-
-~29399O8.xis, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 1 Design ConsiderationsRG 1.9 C 1.1 Clause 1.1.1,
"Inclusions," of IEEE Std 387-1995 To be considered in design The
GTG controls (manual and
should be supplemented to include deisel generator automatic) as
well as generatorauto controls, manual controls, and diesel
generator output breaker will be included inoutput breaker. the
scope of the equipment. The
breaker, however, is often providedby others as part of the
plantswitchgear.
RG 1.9 C 1.2 When the characteristics of the required emergency
To be considered in design This is a design consideration fordiesel
generator loads are not accurately known, such MHI in the selection
of the 4500 kWas during an early stage of design, each emergency
GTG in the US-APWR application.diesel generator selected for an
onsite power supplysystem should have a continuous load rating
(asdefined in Section 3.2 of IEEE Std 387-1995) equal tothe sum of
the conservatively estimated connectedloads (nameplate rating) that
the diesel generatorwould power at any one time, plus a 10- to
15-percentmargin.In the absence of fully substantiated
performancecharacteristics for mechanical equipment such aspumps,
the electric motor drive ratings should becalculated using
conservative estimates of thesecharacteristics (e.g., pump runout
conditions andmotor efficiencies of 90 percent or less, and
powerfactors of 85 percent or less).
RG 1.9 C 1.3 During the operating license or combined license To
be considered in design This is a design consideration forstages of
review, the maximum design-basis loads MHI in the selection of the
4500 kWshould be within the continuous rating (as defined in GTG in
the US-APWR application.Section 3.2 of IEEE Std 387-1995) of the
dieselgenerator with sufficient margin (i.e., not less than
5percent).
9/28/2009, 10:59-AM
-
-2939908.xls, MHI
Guide I Section[ Statement, Requirement I Design of US-APWR ]
NoteRG 1.9 C 1.4 Clause 4.1.2 of IEEE Std 387-1995 pertains, in
part,
to the starting and load-accepting capabilities of thediesel
generator. In conformance with Clause 4.1.2,each diesel generator
should be capable of startingand accelerating to rated speed, in
the requiredsequence, all the needed engineered safety featuresand
emergency shutdown loads. The diesel generatorshould be designed
such that the frequency will notdecrease, at any time during the
loading sequence, tcless than 95 percent of nominal and the voltage
willnot decrease to less than 75 percent of nominal. (Alarger
decrease in voltage and frequency may bejustified for a diesel
generator that carries only onelarge connected load.) Frequency
should be restoredto within 2 percent of nominal in less than 60
percentof each load-sequence interval for a steploadincrease, and
less than 80 percent of each load-sequence interval for
disconnection of the singlelargest load.
MHI will perform this functional testin qualification
program
This design consideration will beconfirmed with the completion
of th(Initial Type Test. Specifically thisincludes the unit Start
and LoadAcceptance Test in conjunction withthe Margin Test. The
margin testin(will confirm that the specifiedmaximum voltage and
frequencyexcursions will not be exceeded.
The actual loads will be sequencedto the unit during completion
of theLOOP tests as part of the Pre-Operational Site Testing.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 Voltage should be restored to within 10 percent of MHI will
perform this functional test This design consideration will be
nominal within 60 percent of each load-sequence in qualification
program confirmed with the completion of thEinterval. The
acceptance value of the frequency and Initial Type Test.
Specifically thisvoltage should be based on plant-specific analysis
includes the unit Load Capability(where conservative values of
voltage and frequency Tests in conjunction with the Marginare
measured) to prevent load interruption. (A greater Tests. The
margin testing willpercentage of the load-sequence interval may be
confirm that the specified maximumused if it can be justified by
analysis. However, the voltage and frequency
excursionsload-sequence interval should include sufficient will not
be exceeded.margin for the accuracy and repeatability of the
load-sequence timer.) During recovery-from transients The actual
loads will be sequencedcaused by disconnection of the largest
single load, to the unit during completion of thethe speed of the
diesel generator should not exceed LOOP tests as part of the
Pre-the nominal speed plus 75 percent of the difference Operational
Site Testing.between nominal speed and the overspeed trip setpoint,
or 115 percent of nominal (whichever is lower).Furthermore, the
transient following a complete lossof load should not cause the
diesel generator speedto reach the overspeed trip set point.
RG 1.9 C 1.5 Emergency diesel generators should be designed so
To be considered in design The GTG will be designed for* that they
can be tested as described in Regulatory testing as described in
Position 2Position 2. The design should allow testing of the (See
Section C2 below).diesel generators to simulate the parameters
ofoperation (e.g., manual start, automatic start, loadsequencing,
load shedding, operation time), normalstandby conditions, and
environments (e.g.,temperature, humidity) that would be expected
ifactual demand were placed on the system. Ifprelubrication systems
or prewarming systemsdesigned to maintain lube oil and jacket water
coolingat certain temperatures (or both) are normally inoperation,
this would constitute normal standbyconditions for the given
plant.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 1.6 Design provisions should include the capability to test
To be considered in design The GTG will be designed for
each emergency diesel generator independently of testing
independently of redundantthe redundant units. Test equipment
should not causE units.a loss of independence between redundant
dieselgenerators or between diesel generator load
groups.Testability should be considered in selecting andlocating
instrumentation sensors and criticalcomponents (e.g., governor,
starting systemcomponents). Instrumentation sensors should
bereadily accessible and designed so that theirinspection and
calibration can be verified in place.The overall design should
include status indicationand alarm features.
RG 1.9 C 1.7 Clause 4.5.3.1 of IEEE Std 387-1995 pertains
tostatus indication of diesel generator unit conditions.The
following paragraphs should supplement theguidance in this
clause:
RG 1.9 C 1.7.1 A surveillance system should be provided with a
To be considered in design This is a design consideration forremote
indication in the control room to display MHI in the coordination
of controlsemergency diesel generator status (i.e., under test, and
remote indication.ready-standby, lockout).A means of communication
should also be providedbetween diesel generator testing locations
and themain control room to ensure that the operators knowthe
status of the diesel generator under test.
RG 1.9 C 1.7.2 To facilitate the diagnosis of failure or
malfunction, the To be considered in design Each GTG unit will
havesurveillance system should indicate which of the annunciator
with appropriate first ouemergency diesel generator protective
trips has been logic.activated first.
9/28/2009, 10:59 AM
-
'-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 1.8 The following should supplement Clause 4.5.4 of To be
considered in design A minimum of two (2) differential
IEEE Std 387-1995, which pertains to bypassing relays and two
(2) turbine speedemergency diesel generator protective trips during
sensors must be provided foremergency conditions: shutdown
operation in emergencyThe emergency diesel generator should be
tripped mode. This also applies to anyautomatically on engine
overspeed and generator- other shutdown that remains
activedifferential overcurrent. A trip should be implemented during
emergency run operationwith two or more measurements for each trip
(example high turbine exhaust gasparameter with coincident logic
provisions for trip temperature).actuation.The design of the
coincident logic trip circuitry should The GTG control panel will
beinclude the capability to indicate individual sensor designed
with appropriate bypasstrips. The design of the bypass circuitry
should circuitry including test, status andinclude the capability
to (1) test the status and manual reset.operability of the bypass
circuits, (2) trigger alarms inthe control room for abnormal values
of all bypassparameters (common trouble alarms may be used),and (3)
manually reset the trip bypass function. Thecapability to
automatically reset the bypass function isnot acceptable.
