseconditions areautomatically alarmedinthecontrolroom(viathesystemtroublealarm),anoperator'will bedispatched locallytodetermine thecauseofthecondition andinitiatecorrective action.Thisresponseisexactlywhatwouldbeachievedifbatterydischarge currentwasindicated onanammeterinthecontrolroom.3.11BusVoltaeIndication Thebattery,thebatterychargerandthedcswitchboard oftheDG-E125Vdcsubsystem arelocatedincloseproximity ofeachother.Thebatterychargerandthedcswitchboard areeachprovidedwithavoltmeter.
CONTROL ROOM PANEL 1C651 ANNUNCIATOR              +24V DC  SYSTEM TROUBLE 1L670 FIGURE 1
Thepurposeofabusvoltmeter atthecontrolroomwouldbetoenabletheoperatortodispatchsomeonetotakecorrective actionlocallytocorrectabnormalbusvoltage.Thiscondition willoccurwhenabatterychargerproblemispresent.Undervoltage andovervoltage conditions aremonitored atthebatterycharger,andareannunciated asbatterychargertroubleatthelocalannunciator panel.ADG-Edcsystemtroublealarmisreflashed tothecontrolroomannunciator bythelocalannunciator panel.Thisdesignautomatically alertsthecontrolroomoperatortounusualvoltageconditions withoutunnecessarily requiring hisperiodicattention andanalysis.
 
Asaresult,125Vdcbusvoltageindication isnotprovidedinthecontrolroomandhasbeenprovidedonthefrontofthedcswitchboard whereitprovidesusefulinformation duringsurveillance andmaintenance activities.
INDICATOR UGHI'ERASHER PANEL POWER FAILURE POSITIVE BUS  NEGATIVE BUS                            BATlERY LOW          HIGH                              CHARGER 41 VOLTAGE      VOLTAGE                              TROUBLE 0
Avoltmeter islocatedonthefrontofthebatterychargerpanel.Withthechargeroutputcircuitbreakerclosed,thechargeroutputandthebusvoltagesareessentially thesameduetotheclose RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE10proximity ofthechargertotheloadcenter.Allabnormalvoltageconditions ofthebatterychargerareannunciated atthelocalannunciator panelwhichisreflashed tothecontrolroomasaDG-Edcsystemtroublealarm.Thisisconsistent withthegeneraldesignphilosophy discussed inSection2.0.3.12AlarmResonseProcedure Controlroomalarmresponseprocedures foraDG-E125Vdcsystemtroublealarmdirecttheoperatortorespondtothelocalannunciator paneltodetermine thecondition whichcausedthealarm.Localalarmresponseprocedures fortheannunciator panelareprovidedtodirecttheoperatortodetermine thecauseofthecondition andtoinitiatecorrective action.3.13Indication ofBassedandInoerableStatusofCircuitBreakersorOtherDisconnectin DevicesAlthoughindication ofbypassedandinoperable statusofcircuitbreakersorotherdisconnecting devicesisnotprovidedasapartoftheBypassIndication System,the125VdcSystemTroubleAlarminthecontrolroomisinitiated forthefollowing condition (whicharedisconnecting devicesinthesystem):Hainbatteryfuseddisconnect open.Batterychargeracinputcircuitbreakeropen.Batterychargerdcoutputcircuitbreakeropenor125Vdcswitchboard breakeropen.
NEGATIVE BUS    BATTERY                              BATIERY LOW        POSITIVE                            CHARGER          W VOLTAGE      MONITOR                              TROUBLE 0
RESPONSETOGENERICLETTER91-06SUSUEHANNAS.E.S.UNIT1ANDUNIT2DG-E125VDCSUBSYSTEM PAGE11TABLE1125VDG-EDCSstemAnnunciator PanelAlarmsl.125VDCSystemLowVoltage2.125VDCSystemGround3.BatteryHonitor(indicates batterydegradation oropenbatteryfuses)4.BatteryChargerTroubleindicates (1)ACpowerfailure,(2)DCoutputbreakeropen,(3),battery chargerfailure,(4)batterychargerhigh/lowvoltage,or(5)batterycharger'igh voltage(shutdown).
POSITIVE BUS    BATlERY HIGH      NEGATIVE VOLTAGE      MONITOR 224V DC    SYSTEM LOCAL REHASHER PANEL QYPICAO FIGURE 2
C:XQP51%00CS~RGL91-06.PGD (18)10/24/918:35am DG-EBLDGPANELOC577EMULTIPLEALARMINPUTSFROMDG-E125VDCPOWERSYSTEMPERTABlE1CONTROLROOMPANELOC653ANNUNCIATOR DG-EBLDGPANELOC577EDCSYSTEMTROUBLEFIGURE1 7/5959BATTERYCHARGERAMMETERVOLTMETERBATTERYBANKFUSEBATTERYMONITORAMMETERVOLTMETER 27SYSTEMGROUNDINDICATORS DCSWITCHBOARD LOADSLOADSSEETABLE1FORALARMSDG-E125VDCSYSTEMFIGURE2}}
 
I BATIERY BANK 1 D670                I
                      +24                                -24 I
96P
>0 CLQ
                    +24 VDC                          -24 VDC BA11ERY                          BA11ERY CHARGER                          CHAI&ER DC  BKR                            DC  BKR Qv    Q~                          QvQA 59    y    27 P
27 N    y    69 N
AMP SPARE        POS                    NEG        SPARE COMP                                                MPUIER OUTPUT      VOLTS                    VOLTS      OUTPUT
                                                } NEG PROCESS                                                                SOURCE RNG. MON'S RADIATION                                                                INIERM RNG. MON'S MONITORS                                                                  1RIP. AUX, UNITS NOTE 1
                                +24V COMMON -24V                      NOTE 1: COMMON BUS GROUNDED 24 VDC SYSTEM OYPICAQ
 
SUS UEHANNA S.E.S.                    ATTACHMENT    II 125V DC SYSTEM Page  1 ENCLOSURE    1 The  following information is applicable to either Unit      1  or 2  at Susquehanna SES.
: 1. Unit  SUS UEHANNA    S.E.S. UNIT-1 or  2  125V DC SYSTEM
: 2. a 0    The number  of independent redundant divisions of Class lE      or safety-related DC power for this plant is See Remark 1 (Include any separate Class 1E or safety-related DC, such        as any DC dedicated to the diesel generators).
: b. The number  of functional safety-related divisions of DC power necessary to attain safe shutdown for this unit is See Remark 2.
: 3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of            DC power?
a ~    Alarms
: 1. Battery disconnect or    circuit breaker open?
No
: 2. Battery charger disconnect or    circuit  breaker open (both input AC and output DC)? No
: 3. DC  system ground?    No DC  bus undervoltage?    No
: 5. DC  bus overvoltage?    No
: 6. Battery charger failure?      No
: 7. Battery discharge?    No
: b. Indications
: l. Battery float charge current?      No
: 2. Battery circuit output current?      No
: 3. Battery discharge?    No Bus  voltage?    No
 
SUS UEHANNA S.E.S.                      ATTACHMENT    II 125V DC SYSTEN Page 2
: c.      Does  the unit have written procedures for response to the above
          'alarms and indications?          No I                  *,
I
: 4. Does  this unit have indication of bypassed          and inoperable'status of circuit breakers or other devices that can            be used to disconnect the battery    and  battery charger from its      DC  bus, and the battery charger from its  AC  power source during maintenance        or tes'ting?
No              See remark ¹3
: 5. If the    answer  to  any  part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related DC systems. *See endnote.
See remark  ¹3
: 6. (I)  Have you conducted      a  review of maintenance and testing activities to minimize the potential for human error causing more than one DC division to  be  unavailablet      ~es      and (2)  Do  plant procedures prohibit maintenance or testing            on redundant  DC divisions at the same time? ~es If the facility Technical        Specifications    have provisions equivalent      to those found in the Westinghouse          and Combustion Engineering Standard Technical Specification for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.
: 7. Are maintenance, surveillance and test procedures regarding              station batteries conducted routinely at this point? Specifically:
: a.      At least once per 7 days are the following verified to              be within acceptable limits:
I.      Pilot cell electrolyte level? Yes
: 2.      Specific gravity or charging current?            Yes
: 3.      Float voltage?      Yes
: 4.      Total bus voltage on float charge?          Yes
: 5.      Physical condition of all cells?          Yes
 
SUS UEHANNA S.E.S.                     ATTACHMENT  II 125V DC SYSTEM Page 3
: b. At least once per 92 days, or within 7 days after a battery discharge, overcharge, or      if the pilot cell readings are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
: l. Electrolyte level of each cell? Yes
: 2. The average specific gravity of all cells?          Yes
: 3. The specific gravity of each cell?        Yes
: 4. The average electrolyte temperature of a representative number of cells?      Yes
: 5. The float voltage of each cell?        Yes
: 6. Visually .inspect or measure resistance of terminals and connectors (including the connectors at the DC bus)?          Yes
: c. At least every    18 months are  the following verified:
Low  resistance of each connection (by test)?          Yes
: 2. Physical condition of the battery?        Yes
: 3. Battery charger capability to deliver rated ampere output to the DC bus?      Yes The capability of the battery to deliver its design duty cycle to the DC bus'?      Yes
: 5. Each individual cell voltage is within acceptable limits during the service test?      Yes
: d. At least every    60 months,  is capacity of  each  battery verified  by performance of    a  discharge test'?  Yes
: e. At least annually, is the battery capacity verified by performance discharge test,    if the battery shows signs of degradation or has reached 85X of the expected service life?          Yes
: 8. Does  this plant  have  operational features such that following loss of one  safety-related DC power supply or bus:
: a. Capability is maintained for ensuring continued        and adequate reactor cooling?      Yes
 
SUS UEHANNA S.E.S.                  ATTACHMENT  II 125V DC SYSTEN Page 4
: b.        Reactor coolant system          integrity  and  isolation capability are maintained7          Yes
: c.      Operating procedures,          instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core cooling7              Yes
: 9.        If the answer to any part of question 6, 7, or 8 is no, then provide your basis for not performing the maintenance, surveillance and test procedures described and/or the bases for not including the operational features cited. *See Note below.
* Note:              For questions      involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE). If you select this option, you are required, to:
: 1)      So  state in response to these questions,    and
: 2)      Commit to explicitly address questions 5 and 9      in your IPE submittal per the guidelines outlined in NUREG-1335    (section 2. 1.6, Subitem 7), "Individual Plant Examination:    Submittal Guidance."
C:KIIP51I,docshadeqofsa.pgd  (18) 10/24/91 8:57am
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S.
125V DC SUBSYSTEM PAGE 1 REMARK  1:
The  Unit  1  Class 1E direct current, (dc) system consists of four independent 125  volt dc subsystems. These four subsystems are identified as channels A, B, C, and D. Each subsystem provides the control power for its associated class lE ac power load group consisting of:        '. 16kV switchgear, 480V load centers, and a standby diesel generator.          The 125V  dc subsystems also provide dc power    for safety feature valve actuation, diesel generator auxiliaries,        and plant alarm and indication circuits.
REMARK  2:
Four separate      and independent  class  1E 125V  dc subsystems supply control power for  each  of the class    1E load groups. Loss of any one of the subsystems does not prevent the minimum safety function from being performed (i.e., three out of four subsystems are necessary to attain safe shutdown for Unit 1).
REMARK  3:
1.0    The    following indications    and alarms  for the  125V dc  class lE subsystem are provided. Justification for this design has been previously provided in PLA-959 to the NRC dated ll/6/81, regarding Control Room monitoring of Class 1E dc p'ower systems.
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA S.E.S.
125V DC SUBSYSTEM PAGE 2 Location Alarm or Indication                    Local          Control Room            Notes Bus  Undervoltage Alarm                                                        1,2 Bus Ground Alarm                                                              1,2 Battery Monitor Alarm                                                          1,2,4 Battery Charger Trouble Alarm                                                  1,2,5 Bus Ammeter Bus  Voltmeter Battery Charger Ammeter Battery Charger Voltmeter DC  System Trouble Alarm NOTES:
: 1. See  Table 1 and Figure  2 for specific local alarm indication.
: 2. These are locally annunciated and actuate dc subsystem    trouble alarm, see Table 1 and Figure    l.
: 3.      Heters are provided  locally. See Figure 3.
Battery monitor compares battery center point voltage with high and low threshold reference points of the high and low voltage comparators. The degraded cell conditions (such as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA S.E.S.
125V DC SUBSYSTEM PAGE 3
: 5.      Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation, and bus overvoltage.
: 6.      One  annunciator window for the    125V dc subsystem  is provided.
2.0 The  monitoring  scheme  provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section B of R.G. 1.47.
The SSES design    is based on the general criteria that, if the operator can perform some    corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.
Annunciating specific inputs from the 125V dc system in the control room does not enhance the control room operators's ability to deal with the situation and it would not be consistent with SSES alarm design philosophy. However, if the only response required is to dispatch an operator to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity required to direct that operator to the proper location. This method is faster and more reliable since abnormal conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 125V dc system instrumentation, locally provided, is in full compliance with the requirement of, IEEE 308-1974 and Regulatory Guide 1.47.
The  DC  system general  trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class 1E dc power system are maintained in a steady state ready to perform the required safety function.
 
RESPONSE TO GENERIC LETTER      91-06    SUS UEHANNA  S.E.S.
125V DC SUBSYSTEM PAGE 4 3.0 Following is the justification for each alarm and indication        listed in Generic Letter 91-06.
: 3. 1  Batter    Disconnect or  Circuit Breaker  0 en Alarm:
The Susquehanna    S.E.S. (SSES) 125V dc subsystem utilizes fuses as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or degraded cell condition). A variable threshold circuit accepts the battery charger voltage and develops two threshold voltages for use with the comparators. When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor alarm which is reflashed to the control room as a 125V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
3.2  Batter    Char er Disconnect or    Circuit Breaker 0 en  Both In ut  AC and Out    ut DC  Alarm 3.2. 1 Battery Charger    AC Input Disconnect or Circuit Breaker:
SSES  utilizes a circuit breaker in the battery charger as      a disconnect for the ac input power supply. An ac power failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 480V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local reflasher panel, which is reflashed to the control room as a 125V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
 
RESPONSE TO GENERIC LETTER      91-06      SUS UEHANNA S.E.S.
125V DC SUBSYSTEN PAGE 5 3.2.2 Battery Charger      DC  Output  Circuit Breaker SSES  utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with    an  auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room by the local reflasher panel.
This is consistent with the general design philosophy discussed in Section 2.0.
3.3 DC S  stem Ground Alarm The 125V dc subsystem      is ungrounded and is provided with a ground detection circuit. It consists of a relay having a center tapped coil. The coil is connected across the positive and negative bus and its center point is grounded.        The ground detection relay coil is not actuated during normal operation of the 125V dc subsystem when a ground is not present.        A ground on either the positive or negative bus of the 125V dc subsystem causes one-half of the relay coil to be short circuited, thus providing sufficient voltage to the remaining relay coil half to pickup the relay. A normally open contact of the relay closes and initiates a 125V dc system.
ground alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel. This is consistent with the general design philosophy discussed in Section 2.0.
3.4 DC  Bus  Undervolta  e  Alarm The 125V dc subsystem is provided with a dc bus undervoltage relay. The relay is connected across the positive and negative bus of the 125V dc subsystem.        The relay is normally energized and set to drop out at the specified setpoint. A 125V dc bus undervoltage alarm at the local reflasher panel is        initiated after the undervoltage relay drops out.
 