RG 1.9 Clause 4.5.4(b) of IEEE Std 387-1995, which pertains To
be considered in designto retaining all protective devices during
emergencydiesel generator testing, does not apply to periodictests
[safety injection actuation system (SIAS),combined with SIAS and
LOOP, and protective tripbypass] that demonstrate diesel generator
systemresponse under simulated design-basis events.
RG 1.9 C 1.9 Clause 4.5.2.2 of IEEE Std 387-1995 should be To be
considered in design MHI to note that isochronous modemodified to
read as follows: of operation us required forUpon receipt of an
emergency start-diesel signal, the emergency operation.automatic
control system shall provide automaticstartup and automatic
adjustment of speed andvoltage to a ready-to-load condition in the
emergency(isochronous) mode.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2 Diesel Generator Testing
Clauses 3, 5, 6, and 7 of IEEE Std 387-1995 shouldbe
supplemented as discussed below.
RG 1.9 C 2.1 DefinitionsFigure 1 illustrates those components
and systemsthat should be considered to be within the
emergencydiesel generator boundary when evaluating failures.Systems
that support the emergency diesel generatoiand perform other plant
functions are depicted asbeing outside this boundary.IEEE Std
387-1995 provides similar definitions ofcomponents and system
boundaries and may also beused as guidance; however, generator
breakersshould be considered as part of the diesel
generatorboundary.The following definitions apply to the
regulatorypositions that address testing, recordkeeping,
andreporting of emergency diesel generator performanceStart
demands: All valid and inadvertent startdemands, including all
start-only demands and allstart demands that are followed by
load-run demandswhether by automatic or manual initiation, are
startdemands. In a start-only demand, the emergencydiesel generator
is started, but no attempt is made toload the emergency diesel
generator (see theexceptions below).
To be considered in design
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Sectionl Statement, Requirement Design of US-APWR NoteRG
1.9 Start failures: Any failure within the emergency diesel
generator system that prevents the generator fromachieving a
specified frequency (or speed) andvoltage within specified time
allowance is classified a,,a valid start failure. (For monthly
surveillance tests,the emergency diesel generator can be brought
torated speed and voltage in the time recommended bythe
manufacturer to minimize stress and wear.) Anycondition identified
during maintenance inspections(with the emergency diesel generator
in the standbymode) that would definitely have resulted in a
startfailure if a demand had occurred should count as avalid start
demand and failure.Load-run demands: To be valid, the load-run
attemptshould follow a successful start and meet one of
thefollowing criteria (see the exceptions below):- a load-run of
any duration that results from a real(i.e., not a test) automatic
or manual signal- a load-run test to satisfy the plant's load
andduration test specifications- other operations (e.g., special
tests) in which theemergency diesel generator is planned to run for
at le
To be considered in design
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide SectionT Statement, Requirement Design of US-APWR NoteRG
1.9 Load-run failures: A load-run failure should be
counted when the emergency diesel generator startsbut does not
pick up the load and run successfully.Any failure during a valid
load-run demand shouldcount (see the exceptions below). (For
monthlysurveillance tests, the emergency diesel generatorcan be
loaded at the rate recommended by themanufacturer to minimize
stress and wear.) Anycondition identified during maintenance
inspections(with the emergency diesel generator in the standbymode)
that definitely would have resulted in a load-ruifailure if a
demand had occurred should count as avalid load-run demand and
failure.
To be considered in design
L _______________________________
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide I Section! Statement, Requirement I Design of US-APWR
NoteRG 1.9 Exceptions: Unsuccessful attempts to start or load-
run should not count as valid demands or failureswhen they can
definitely be attributed to any of thefollowing:- any operation of
a trip that would be bypassed in thEemergency operation mode (e.g.,
high cooling-watertemperature trip). malfunction of equipment that
is not required tooperate during the emergency operating mode
(e.g.,synchronizing circuitry)- intentional termination of the test
because ofalarmed or observed abnormal conditions (e.g., smallwater
or oil leaks) that would not have ultimatelyresulted in significant
damage or failure of theemergency generator* component malfunctions
or operating errors that didnot prevent the emergency diesel
generator frombeing restarted and brought to load within 5
minutes(i.e., without corrective maintenance or significantproblem
diagnosis)- a failure to start because a portion of the
startingsystem was disabled for test purposes, if followed bya
successful start with the starting system in itsEach diesel
generator valid failure that results indeclaration of the emergency
diesel generator asbeing inoperable should count as one demand
andone failure. Exploratory tests during corrective orpreventive
maintenance should not count asdemands or failures. However, the
successful testthat is performed to declare the emergency
dieselcqenerator operable should count as a demand.
To be considered in design
RG 1.94 J.
To be considered in design
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2.2 Test Descriptions
The table on site testing from the standard isrepeated in this
guide as Table 1 to addresssupplementary guidance when required.
The followin(test descriptions should be used in conjunction
withthe preoperational and surveillance testing describedin the
table. The licensee should have detailedprocedures for each test
described herein. Theprocedures should identify special
arrangements orchanges in normal system configuration that must
bemade to put the emergency diesel generator. undertest. Jumpers
and other nonstandard configurationsor arrangements should not be
used after initialequipment startup testing.
RG 1.9 C 2.2.1 Starting Test MHI will perform this functional
test Starting test is part of siteClause 7.2.1.1 of IEEE Std
387-1995 should be in GTG Site Testing Program acceptance test
program required asupplemented as follows: installation of unit.The
acceptance criteria for frequency and voltage This test is
performed in plantshould be equal to or higher than the minimum
periodically after installation.required voltage and frequency
within specified timeallowance for the safety-related -loads.
RG 1.9 C 2.2.2 Slow-Start Test This test is performed in plant
This is a standard test for provingClause 7.5.1 of IEEE Std
387-1995 should be periodically after installation, periodic start
of the GTG duringsupplemented as follows: surveillance testing by
site.This test involves demonstrating proper startup fromstandby
conditions, and verify that the required desigrvoltage and
frequency are attained. For this test, theemergency diesel
generator can be slow-started andreach rated speed on a prescribed
schedule tominimize stress and wear.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2.2.3 Load Run (Load Acceptance) Test This test is performed
in plant This is a standard test for proving
Clause 7.5.2 of IEEE Std 387-1995 should be periodically after
installation, periodic start and load carryingsupplemented as
follows: capability of the GTG duringThis test involves
demonstrating 90-100 percent of surveillance testing by site.the
continuous rating of the emergency dieselgenerator, for an interval
of not less than 1 hour anduntil attainment of temperature
equilibrium.This test may be accomplished by synchronizing
thegenerator with offsite power. The loading andunloading of an
emergency diesel generator duringthis test should be gradual and
based on a prescribedschedule that is selected to minimize stress
and wearon the diesel generator.
RG 1.9 C 2.2.4 Rated Load Test MHI will perform this functional
test Rated load test is part of siteClause 7.2.1.3 (a) of IEEE Std
387-1995 should be in GTG Site Testing Program acceptance test
program required asupplemented as follows: installation of unit.If
the design-basis event loads are higher than thecontinuous rating
of the emergency diesel generator,the test should be conducted at
the worst case desigr -basis event loads.