RESPONSE TO GENERIC LETTER    91-06    SUS UEHANNA S.E.S.
125V DC SUBSYSTEN PAGE 6 The  local reflasher panel, in turn, r eflashes the alarm to the control room annunciator as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
3.5 DC  Bus Overvolta  e Alarm The 125V dc subsystem    is provided with an overvoltage relay. The relay is located inside the battery charger cabinet. It is connected across the positive and negative 125V dc bus of the battery charger and set to pick up at the specified setpoint. A normally open contact of the overvoltage relay, when closed, initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble to the control  room  annunciator.
Since the battery, the battery charger and the dc load center are in close proximity of each other, the battery charger voltage is representative of the 125V dc bus voltage. This is consistent with the general design philosophy discussed in Section 2.0.
3.6  Batter  Char er  Failure Alarm The 125V dc subsystem    battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.
This condition is indicative of a battery charger failure and      it initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble alarm 'to the control room annunciator.
This is consistent with the general design philosophy discussed      in Section 2.0.
 
RESPONSE TO GENERIC LETTER    91-06    SUS UEHANNA  S.E.S.
125V DC SUBSYSTEM PAGE 7 3.7  Batter  Dischar  e Alarm The  battery can  only discharge,  when its terminal voltage is less than the nominal open circuit voltage. This is indicative of a battery charger failure or system current in excess of the charger capability. A battery charger failure alarm is provided and its operation is discussed in Section 3.6. 'When system current exceeds battery charger capability, a dc system undervoltage condition will occur, and will be detected by the dc bus undervoltage relay. (See Section 3.4.) Charger failure and bus undervoltage initiate alarms at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.
3.8  Batter  Float Char  e  Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit. These shunts must be manually removed when reading normal small float charge current. Thus this reading cannot be continuous and no automatic indication or alarms can be given.
Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.
The bus  undervoltage, bus ground, battery monitor and battery charger failure alarms (previously described) provide continuous monitoring to detect degradation of battery capability. These alarms will reflash the dc system trouble alarm in the control room, and an operator is dispatched locally to determine the cause of the condition and initiate corrective action.
 
RESPONSE  TO GENERIC LETTER  91-06    SUS UEHANNA S.E.S.
125V DC SUBSYSTEM PAGE 8 Specific indication is provided on the local reflasher panel.
This response is exactly what would be achieved    if an improper state of battery current were indicated on an ammeter in the control room.
This is consistent with the general design philosophy discussed    in Section 2.0.
3.9    Batter  Circuit Out  ut Current Indication.
In normal condition when the battery charger is supplying the 125V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.
In the condition of a battery charger failure, the battery supplies the dc power. In this condition the battery circuit output current is indicated by an ammeter located at the dc load center.
As  indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.
: 3. 10 Batter    Dischar e  Indication As  previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system current in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator will be dispatched locally to determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved      if battery discharge current was indicated on an ammeter in the control room.
 
RESPONSE TO GENERIC LETTER    91-06    SUS UEHANNA S.E.S.
125V DC SUBSYSTEM PAGE 9
: 3. 11    Bus Volta  e Indication The  battery, the battery charger and the dc load center of 125V  dc subsystem are located in close proximity of each other. The battery charger and the dc load center are each provided with a voltmeter. The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. At SSES the bus undervoltage is monitored directly and the bus overvoltage conditions are monitored at the battery charger output. The bus undervoltage and the battery charger output overvoltage conditions are annunciated as 125V dc system low voltage or battery charger trouble at the local reflasher panel.
A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel.
This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 125V dc bus voltage indication is not provided in the control room and has been provided on the front of the load center where    it  provides useful information during surveillance and maintenance activities.
A  voltmeter is located on the front of the battery charger panel.
With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local reflasher panel which is reflashed to the control room as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
: 3. 12 ,
Alarm  Res onse  Procedure Control room alarm response procedures for a 125V dc system trouble alarm direct the operator to respond to the local reflasher panel to determine the condition which caused the alarm.
 
RESPONSE TO GENERIC LETTER      91-06      SUS UEHANNA  S.E.S.
125V DC SUBSYSTEH PAGE 10 Local alarm response    procedures  for the reflasher  panel are provided to direct    the operator to determine the cause of the condition  and to  initiate corrective action.
: 3. 13  Indication of  B  assed  and Ino  erable Status of Circuit Breakers or Other Oisconnectin      Devices Although indication of bypassed and inoperable status of circuit breakers or other disconnecting devices is not provided as a part of the Bypass Indication System, the 125V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):
Hain battery fuse open.
Battery charger    ac  input  circuit  breaker open.
Battery charger dc output circuit breaker      open  or  125V dc load center input breaker open.
125V dc  load center feeder breaker to 125V dc      distribution panels open.
r (The undervoltage    relay at the distribution panels initiates the distribution panel low voltage alarm at the local reflasher panel which is reflashed to the control room 125V dc system trouble alarm.)
 
RESPONSE TO GENERIC LETTER          91-06      SUS UEHANNA S.E.S.
125V DC SUBSYSTEN PAGE 11 TABLE  1 125V  DC S  stem Ref lash Panel Alarms          1L610
: 1.      125V DC System Low        Voltage
: 2.      125V DC System Ground
: 3.      Battery Monitor (indicates battery degradation or            open battery fuses)
: 4.      Battery Charger Trouble indicates (1) AC power failure, (2) DC output breaker open, (3) battery charger failure, or (4) bus overvoltage
: 5.      125V DC  Distribution      Panel    1D614 Low  Voltage
: 6.      125V DC  Distribution      Panel    1D615 Low  Voltage C:XWP51XDDCSX125VDCSS.PGD (18) 10/24/91 9:00am
 
CHANNEL A 125V DC    MULTIPLE AIARM INPUTS LOCAL REHASH PANEL    FROM 125V DC CHANNEL A WITH INDICATION      POWER SYSTEM PER 1L610                TABK  1 DC SYSTEM ALARM INPUTS FROM OTHER REFLASH PANELS (SIMILAR TO ABOVE)
CONTROL ROOM PANEL 1C651 ANNUNCIATOR          125V DC SYSTEM TROUBLE 1L610 FIGURE 1
 
INDICATOR UGHT REFLASHER PANEL POWER        NAMEPlATE FAILURE 125V DC SYSTEM            BATTERY                  SPARE LOW VOLTAGE            CHARGER 125V DC            125V DC DIST SYSTEM              PANEL 10614                SPARE GROUND              LOW VOLTAGE BATTERY                125V DC MONITOR              PANEL 1D615                SPARE LOW VOLTAGE 125V DC SYSTEM LOCAL REFlASHER PANEL OYPfCAD FIGURE  2
 
BATTERY BANK BATTERY CHARGER 59      AMMETER BATTERY FUSE          MONITOR VOLTMETER AMMETER Q  VOLTMETER SYSTEM GROUND 27                            INDICATORS DC LOAD CENTER LOADS      LOADS SEE TABLE 1  FOR ALARMS 125V DC SYSTEM QYPICAD FIGURE 3
 
SUS UEHANNA S.E.S.                  ATTACHMENT  III 250 DC SYSTEM Page  1 ENCLOSURE 1 The following information    is applicable to either Unit    1 or Unit 2 at Susquehanna SES.
: 1. Unit    Sus uehanna  S.E.S. Unit-1 or  2  250V DC
: 2.            ,The number  of independent redundant divisions of Class 1E or safety-related dc power for this plant is ~2 two . (Include any separate Class lE or safety-related dc, such as any dc dedicated to,the diesel generators.)
: b.      The number  of functional safety-related divisions of dc power necessary  to attain safe shutdown for this unit is ~1 one
: 3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of dc power?
: a.      Alarms
: 1.      Battery disconnect or circuit breaker    open?
No
: 2.      Battery charger disconnect or circuit breaker    open (both  input ac and output dc)? No
: 3.      dc system ground?    No
: 4.      dc bus undervoltage?    No
: 5.      dc bus overvoltage?    No
: 6.      Battery charger failure?    No
 
SUS UEHANNA S.E.S.                      ATTACHNENT  III 250 DC SYSTEN Page  2
: 7. Battery discharge?        No
: b. Indications
: 1.      Battery float charge current?        No
: 2.      Battery  circuit output current?        No
: 3.      Battery discharge?      No
: 4.      Bus  voltage?    No
: c. Does  the unit have written procedures        for  response to the above alarms and indications?        No Does  this unit    have  indication of    bypassed  and inoperable status of circuit  breakers or    other devices that can be used to disconnect the battery  and  battery  charger from its dc bus and the battery charger from its  ac power source    during maintenance or testing?
No            See remark  ¹1
: 5. If the answer to any part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related    dc systems.
* See note    below.
See Remark  ¹1
: 6.    (1) Have you conducted a review of maintenance and testing activities to minimize the potential for human error causing more than one dc division to be unavai1ablet ~es          and (2) do plant procedures prohibit maintenance or testing on redundant dc divisions at the same time? ~es (See response from the site)
If the facility Technical      Specifications    have  provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specifications for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.
 
SUS UEHANNA    S.E.S.                    ATTACHMENT    III 250  OC SYSTEN Page 3
: 7. Are maintenance, surveillance and test procedures regarding            station batteries conducted routinely at this plant? Specifically:
: a. At least once per 7 days are the following verified to            be  within acceptable limits:
: 1. Pilot cell electrolyte level?        Yes
: 2. Specify gravity or charging current?          Yes
: 3. Float voltage?    Yes
: 4. Total bus voltage  on  float  charge?      Yes
: 5. Physical condition of    all cells?      Yes
: b. At least once per 92 days, or within 7 days after a battery discharge; overcharge, or    if the pilot cell readings, are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
: l. Electrolyte level of    each  cell?    Yes
: 2. The average  specific gravity of all cells?          Yes
: 3. The specific gravity of    each  cell?      Yes
: 4. The average electrolyte temperature        of  a  representative number of cells?        Yes
: 5. The float voltage of    each  cell?    Yes
: 6. Visually inspect or measure resistance of terminals and connectors (including the connectors at the dc bus)?              Yes
 
SUS UEHANNA S.E.S.                      ATTACHMENT  III 250 DC SYSTEM Page 4
: c. At least every    18 months  are the following    verified:
: 1. Low  resistance of each connection (by test)?            Yes
: 2. Physical condition of the battery?          Yes
: 3. Battery charger capability to deliver rated          ampere  output to the dc bus?      Yes
: 4. The  capability of the battery to deliver its design duty cycle to the dc bus?        Yes
: 5. Each  individual cell voltage is within acceptable limits during the service test?        Yes
: d. At least every 60 months, is capacity of each battery verified by performance of a discharge test?            Yes
: e. At least annually, is the battery capacity verified by performance discharge test,    if  the battery shows signs of degradation or has reached 85K of the expected service life?            Yes
: 8. Does  this plant have operational features such that following loss of one  safety-related dc power supply or bus:
: a. Capability is maintained for ensuring continued          and adequate reactor cooling?        Yes
: b. Reactor coolant system      integrity  and  isolation capability are maintained?      Yes
: c. Operating procedures, instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core cooling?              Yes
: 9. If the  answer  to  any  part of question 6,    7  or 8 is no, then provide your basis  for not performing the      maintenance,  surveillance and test
 
SUS UEHANNA S.E.S.                  ATTACHNENT  III 250 DC SYSTEM Page 5 procedures      described and/or the bases        for not including the operational features cited.
* See note below.
*Note:        For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE).            If you select this option, you are required to:
(1)    So  state in response to these questions, and (2)    Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (Section
: 2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."
c:~sp51~docsQR106001.PGD  (18) 10/24/91 9:06am
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S.
250V DC SUBSYSTEM PAGE 1 REMARK  1:
1.0    The following indications    and alarms  for the  250V dc  class lE subsystem are provided. Justification for this design has been previously provided in PLA-959 to the NRC dated 11/6/81, regarding Control Room monitoring of Class 1E dc power systems.
Location Alarm or Indication                    Local          Control  Room              Notes Bus  Undervoltage Alarm                                                            1,2 Bus Ground Alarm                                                                  1,2 Battery Monitor Alarm                                                              1,2,4 Battery Charger Trouble Alarm                                                      1,2,5 Bus Ammeter Bus  Voltmeter Battery Charger    Ammeter Battery Charger Voltmeter DC  System Trouble Alarm NOTES:
: 1. See  Table 1 and Figure  2 for specific local    alarm  indication.
: 2. These are locally indicated and actuate dc subsystem        trouble alarm, see Table 1 and Figure    l.
: 3.      Meters are provided  locally. See Figure 3.
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S.
250V DC SUBSYSTEM PAGE 2
: 4.      Battery monitor compares battery center point voltage with high and low threshold reference points of the high and low voltage comparators. The deg} aded cell conditions (such as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.
: 5.      Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation, and bus overvoltage.
: 6. One  annunciator window for each    250V dc subsystem  is provided.
2.0 The  monitoring  scheme  provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section B of R.G. 1.47.
The SSES design    is based on the general criteria that, if the operator can perform some    corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.
Annunciating specific inputs from the 250V dc system in the control room does not enhance the control room operators's ability to deal with the situation and it would not be consistent with SSES alarm design philosophy. However, if the only response required is to dispatch an operator, to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity required to direct that operator to the proper location. This method is faster and more reliable since abnormal conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 250V dc system instrumentation, locally provided, is in full compliance with the requirement of IEEE 308-1974 and Regulatory Guide 1.47.
 