RG 1.9 C 2.2.5 LOOP Test MHI will perform this functional
testClause 7.5.4 of IEEE Std 387-1995 should be in GTG Site Testing
Programsupplemented as follows:This test involves simulating a LOOP
to demonstratethat (1) the emergency buses are deenergized andthe
loads are shed from the emergency buses, and(2) the emergency
diesel generator starts on theautostart signal from its standby
conditions; attainsthe required voltage and frequency, and
energizespermanently connected loads within acceptable limitsand
time; energizes all autoconnected shutdownloads through the load
sequencer; and operates forgreater than or equal to 5 minutes. If
the requiredsafety loads are not available, one or more
equivalentload(s) may be used.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2.2.6 Combined SIAS and LOOP Test MHI will perform this
functional test
Clause 7.5.6 of IEEE Std 387-1995 should be in GTG Site Testing
Programmodified to read as follows:This test involves demonstrating
that emergency This test is performed in plantdiesel generator can
satisfactorily respond to a LOOP periodically after installation.in
conjunction with SIAS in whatever sequence theymight occur [e.g.,
loss-of-coolant accident (LOCA)followed by delayed LOOP or LOOP
followed byLOCA]. A simultaneous LOOP/LOCA event would
bedemonstrated by verifying that the diesel generatorunit starts on
the auto-start signal from its standbyconditions, attains the
frequency and voltage withinacceptable limits and time, energizes
the auto-connected shutdown loads through the loadsequencer within
the acceptable limits of pump starttime, and operates for a minimum
of 5 minutes.
RG 1.9 C 2.2.7 Largest Load Rejection Test MHI will perform this
functional testClause 7.5.7 of IEEE Std-1995 should be in GTG Site
Testing Programsupplemented as follows:This test involves
demonstrating the emergency This test is performed in plantdiesel
generator's capability to reject a load equal to periodically after
installation.loss of the largest single load while operating at
itsdesign load power factor and verify that the frequencyand
voltage requirements are met and the unit will nottrip on
overspeed.
RG 1.9 C 2.2.8 Design-Load Rejection Test MHI will perform this
functional testClause 7.5.8 of IEEE Std-1 995 should be in GTG Site
Testing Programsupplemented as follows:This test involves
demonstrating the emergency This test is performed in plantdiesel
generator's capability to reject a load equal to periodically after
installation.90-100 percent of the continuous rating whileoperating
at its design load power factor and verifythat the voltage
requirements are met and that theunit will not trip on
overspeed.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2.2.9 Endurance and Load Margin Test MHI will perform this
functional test
Clause 7.5.9 of IEEE Std 387-1995 should be in GTG Site Testing
Programsupplemented as follows:This test involves demonstrating the
capability of the This test is performed in plantemergency diesel
generator at continuous rating and periodically after
installation.worst case power factor for an interval of not
lessthan 24 hours. Of this period, 2 hours are at a loadequal to
105-110 percent of the diesel generator'scontinuous rating, and 22
hours are at a load equal to90-100 percent of the generator's
continuous rating.The test process should verify that frequency
andvoltage requirements are maintained.
RG 1.9 C 2.2.10 Hot Restart Test MHI will perform this
functional testClause 7.5.10 of IEEE Std 387-1995 should be in GTG
Site Testing Programsupplemented as follows:This test involves
demonstrating the hot restart This test is performed in
plantfunctional capability at full load-temperature periodically
after installation.conditions (after the emergency diesel generator
hasoperated for 2 hours at continuous rating) by verifyingthat the
emergency diesel generator starts on amanual or auto-start signal,
attains the requiredfrequency and voltage within acceptable limits
andtime, and operates for longer than 5 minutes. Thistest may be
performed following the endurance andmargin test described
above.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2.2.11 Periodic-Trip Bypass Test MHI will perform this
functional test
Clause 7.5.12 of IEEE Std 387-1995 should be in GTG Site Testing
Programsupplemented as follows:This test involves demonstrating
that automatic diese This test is performed in plantgenerator unit
trips are automatically bypassed as periodically after
installation.designed. Typically, engine overspend,
generatordifferential current trip and those trips retained
withcoincident logic are not bypassed. This test shouldalso verify
that the critical protective trips that are notautomatically
bypassed perform their intendedfunction.
RG 1.9 C 2.3 Preoperational and Surveillance Testing MHI will
perform Site AcceptanceTable 1 relates preoperational and
surveillance tests tests and Preoperational teststo the anticipated
schedule for performance (e.g., following GTG installation at
site.preoperational, monthly surveillance, 6-month
testing,scheduled refueling period, and 10-year testing).A prelube
period should precede all planned testsdescribed in this regulatory
guide. The tests should bEin general accordance with the
manufacturer'srecommendations for reducing engine wear,
includingcooldown operation at reduced power followed
bypostoperation lubrication.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 2.3.1 Preoperational Testing MHI will perform Site
Acceptance
A preoperational test program should be implementec tests and
Preoperational testsfor all emergency diesel generator systems
following following GTG installation at site.assembly and
installation at the site. This programshould include the tests
identified in Table 1.In addition, through a minimum of 25 valid
start andload demands without failure on each installedemergency
diesel generator, this test shoulddemonstrate that the new
emergency diesel generatohas attained a level of reliability
acceptable forentering into an operational category.
RG 1.9 C 2.3.2 Surveillance Testing These tests are performed in
plantAfter plants are licensed (after fuel load), periodic
periodically after installation.surveillance testing of each
emergency dieselgenerator should demonstrate the
continuedcapability and reliability of the diesel generator unit
toperform its intended function. When the emergencydiesel generator
is declared operational inaccordance with the plant's technical
specifications,the following periodic test program should
beimplemented.
RG 1.9 C 2.3.2.1 Monthly Testing These tests are performed in
plantAfter completion of the reliability demonstration durinn
periodically after installation.preoperational testing, the
emergency dieselgenerators should be periodically tested
duringnormal plant operation.Each diesel generator should be
started as describedin Regulatory Position 2.2.2 and loaded as
describedin Regulatory Position 2.2.3 at least once every 31days
(with the maximum allowable extension not toexceed 25 percent of
the surveillance interval).
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR- NoteRG
1.9 C 2.3.2.2 Six-Month (or 184-Day) Testing These tests are
performed in plant
This test may substitute for a monthly test. To periodically
after installation.demonstrate the capability of the emergency
dieselgenerator to start from standby conditions and providEthe
necessary power to mitigate a LOCA coincidentwith a LOOP, each
diesel generator should be startedfrom standby conditions once
every 6 months asdescribed in Clause 7.5.3 of IEEE Std 387-1995.
Thiswill verify that the diesel generator reaches therequired
voltage and frequency within acceptablelimits and time as specified
in the plant technicalspecifications. Following this test, the
emergencydiesel generator should be loaded as described inClause
7.5.2 of IEEE Std 387-1995 (see also Table1).
RG 1.9 C 2.3.2. Refueling Outage Testing These tests are
performed in plantThe capability of the overall emergency diesel
periodically after installation.generator design should be
demonstrated duringevery refueling outage (or at a frequency of not
morethan every 24 months) by performing the testsidentified in
Table 1. Certain tests may be conductedduring the operating mode
with NRC approval if thetests can be safely performed without
increasing theprobability of plant trip, loss of power to the
safetybuses, or LOOP.
RG 1.9 C 2.3.2.4 Ten-Year Testing These tests are performed in
plantThis testing involves demonstrating that the trains of
periodically after installation.standby electric power are
independent at afrequency of once every 10 years (during a
plantshutdown) or after any modifications that could
affectemergency diesel generator independence(whichever is shorter)
by starting all redundant unitssimultaneously to identify certain
common-failuremodes undetected in single diesel generator unit
test,(see also Table 1).
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteRG
1.9 C 3 Reporting Criteria
Licensees must conform to the reportingrequirements of 10 CFR
Part 21, "Reporting ofDefects and Noncompliance" (Ref. 2); 10 CFR
50.72,"Immediate Notification Requirements for OperatingNuclear
Power Reactors"; and 10 CFR 50.73,"License Event Reporting
System."
IEEE 387 4. Principal design criteriaIEEE 387 4.1 CapabilityIEEE
387 4.1.1 General To be considered in design
When in service, each diesel-generator unit shallhave the
capability of performing as a redundant unitof a standby power
supply, in accordance with the
requirements stated in IEEE Std 308-1991 .
6 lnformation on references can be found in clause 2.
IEEE 387 4.1.2 Mechanical and electrical capabilitiesThe
diesel-generator unit shall also have each of thefollowing specific
capabilities to meet the design,application, and qualification
requirements of thisstandard:
To be considered in design
9/28/2009, 10:59 AM
-
'-2939908.xls, MHI
GuideIEEE 387
IEEE 387
Section Statement, Requirement Design of US-APWR Notea) Design
conditions. The unit shall be capable ofoperating during and after
any design basis eventwithout support from the preferred power
supply. Thefollowing design conditions, including
appropriatemargins as required by subclause 6.3.1.5 of IEEE
Stc323-1983, shall be specified by those individualsresponsible for
the system application and, as aminimum, shall include
1) Operational cycles (4000 starts7 over a period of 4(years,
unless otherwise specified)
2) Operating hours (6000 h8 over a period of 40years, unless
otherwise specified)3) Temperature at equipment locations (minimum
an(maximum with durations and average annualambient)4) Seismic
response spectra5) Radiation (1 ' 104 rd of gamma integrated
doseover a period of 40 years, unless otherwise specified)6)
Humidity (minimum and maximum with durations)7) Load profile,
including allowable voltage andfrequency variations (see 3.7 and
annex A)8) Absolute barometric pressure (altitude and
tornadcdepressurization, duration, and magnitude)9) Combustion air
contaminants (salt, sand, etc.)10) Fuel tvye and aualitv
To be considered in design
b) Starting and loading. The unit shall be capable of To be
considered in designstarting, accelerating, and being loaded with
thedesign load within the time required by the
equipmentspecification1) From the normal standby condition.2) With
cooling not available, for a time equivalent tothat required to
bring the cooling equipment intoservice with energy from the
diesel-generator unit.3) On a restart with an initial engine
temperatureequal to the continuous rating full-load
enginetemperature.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 c) Light-load or no-load operation. The unit shall be To be
considered in design KHI must define light load limitation
capable of accepting design load following operation applicable
to GTat light load or no load for the time required by theequipment
specification.d) Design load. The unit shall be capable of
carryingthe design load for the time required by the
equipmenspecification.e) Quality of power. The unit shall be
capable ofmaintaining voltage and frequency at the
generatorterminals within limits that will not degrade
theperformance of any of the loads comprising thedesign load below
their minimum requirements,including the duration of transients
caused by loadapplication or load removal.
IEEE 387 4.2 RatingsIEEE 387 4.2.1 Application To be considered
in design
The diesel-generator unit shall have continuous andshort-time
ratings that reflect the output capabilities o!the diesel-generator
unit in accordance with therequirements of 4.1 and the following:a)
Inspections and scheduled maintenance shall beperformed
periodically using the manufacturer'srecommendations and
procedures.b) Unscheduled maintenance shall be performed
inaccordance with the need as indicated by the periodicinspections
and operating experience.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 4.2.2 Operation To be considered in design
The diesel-generator units may be utilized to the limitof their
power capabilities, as defined by thecontinuous and short-time
ratings. Unless time andload parameters for light-load and no-load
operationare established by tests and documentation, thefollowing
precautions shall be taken:a) When 4 h operation at 30% or less of
thecontinuous rating have been accumulated (without atleast 0.5 h
operation above 50% of the continuousrating), the unit shall be
operated at a load of at least50% of the continuous rating for a
minimum of 0.5 h.b) Operating at 30% or greater of the
continuousrating shall be restricted to the
manufacturer'srecommendations.
IEEE 387 4.3 Interactions To be considered in designIndependence
between units shall not becompromised. Mechanical and electric
systeminteractions between a particular diesel-generator uniand
other units of the standby power supply, thenuclear plant, the
conventional plant, and the Class1 E electric system shall be
coordinated in such a waythat the diesel generator unit's design
function, andcapability requirements of 4.1, may be realized for
an)design basis event, except failure of that diesel-generator
unit.
IEEE 387 4.4 Design and application considerations To be
considered in designDesign and application considerations shall
include,but not necessarily be limited to, the considerationslisted
in table 1.
IEEE 387 4.5 Design featuresIEEE 387 4.5.1 Mechanical and
electrical design features
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 4.5.1.1 Vibration To be considered in design
Vibration amplitudes shall be limited to be within thedesign
capabilities of the diesel-generator unit andauxiliary components.
Solenoids, relays, and otherdevices shall be mounted in such a way
to minimizevibration effects.
IEEE 387 4.5.1.2 Torsional vibration To be considered in design
KHI to perform torsional analysis ofHarmful torsional vibration
stresses shall not occur rotating drivelinewithin a range from 10%
above to 10% below ratedidle speed and from 5% above to 5% below
ratedsynchronous speed.
IEEE 387 4.5.1.3 Overspeed To be considered in designMoving
parts shall be designed to withstand that levelof overspeed that
results from a short-time rating loadrejection. Margin shall be
provided to allow theoverspeed device to be set sufficiently high
toguarantee thatthe unit will not trip on short-time rating load
rejection.As a minimum, the generator rotor, exciter rotor
(ifused), and flywheel shall be designed to withstand anoverspeed
of 25% without damage.
IEEE 387 4.5.1.4 Governor operation To be considered in designIf
the diesel engine is equipped to operate in both theisochronous and
the droop mode, provisions shall beincluded to automatically place
the engine governor inthe proper mode of operation when
thedieselgenerator unit is required to operateautomatically (see
4.5.2.2).
IEEE 387 4.5.1.5 Voltage regulator operation To be considered in
designIf the voltage regulator is equipped to operate in
theparalleled and nonparalleled mode, provisions shallbe included
to automatically place the voltageregulator in the proper mode of
operation when thedieselgenerator unit is required to
operateautomatically (see 4.5.2.2).
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 4.5.2 ControlIEEE 387 4.5.2.1 Control modes To be considered in
design
The diesel-generator unit shall be provided withcontrol systems,
permitting automatic and manualcontrol.
IEEE 387 4.5.2.2 Automatic control To be considered in
designUpon receipt of an emergency start-diesel signal,
theautomatic control system shall provide automaticstartup and
automatic adjustment of speed andvoltage to a ready-to-load
condition.a) A start-diesel signal shall override all
otheroperating modes and return control of thedieselgenerator unit
to the automatic control system.b) An emergency start-diesel signal
shall not overrideany manual non-operating modes such as those
forrepair and maintenance.
IEEE 387 4.5.2.3 Control points To be considered in
designProvisions shall be made for control both from thecontrol
room and external to the control room.
IEEE 387 4.5.3 SurveillanceIEEE 387 4.5.3.1 Surveillance systems
To be considered in design
The diesel-generator unit shall be provided withsurveillance
systems permitting remote and localalarms and indicating the
occurrence of abnormal, pretrip, or trip conditions.