RESPONSE TO GENERIC LETTER      91-06      SUS UEHANNA  S.E.S.
250V DC SUBSYSTEM PAGE 3 The  DC  system general    trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class lE dc power system are maintained in a steady state ready to perform the r equired safety function.
3.0 Following is the justification for each alarm and indication          listed in Generic Letter 91-06.
3.1    Batter    Disconnect or  Circuit Breaker  0 en Alarm:
The Susquehanna    S.E.S.  (SSES)  250V dc subsystem  utilizes  fuses as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or degraded cell condition). A variable threshold circuit accepts the battery charger voltage and develops two threshold voltages for use with the comparators. When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor alarm which is reflashed to the control room as a 250V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
3.2    Batter    Char er Disconnect  or Circuit Breaker  0 en  Both In ut  AC and Out  ut DC  Alarm 3.2. 1 Battery Charger    AC Input Disconnect or Circuit Breaker:
SSES  utilizes a circuit breaker in the battery charger as      a disconnect for the ac input power supply. An ac power failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 480V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local reflasher panel, which is reflashed to
 
RESPONSE  TO GENERIC LETTER 91-06          SUS UEHANNA  S.E.S.
250V DC SUBSYSTEM PAGE 4 the control room as a 250V dc system trouble alarm. This is consistent with the general design philosophy discussed in section 2.0.
3.2.2 Battery Charger      DC  Output  Circuit Breaker SSES  utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with    an  auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room by the local reflasher panel.
This is consistent with the general design philosophy discussed  in Section 2.0.
3.3 DC S  stem Ground Alarm The 250V dc subsystem      is  ungrounded and  is provided with a ground detection circuit. It consists of a relay having a center tapped coil. The coil is connected across the positive and negative bus and its center point is grounded.        The ground detection relay coil is not actuated during normal operation of the 250V dc subsystem when a ground is not present.          A ground on either the positive or negative bus of the 250V dc subsystem causes one-half of the relay coil to be short circuited, thus providing sufficient voltage to the remaining relay coil half to pickup the relay. A normally open contact of the relay closes and initiates a 250V dc system ground alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel. This is consistent with the general design philosophy discussed in Section 2.0.,
3.4 DC  Bus  Undervolta  e  Alarm The 250V dc subsystem is provided with a dc bus undervoltage relay. The relay is connected across the positive and negative
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA S.E.S.
250V  DC SUBSYSTEM PAGE 5 bus  of the 250V dc subsystem. The relay is normally energized and set to drop out at the specified setpoint. A 250V dc bus undervoltage alarm at the local reflasher panel is initiated after the undervoltage relay drops out.
The  local reflasher panel, in turn, reflashes the alarm to the control room annunciator as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
3.5  DC  Bus Overvolta  e  Alarm The 250V dc subsystem    is provided with an overvoltage relay. The relay is located inside the battery charger cabinet. It is connected across the positive and negative 250V dc bus of the battery charger and set to pick up at the specified setpoint. A normally open contact of the overvoltage relay, when closed, initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble to the control  room  annunciator.
Since the  battery,'he battery    charger and,the dc load center are in close proximity of each other, the battery charger voltage is representative of 250V dc bus voltage. This is consistent with the general design philosophy discussed in Section 2.0.
3.6  Batter  Char er  Failure Alarm The 250V dc subsystem    battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.
This condition is indicative of a battery charger failure and      it initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator.
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S.
250V  DC SUBSYSTEM PAGE 6 This is consistent with the general design philosophy discussed          in Section 2.0.
3.7  Batter  Dischar  e  Alarm The  battery  can only discharge  when  its  terminal voltage is less than the nominal open. circuit voltage. This is indicative of a battery charger failure or system current in excess of the, charger capability. A battery charger failure alarm is provided and its operation is discussed in Section 3.6. When system current exceeds battery charger'apability, a dc system undervoltage condition will occur, and will be detected by the dc bus undervoltage relay. (See Section 3.4) Charger failure and bus undervoltage initiate alarms at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.
3.8  Batter    Float Char  e Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. Measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit. These shunts must be manually removed when reading normal small float charge current. Thus this reading cannot      be  continuous and no automatic indication or alarms can be given.
Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.
The bus  undervoltage,  bus ground,  battery monitor    and  battery charger failure alarms (previously described) provide continuous monitoring to detect degradation of battery capability. These alarms will reflash the dc system trouble alarm in the control
 
RESPONSE TO GENERIC LETTER    91-06    SUS UEHANNA S.E.S.
250V DC SUBSYSTEM PAGE 7 room, and an operator    is dispatched locally to de'termine the  cause of the condition    and  initiate corrective action.
Specific indication is provided on the local reflasher panel.
This response is exactly what would be achieved      if  an improper state of battery current were indicated on an ammeter in the control room.
This is consistent with the general design philosophy discussed        in Section 2.0.
3.9  Batter    Circuit Out  ut Current Indication In normal condition when the battery charger is supplying the 250V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.
In the condition of a battery charger failure, the battery supplies the dc power. In this condition, the battery circuit output current is indicated by an ammeter located at the dc load center.
As  indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.
3.10 Batter    Oischar e  Indication As  previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system cur rent in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator will be dispatched locally to determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved        if battery discharge current was indicated on an ammeter in the
 
RESPONSE  TO GENERIC LETTER  91-06    SUS UEHANNA S.E.S.
250V DC SUBSYSTEM PAGE 8 control room.
: 3. 11  Bus  Volta  e Indication The  battery, the battery charger and the dc load center of 250V    dc subsystem are located in close proximity of each other. The battery charger and the dc load center are each provided with a voltmeter. The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. At SSES the bus undervoltage is monitored directly and'the bus overvoltage conditions are monitored at the battery charger output. The bus undervoltage and the battery charger output overvoltage .conditions are annunciated as 250V dc system low voltage or battery charger trouble at the local reflasher panel.
A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel.
This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 250V dc bus voltage indication is not provided in the control room and has been provided on the front of the load center where    it  provides useful information during surveillance and maintenance activities.
A  voltmeter is located on the front of the battery charger panel.
With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local reflasher panel which is reflashed to the control room as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
 
RESPONSE TO GENERIC LETTER      91-06      SUS UEHANNA  S.E.S.
250V  DC SUBSYSTEM PAGE 9
: 3. 12 Alarm Res onse Procedure Control room alarm response procedures for a 250V dc system trouble alarm direct the operator to respond to the local reflasher panel to determine the condition which caused the alarm.
Local alarm response    procedures for the reflasher panel are provided to direct    the operator to determine the cause of the condition  and to  initiate corrective action.
: 3. 13  Indication of  B  assed  and Ino  erable Status of Circuit Breakers or Othe    Disconnectin    Devices Although indication of bypassed and inoperable status of circuit breaker's or other disconnecting devices is not provided as a part of the Bypass Indication System, the 250V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):
Main  battery fuse open.
Battery charger ac input    circuit  breaker open.
Battery charger dc output    circuit  breaker open, or 250V dc load center breaker open.
250V dc  load center feeder breaker to 250V dc motor control centers open.
(Each  of the load center feeder breakers to the 250V dc MCC's  is provided with an auxiliary position indicating switch which initiates an alarm on the local reflasher panel when the circuit breaker is open.      A 250V dc system trouble alarm is reflashed to the control room by the local reflasher panel.)
 
RESPONSE    TO GENERIC LETTER      91-06      SUS UEHANNA  S.E.S.
250V DC SUBSYSTEM PAGE 10 TABLE  1 250V  DC S  stem Reflash Panel        Indicators    T  ical
: l.      250V  DC  System Low Voltage
: 2.      250V  DC  System Ground
: 3.      Battery Monitor (indicates battery degradation or            open battery fuses)
: 4.      Battery Charger Trouble indicates (1) AC power failure, (2) DC output breaker open, (3) battery charger failure, or (4) bus overvoltage (Division I has 2 chargers, Division II has 1 charger)
: 5.      Load Center Incoming Breakers          Trip
: 6.      RCIC &    Isolation Valve Control Center        1D254  trouble
: 7.      Turbine Bldg. Control Center            1D155  trouble
: 8.      Computer      UPS Supply Breaker Trip C:XMP51%00CSX250VDCSS.PGD (18) 10/24/91 9:08am
 
CHANNEL A 250V DC    MULTIPLE ALARM INPUIS LOCAL RERASH PANEL    FROM 250V DC CHANNEL A WITH INDICATION      POWER SYStEM PER 1L650                TABLE 1 DC SYSTEM ALARM INPUTS FROM OTHER REFLASH PANELS (SIMILAR TO ABOVE)
CONTROL ROOM PANEL 1C651 ANNUNCIATOR          250V DC SYSTEM TROUBLE 1L650 FIGURE 1
 
INDICATOR UGHT REFLASHER PANEL POWER FAILURE BATTERY                        RCIC & ISO VLVS SYSTEM      CHAIWER    A                      CONTROL CENTER LOW VOLTAGE      TROUBLE                          1D254 TROUBLE 250V DC        BATTERY                            TURB BU)G SYSTEM      CHARGER B                        CONTROL CENTER GROUND        TROUBLE                          1D155 TROUBLE BATTERY  LC INCOMING BKR                      COMPUTER UPS MONITOR      7245212/22                            SUPPLY BKR TRIP                                TRIP 250V DC SYStEM LOCAL REFLASHER PANEL OYPICAO FIGURE 2
 
BATTERY BANK BATTERY CHARGER 59      AMMETER BATTERY FUSE          MONITOR VOLTMETER AMMETER Q  VOLTMETER SYSTEM GROUND 27                            INDICATORS DC LOAD CENTER LOADS      LOADS SEE TABLE 1  FOR ALARMS 250V DC SYSTEM OYPICAQ FIGURE 3
 
SUS UEHANNA  S.E.S. UNIT-1    AND UNIT 2          ATTACHMENT  IV DG-E 125V DC SYSTEM Page  1 ENCLOSURE 1 The  following information is applicable to either Unit at        Susquehanna  SES.
Unit  Sus uehanna  S.E.S. Common to Unit    1  & 2  DG-E 125V DC SYSTEM
      'a ~  The number  of independent redundant divisions of Class 1E or safety-related dc power for this plant is see Remark l. (Include any separate Class 1E or safety-related dc, such as any dc dedicated to the diesel generators.)
: b. The number  of functional safety-related divisions of dc power necessary to attain safe shutdown for this unit is see Remark          1.
: 3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of dc power?
: a. alarms
: 1. Battery disconnect or    circuit  breaker open?  No
: 2. Battery charger disconnect or      circuit breaker open (both input ac and output dc)? No
: 3. dc system ground?    No
: 4. dc bus undervoltage?      No
: 5. dc bus overvoltage?    No
: 6. Battery charger failure?      No
: 7. Battery discharge?    No
 
0 SUS UEHANNA  S.E.S. UNIT-1    AND  UNIT 2      ATTACHMENT  IV DG-E 125V DC SYSTEM Page 2
: b. Indications
: 1. Battery float charge current?        No
: 2. Battery  circuit output current?      No
: 3. Battery discharge?      No
: 4. Bus  voltage?  No
: c. Does  the unit have written procedures for response to the above alarms and indications? No Does  this unit  have  indication of    bypassed and inoperable status of circuit breakers or other devices that can be used to disconnect the battery and battery charger from its dc bus and the battery charger from its ac power source during maintenance or testing? No See Remark 2
: 5. If the  answer  to  any  part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related dc systems.
* See note below.
See Remark 2
: 6.    (I)  Have you conducted    a review of maintenance and testing activities to minimize the potential for human error causing more than one dc division to be unavailablet ~es and (2) do plant procedures prohibit maintenance or testing on redundant dc divisions at the sama time? ~es If the facility Technical      Specifications    have  provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specifications for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.
 
SUS UEHANNA  S.E.S. UNIT-1    AND  UNIT 2          ATTACHMENT    IV DG-E 125V DC SYSTEM Page 3
: 7. Are maintenance, surveillance and test procedures. regarding            station batteries conducted routinely at this plant?'pecifically:
: a. At least, once per 7 days are the following verified to          be  within acceptable limits:
: 1. Pilot cell electrolyte level?        Yes
: 2. Specify gravity or charging current?          Yes
: 3. Float voltage?    Yes
: 4. Total bus voltage  on  float  charge?    Yes
: 5. Physical condition of    all cells?      Yes
: b. At least once per 92 days, or within 7 days after a battery discharge, overcharge, or  if  the pilot cell readings are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
: l. Electrolyte level of    each  cell?    Yes
: 2. The average  specific gravity of all cells?        Yes
: 3. The  specific gravity of    each  cell?    Yes
: 4. The average electrolyte temperature        of  a  representative  number  of cells?    Yes
: 5. The  float voltage of  each  cell?    Yes
: 6. Visually inspect or measure resistance of terminals          and connectors (including the connectors at the dc bus)? Yes
 
SUS UEHANNA S.E.S. UNIT-1 AND UNIT 2              ATTACHMENT  IV DG-'E 125V DC SYSTEM Page 4
: c. At least every    18 months  are the following    verified:
: 1. Low  resistance of each connection (by test)?        Yes
: 2. Physical condition of the battery?        Yes
: 3. Battery charger capability to deliver rated        ampere output to the dc bus?    Yes t
The  capability of the battery    -to deliver its design duty cycle to the dc bus?    Yes
: 5. Each  individual cell voltage is within acceptable limits during the service test? Yes
: d. At least every 60 months, is capacity of each battery verified by performance of a discharge test? Yes
: e. At least annually, is the battery capacity verified by performance discharge test,    if  the battery shows signs of degradation or has reached 85X of the expected service life? Yes
: 8. Does  this plant  have operational features such      that following loss of one safety-related dc power supply or bus:
: a. Capability is maintained for ensuring continued        and adequate reactor cooling? Yes
: b. Reactor coolant system    integrity  and  isolation capability are maintained? Yes f
: c. Operating procedures, instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core,cooling? Yes
 
SUS UEHANNA      S.E.S. UNIT-1 AND UNIT 2        ATTACHMENT  IV DG-E 125V DC SYSTEM Page  5 9        If the    answer    to  any  part of question 6,  7 or 8 is no, then provide your basis for not performing the maintenance, surveillance and test procedures described and/or the bases              for not including the operational features cited.
* See note below.
*Note:      For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE).            If you select this option, you are required to:
(1)    So    state in response to these questions, and (2)    Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (Section
: 2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."
c:Xup51hdocshdg-e125v.pgd  (18)10/24/91 8:48am
 
RESPONSE  TO GENERIC LETTER  91-06      SUS UEHANNA  S.E.S. UNIT  1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 1 REMARK  1:
Diesel Generator    E is  an installed spare diesel generator capable of substituting    as an emergency  power source for any one of the existing emergency diesel generators (A, B, C, D). The Diesel Generator E 125V dc power subsystem is identified as Channel H and is dedicated to providing dc power to ESW valves for Diesel Generator E cooling, Diesel Generator E controls, and Diesel Generator E 4. 16      kV  Switchgear. This equipment is  all located in a separate Diesel Generator      E  building.
The Diesel Generator    E 125V dc Subsystem    is required only when this diesel generator is substituting for one of the existing diesel generators.            It is in addition to, independent and isolated from the other four Class lE 125V dc Subsystems. Loss of any one of the 125V dc Subsystems does not prevent the minimum safety function from being performed.
REMARK  2:
1.0    The  following indications    and alarms  for the DG-E 125V dc class lE subsystem are provided.      Justification for this design is consistent with the design philosophy regarding Control Room monitoring of Class          1E dc power systems as previously provided in PLA-959 to the NRC dated 11/6/81.
 
RESPONSE  TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S. UNIT  1 AND  UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 2 Location Alarm or  Indication                    Local          Control  Room            Notes Bus  Undervoltage Alarm                                                            1,2 Bus Ground Alarm                                                                  1,2 Battery Monitor Alarm                                                              1,2,4 Battery Charger Trouble Alarm                                                      1,2,5 Bus Ammeter Bus  Voltmeter Battery Charger Ammeter Battery Charger Voltmeter DC  System Trouble Alarm NOTES:
: 1. See  Table  1 for specific local    alarm annunciation.
: 2. These alarms are    locally provided    on DG-E  annunciator/reflasher panel OC577E. A  dc subsystem trouble alarm .is reflashed to the control  room by  this annunciator.      See Table 1, Figure 1.
: 3.      Heters are provided    locally. See  Figure 2.
: 4.      Battery monitor compares battery center point voltage with high and low threshold reference points,,of the high and low voltage comparators. The degraded cell conditions (such" as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.
 