IEEE 387 4.5.3.2 Modes surveyed To be considered in design See
RG1.9 Design ConsiderationAs a minimum, the following conditions
shall be section C1.7.1surveyed:a) Unit not runningb) Unit running,
not loadedc) Unit running, loadedd) Unit out of service
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 4.5.3.3 Surveillance instrumentation To be considered in design
See RG1.9 Design Consideration
The following systems shall have sufficient section
C1.7.2mechanical and electric instrumentation to survey
thevariables required for successful operation and togenerate the
abnormal, pre-trip, and trip signalsrequired for alarm of such
conditions:a) Starting systemb) Lubricating systemc) Fuel systemd)
Primary cooling systeme) Secondary cooling systemf) Combustion air
systemg) Exhaust systemh) Generatori) Excitation systemj) Voltage
regulation systemk) Governor system
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 4.5.4 Protection To be considered in design See RG1.9 Design
Consideration
The diesel-generator unit shall be automatically section
C1.8tripped on an engine overspeed or generatordifferential
overcurrent, or both. Protective features,other than engine
overspeed and generatordifferential current, shall bea) Blocked
from automatically tripping the diesel-generator unit during an
accident condition and shallbe annunciated in the plant control
room, orb) If protective features other than engine overspeedand
generator differential current are retained duringaccident
conditions, two or more independentmeasurements of each of these
parameters withcoincident trip logic shall be provided. The design
ofthe coincident trip logic circuitry shall provide alarmfor each
individual sensor initiation. All protectivedevices shall remain
effective during the diesel-generator unit testing, and during
operation in non-accident conditions.
IEEE 387 5 5. Factory production testingIEEE 387 5.1 5.1
GeneralIEEE 387 5.1.1 Implementation To be considered in design
Testing shall be performed in accordance with awritten test
plan.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 5.1.2 Documentation To be considered in design and test
Test documentation shall include the following: plana) Equipment
performance specificationsb) Identification of the specific feature
or features tobe demonstrated by the testc) Test pland) Report of
test results. The report shall include thefollowing:1) Objective2)
Equipment tested3) Description of test facility (test
setup),instrumentation used including calibration recordsreference,
and test environment4) Test procedures, including
acceptance/rejectioncriteria5) Test data and accuracy (results)6)
Test abnormalities and failures, including theirdisposition and
effect on test results7) Summary, conclusions, and
recommendations8) Supporting data9) Approval signature and date
IEEE 387 5.1.3 Analyses To be considered in design and test It
is anticipated that testing will beAlthough testing is preferred,
analyses may plan used exclusively, the use ofsupplement test or be
substituted for test, where analytical techniques may betesting is
not practical, to demonstrate conformance required.to the criteria
stated in clause 4. Analysis shall includEthe basis of assumptions
used.
9/28/2009,10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 5.1.4 Substitutions To be considered in design and test
When tests are performed at the manufacturer's or
planassembler's facilities, and not at the site, the
exhaustmuffler, intake air filter-silencer, and radiator
(ifapplicable) normally used for shop tests may besubstituted in
place of the equipment to be providedfor a specific site, since it
is not practical to utilize theequipment and piping that will exist
at the site orfuture sites for which the diesel-generator unit is
bein(qualified.Results of tests shall be corrected to the condition
ofthe service environment and design characteristics,including site
exhaust muffler and intake air filter-silencer systems.
IEEE 387 5.2 Factory production testsThe following tests are
minimum requirements forfactory production tests.
IEEE 387 5.2.1 Engine testsEach engine shall be tested,
utilizing either a waterbrake dynamometer or a generator to
provideaccurate means to control power absorption. Thefollowing
tests shall be performed:a). Break-in test. Each manufacturer shall
developtheir own break-in schedule to best suit the engine.b)
Performance test.
MHI will perform these tests inqualification program
Engine testing is to be by KHI.Engines may be tested
individuallyprior to installaing on speedreducing gearbox.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 1) Test runs. After the engine has satisfactorily MHI will
perform these tests in Additional/Substitute test data will
completed the break-in test, the following minimum qualification
program be developed and recorded specifictests shall be run to
establish the operating to gas turbine.characteristics. These tests
may be conducted in anyorder desired.2) Data logging. Test logs of
all of the above testsshall become a part of the records for a
particularengine. The test logs shall include at least thefollowing
data:i) Speed (r/min)ii) Brake (hp or kW)iii) Brake specific fuel
consumptioniv) Intake manifold pressurev) Intake manifold
temperaturevi) Individual cylinder exhaust temperaturevii)
Turbocharger exhaust temperatureviii) Jacket water temperature
(engine inlet and outletix) Jacket water pressure (engine inlet)x)
Lube oil temperature (engine inlet and outlet)xi) Lube oil header
pressure (engine inlet)xii) Type of fuel and fuel heat contentxiii)
Barometric pressurexiv) Intake air temperature3) Controls-alarm and
shutdown. All engine-mountedalarms and shutdowns, where applicable,
shall be setand checked. The points of activation shall be on
thetest logs.
4) Inspection. At any point after the break-in test or uCIEEE
387 5.2.2 Generator tests MHI will perform these tests in
Generator testing shall be in accordance with NEMA qualification
programMG 1-1993.
IEEE 387 5.2.3 Excitation, control, and other
accessories/auxiliaries MHI will perform these tests inAll such
devices and assemblies shall be tested in qualification
programaccordance with the manufacturer's standardpractices.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 6 Qualification requirementsIEEE 387 6.1 General To be
considered in design and test GTG will be installed in Mild
The diesel-generator units applied as part of the plan
Environment as defined in IEEE 322standby power supply shall be
qualified in accordancE 1983. An analysis will be performedwith the
requirements of this clause.9 This addressing aging of components
asqualification will provide verification that the unit will
required prior to functional ormeet the requirements of clause 4
under all expected seismic testing.environmental conditions.
Qualification shall beaccomplished by performance of type tests
onunaged equipment or by analysis, or by a combinatiorof both as
required in 6.2 and by functional testing asrequired in 6.4
following any aging or seismic testing.All qualification shall be
performed in accordance witha written plan that defines analysis
and tests to beperformed, parameters to be monitored during
tests,test instrumentation, and acceptance criteria
forequipment.
9The requirements for qualification in this clause arebased on
IEEE Std 323-1983 and IEEE Std 627-1980as applicable to
dieselgenerator units to ensure thatthe equipment can perform
within its specificationrequirements.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 6.2 Initial type tests MHI will perform these tests in Initial
type test will be performed at
Diesel-generators not previously type tested as qualification
program ESI.standby power sources for nuclear power
generatingstations shall be subject to a type testing
programconsisting of load capability, start and loadacceptance, and
margin tests. It is preferred thatthese tests be performed at the
enginemanufacturer's or assembler's factory;however, they may be
conducted at the site if certifiedcalibration instrumentation is
provided to measureand record the same functions and
characteristicsnormally measured under factory testing
conditions.Type tests may be performed on one or more units,and
qualification of one unit will qualify like units ofthat type for
equal or less severe service. If start andload acceptance tests
(see 6.2.2) are performedusing more than one identical unit, then
each of theseunits must be tested for load capability (see
6,2.1)and margin (see 6.2.3).
IEEE 387 Type tests shall be performed following
successfulcompletion of the factory production tests. Followingthe
successful completion of these type tests, theequipment shall be
inspected in accordance with themanufacturer's standard procedure,
and inspectionresults shall be documented.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 6.2.1 Load capability tests MHI will perform these tests in
Load capability testing will be
These tests demonstrate the capability of the diesel-
qualification program performed at ESI. KHI must definegenerator
unit to carry the following rated loads at light load limitations
applicable torated power factor for the period of time indicated,
GT.and to successfully reject load in accordance with7.2.1.4. One
successful completion of the testsequence shall satisfy this
particular requirement.a) Load equal to the continuous rating shall
beapplied for the time required to reach enginetemperature
equilibrium.b) Immediately following step a), the short-time
ratedload shall be applied for a period of 2 h and thecontinuous
rated load shall be applied for a period of22 h.c) The short-time
rating load rejection test shall beperformed. The load rejection
test will be acceptablethe increase in speed of the diesel engine
does notexceed 75% of the difference between nominal speecand the
overspeed trip set point, or 15% abovenominal, whichever is
lower.d) Light-load or no-load capability as described in4.1.2 step
c) shall be demonstrated by test. Lightloador no-load operation
shall be followed by a loadapplication 3 50% of the continuous
kilowatt rating for
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide I Sectionl Statement, Requirement Design of US-APWR
NoteIEEE 387 6.2.2 Start and load acceptance tests
A series of tests shall be conducted to establish thecapability
of the diesel-generator unit to start andaccept load within the
period of time necessary tosatisfy the plant design requirement. An
acceptablestart and load acceptance test is defined as
follows;however, other methods with proper justification maybe
found equivalent for the level of reliability to be
demonstrated. 10
1°While the reliability testing is not a specificrequirement of
IEEE Std 323-1983 or IEEE Std 627-1980, it is a required type test
for this equipment.
MHI will perform these tests inqualification program
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide SectionT Statement, Requirement Design of US-APWR NoteIEEE
387 A total of 100 valid start and load tests shall be
performed with no failures allowed. Failure of the unitto
successfully complete this series of tests, asprescribed, will
require a review of the system designadequacy,the cause of the
failures to be corrected, and the testEcontinued until 100 valid
tests are achieved withoutany failure. The start and load tests
shall beconducted as follows:a) Engine cranking shall begin upon
receipt of thestart-diesel signal, and the diesel-generator unit
shallaccelerate to specified frequency and voltage withinthe
required time interval.b) Immediately following step a), the
diesel-generatorunit shall accept a single-step load 3 50% of
thecontinuous kilowatt rating. Load may be totallyresistive or a
combination of resistive and inductiveloads.c) At least 90 of these
tests shall be performed withthe diesel-generator unit initially at
warm standby,based on jacket water and lube oil temperatures at
orbelow values recommended by the enginemanufacturer.After load is
applied, the diesel-generator unit shall
MHI will perform these tests inqualification program
Start and Load acceptance testingwill be performed at ESI.
Number ostarts to be 150 with no failuresrather than 100. This is
to satisfyearlier comments regardingreliability of gas turbine.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 1) Unsuccessful start attempts that can definitely be To be
considered in design and test
attributed to operator error, including setting of planalignment
control switches, rheostats, orpotentiometers, or other adjustments
that may havebeen changed inadvertently prior to that
particularstart test.2) Tests performed for verification of a
scheduledmaintenance procedure required during this series oftests.
This maintenance procedure shall be definedprior to conducting the
start and load acceptancetests and will then become a part of the
normalmaintenance schedule after installation.3) Tests performed in
the process of troubleshooting.Each start attempt performed in the
troubleshootingprocess shall be defined as such before a
startattempt is made.4) Successful start attempts that were
terminatedintentionally without loading.5) Failure of any of the
temporary service systemssuch as dc power source, output circuit
breaker, load,interconnecting piping and wiring, and any
othertemporary setup that will not be a part of thepermanent
installation.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide I Section] Statement, Requirement Design of US-APWR I
NoteIEEE 387
IEEE 387
6.2.3 Margin testsTests shall be conducted to demonstrate the
diesel-generator unit capability to start and carry loads thatare
greater than the magnitude of the most severestep load within the
plant design load profile, includincstep changes above base load.
The limiting case sterchange over base load as defined by the
design loadprofile shall be demonstrated. This is not
necessarilythe largest step change, but may be a smaller stepchange
as the full-load capability of the diesel-generator unit is
approached. These tests may becombined with the load capability or
start and loadacceptance tests. At least two margin tests shall
beperformed using either the same or different loadarrangement. A
margin test load at least 10% greaterthan the magnitude of the most
severe single-stepload within the load profile is considered
sufficient forthe margin test.The frequency and voltage excursions
recorded mayexceed those values specified for the plant designload.
The criteria for margin tests are as follows:
MHI will perform these tests inqualification program
Margin tests will be performed atESI.
a) Demonstrate the ability of the generator andexcitation system
to accept the margin test load(usually the low power factor, high
inrush, and highstarting current of a pump motor)
withoutexperiencing instability resulting in generator
voltagecollapse, or significant evidence of the inability of
thevoltage to recover.b) Demonstrate that there is sufficient
engine torqueavailable to prevent engine stall, and to permit
theengine speed to recover, when experiencing themargin test
load.
MHI will perform these tests inqualification program
Typically the margin test load is acombination of large
inductionmotors in conjunction with resistive& reactive load
banks at test facility.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 6.3 Aging To be considered in design and GTG will be installed
in Mild
Aging methods are described in this clause for the qualification
test plan Environment as defined in IEEE 323applicable conditions
listed in 4.1.2 step a), which are 1983. An analysis will be
performeddetermined to be significant. addressing aging of
components as
required prior to functional orseismic testing.
IEEE 387 6.3.1 Safety classification To be considered in design
andComponents and assemblies within the scope of this qualification
test planstandard (see figure 1) shall be classified into one ofthe
two following categories:a) Components and assemblies required to
enablethe diesel-generator unit to meet its capabilities in
4.1(hereinafter called the safety-related function).
Thesecomponents and assemblies require consideration ofaging as a
potential cause for common mode failuresExamples may include the
governor, generator, cableexcitation system, engine, starting air
solenoid valvesand those gaskets and seals that are applied
toprevent leakage that degrades unit performance.b) Components and
assemblies not required toperform a safety-related function. Each
of thesenonsafety-related components or assemblies
require,verification that it will not degrade the
safetyrelatedfunction. This may be accomplished by testing
oranalysis. Examples may include generator resistancetemperature
detectors (RTDs), neutral groundingequipment, space heaters,
starting air compressorsand drives, keep-warm heaters and pumps,
and those
IEEE 387 6.3.2 Aging classificationFurther classification of the
safety-relatedcomponents identified in 6.3.1 step a) is required
toaddress the potential for age-related failures. Thecategories in
table 2 illustrate this classification.
To be considered in design andqualification test plan
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 Components without significant age-related failure To be
considered in design and
mechanisms may be excluded. For example, it is qualification
test planrecognized that cast iron used in the basic engineblock
will not represent a potential age-related failuremechanism over
normal nuclear service life.Following classification, those
components withpotential age-related failures shall be qualified
bytesting (the preferred method), analysis, or acombination of test
and analysis. Components with aresultant identified qualified life
less than the overallqualified life objective shall have
amaintenance/replacement interval defined. If aging bytest is used,
it shall be followed by seismicqualification to meet IEEE Std 344-
1987. In all casesthe documentation requirements in clause 6 of
IEEEStd 323-1983 shall be satisfied. An example of thisprocess is
given in annex B.