RESPONSE  TO GENERIC LETTER    91-06    SUS UEHANNA  S.E.S. UNIT  1  AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 3
: 5.      Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation, battery charger high/low voltage and battery charger high voltage (shutdown).
: 6.      One  annunciator window for the    DG-E 125V dc  subsystem    is provided.
2.0    The  monitoring    scheme  provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section B of R.G. 1.47.
The SSES    design is based on the general criteria that,      if  the operator can perform some      corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.
Annunciating specific inputs from the 125V dc system in the control room does not enhance the control room operators's ability to deal with the situation and    it would not be consistent with SSES alarm design philosophy. However,.if the only response required is to dispatch an operator to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity re'quired to direct that operator to the proper location. This method is faster and more reliable since abnormal conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 125V dc system instrumentation, locally provided, is in full compliance with the requirement of IEEE 308-1974 and Regulatory Guide 1.47.
The  DC  system general    trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class 1E dc power system are maintained in a steady state ready to perform the required safety function.
e
 
RESPONSE  TO GENERIC LETTER    91-06    SUS UEHANNA  S.E.S. UNIT  1 AND  UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 4 3.0    Following is the justification      for each alarm and  indication listed in Generic Letter 91-06.
: 3. 1  Batter    Disconnect or  Circuit Breaker  0 en Alarm:
The Susquehanna    S.E.S. (SSES) DG-E 125V dc subsystem utilizes a fused disconnect as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or, degraded cell condition). A variable threshold circuit accepts the battery 'charger voltage and develops two threshold voltages for use with the comparators.
When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor annunciator which is reflashed to the control room as a DG-E 125V dc system trouble alarm.      This is consistent with the general design philosophy discussed in Section 2.0.
3.2    Batter    Char er Disconnect or  Circuit Breaker  0 en  Both In ut AC and Out  ut DC  Alarm 3.2. 1 Battery Charger    AC Input Disconnect or Circuit Breaker:
SSES  utilizes a circuit breaker in the battery charger as      a disconnect for the ac input power supply. An ac power failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 480V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local annunciator panel, which is reflashed to the control room as a DG-E 125V dc system trouble alarm.
This is consistent with the general design philosophy discussed in section 2.0.
 
RESPONSE TO GENERIC LETTER            91-06        SUS UEHANNA  S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 5 3.2.2 Battery Charger            DC  Output Circuit Breaker SSES  utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with            an  auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local annunciator panel. A DG-E dc system trouble alarm is reflashed to the control room by the local annunciator
                'anel. This is consistent with the, general design philosophy discussed in Section 2.0.
3.3  DC S  stem Ground Alarm'he DG-E 125V dc subsystem              is ungrounded and is provided with a ground detection circuit. It consists of a relay having a center tapped coil. The coil is connected across the positive and negative bus and its center point is grounded. The ground detection relay coil is not actuated during normal operation of the 125V dc subsystem when a ground is not present. A ground on either the positive or negative bus of the 125V dc subsystem causes one-half of the relay coil to be short circuited, thus providing sufficient voltage to the remaining relay coil half to pickup the relay. A normally open contact of the relay closes and initiates a 125V dc system ground alarm at the local annunciator panel. A DG-E dc system trouble alarm is reflashed to the control room annunciator by the local annunciator panel.                This is consistent with the general design philosophy discussed in Section 2.0.
3.4  DC  Bus  Undervolta          e Alarm The DG-E 125V dc subsystem is provided with a battery charger undervoltage relay. The relay is connected across the positive and negative bus of the 125V dc battery charger.                The relay is normally energized and set to drop out at the specified setpoint.
A  battery charger trouble alarm at the local annunciator panel is
 
RESPONSE TO GENERIC LETTER    91-06    SUS UEMANNA  S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTE PAGE 6 initiated after the undervoltage relay    drops out.
The  local annunciator panel, in turn, reflashes the alarm to the control room annunciator as a DG-E dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
In addition to the battery charger undervoltage relay, a bus undervoltage relay is provided to detect a loss of bus voltage.
The most probable cause of a DC system undervoltage condition is a result of a battery charger problem, which will be detected by the battery charger, failure alarm relay (see Section 3.6). The charger failure relay initiates a battery charger trouble alarm at the local annunciator panel, which in turn, reflashes a DG-E dc system trouble alarm to the control room annunciator.      This is consistent with the general design philosophy discussed in Section 2.0.
3.5  DC  Bus Overvolta  e Alarm The DG-E 125V dc subsystem  is provided with an overvoltage relay.
The relay is located inside    the battery charger cabinet. It is connected across the positive and negative 125V dc bus of the battery charger and set to pick up at the specified setpoint. A normally open contact of the overvoltage relay, when closed, initiates a battery charger trouble alarm at the local annunciator panel which in turn will reflash a DG-E dc system trouble alarm to the control room annunciator.
Since the battery, the battery charger and the dc load center are in close proximity of each other, the battery charger voltage is representative of the DG-E 125V dc bus voltage. This is consistent with the general design philosophy discussed in Section 2.0.
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA  S.E.S. UNIT  I AND  UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 7 3.6  Batter  Char er  Failure Alarm The DG-E 125V dc subsystem    battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.
This condition is indicative of a battery charger failure and        it initiates a battery charger trouble alarm at the local annunciator panel which in turn    will reflash  a DG-E dc system  trouble alarm to the control room annunciator. This is consistent with the general design philosophy discussed in Section 2.0.
3.7  Batter  Dischar  e Alarm The  battery can  only discharge when its terminal voltage is less than the nominal open circuit voltage. This is indicative of a battery charger failure or system current in excess of the charger capability. A battery charger, failure alarm is provided and its operation is discussed in Section 3.6. When system current exceeds battery charger capability, a dc system undervoltage condition will occur, and will be detected by the battery charger undervoltage relay (see Section 3.4). Charger failure and battery charger undervoltage initiate alarms at the local annunci ator panel which in turn will reflash a DG-E dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.
3.8  Batter  Float Char  e  Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. Measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this      circuit.'hese   shu'nts must be manually removed when reading normal small      float  charge current. Thus  this reading  cannot be continuous and no automatic
 
RESPONSE TO GENERIC LETTER  91-06      SUS UEHANNA  S.E.S. UNIT  1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 8 indication or alarms  can be given.
Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.
The  battery charger undervoltage, bus ground, battery m'onitor and battery charger failure alarms (previously described) provide continuous monitoring to detect degradation of battery capability.
These alarms will reflash the DG-E dc system trouble alarm in the control room, and an operator is dispatched locally to determine the cause of the condition and initiate corrective action.
Specific indication is provided on the local annunciator panel.
This response is exactly what would be achieved if an improper state of battery current were indicated on an ammeter in the control room.
This is consistent with the general design philosophy discussed     in Section 2.0.
3.9  Batter  Circuit Out  ut Current Indication In normal condition when the battery charger is supplying the 125V dc power, the battery circuit (battery and the battery charger) output current is indicated by    an ammeter  located at the battery charger.
In the condition of a battery charger failure, the battery supplies the dc power. In this condition the battery circuit output current is indicated by an ammeter located at the dc switchboard.
As  indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.
 
RESPONSE TO GENERIC LETTER    91-06      SUS UEHANNA S.E.S. UNIT 1 AND  UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 9 3.10  Batter  Dischar  e  Indication As  previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system current in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator'will be dispatched locally to determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved      if battery discharge current was indicated on an ammeter in the control room.
3.11  Bus  Volta e  Indication The battery, the battery charger and the dc switchboard of the DG-E 125V dc subsystem    are located in close proximity of each other.
The battery charger and the dc switchboard are each provided with a voltmeter. The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. This condition will occur when a battery charger problem is present.
Undervoltage and overvoltage conditions are monitored at the battery charger, and are annunciated as battery charger trouble at the local annunciator panel. A DG-E dc system trouble alarm is reflashed to the control room annunciator by the local annunciator panel.
This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 125V dc bus voltage indication is not provided in the control room and has been provided on the front of the dc switchboard where    it  provides useful information during surveillance and maintenance activities.
A  voltmeter is located on the front of the battery charger panel.
With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close
 
RESPONSE  TO GENERIC LETTER  91-06      SUS UEHANNA  S.E.S. UNIT 1 AND  UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 10 proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local annunciator panel which is reflashed to the control room as a DG-E dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.
: 3. 12  Alarm Res onse Procedure Control room alarm response procedures for a DG-E 125V dc system trouble alarm direct the operator to respond to the local annunciator panel to determine the condition which caused the alarm.
Local alarm response  procedures  for the annunciator  panel are provided to direct  the operator to determine the cause of the condition and to initiate corrective action.
: 3. 13  Indication of B assed and Ino erable Status of Circuit Breakers or Other Disconnectin Devices Although indication of bypassed and inoperable status of circuit breakers or other disconnecting devices is not provided as a part of the Bypass Indication System, the 125V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):
Hain battery fused disconnect open.
Battery charger  ac input circuit breaker open.
Battery charger dc output  circuit  breaker open or  125V dc switchboard breaker open.
 
RESPONSE    TO GENERIC LETTER        91-06    SUS UEHANNA S.E.S. UNIT  1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 11 TABLE 1 125V DG-E    DC S    stem Annunciator Panel Alarms
: l.     125V DC System Low        Voltage
: 2.     125V DC System Ground
: 3.     Battery Honitor (indicates battery degradation or          open  battery fuses)
: 4.     Battery Charger Trouble indicates (1)         AC power  failure, (2) DC output breaker open, (3),battery charger failure, (4) battery charger high/low voltage, or (5) battery charger'igh voltage (shutdown).
C:XQP51%00CS~RGL91-06.PGD (18) 10/24/91 8:35am
 
MULTIPLE ALARM INPUTS DG-E BLDG        FROM DG-E 125V DC PANEL OC577E      POWER SYSTEM PER TABlE 1 DG-E BLDG PANEL OC577E CONTROL ROOM PANEL OC653          DC SYSTEM TROUBLE ANNUNCIATOR FIGURE 1
 
BATTERY BANK BATTERY 7/59 CHARGER AMMETER 59                                                            BATTERY FUSE          MONITOR VOLTMETER AMMETER VOLTMETER SYSTEM GROUND 27                          INDICATORS DC SWITCHBOARD LOADS      LOADS SEE TABLE 1  FOR ALARMS DG-E 125V DC SYSTEM FIGURE 2}}

Latest revision as of 01:14, 22 October 2019

Forwards Response to Generic Ltr 91-06, Resolution of Generic Issues A-30, 'Adequacy of Safety-Related DC Power Supplies.'
ML18026A242
Person / Time
Site: Susquehanna  Talen Energy icon.png
Issue date: 10/24/1991
From: Keiser H
PENNSYLVANIA POWER & LIGHT CO.
To: Chris Miller
Office of Nuclear Reactor Regulation
References
REF-GTECI-A-30, REF-GTECI-EL, TASK-A-30, TASK-OR GL-91-06, GL-91-6, PLA-3673, NUDOCS 9111010196
Download: ML18026A242 (94)


Text

ACCELERATED DTRIBUTION DEMONS~TION SYSTEM REGULATORY INFORMATION DISTRIBUTION SYSTEM (RIDS)

ACCESSION NBR: 9111010196 DOC. DATE: 91/10/24 NOTARIZED: NO DOCKET FACIL:50-387 Susquehanna Steam Electric Station, Unit 1, Pennsylva 05000387 50-388 Susquehanna Steam Electric Station, Unit 2, Pennsylva 05000388 AUTH. NAME AUTHOR AFFILIATION KEISER,H.W. Pennsylvania Power & Light Co.

RECIP.NAME RECIPIENT AFFILIATION MILLER,C.L. Project Directorate I-2

SUBJECT:

Forwards response to Generic Ltr 91-06, "Resolution of Generic Issues A-30, 'Adequacy of Safety-Related DC Power Supplies.'" D DISTRIBUTION CODE: AOOID COPIES RECEIVED:LTR 7 ENCL / SIZE:

TITLE: OR Submittal: General Distribution

/

NOTES:LPDR 1 cy Transcripts. 05000387

~ 'PDR 1 cy Transcripts. 05000388 A 5:~~ 8~~r>> D RECIPIENT COPIES RECIPIENT COPIES i ID CODE/NAME LTTR ENCL ID CODE/NAME LTTR ENCL D PDl-2 LA 1 1 PD1-2 PD 1 1 RALEIGH,J. 2 2 INTERNAL: ACRS 6 6 NRR/DET/ECMB 7D 1 1 NRR/DET/ESGB 1 1 NRR/DOEA/OTS B1 1 1 1 NRR/DST 8E2 1 1 NRR/DST/SELB 7E 1 1 NRR/DST/SICB8H7 1 1 NRR/DST/SRXB 8E 1 1 NUDOCS-ABSTRACT 1 1 OC/LF 1 0 OGC/HDS2 1 0 QE 1 1 RES/DSIR/EIB 1 1 F-Kl'SIC EXTERNAL: NRC PDR 1 1 NOTES: 2 2 R

D D

D NOTE TO ALL "RIDS" RECIPIENTS:

PLEASE HELP US TO REDUCE XVASTE! CONTACT THE DOCUMENT CONTROL DESK, ROOM Pl-37 (EXT. 20079) TO ELIMINATEYOUR NAME FROM DISTRIBUTION LISTS FOR DOCUMENTS YOU DON'T NEED!

TOTAL NUMBER OF COPIES REQUIRED: LTTR 26 ENCL 24

0 Pennsylvania Power 8 Light Company Two North Ninth Street ~Allentown, PA,18101-1179,~,215/774-5151 Harold W. Keiser Senior Vice President-Nuclear 1'CT 215/7744194 2 4 jtIQ)

Director of Nuclear Reactor Regulation Attention: Hr. C. L. Hiller, Project Director Project Directorate I-2 Division of Reactor Projects U.S. Nuclear Regulatory Commission Washington, D.C. 20555 SUSQUEHANNA STEAN ELECTRIC STATION RESPONSE TO GENERIC LETTER 91-06 Docket Nos. 50-387 LA- 3673 FILES R41-1D and 50-388

Dear Hr. Hiller:

Enclosed is our response to Generic Letter 91-06, "Resolution of Generic Issue A-30". In an effort to avoid confusion caused by extensive explanatory remarks provided for each DC system, our response is divided into four parts:

I ATTACHMENT ATTACHMENT ATTACHMENT II:

III:

24V DC SYSTEM 125V DC SYSTEM 250V DC SYSTEM ATTACHMENT IV  : DG'-E 125V DC SYSTEM Should you have any questions, please contact Hr. W. W. Williams, at (215) 774-7910.

Very truly yours, gl H. W. Keiser Enclosure 9111p1 01'96K 91102%

PDR ADOC p5ppp387 P

OCT 24 lg01 FILES A17-8/so-24 PLA-'3673 Mr. C. L. Miller cc: iiiLC D~ocumen. Control-Desk-(original.)P NRC Region I Mr. G. S. Barber, NRC Sr. Resident Inspector Mr. J. J. Raleigh, NRC Project Manager WWW:llr PLA/021. WWW

SUS UEHANNA S.E.S. ATTACHMENT I 24V DC SYSTEN Page 1 ENCLOSURE 1 The following information is applicable to either Unit 1 or 2 at Susquehanna SES.

l. Unit Sus uehanna S.E.S. Unit 1 or 2 24V DC
2. a ~ The number fty- l ddt f tll yl tl any separate Class lE or safety-related dc, such dedicated to the diesel generators.)

~t.(l of independent redundant divisions of Class lE or as any dc ld

b. The number of functional safety-related divisions of dc power yt ttl f ttd f tll ltd
3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of dc power?
a. Alarms
1. Battery disconnect or circuit breaker open?

No

2. Battery charger disconnect or circuit breaker open (both input ac and output dc)? No
3. dc system ground? No
4. dc bus undervoltage? No
5. dc bus overvoltage? No
6. Battery charger failure? No

...9111010196

C 4'

SUS UEHANNA S.E.S. ATTACHMENT I 24V DC SYSTEM Page 2

7. Battery discharge? No
b. Indications
1. Battery float charge current? No
2. Battery circuit output current? No
3. Battery discharge? No
4. Bus voltage? No
c. Does the unit have written procedures for response to the above alarms and indications? No
4. Does this unit have indication of bypassed and inoperable status of circuit breakers or other devices that can be used to disconnect the battery and battery charger from its dc bus and the battery charger from its ac power source during maintenance or testing?

No See remark tl

5. If the answer to any part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related dc systems.
  • See note below.

See remark Ol

6. (I) Have you conducted a review of maintenance and testing activities to minimize the potential for human error causing more than one dc division to be unavailablet ~es and (2) do plant procedures prohibit maintenance or testing on redundant DC divisions at the same time'I ~es If the facility Technical Specifications have provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specifications for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.

I

~YYS.E.S.

SUS UEHANNA T

ATTACHMENT Page 3

7. Are maintenance, surveillance and test procedures regarding station batteries conducted routinely at this plant? Specifically:
a. At least once per 7 days are the following verified to be within acceptable limits:
1. Pilot cell electrolyte level? Yes
2. Specify gravity or charging current? Yes
3. Float voltage? Yes
4. Total bus voltage on float charge? Yes
5. Physical condition of all cells? Yes
b. At least once per 92 days, or within 7 days after a battery discharge, overcharge, or if the pilot cell readings are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
l. Electrolyte level of each cell? Yes
2. The average specific gravity of all cells? Yes
3. The specific gravity of each cell? Yes
4. The average electrolyte temperature of a representative number of cells? Yes
5. The float voltage of each cell? Yes
6. Visually inspect or measure resistance of terminals and connectors (including the connectors at the dc bus)? Yes

SUS UEHANNA S.E.S. ATTACHMENT I 24V DC SYSTEM Page 4

c. At least every 18 months are the following verified:
1. Low resistance of each connection (by test)? Yes
2. Physical condition of the battery? Yes
3. Battery charger capability to deliver rated ampere output to the dc bus? Yes
4. The capability of the battery to deliver its design duty cycle to the dc bus? Yes
5. Each individual cell voltage is within acceptable limits during the service test? Yes
d. At least every 60 months, is capacity of each battery verified by performance of a discharge test? Yes
e. At least annually, is the battery capacity verified by performance discharge test, if the battery shows signs of degradation or has reached 85X of the expected service life? Yes
8. Does this plant have operational features such that following loss of one safety-related dc power supply or bus:
a. Capability is maintained for ensuring continued and adequate reactor cooling? Yes
b. Reactor coolant system integrity and isolation capability are maintained? Yes
c. Operating procedures, instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core cooling? Yes
9. If the answer to any part of question 6, 7 or 8 is no, then provide your basis for not performing the maintenance, surveillance and test procedures described and/or the bases for not including the operational features cited.
  • See note below.

N SUS UEHANNA S.E.S. ATTACHMENT I 24V DC SYSTEM Page 5

  • Note: For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE). If you select this option, you are required to:

(1) So state in response to these questions, and (2) Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (Section

2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."

c:iwp51idocsi24VDCSYS.PCD (18) 10/24/91 9:20am

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 1 REMARK 1:

1.0 The following indications and alarms for the 24V dc class 1E subsystem are provided. Justification for this design has been previously provided in PLA-959 to the NRC dated 11/6/81, regarding Control Room monitoring of Class lE dc power systems.

Each 24V dc subsystem consists of two 24 volt battery banks connected in series with a common ground bus connected to the common (center) point of the two battery banks. The ground bus is solidly grounded to the station ground grid. Each 24 volt battery bank is designated as either the positive or negative bus as referenced to ground. The alarms/indications in the following table and discussion are typical for each positive and negative bus.

, Location Alarm or Indication Local Control Room Notes Bus Undervoltage Alarm 1,2 Battery Monitor Alarm 1,2,4 Battery Charger Trouble Alarm 1,2,5 Bus Overvoltage Alarm 1,2 Bus Voltmeter Battery Charger Ammeter 3 Battery Charger Voltmeter DC System Trouble Alarm NOTES:

1. See Table 1 and Figure 2 for specific local alarm indication.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 2

2. These are locally indicated and actuate dc subsystem trouble alarm, see Table 1 and Figure 1.
3. Heters are provided locally. See Figure 3.
4. Battery monitor 'compares battery center point voltage with high and low threshold reference points of the high and low voltage comparators. The degraded cell conditions (such as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.
5. Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation.
6. One annunciator window for each 24V dc subsystem is provided.

(Includes inputs from either the positive or negative bus).

2.0 The monitoring scheme provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section 8 of R.G. 1.47.

The SSES design is based on the general criteria that, if the operator can perform some corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.

Annunciating specific inputs from the 24V dc system in the control room does not enhance the control room operators's ability to deal with the situation and it would not be consistent with SSES alarm design philosophy. However, if the only response required is to dispatch an operator to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity required to direct that operator to the proper location. This method is faster and more reliable since abnormal

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 3 conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 24V dc system instrumentation, locally provided, is in full compliance with the requirement of IEEE 308-1974 and Regulatory Guide 1.47.

The DC system general trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class lE dc power system are maintained in a steady state ready to perform-the required safety function.

3.0 Following is the justification for each alarm and indication listed in Generic Letter 91-06.

3. 1 Batter Disconnect or Circuit Breaker 0 en Alarm:

The Susquehanna S.E.S. (SSES) 24V dc subsystem utilizes fuses as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or degraded cell condition). A variable threshold circuit accepts the battery charger voltage and develops two threshold voltages for use with the comparators. When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor alarm which is reflashed to the control room as a 24V dc system trouble alarm.

This is consistent with the general design philosophy discussed in Section 2.0.

3.2 Batter Char er Disconnect or Circuit Breaker 0 en Both In ut AC and Out ut DC Alarm 3.2. 1 Battery Charger AC Input Disconnect or Circuit Breaker:

SSES utilizes a circuit breaker in the battery charger as a disconnect for the ac input power supply. An ac power

RESPONSE TO GENERIC. LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEN PAGE 4 failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 120V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local reflasher panel, which is reflashed to the control room as a 24V dc system trouble alarm. This is consistent with the general design philosophy discussed in section 2.0.

3.2.2 Battery Charger DC Output Circuit Breaker SSES utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with an auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room by the local reflasher panel.

This is consistent with the general design philosophy discussed in Section 2.0.

3.3 DC S stem Ground Alarm The 24V dc subsystem is a solidly grounded system. Therefore, a system ground alarm is not required. A second ground on either the positive or negative bus will cause protective devices in the circuit to operate. This condition will be detected at the local reflasher panel by either the battery monitor alarm (for battery fuse open) or the battery charger trouble alarm (for battery charger DC output breaker open).

In either case, the local reflasher panel will reflash a 24V dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy discussed in Section'.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 5 3.4 DC Bus Undervolta e Alarm The 24V dc subsystem is provided with positive and negative dc bus undervoltage relays. Each relay is connected across the system buses (positive bus to ground, negative bus to ground). The relays are normally energized and, set to drop out at the specified setpoint. A positive bus or negative bus low voltage alarm at the local reflasher panel is initiated after the undervoltage relay drops out.

The local reflasher panel, in turn, reflashes the alarm to the control room annunciator as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3.5 DC Bus Overvolta e Alarm The 24V dc subsystems are provided with overvoltage relays. The relays are located inside the 24V dc distribution panels. Each relay is connected across the system buses (positive bus to ground, negative bus to ground) and set to pick up at the specified setpoint. A normally open contact of the over'voltage relay, when closed, initiates a positive bus or negative bus high voltage alarm at the local reflasher panel which in turn will reflash a dc system trouble to the control room annunciator. This is consistent with the general design philosophy discussed in Section 2.0.

3.6 Batter Char er Failure Alarm Each 24V dc subsystem battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.

This condition is indicative of a battery charger failure and it initiates a battery charger trouble alarm at the local reflasher

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 6 panel which in turn will reflash a dc system trouble alarm to the control room annunciator.

This is consistent with the general design philosophy discussed in Section 2.0.

3.7 Batter Dischar e Alarm The battery can only discharge when its .terminal voltage is less than the nominal open circuit voltage. This is indicative of a battery charger failure or system current in excess of the charger capability. A battery charger failure alarm is provided and its operation is discussed in Section 3.6. When system current exceeds battery charger capability, a dc system undervoltage condition will occur, and will be detected by the dc bus undervoltage relay (see Section 3.4). Charger failure and bus undervoltage initiate alarms at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.

3.8 Batter Float Char e Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. Measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit. These shunts must be manually removed when reading normal small float current.

Thus this reading cannot be continuous and no automatic indication or alarms can be given.

Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.

The bus undervoltage, battery monitor and battery charger failure

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 7 alarms (previously described) provide continuous monitoring to detect degradation of battery capability. These alarms will reflash the dc system trouble alarm in the control room, and an operator is dispatched locally to determine the cause of the condition and initiate corrective action.

Specific indication is provided on the local reflasher panel.

This response is exactly what would 'be achieved if an improper state of battery current were indicated on an ammeter in the control room.

This is consistent with the general design philosophy discussed in Section 2.0.

3.9 Batter Circuit Out ut Current Indication In normal condition when the battery charger is supplying the 24V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.

In the condition of a battery charger failure, the battery supplies the dc power. In this condition the battery circuit output current cannot be determined since an ammeter is not provided at the 24V dc distribution panels.

As indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.

3. 10 Batter Dischar e Indication As previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system current in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator will be dispatched locally to

I RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 8 determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved if battery discharge current was indicated on an ammeter in the control room.

3.11 Bus Volta e Indication The battery, the battery charger and the 24V dc distribution panel are located in close proximity of each other. The battery charger and the dc distribution panel are each provided with a voltmeter.

The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. At SSES bus undervoltage and overvoltage is monitored directly at the distribution panel.

The bus undervoltage and overvoltage conditions are annunciated as 24V dc system low or high voltage at the local reflasher panel. A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel.

This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 24V dc bus voltage indication is not provided in the control room and has been provided on the front of the distribution panel where it provides useful information during surveillance and maintenance activities.

A voltmeter is located on the front of the battery charger panel.

With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local reflasher panel which is reflashed to the control room as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEN PAGE 9

3. 12 Alarm Res onse Procedure Control room alarm response procedures for a 24V dc system trouble alarm direct the operator to respond to the local reflasher panel to determine the condition which caused the alarm.

Local alarm response procedures for the reflasher panel are provided to direct the operator to determine the cause of the condition and to initiate corrective action.

3. 13 Indication of B assed and Ino erable Status of Circuit Breakers or Other Disconnectin Devices Although indication of bypassed and inoperable status of circuit breakers or other disconnecting devices is not provided as a part of the Bypass Indication System, the 24V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):

Hain battery fuse open.

Battery charger ac input circuit breaker open.

Battery charger dc output circuit breaker open, or dc distribution panel feeder breaker open.

P RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

24V DC SUBSYSTEM PAGE 10 TABLE 1 24V DC S stem Ref lash Panel Indicators 1L610 (Typical for positive and negative buses)

l. 24V DC System Low Voltage
2. , 24V DC System High Voltage
3. Battery Honitor (indicates battery degradation or open battery fuses)
4. Battery Charger Trouble indicates (1) AC power failure, (2) DC output breaker open, or (3) battery charger failure C:KWP51%00CSK24VDCSS ~ PGO (18) 10/24/91 9:168AI

124 DC MULTIPLE ALARM INPUTS FROM %24V DC LOCAL REHASH PANEL POWER SYSTEM PER WITH INDICATION 1L670 TABLE 1 DC SYSTEM AlARM INPUTS FROM OTHER REFLASH PANELS (8MILAR TO ABOVE)

CONTROL ROOM PANEL 1C651 ANNUNCIATOR +24V DC SYSTEM TROUBLE 1L670 FIGURE 1

INDICATOR UGHI'ERASHER PANEL POWER FAILURE POSITIVE BUS NEGATIVE BUS BATlERY LOW HIGH CHARGER 41 VOLTAGE VOLTAGE TROUBLE 0

NEGATIVE BUS BATTERY BATIERY LOW POSITIVE CHARGER W VOLTAGE MONITOR TROUBLE 0

POSITIVE BUS BATlERY HIGH NEGATIVE VOLTAGE MONITOR 224V DC SYSTEM LOCAL REHASHER PANEL QYPICAO FIGURE 2

I BATIERY BANK 1 D670 I

+24 -24 I

96P

>0 CLQ

+24 VDC -24 VDC BA11ERY BA11ERY CHARGER CHAI&ER DC BKR DC BKR Qv Q~ QvQA 59 y 27 P

27 N y 69 N

AMP SPARE POS NEG SPARE COMP MPUIER OUTPUT VOLTS VOLTS OUTPUT

} NEG PROCESS SOURCE RNG. MON'S RADIATION INIERM RNG. MON'S MONITORS 1RIP. AUX, UNITS NOTE 1

+24V COMMON -24V NOTE 1: COMMON BUS GROUNDED 24 VDC SYSTEM OYPICAQ

SUS UEHANNA S.E.S. ATTACHMENT II 125V DC SYSTEM Page 1 ENCLOSURE 1 The following information is applicable to either Unit 1 or 2 at Susquehanna SES.

1. Unit SUS UEHANNA S.E.S. UNIT-1 or 2 125V DC SYSTEM
2. a 0 The number of independent redundant divisions of Class lE or safety-related DC power for this plant is See Remark 1 (Include any separate Class 1E or safety-related DC, such as any DC dedicated to the diesel generators).
b. The number of functional safety-related divisions of DC power necessary to attain safe shutdown for this unit is See Remark 2.
3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of DC power?

a ~ Alarms

1. Battery disconnect or circuit breaker open?

No

2. Battery charger disconnect or circuit breaker open (both input AC and output DC)? No
3. DC system ground? No DC bus undervoltage? No
5. DC bus overvoltage? No
6. Battery charger failure? No
7. Battery discharge? No
b. Indications
l. Battery float charge current? No
2. Battery circuit output current? No
3. Battery discharge? No Bus voltage? No

SUS UEHANNA S.E.S. ATTACHMENT II 125V DC SYSTEN Page 2

c. Does the unit have written procedures for response to the above

'alarms and indications? No I *,

I

4. Does this unit have indication of bypassed and inoperable'status of circuit breakers or other devices that can be used to disconnect the battery and battery charger from its DC bus, and the battery charger from its AC power source during maintenance or tes'ting?