IEEE 387 6.4 Seismic qualification requirements To be considered
in design and Seismic qualification in accordanceSeismic
qualification in accordance with IEEE Std 344. qualification test
plan with IEEE 344 will be performed on1987 is required for all
safety-related components. all safety-related components.
ThisNonsafety-related components require analysis or tes will be
accomplished by ato show that they will not degrade the
safety-related combination of testing and analysis.function of the
unit during a seismic event. Seismictesting shall be followed by
functional testing to verifythe applicable capabilities in clause
4.
IEEE 387 6.5 Ongoing surveillance To be considered in design
andOngoing surveillance, including the periodic tests qualification
test plandescribed in 7.4, may be used as a basis for
theidentification of equipment degradation and validationof the
results of the aging and aged equipment testindescribed in 6.3.
1
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide I Section] Statement, Requirement Design of US-APWR
NoteIEEE 387
IEEE 387
6.5.1 Preventive maintenance, inspection, and testingA separate
preventive maintenance, inspection, andtesting program (see also
6.5.2) shall be establishedfor the diesel-generator unit and all
supportingsystems based on the manufacturer'srecommendations,
including time intervals for partsreplacement of those components
with a qualified lifeless than the unit qualified life objective.
Theserecommendations may be based on operating hoursor fixed time
intervals, or both. Procedures shallinclude, as a minimum, specific
programs for eachportion of the unit as follows:a) The engine,
including the governor, overspeed tripdevice, internal components
to the maximum extentpractical, turbocharger, lube oil components,
fuel oilcomponents, jacket water components, startingcomponents,
cleaning, adequate lubrication, andwater chemistryb) The generator
and rotating exciter (if used),including insulation condition,
bearings, coolingsystem, lubricating system, and space heaters
(ifapplicable)c) Electrical auxiliary equipment, including
localengine and generator control, exciter and voltageregulator,
and protection and surveillancecomponentsd) Subsystems, including1)
Starting energy, typically consisting of air receivertanks,
compressors, piping, valves, and associatedinstrument and control
devices2) Fuel oil, typically consisting of pumps,
filters,strainers, piping, valves, and associated instrumentand
control devices3) Lube oil, typically consisting of pumps,
filters,strainers, keep-warm heaters and pumps, coolers,sump tanks,
piping, valves, and associated
To be considered in design
To be considered in design
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 6.5.2 Records and analysis To be considered in design
Records shall be maintained for each diesel-generator unit to
provide a basis for an analysis of theunit's overall performance.
These records alsoprovide a basis for verifying any assumptions
madeconcerning agerelated failure mechanisms. Thedocumentation may
also be used to shorten or extencthe replacement intervals.
IEEE 387 6.6 Modifications To be considered in
designModifications to a previously qualified diesel-generator
unit, such as governor, generator, overallsystem flywheel effect,
excitation systemcharacteristics, cooling media, or
otheraccessories/auxiliaries that may change the capabilitýor
performance of a previously qualified diesel-generator unit, shall
be analyzed to determine if thedegree of change is major or
minor.a) Major changes to a qualified engine, such aschanges in
stroke or bore, brake mean effectivepressure, speed, or
diesel-generator arrangement inunique or different configuration
shall be requalified inaccordance with this clause.b) Minor changes
to a previously qualified diesel-generator unit, such as component
parts substitution,shall be qualified by analysis or testing, or
both.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 6.7 Documentation To be considered in design
Qualification documentation shall be in accordancewith IEEE Std
323-1983, and shall include thefollowing:a) Service and environment
[see 4.1.2 item a)]b) Classification table of all components as
safety-related or nonsafety-relatedc) Analysis/justification for
nonsafety-relatedcomponentsd) Classification table of
safety-related componentswith or without age-related failure
mechanismse) Justification of aging methods for variouscomponentsf)
Test data for control panels, exciter/regulator(including
seismic)g) Test data for insulation systems testingh) Test data for
seismic testing of smaller mechanicalcomponentsi) Analytical data
for seismic analysis of generator,engine, and major mechanical
componentsj) Historical data/justification for items
requiringperiodic replacementk) Correlation of qualification
program to instructionbook information for periodic replacement,
etc.
IEEE 387 7 Site testingIEEE 387 7.1 Testing MHI will perform
testing in GTG Site
Site testing shall consist of site acceptance testing, Testing
Programpre-operational testing, and periodic testing.
Individuatests shall be as shown in table 3.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.2 Site acceptance testing MHI will perform testing in GTG
Site
After final assembly and preliminary start-up testing, Testing
Programeach diesel-generator unit shall be tested at the siteto
demonstrate the capability of the unit to perform itsintended
function.
IEEE 387 7.2.1 Tests MHI will perform testing in GTG SiteThe
tests to be given to the diesel-generator unit are Testing
Programshown in table 3 and shall be as follows.
IEEE 387 7.2.1.1 Starting test MHI will perform testing in GTG
SiteStarting tests shall demonstrate the capability to attair
Testing Programand stabilize frequency and voltage within the
limitsand time defined in the equipment specification.
IEEE 387 7.2.1.2 Load acceptance test MHI will perform testing
in GTG SiteLoad acceptance tests shall demonstrate the Testing
Programcapability to accept the individual loads that make upthe
design load, as described in 3.4, in the desiredsequence and time
duration and to maintain thevoltage and frequency within the
acceptable limits.NOTE-If the diesel-generator unit has a
light-load orno-load operation capability, the load acceptance
testsequence shall include consideration of the potentialeffects on
load acceptance following such operation(see also 4.2.2).
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.2.1.3 Rated load test MHI will perform testing in GTG
Site
Rated load tests shall demonstrate the capability of Testing
Programcarrying the following loads for the indicated timeswithout
exceeding the manufacturer's design limits:a) A load equal to the
continuous rating for the timerequired to reach engine temperature
equilibrium pluslhb) Immediately following the load in item a), the
ratedshort-time load shall be applied for a period of 2 h
IEEE 387 7.2.1.4 Load rejection test MHI will perform testing in
GTG SiteLoad rejection tests shall demonstrate the capability
Testing Programof rejecting short-time rated load without
exceedingspeeds or voltages that will cause tripping orcomponent
damage.
IEEE 387 7.2.1.5 Electrical test MHI will perform testing in GTG
SiteElectrical tests shall demonstrate that the electrical Testing
Programproperties of the generator, excitation system,
voltageregulation system, engine governor system, and thecontrol
and surveillance systems are acceptable forthe intended
application.
IEEE 387 7.2.1.6 Subsystem test MHI will perform testing in GTG
SiteTests shall demonstrate the capability of the control, Testing
Programprotection, and surveillance systems to function
inaccordance with the requirements of the intendedapplication.
IEEE 387 7.2.2 Test loads To be considered in designLoads to be
applied, carried, and rejected during sitetesting shall be the
design load auxiliaries located atthe station. Equivalent loads may
be used if theseauxiliaries cannot be operated for testing.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.3 Pre-operational testing MHI will perform testing in GTG
Site Note additional 25 start and load
Following completion of the site acceptance testing, Testing
Program tests to be performed afterpre-operational tests shall be
performed to installation at site.demonstrate starting and
operational adequacy of thediesel-generators and the system.The
individual pre-operational tests shall be asindicated in table 3
and as described in 7.5.Reliability tests shall demonstrate that an
acceptablelevel of reliability has been achieved to place the
newdiesel-generators into operation. This shall beachieved by a
minimum of 25 valid start and loadtests without failure on each
installed diesel-generator.