No See remark ¹3

5. If the answer to any part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related DC systems. *See endnote.

See remark ¹3

6. (I) Have you conducted a review of maintenance and testing activities to minimize the potential for human error causing more than one DC division to be unavailablet ~es and (2) Do plant procedures prohibit maintenance or testing on redundant DC divisions at the same time? ~es If the facility Technical Specifications have provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specification for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.
7. Are maintenance, surveillance and test procedures regarding station batteries conducted routinely at this point? Specifically:
a. At least once per 7 days are the following verified to be within acceptable limits:

I. Pilot cell electrolyte level? Yes

2. Specific gravity or charging current? Yes
3. Float voltage? Yes
4. Total bus voltage on float charge? Yes
5. Physical condition of all cells? Yes

SUS UEHANNA S.E.S. ATTACHMENT II 125V DC SYSTEM Page 3

b. At least once per 92 days, or within 7 days after a battery discharge, overcharge, or if the pilot cell readings are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
l. Electrolyte level of each cell? Yes
2. The average specific gravity of all cells? Yes
3. The specific gravity of each cell? Yes
4. The average electrolyte temperature of a representative number of cells? Yes
5. The float voltage of each cell? Yes
6. Visually .inspect or measure resistance of terminals and connectors (including the connectors at the DC bus)? Yes
c. At least every 18 months are the following verified:

Low resistance of each connection (by test)? Yes

2. Physical condition of the battery? Yes
3. Battery charger capability to deliver rated ampere output to the DC bus? Yes The capability of the battery to deliver its design duty cycle to the DC bus'? Yes
5. Each individual cell voltage is within acceptable limits during the service test? Yes
d. At least every 60 months, is capacity of each battery verified by performance of a discharge test'? Yes
e. At least annually, is the battery capacity verified by performance discharge test, if the battery shows signs of degradation or has reached 85X of the expected service life? Yes
8. Does this plant have operational features such that following loss of one safety-related DC power supply or bus:
a. Capability is maintained for ensuring continued and adequate reactor cooling? Yes

SUS UEHANNA S.E.S. ATTACHMENT II 125V DC SYSTEN Page 4

b. Reactor coolant system integrity and isolation capability are maintained7 Yes
c. Operating procedures, instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core cooling7 Yes
9. If the answer to any part of question 6, 7, or 8 is no, then provide your basis for not performing the maintenance, surveillance and test procedures described and/or the bases for not including the operational features cited. *See Note below.
  • Note: For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE). If you select this option, you are required, to:
1) So state in response to these questions, and
2) Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (section 2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."

C:KIIP51I,docshadeqofsa.pgd (18) 10/24/91 8:57am

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 1 REMARK 1:

The Unit 1 Class 1E direct current, (dc) system consists of four independent 125 volt dc subsystems. These four subsystems are identified as channels A, B, C, and D. Each subsystem provides the control power for its associated class lE ac power load group consisting of: '. 16kV switchgear, 480V load centers, and a standby diesel generator. The 125V dc subsystems also provide dc power for safety feature valve actuation, diesel generator auxiliaries, and plant alarm and indication circuits.

REMARK 2:

Four separate and independent class 1E 125V dc subsystems supply control power for each of the class 1E load groups. Loss of any one of the subsystems does not prevent the minimum safety function from being performed (i.e., three out of four subsystems are necessary to attain safe shutdown for Unit 1).

REMARK 3:

1.0 The following indications and alarms for the 125V dc class lE subsystem are provided. Justification for this design has been previously provided in PLA-959 to the NRC dated ll/6/81, regarding Control Room monitoring of Class 1E dc p'ower systems.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 2 Location Alarm or Indication Local Control Room Notes Bus Undervoltage Alarm 1,2 Bus Ground Alarm 1,2 Battery Monitor Alarm 1,2,4 Battery Charger Trouble Alarm 1,2,5 Bus Ammeter Bus Voltmeter Battery Charger Ammeter Battery Charger Voltmeter DC System Trouble Alarm NOTES:

1. See Table 1 and Figure 2 for specific local alarm indication.
2. These are locally annunciated and actuate dc subsystem trouble alarm, see Table 1 and Figure l.
3. Heters are provided locally. See Figure 3.

Battery monitor compares battery center point voltage with high and low threshold reference points of the high and low voltage comparators. The degraded cell conditions (such as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 3

5. Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation, and bus overvoltage.
6. One annunciator window for the 125V dc subsystem is provided.

2.0 The monitoring scheme provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section B of R.G. 1.47.

The SSES design is based on the general criteria that, if the operator can perform some corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.

Annunciating specific inputs from the 125V dc system in the control room does not enhance the control room operators's ability to deal with the situation and it would not be consistent with SSES alarm design philosophy. However, if the only response required is to dispatch an operator to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity required to direct that operator to the proper location. This method is faster and more reliable since abnormal conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 125V dc system instrumentation, locally provided, is in full compliance with the requirement of, IEEE 308-1974 and Regulatory Guide 1.47.

The DC system general trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class 1E dc power system are maintained in a steady state ready to perform the required safety function.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 4 3.0 Following is the justification for each alarm and indication listed in Generic Letter 91-06.

3. 1 Batter Disconnect or Circuit Breaker 0 en Alarm:

The Susquehanna S.E.S. (SSES) 125V dc subsystem utilizes fuses as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or degraded cell condition). A variable threshold circuit accepts the battery charger voltage and develops two threshold voltages for use with the comparators. When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor alarm which is reflashed to the control room as a 125V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3.2 Batter Char er Disconnect or Circuit Breaker 0 en Both In ut AC and Out ut DC Alarm 3.2. 1 Battery Charger AC Input Disconnect or Circuit Breaker:

SSES utilizes a circuit breaker in the battery charger as a disconnect for the ac input power supply. An ac power failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 480V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local reflasher panel, which is reflashed to the control room as a 125V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEN PAGE 5 3.2.2 Battery Charger DC Output Circuit Breaker SSES utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with an auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room by the local reflasher panel.

This is consistent with the general design philosophy discussed in Section 2.0.

3.3 DC S stem Ground Alarm The 125V dc subsystem is ungrounded and is provided with a ground detection circuit. It consists of a relay having a center tapped coil. The coil is connected across the positive and negative bus and its center point is grounded. The ground detection relay coil is not actuated during normal operation of the 125V dc subsystem when a ground is not present. A ground on either the positive or negative bus of the 125V dc subsystem causes one-half of the relay coil to be short circuited, thus providing sufficient voltage to the remaining relay coil half to pickup the relay. A normally open contact of the relay closes and initiates a 125V dc system.

ground alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel. This is consistent with the general design philosophy discussed in Section 2.0.

3.4 DC Bus Undervolta e Alarm The 125V dc subsystem is provided with a dc bus undervoltage relay. The relay is connected across the positive and negative bus of the 125V dc subsystem. The relay is normally energized and set to drop out at the specified setpoint. A 125V dc bus undervoltage alarm at the local reflasher panel is initiated after the undervoltage relay drops out.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEN PAGE 6 The local reflasher panel, in turn, r eflashes the alarm to the control room annunciator as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3.5 DC Bus Overvolta e Alarm The 125V dc subsystem is provided with an overvoltage relay. The relay is located inside the battery charger cabinet. It is connected across the positive and negative 125V dc bus of the battery charger and set to pick up at the specified setpoint. A normally open contact of the overvoltage relay, when closed, initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble to the control room annunciator.

Since the battery, the battery charger and the dc load center are in close proximity of each other, the battery charger voltage is representative of the 125V dc bus voltage. This is consistent with the general design philosophy discussed in Section 2.0.

3.6 Batter Char er Failure Alarm The 125V dc subsystem battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.

This condition is indicative of a battery charger failure and it initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble alarm 'to the control room annunciator.

This is consistent with the general design philosophy discussed in Section 2.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 7 3.7 Batter Dischar e Alarm The battery can only discharge, when its terminal voltage is less than the nominal open circuit voltage. This is indicative of a battery charger failure or system current in excess of the charger capability. A battery charger failure alarm is provided and its operation is discussed in Section 3.6. 'When system current exceeds battery charger capability, a dc system undervoltage condition will occur, and will be detected by the dc bus undervoltage relay. (See Section 3.4.) Charger failure and bus undervoltage initiate alarms at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.

3.8 Batter Float Char e Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit. These shunts must be manually removed when reading normal small float charge current. Thus this reading cannot be continuous and no automatic indication or alarms can be given.

Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.

The bus undervoltage, bus ground, battery monitor and battery charger failure alarms (previously described) provide continuous monitoring to detect degradation of battery capability. These alarms will reflash the dc system trouble alarm in the control room, and an operator is dispatched locally to determine the cause of the condition and initiate corrective action.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 8 Specific indication is provided on the local reflasher panel.

This response is exactly what would be achieved if an improper state of battery current were indicated on an ammeter in the control room.

This is consistent with the general design philosophy discussed in Section 2.0.

3.9 Batter Circuit Out ut Current Indication.

In normal condition when the battery charger is supplying the 125V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.

In the condition of a battery charger failure, the battery supplies the dc power. In this condition the battery circuit output current is indicated by an ammeter located at the dc load center.

As indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.

3. 10 Batter Dischar e Indication As previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system current in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator will be dispatched locally to determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved if battery discharge current was indicated on an ammeter in the control room.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEM PAGE 9

3. 11 Bus Volta e Indication The battery, the battery charger and the dc load center of 125V dc subsystem are located in close proximity of each other. The battery charger and the dc load center are each provided with a voltmeter. The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. At SSES the bus undervoltage is monitored directly and the bus overvoltage conditions are monitored at the battery charger output. The bus undervoltage and the battery charger output overvoltage conditions are annunciated as 125V dc system low voltage or battery charger trouble at the local reflasher panel.

A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel.

This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 125V dc bus voltage indication is not provided in the control room and has been provided on the front of the load center where it provides useful information during surveillance and maintenance activities.

A voltmeter is located on the front of the battery charger panel.

With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local reflasher panel which is reflashed to the control room as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3. 12 ,

Alarm Res onse Procedure Control room alarm response procedures for a 125V dc system trouble alarm direct the operator to respond to the local reflasher panel to determine the condition which caused the alarm.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEH PAGE 10 Local alarm response procedures for the reflasher panel are provided to direct the operator to determine the cause of the condition and to initiate corrective action.

3. 13 Indication of B assed and Ino erable Status of Circuit Breakers or Other Oisconnectin Devices Although indication of bypassed and inoperable status of circuit breakers or other disconnecting devices is not provided as a part of the Bypass Indication System, the 125V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):

Hain battery fuse open.

Battery charger ac input circuit breaker open.

Battery charger dc output circuit breaker open or 125V dc load center input breaker open.

125V dc load center feeder breaker to 125V dc distribution panels open.

r (The undervoltage relay at the distribution panels initiates the distribution panel low voltage alarm at the local reflasher panel which is reflashed to the control room 125V dc system trouble alarm.)

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

125V DC SUBSYSTEN PAGE 11 TABLE 1 125V DC S stem Ref lash Panel Alarms 1L610

1. 125V DC System Low Voltage
2. 125V DC System Ground
3. Battery Monitor (indicates battery degradation or open battery fuses)
4. Battery Charger Trouble indicates (1) AC power failure, (2) DC output breaker open, (3) battery charger failure, or (4) bus overvoltage
5. 125V DC Distribution Panel 1D614 Low Voltage
6. 125V DC Distribution Panel 1D615 Low Voltage C:XWP51XDDCSX125VDCSS.PGD (18) 10/24/91 9:00am

CHANNEL A 125V DC MULTIPLE AIARM INPUTS LOCAL REHASH PANEL FROM 125V DC CHANNEL A WITH INDICATION POWER SYSTEM PER 1L610 TABK 1 DC SYSTEM ALARM INPUTS FROM OTHER REFLASH PANELS (SIMILAR TO ABOVE)

CONTROL ROOM PANEL 1C651 ANNUNCIATOR 125V DC SYSTEM TROUBLE 1L610 FIGURE 1

INDICATOR UGHT REFLASHER PANEL POWER NAMEPlATE FAILURE 125V DC SYSTEM BATTERY SPARE LOW VOLTAGE CHARGER 125V DC 125V DC DIST SYSTEM PANEL 10614 SPARE GROUND LOW VOLTAGE BATTERY 125V DC MONITOR PANEL 1D615 SPARE LOW VOLTAGE 125V DC SYSTEM LOCAL REFlASHER PANEL OYPfCAD FIGURE 2

BATTERY BANK BATTERY CHARGER 59 AMMETER BATTERY FUSE MONITOR VOLTMETER AMMETER Q VOLTMETER SYSTEM GROUND 27 INDICATORS DC LOAD CENTER LOADS LOADS SEE TABLE 1 FOR ALARMS 125V DC SYSTEM QYPICAD FIGURE 3

SUS UEHANNA S.E.S. ATTACHMENT III 250 DC SYSTEM Page 1 ENCLOSURE 1 The following information is applicable to either Unit 1 or Unit 2 at Susquehanna SES.

1. Unit Sus uehanna S.E.S. Unit-1 or 2 250V DC
2. ,The number of independent redundant divisions of Class 1E or safety-related dc power for this plant is ~2 two . (Include any separate Class lE or safety-related dc, such as any dc dedicated to,the diesel generators.)
b. The number of functional safety-related divisions of dc power necessary to attain safe shutdown for this unit is ~1 one
3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of dc power?
a. Alarms
1. Battery disconnect or circuit breaker open?

No

2. Battery charger disconnect or circuit breaker open (both input ac and output dc)? No
3. dc system ground? No
4. dc bus undervoltage? No
5. dc bus overvoltage? No
6. Battery charger failure? No

SUS UEHANNA S.E.S. ATTACHNENT III 250 DC SYSTEN Page 2

7. Battery discharge? No
b. Indications
1. Battery float charge current? No
2. Battery circuit output current? No
3. Battery discharge? No
4. Bus voltage? No
c. Does the unit have written procedures for response to the above alarms and indications? No Does this unit have indication of bypassed and inoperable status of circuit breakers or other devices that can be used to disconnect the battery and battery charger from its dc bus and the battery charger from its ac power source during maintenance or testing?

No See remark ¹1

5. If the answer to any part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related dc systems.
  • See note below.

See Remark ¹1

6. (1) Have you conducted a review of maintenance and testing activities to minimize the potential for human error causing more than one dc division to be unavai1ablet ~es and (2) do plant procedures prohibit maintenance or testing on redundant dc divisions at the same time? ~es (See response from the site)

If the facility Technical Specifications have provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specifications for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.

SUS UEHANNA S.E.S. ATTACHMENT III 250 OC SYSTEN Page 3

7. Are maintenance, surveillance and test procedures regarding station batteries conducted routinely at this plant? Specifically:
a. At least once per 7 days are the following verified to be within acceptable limits:
1. Pilot cell electrolyte level? Yes
2. Specify gravity or charging current? Yes
3. Float voltage? Yes
4. Total bus voltage on float charge? Yes
5. Physical condition of all cells? Yes
b. At least once per 92 days, or within 7 days after a battery discharge; overcharge, or if the pilot cell readings, are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
l. Electrolyte level of each cell? Yes
2. The average specific gravity of all cells? Yes
3. The specific gravity of each cell? Yes
4. The average electrolyte temperature of a representative number of cells? Yes
5. The float voltage of each cell? Yes
6. Visually inspect or measure resistance of terminals and connectors (including the connectors at the dc bus)? Yes

SUS UEHANNA S.E.S. ATTACHMENT III 250 DC SYSTEM Page 4

c. At least every 18 months are the following verified:
1. Low resistance of each connection (by test)? Yes
2. Physical condition of the battery? Yes
3. Battery charger capability to deliver rated ampere output to the dc bus? Yes
4. The capability of the battery to deliver its design duty cycle to the dc bus? Yes
5. Each individual cell voltage is within acceptable limits during the service test? Yes
d. At least every 60 months, is capacity of each battery verified by performance of a discharge test? Yes
e. At least annually, is the battery capacity verified by performance discharge test, if the battery shows signs of degradation or has reached 85K of the expected service life? Yes
8. Does this plant have operational features such that following loss of one safety-related dc power supply or bus:
a. Capability is maintained for ensuring continued and adequate reactor cooling? Yes
b. Reactor coolant system integrity and isolation capability are maintained? Yes
c. Operating procedures, instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core cooling? Yes
9. If the answer to any part of question 6, 7 or 8 is no, then provide your basis for not performing the maintenance, surveillance and test

SUS UEHANNA S.E.S. ATTACHNENT III 250 DC SYSTEM Page 5 procedures described and/or the bases for not including the operational features cited.

  • See note below.
  • Note: For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE). If you select this option, you are required to:

(1) So state in response to these questions, and (2) Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (Section

2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."

c:~sp51~docsQR106001.PGD (18) 10/24/91 9:06am

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 1 REMARK 1:

1.0 The following indications and alarms for the 250V dc class lE subsystem are provided. Justification for this design has been previously provided in PLA-959 to the NRC dated 11/6/81, regarding Control Room monitoring of Class 1E dc power systems.

Location Alarm or Indication Local Control Room Notes Bus Undervoltage Alarm 1,2 Bus Ground Alarm 1,2 Battery Monitor Alarm 1,2,4 Battery Charger Trouble Alarm 1,2,5 Bus Ammeter Bus Voltmeter Battery Charger Ammeter Battery Charger Voltmeter DC System Trouble Alarm NOTES:

1. See Table 1 and Figure 2 for specific local alarm indication.
2. These are locally indicated and actuate dc subsystem trouble alarm, see Table 1 and Figure l.
3. Meters are provided locally. See Figure 3.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 2

4. Battery monitor compares battery center point voltage with high and low threshold reference points of the high and low voltage comparators. The deg} aded cell conditions (such as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.
5. Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation, and bus overvoltage.
6. One annunciator window for each 250V dc subsystem is provided.

2.0 The monitoring scheme provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section B of R.G. 1.47.

The SSES design is based on the general criteria that, if the operator can perform some corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.

Annunciating specific inputs from the 250V dc system in the control room does not enhance the control room operators's ability to deal with the situation and it would not be consistent with SSES alarm design philosophy. However, if the only response required is to dispatch an operator, to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity required to direct that operator to the proper location. This method is faster and more reliable since abnormal conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 250V dc system instrumentation, locally provided, is in full compliance with the requirement of IEEE 308-1974 and Regulatory Guide 1.47.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 3 The DC system general trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class lE dc power system are maintained in a steady state ready to perform the r equired safety function.

3.0 Following is the justification for each alarm and indication listed in Generic Letter 91-06.

3.1 Batter Disconnect or Circuit Breaker 0 en Alarm:

The Susquehanna S.E.S. (SSES) 250V dc subsystem utilizes fuses as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or degraded cell condition). A variable threshold circuit accepts the battery charger voltage and develops two threshold voltages for use with the comparators. When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor alarm which is reflashed to the control room as a 250V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3.2 Batter Char er Disconnect or Circuit Breaker 0 en Both In ut AC and Out ut DC Alarm 3.2. 1 Battery Charger AC Input Disconnect or Circuit Breaker:

SSES utilizes a circuit breaker in the battery charger as a disconnect for the ac input power supply. An ac power failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 480V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local reflasher panel, which is reflashed to

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 4 the control room as a 250V dc system trouble alarm. This is consistent with the general design philosophy discussed in section 2.0.

3.2.2 Battery Charger DC Output Circuit Breaker SSES utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with an auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room by the local reflasher panel.

This is consistent with the general design philosophy discussed in Section 2.0.

3.3 DC S stem Ground Alarm The 250V dc subsystem is ungrounded and is provided with a ground detection circuit. It consists of a relay having a center tapped coil. The coil is connected across the positive and negative bus and its center point is grounded. The ground detection relay coil is not actuated during normal operation of the 250V dc subsystem when a ground is not present. A ground on either the positive or negative bus of the 250V dc subsystem causes one-half of the relay coil to be short circuited, thus providing sufficient voltage to the remaining relay coil half to pickup the relay. A normally open contact of the relay closes and initiates a 250V dc system ground alarm at the local reflasher panel. A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel. This is consistent with the general design philosophy discussed in Section 2.0.,

3.4 DC Bus Undervolta e Alarm The 250V dc subsystem is provided with a dc bus undervoltage relay. The relay is connected across the positive and negative

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 5 bus of the 250V dc subsystem. The relay is normally energized and set to drop out at the specified setpoint. A 250V dc bus undervoltage alarm at the local reflasher panel is initiated after the undervoltage relay drops out.

The local reflasher panel, in turn, reflashes the alarm to the control room annunciator as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3.5 DC Bus Overvolta e Alarm The 250V dc subsystem is provided with an overvoltage relay. The relay is located inside the battery charger cabinet. It is connected across the positive and negative 250V dc bus of the battery charger and set to pick up at the specified setpoint. A normally open contact of the overvoltage relay, when closed, initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble to the control room annunciator.

Since the battery,'he battery charger and,the dc load center are in close proximity of each other, the battery charger voltage is representative of 250V dc bus voltage. This is consistent with the general design philosophy discussed in Section 2.0.

3.6 Batter Char er Failure Alarm The 250V dc subsystem battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.

This condition is indicative of a battery charger failure and it initiates a battery charger trouble alarm at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 6 This is consistent with the general design philosophy discussed in Section 2.0.

3.7 Batter Dischar e Alarm The battery can only discharge when its terminal voltage is less than the nominal open. circuit voltage. This is indicative of a battery charger failure or system current in excess of the, charger capability. A battery charger failure alarm is provided and its operation is discussed in Section 3.6. When system current exceeds battery charger'apability, a dc system undervoltage condition will occur, and will be detected by the dc bus undervoltage relay. (See Section 3.4) Charger failure and bus undervoltage initiate alarms at the local reflasher panel which in turn will reflash a dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.

3.8 Batter Float Char e Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. Measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit. These shunts must be manually removed when reading normal small float charge current. Thus this reading cannot be continuous and no automatic indication or alarms can be given.

Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.

The bus undervoltage, bus ground, battery monitor and battery charger failure alarms (previously described) provide continuous monitoring to detect degradation of battery capability. These alarms will reflash the dc system trouble alarm in the control

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 7 room, and an operator is dispatched locally to de'termine the cause of the condition and initiate corrective action.

Specific indication is provided on the local reflasher panel.

This response is exactly what would be achieved if an improper state of battery current were indicated on an ammeter in the control room.

This is consistent with the general design philosophy discussed in Section 2.0.

3.9 Batter Circuit Out ut Current Indication In normal condition when the battery charger is supplying the 250V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.

In the condition of a battery charger failure, the battery supplies the dc power. In this condition, the battery circuit output current is indicated by an ammeter located at the dc load center.

As indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.

3.10 Batter Oischar e Indication As previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system cur rent in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator will be dispatched locally to determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved if battery discharge current was indicated on an ammeter in the

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 8 control room.

3. 11 Bus Volta e Indication The battery, the battery charger and the dc load center of 250V dc subsystem are located in close proximity of each other. The battery charger and the dc load center are each provided with a voltmeter. The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. At SSES the bus undervoltage is monitored directly and'the bus overvoltage conditions are monitored at the battery charger output. The bus undervoltage and the battery charger output overvoltage .conditions are annunciated as 250V dc system low voltage or battery charger trouble at the local reflasher panel.

A dc system trouble alarm is reflashed to the control room annunciator by the local reflasher panel.

This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 250V dc bus voltage indication is not provided in the control room and has been provided on the front of the load center where it provides useful information during surveillance and maintenance activities.

A voltmeter is located on the front of the battery charger panel.

With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local reflasher panel which is reflashed to the control room as a dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 9

3. 12 Alarm Res onse Procedure Control room alarm response procedures for a 250V dc system trouble alarm direct the operator to respond to the local reflasher panel to determine the condition which caused the alarm.

Local alarm response procedures for the reflasher panel are provided to direct the operator to determine the cause of the condition and to initiate corrective action.

3. 13 Indication of B assed and Ino erable Status of Circuit Breakers or Othe Disconnectin Devices Although indication of bypassed and inoperable status of circuit breaker's or other disconnecting devices is not provided as a part of the Bypass Indication System, the 250V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):

Main battery fuse open.

Battery charger ac input circuit breaker open.

Battery charger dc output circuit breaker open, or 250V dc load center breaker open.

250V dc load center feeder breaker to 250V dc motor control centers open.

(Each of the load center feeder breakers to the 250V dc MCC's is provided with an auxiliary position indicating switch which initiates an alarm on the local reflasher panel when the circuit breaker is open. A 250V dc system trouble alarm is reflashed to the control room by the local reflasher panel.)

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S.

250V DC SUBSYSTEM PAGE 10 TABLE 1 250V DC S stem Reflash Panel Indicators T ical

l. 250V DC System Low Voltage
2. 250V DC System Ground
3. Battery Monitor (indicates battery degradation or open battery fuses)
4. Battery Charger Trouble indicates (1) AC power failure, (2) DC output breaker open, (3) battery charger failure, or (4) bus overvoltage (Division I has 2 chargers, Division II has 1 charger)
5. Load Center Incoming Breakers Trip
6. RCIC & Isolation Valve Control Center 1D254 trouble
7. Turbine Bldg. Control Center 1D155 trouble
8. Computer UPS Supply Breaker Trip C:XMP51%00CSX250VDCSS.PGD (18) 10/24/91 9:08am

CHANNEL A 250V DC MULTIPLE ALARM INPUIS LOCAL RERASH PANEL FROM 250V DC CHANNEL A WITH INDICATION POWER SYStEM PER 1L650 TABLE 1 DC SYSTEM ALARM INPUTS FROM OTHER REFLASH PANELS (SIMILAR TO ABOVE)

CONTROL ROOM PANEL 1C651 ANNUNCIATOR 250V DC SYSTEM TROUBLE 1L650 FIGURE 1

INDICATOR UGHT REFLASHER PANEL POWER FAILURE BATTERY RCIC & ISO VLVS SYSTEM CHAIWER A CONTROL CENTER LOW VOLTAGE TROUBLE 1D254 TROUBLE 250V DC BATTERY TURB BU)G SYSTEM CHARGER B CONTROL CENTER GROUND TROUBLE 1D155 TROUBLE BATTERY LC INCOMING BKR COMPUTER UPS MONITOR 7245212/22 SUPPLY BKR TRIP TRIP 250V DC SYStEM LOCAL REFLASHER PANEL OYPICAO FIGURE 2

BATTERY BANK BATTERY CHARGER 59 AMMETER BATTERY FUSE MONITOR VOLTMETER AMMETER Q VOLTMETER SYSTEM GROUND 27 INDICATORS DC LOAD CENTER LOADS LOADS SEE TABLE 1 FOR ALARMS 250V DC SYSTEM OYPICAQ FIGURE 3

SUS UEHANNA S.E.S. UNIT-1 AND UNIT 2 ATTACHMENT IV DG-E 125V DC SYSTEM Page 1 ENCLOSURE 1 The following information is applicable to either Unit at Susquehanna SES.

Unit Sus uehanna S.E.S. Common to Unit 1 & 2 DG-E 125V DC SYSTEM

'a ~ The number of independent redundant divisions of Class 1E or safety-related dc power for this plant is see Remark l. (Include any separate Class 1E or safety-related dc, such as any dc dedicated to the diesel generators.)

b. The number of functional safety-related divisions of dc power necessary to attain safe shutdown for this unit is see Remark 1.
3. Does the control room at this unit have the following separate, independently annunciated alarms and indications for each division of dc power?
a. alarms
1. Battery disconnect or circuit breaker open? No
2. Battery charger disconnect or circuit breaker open (both input ac and output dc)? No
3. dc system ground? No
4. dc bus undervoltage? No
5. dc bus overvoltage? No
6. Battery charger failure? No
7. Battery discharge? No

0 SUS UEHANNA S.E.S. UNIT-1 AND UNIT 2 ATTACHMENT IV DG-E 125V DC SYSTEM Page 2

b. Indications
1. Battery float charge current? No
2. Battery circuit output current? No
3. Battery discharge? No
4. Bus voltage? No
c. Does the unit have written procedures for response to the above alarms and indications? No Does this unit have indication of bypassed and inoperable status of circuit breakers or other devices that can be used to disconnect the battery and battery charger from its dc bus and the battery charger from its ac power source during maintenance or testing? No See Remark 2
5. If the answer to any part of question 3 or 4 is no, then provide information justifying the existing design features of the facility's safety-related dc systems.
  • See note below.

See Remark 2

6. (I) Have you conducted a review of maintenance and testing activities to minimize the potential for human error causing more than one dc division to be unavailablet ~es and (2) do plant procedures prohibit maintenance or testing on redundant dc divisions at the sama time? ~es If the facility Technical Specifications have provisions equivalent to those found in the Westinghouse and Combustion Engineering Standard Technical Specifications for maintenance and surveillance, then question 7 may be skipped and a statement to that effect may be inserted here.

SUS UEHANNA S.E.S. UNIT-1 AND UNIT 2 ATTACHMENT IV DG-E 125V DC SYSTEM Page 3

7. Are maintenance, surveillance and test procedures. regarding station batteries conducted routinely at this plant?'pecifically:
a. At least, once per 7 days are the following verified to be within acceptable limits:
1. Pilot cell electrolyte level? Yes
2. Specify gravity or charging current? Yes
3. Float voltage? Yes
4. Total bus voltage on float charge? Yes
5. Physical condition of all cells? Yes
b. At least once per 92 days, or within 7 days after a battery discharge, overcharge, or if the pilot cell readings are outside the 7-day surveillance requirements are the following verified to be within acceptable limits:
l. Electrolyte level of each cell? Yes
2. The average specific gravity of all cells? Yes
3. The specific gravity of each cell? Yes
4. The average electrolyte temperature of a representative number of cells? Yes
5. The float voltage of each cell? Yes
6. Visually inspect or measure resistance of terminals and connectors (including the connectors at the dc bus)? Yes

SUS UEHANNA S.E.S. UNIT-1 AND UNIT 2 ATTACHMENT IV DG-'E 125V DC SYSTEM Page 4

c. At least every 18 months are the following verified:
1. Low resistance of each connection (by test)? Yes
2. Physical condition of the battery? Yes
3. Battery charger capability to deliver rated ampere output to the dc bus? Yes t

The capability of the battery -to deliver its design duty cycle to the dc bus? Yes

5. Each individual cell voltage is within acceptable limits during the service test? Yes
d. At least every 60 months, is capacity of each battery verified by performance of a discharge test? Yes
e. At least annually, is the battery capacity verified by performance discharge test, if the battery shows signs of degradation or has reached 85X of the expected service life? Yes
8. Does this plant have operational features such that following loss of one safety-related dc power supply or bus:
a. Capability is maintained for ensuring continued and adequate reactor cooling? Yes
b. Reactor coolant system integrity and isolation capability are maintained? Yes f
c. Operating procedures, instrumentation (including indicators and annunciators), and control functions are adequate to initiate systems as required to maintain adequate core,cooling? Yes

SUS UEHANNA S.E.S. UNIT-1 AND UNIT 2 ATTACHMENT IV DG-E 125V DC SYSTEM Page 5 9 If the answer to any part of question 6, 7 or 8 is no, then provide your basis for not performing the maintenance, surveillance and test procedures described and/or the bases for not including the operational features cited.

  • See note below.
  • Note: For questions involving supporting type information (question numbers 5 and 9) instead of developing and supplying the information in response to this letter, you may commit to further evaluate the need for such provisions during the performance of your individual plant examination for severe accident vulnerabilities (IPE). If you select this option, you are required to:

(1) So state in response to these questions, and (2) Commit to explicitly address questions 5 and 9 in your IPE submittal per the guidelines outlined in NUREG-1335 (Section

2. 1.6, Subitem 7), "Individual Plant Examination: Submittal Guidance."

c:Xup51hdocshdg-e125v.pgd (18)10/24/91 8:48am

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 1 REMARK 1:

Diesel Generator E is an installed spare diesel generator capable of substituting as an emergency power source for any one of the existing emergency diesel generators (A, B, C, D). The Diesel Generator E 125V dc power subsystem is identified as Channel H and is dedicated to providing dc power to ESW valves for Diesel Generator E cooling, Diesel Generator E controls, and Diesel Generator E 4. 16 kV Switchgear. This equipment is all located in a separate Diesel Generator E building.

The Diesel Generator E 125V dc Subsystem is required only when this diesel generator is substituting for one of the existing diesel generators. It is in addition to, independent and isolated from the other four Class lE 125V dc Subsystems. Loss of any one of the 125V dc Subsystems does not prevent the minimum safety function from being performed.

REMARK 2:

1.0 The following indications and alarms for the DG-E 125V dc class lE subsystem are provided. Justification for this design is consistent with the design philosophy regarding Control Room monitoring of Class 1E dc power systems as previously provided in PLA-959 to the NRC dated 11/6/81.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 2 Location Alarm or Indication Local Control Room Notes Bus Undervoltage Alarm 1,2 Bus Ground Alarm 1,2 Battery Monitor Alarm 1,2,4 Battery Charger Trouble Alarm 1,2,5 Bus Ammeter Bus Voltmeter Battery Charger Ammeter Battery Charger Voltmeter DC System Trouble Alarm NOTES:

1. See Table 1 for specific local alarm annunciation.
2. These alarms are locally provided on DG-E annunciator/reflasher panel OC577E. A dc subsystem trouble alarm .is reflashed to the control room by this annunciator. See Table 1, Figure 1.
3. Heters are provided locally. See Figure 2.
4. Battery monitor compares battery center point voltage with high and low threshold reference points,,of the high and low voltage comparators. The degraded cell conditions (such" as a shorted cell) or an open circuit condition (such as an open fuse) are detected by the battery monitor.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 3

5. Battery charger trouble alarm indication is provided for battery charger AC power failure, DC output breaker open, battery charger failure alarm operation, battery charger high/low voltage and battery charger high voltage (shutdown).
6. One annunciator window for the DG-E 125V dc subsystem is provided.

2.0 The monitoring scheme provided for the dc power subsystem is based on the degree of control provided to the control room operator. Since the dc power system equipment can not be remotely controlled, a single dc system trouble annunciator window for each subsystem is provided in the control room, consistent with the system level alarm criteria set forth in Section B of R.G. 1.47.

The SSES design is based on the general criteria that, if the operator can perform some corrective action in the control room in response to a specific input, that information is specifically provided. The dc power system equipment can not be controlled from the control room.

Annunciating specific inputs from the 125V dc system in the control room does not enhance the control room operators's ability to deal with the situation and it would not be consistent with SSES alarm design philosophy. However,.if the only response required is to dispatch an operator to an area removed from the control room, then the only information required in the control room is general information with only the level of specificity re'quired to direct that operator to the proper location. This method is faster and more reliable since abnormal conditions are automatically alarmed. Furthermore, this approach is consistent with the human factors engineering goal to not over burden the operator with unnecessary information. 125V dc system instrumentation, locally provided, is in full compliance with the requirement of IEEE 308-1974 and Regulatory Guide 1.47.

The DC system general trouble alarms and specific local indicators in conjunction with the routine operator surveillance provide positive assurance that the Class 1E dc power system are maintained in a steady state ready to perform the required safety function.

e

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 4 3.0 Following is the justification for each alarm and indication listed in Generic Letter 91-06.

3. 1 Batter Disconnect or Circuit Breaker 0 en Alarm:

The Susquehanna S.E.S. (SSES) DG-E 125V dc subsystem utilizes a fused disconnect as the battery disconnect. This condition is detected by the battery monitor. The battery monitor utilizes a variable threshold circuit together with two comparators (high and low) to detect the loss of battery capability due to an open circuit (i.e., an open fuse or, degraded cell condition). A variable threshold circuit accepts the battery 'charger voltage and develops two threshold voltages for use with the comparators.

When the monitored voltages go above or below the thresholds, the battery monitor output relay contacts initiate a local battery monitor annunciator which is reflashed to the control room as a DG-E 125V dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3.2 Batter Char er Disconnect or Circuit Breaker 0 en Both In ut AC and Out ut DC Alarm 3.2. 1 Battery Charger AC Input Disconnect or Circuit Breaker:

SSES utilizes a circuit breaker in the battery charger as a disconnect for the ac input power supply. An ac power failure alarm relay is installed internal to the battery charger to detect loss of ac input power. This condition could be caused by an open input circuit breaker or loss of the 480V ac power supply to the charger. The ac power failure alarm relay initiates a battery charger trouble alarm at the local annunciator panel, which is reflashed to the control room as a DG-E 125V dc system trouble alarm.

This is consistent with the general design philosophy discussed in section 2.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 5 3.2.2 Battery Charger DC Output Circuit Breaker SSES utilizes a circuit breaker in the battery charger as a disconnect for the dc output circuit. The circuit breaker is provided with an auxiliary position indicating switch. A switch contact which is closed when the circuit breaker is open is used to initiate a battery charger trouble alarm at the local annunciator panel. A DG-E dc system trouble alarm is reflashed to the control room by the local annunciator

'anel. This is consistent with the, general design philosophy discussed in Section 2.0.

3.3 DC S stem Ground Alarm'he DG-E 125V dc subsystem is ungrounded and is provided with a ground detection circuit. It consists of a relay having a center tapped coil. The coil is connected across the positive and negative bus and its center point is grounded. The ground detection relay coil is not actuated during normal operation of the 125V dc subsystem when a ground is not present. A ground on either the positive or negative bus of the 125V dc subsystem causes one-half of the relay coil to be short circuited, thus providing sufficient voltage to the remaining relay coil half to pickup the relay. A normally open contact of the relay closes and initiates a 125V dc system ground alarm at the local annunciator panel. A DG-E dc system trouble alarm is reflashed to the control room annunciator by the local annunciator panel. This is consistent with the general design philosophy discussed in Section 2.0.

3.4 DC Bus Undervolta e Alarm The DG-E 125V dc subsystem is provided with a battery charger undervoltage relay. The relay is connected across the positive and negative bus of the 125V dc battery charger. The relay is normally energized and set to drop out at the specified setpoint.

A battery charger trouble alarm at the local annunciator panel is

RESPONSE TO GENERIC LETTER 91-06 SUS UEMANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTE PAGE 6 initiated after the undervoltage relay drops out.

The local annunciator panel, in turn, reflashes the alarm to the control room annunciator as a DG-E dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

In addition to the battery charger undervoltage relay, a bus undervoltage relay is provided to detect a loss of bus voltage.

The most probable cause of a DC system undervoltage condition is a result of a battery charger problem, which will be detected by the battery charger, failure alarm relay (see Section 3.6). The charger failure relay initiates a battery charger trouble alarm at the local annunciator panel, which in turn, reflashes a DG-E dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy discussed in Section 2.0.

3.5 DC Bus Overvolta e Alarm The DG-E 125V dc subsystem is provided with an overvoltage relay.

The relay is located inside the battery charger cabinet. It is connected across the positive and negative 125V dc bus of the battery charger and set to pick up at the specified setpoint. A normally open contact of the overvoltage relay, when closed, initiates a battery charger trouble alarm at the local annunciator panel which in turn will reflash a DG-E dc system trouble alarm to the control room annunciator.

Since the battery, the battery charger and the dc load center are in close proximity of each other, the battery charger voltage is representative of the DG-E 125V dc bus voltage. This is consistent with the general design philosophy discussed in Section 2.0.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT I AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 7 3.6 Batter Char er Failure Alarm The DG-E 125V dc subsystem battery charger is provided with a battery charger failure relay. This relay will detect the loss of the charger output current with the input and output circuit breakers closed.

This condition is indicative of a battery charger failure and it initiates a battery charger trouble alarm at the local annunciator panel which in turn will reflash a DG-E dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy discussed in Section 2.0.

3.7 Batter Dischar e Alarm The battery can only discharge when its terminal voltage is less than the nominal open circuit voltage. This is indicative of a battery charger failure or system current in excess of the charger capability. A battery charger, failure alarm is provided and its operation is discussed in Section 3.6. When system current exceeds battery charger capability, a dc system undervoltage condition will occur, and will be detected by the battery charger undervoltage relay (see Section 3.4). Charger failure and battery charger undervoltage initiate alarms at the local annunci ator panel which in turn will reflash a DG-E dc system trouble alarm to the control room annunciator. This is consistent with the general design philosophy as discussed in Section 2.0.

3.8 Batter Float Char e Current Indication Under normal conditions, the battery float charge current is very small compared to battery discharge current. Measurement of this current requires a very sensitive ammeter. Shunt bypasses are employed to protect the ammeter movement from the much larger battery discharge current possible in this circuit.'hese shu'nts must be manually removed when reading normal small float charge current. Thus this reading cannot be continuous and no automatic

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 8 indication or alarms can be given.

Since the intent of indicating "Battery Float Charge Current" is to determine the battery condition, the method used to accomplish this purpose should not be important.

The battery charger undervoltage, bus ground, battery m'onitor and battery charger failure alarms (previously described) provide continuous monitoring to detect degradation of battery capability.

These alarms will reflash the DG-E dc system trouble alarm in the control room, and an operator is dispatched locally to determine the cause of the condition and initiate corrective action.

Specific indication is provided on the local annunciator panel.

This response is exactly what would be achieved if an improper state of battery current were indicated on an ammeter in the control room.

This is consistent with the general design philosophy discussed in Section 2.0.

3.9 Batter Circuit Out ut Current Indication In normal condition when the battery charger is supplying the 125V dc power, the battery circuit (battery and the battery charger) output current is indicated by an ammeter located at the battery charger.

In the condition of a battery charger failure, the battery supplies the dc power. In this condition the battery circuit output current is indicated by an ammeter located at the dc switchboard.

As indicated in Section 3.8, the intent of indicating "battery current" is to determine the battery condition, and therefore the method used to accomplish this purpose should not be important.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 9 3.10 Batter Dischar e Indication As previously discussed in Section 3.7, a battery discharge will occur as a result of a battery charger failure or system current in excess to battery charger capability. Since these conditions are automatically alarmed in the control room (via the system trouble alarm), an operator'will be dispatched locally to determine the cause of the condition and initiate corrective action. This response is exactly what would be achieved if battery discharge current was indicated on an ammeter in the control room.

3.11 Bus Volta e Indication The battery, the battery charger and the dc switchboard of the DG-E 125V dc subsystem are located in close proximity of each other.

The battery charger and the dc switchboard are each provided with a voltmeter. The purpose of a bus voltmeter at the control room would be to enable the operator to dispatch someone to take corrective action locally to correct abnormal bus voltage. This condition will occur when a battery charger problem is present.

Undervoltage and overvoltage conditions are monitored at the battery charger, and are annunciated as battery charger trouble at the local annunciator panel. A DG-E dc system trouble alarm is reflashed to the control room annunciator by the local annunciator panel.

This design automatically alerts the control room operator to unusual voltage conditions without unnecessarily requiring his periodic attention and analysis. As a result, 125V dc bus voltage indication is not provided in the control room and has been provided on the front of the dc switchboard where it provides useful information during surveillance and maintenance activities.

A voltmeter is located on the front of the battery charger panel.

With the charger output circuit breaker closed, the charger output and the bus voltages are essentially the same due to the close

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 10 proximity of the charger to the load center. All abnormal voltage conditions of the battery charger are annunciated at the local annunciator panel which is reflashed to the control room as a DG-E dc system trouble alarm. This is consistent with the general design philosophy discussed in Section 2.0.

3. 12 Alarm Res onse Procedure Control room alarm response procedures for a DG-E 125V dc system trouble alarm direct the operator to respond to the local annunciator panel to determine the condition which caused the alarm.

Local alarm response procedures for the annunciator panel are provided to direct the operator to determine the cause of the condition and to initiate corrective action.

3. 13 Indication of B assed and Ino erable Status of Circuit Breakers or Other Disconnectin Devices Although indication of bypassed and inoperable status of circuit breakers or other disconnecting devices is not provided as a part of the Bypass Indication System, the 125V dc System Trouble Alarm in the control room is initiated for the following condition (which are disconnecting devices in the system):

Hain battery fused disconnect open.

Battery charger ac input circuit breaker open.

Battery charger dc output circuit breaker open or 125V dc switchboard breaker open.

RESPONSE TO GENERIC LETTER 91-06 SUS UEHANNA S.E.S. UNIT 1 AND UNIT 2 DG-E 125V DC SUBSYSTEM PAGE 11 TABLE 1 125V DG-E DC S stem Annunciator Panel Alarms

l. 125V DC System Low Voltage
2. 125V DC System Ground
3. Battery Honitor (indicates battery degradation or open battery fuses)
4. Battery Charger Trouble indicates (1) AC power failure, (2) DC output breaker open, (3),battery charger failure, (4) battery charger high/low voltage, or (5) battery charger'igh voltage (shutdown).

C:XQP51%00CS~RGL91-06.PGD (18) 10/24/91 8:35am

MULTIPLE ALARM INPUTS DG-E BLDG FROM DG-E 125V DC PANEL OC577E POWER SYSTEM PER TABlE 1 DG-E BLDG PANEL OC577E CONTROL ROOM PANEL OC653 DC SYSTEM TROUBLE ANNUNCIATOR FIGURE 1

BATTERY BANK BATTERY 7/59 CHARGER AMMETER 59 BATTERY FUSE MONITOR VOLTMETER AMMETER VOLTMETER SYSTEM GROUND 27 INDICATORS DC SWITCHBOARD LOADS LOADS SEE TABLE 1 FOR ALARMS DG-E 125V DC SYSTEM FIGURE 2