IEEE 387 7.4 Periodic testingIEEE 387 7.4.1 General
After being placed in service, the diesel-generator uniishall be
tested periodically to demonstrate that thecontinued capability and
availability of the unit toperform its intended function is
acceptable.Records and analysis described in 7.6 shall bemaintained
for all periodic tests. It is recognized thatsome of these tests
may be combined and notnecessarily performed individually.It is not
necessary to begin these tests from standbyconditions unless
otherwise specified.
These tests are performed in plantperiodically after
installation.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide SectionT Statement, Requirement Design of US-APWR NoteIEEE
387 a) Test equipment shall not cause a loss of
independence between redundant diesel-generatorunits or between
diesel-generator load groups.b) Periodic testing of a
diesel-generator unit shall notimpair the capability of the unit to
supply emergencypower in the required time in response to
start-dieselsignals.c) All diesel-generator unit protective trips
and alarmsshould be operative during applicable periodic testingd)
Written procedures for testing shall be preparedand utilized. The
procedures shall include themanufacturer's applicable test
recommendations andshall identify all special arrangements or
changes inthe normal system configuration required to performthe
test. The procedures shall ensure that the systemis restored to its
normal configuration after completiorof the tests. All tests shall
be in general accordancewith the manufacturer's recommendations
forreducing engine wear, including cool-down operationat reduced
power followed by post-operationlubrication.Test procedures that
involve starting and stopping thediesel-generator unit shall
include the following steps1) Observe and record all pre-start data
listed in table2) Initiate the start-diesel signal and measure and
rec,3) Confirm that the generator voltage and frequency a4) Record
all parameters listed in table 4 at the beginr5) Observe and record
all post-test data listed in table
These tests are performed in plantperiodically after
installation.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 e) Communication shall be established between the These tests
are performed in plant
diesel-generator unit testing location and the main periodically
after installation.control room so that operators are cognizant of
thestatus of the diesel-generator unit undergoing the testf) During
system operational tests, problems mayarise with individual
components that do not detractfrom the overall test purpose. These
componentsshall be repaired and their interface with the
systemshall be retested; however, the total test need not
berepeated unless necessary due to the critical functionof the
component involved.Abnormal conditions discovered during any test
shallbe evaluated to determine if1) The condition would prevent the
diesel-generatorunit from performing its intended function.2) The
test is a valid test.
IEEE 387 7.4.2 Periodic tests These tests are performed in
plantPeriodic tests shall consist of availability, system
periodically after installation.operation, and independence
verification tests.
IEEE 387 7.4.2.1 Availability tests These tests are performed in
plantThese tests demonstrate the continued capability of
periodically after installation.the diesel-generators to start and
accept load.Each diesel-generator unit shall be started and
loadedat least once in 31 days (slow-start and load-run test)In
lieu of the above test, once every six months a faststart and
load-run test shall be performed.
IEEE 387 7.4.2.2 System operation tests These tests are
performed in plantThis series of tests demonstrates the ability. of
the periodically after installation.diesel-generator unit to
perform its intended functionunder simulated accident
conditions.These tests shall be performed at
shutdown/refuelingoutages once every two years.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.4.2.3 Independence verification test These tests are
performed in plant
Subsequent to any modifications where diesel- periodically after
installation.generator unit independence may have been affectedor
every 10 years during a plant shutdown or refuelingoutage,
whichever is the shorter, an independentverification test shall be
conducted.
IEEE 387 7.5 Test descriptionsThe following descriptions apply
to the tests listed intable 3. These tests should be preceded by a
pre-lubEperiod and should be in general accordance with
themanufacturer's recommendations for reducing enginewear,
including cool-down operation at reduced powefollowed by
post-operation lubrication. Unlessotherwise noted, these tests
should be performed atpower factor as close as practical to the
design loadpower factor as plant voltage conditions permit.
IEEE 387 7.5.1 Slow-start test MHI will perform testing in GTG
SiteDemonstrate proper start-up from standby conditions Testing
Programand verify that the required design voltage andfrequency are
attained. The unit should reach ratedspeed on a prescribed schedule
selected to minimizestress and wear on the diesel-generator
unit.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.5.2 Load-run test MHI will perform testing in GTG Site
Demonstrate load-carrying capability, with load Testing
Programequivalent to 90-100% of the continuous rating of
thediesel-generator unit, for an interval of not less than 1h and
until temperature equilibrium has been attainedThis test may be
accomplished by synchronizing thegenerator with offsite power.
Testing may beperformed at unity power factor or at a lagging
powerfactor within the diesel-generator unit capability.The loading
and unloading of a diesel-generator unitduring this test should be
gradual and based on aprescribed schedule selected to minimize
stress andwear on the diesel-generator unit.
IEEE 387 7.5.3 Fast-start test MHI will perform testing in GTG
SiteDemonstrate that each diesel-generator unit starts Testing
Programfrom standby conditions (if a plant has normallyoperating
pre-warm systems, this would constitute itsstandby conditions) and
verify that the diesel-generator unit reaches required voltage
andfrequency within acceptable limits and time, asdefined in the
plant technical specifications.
IEEE 387 7.5.4 Loss-of-offsite power (LOOP) test MHI will
perform testing in GTG SiteDemonstrate by simulating a loss of
offsite power that Testing Programa) The emergency buses are
de-energized and theloads are shed from the emergency buses.b) The
diesel-generator unit starts on the auto-startsignal from its
standby conditions, attains the requiredvoltage and frequency
within acceptable limits andtime, energizes the auto-connected
shutdown loadsthrough the load sequencer, and operates for aminimum
of 5 min.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.5.5 Safety injection actuation signal (SIAS) test MHI will
perform testing in GTG Site
Demonstrate that on a SIAS, the diesel-generator unil Testing
Programstarts on the auto-start signal from its standbyconditions,
attains the required voltage and frequencywithin acceptable limits
and time, and operates onstandby for a minimum of 5 min.
IEEE 387 7.5.6 Combined SIAS and LOOP test MHI will perform
testing in GTG SiteDemonstrate by simulating a loss of offsite
power in Testing Programconjunction with SIAS thata) The emergency
buses are de-energized and theloads are shed from the emergency
buses.b) The diesel-generator unit starts on the auto-startsignal
from its standby conditions, attains the requirecvoltage and
frequency within acceptable limits andtime, energizes the
auto-connected shutdown loadsthrough the load sequencer, and
operates for aminimum of 5 min.
IEEE 387 7.5.7 Largest-load rejection test MHI will perform
testing in GTG SiteDemonstrate the emergency diesel-generator
unit's Testing Programcapability to reject a loss of the largest
single load,and verify that the voltage and frequencyrequirements
are met and that the unit will not trip onoverspeed.
IEEE 387 7.5.8 Design-load rejection test MHI will perform
testing in GTG SiteDemonstrate the diesel-generator unit's
capability to Testing Programreject a load equal to 90-100% of the
design loads,and verify that the unit will not trip on
overspeed.
9/28/2009, 10:59 AM
-
-2939908.xis, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.5.9 Endurance and load test MHI will perform testing in GTG
Site
Demonstrate load-carrying capability for an interval of Testing
Programnot less than 8 h, of which 2 h should be at a
loadequivalent to the short-time rating of the diesel-generator
unit and 6 h at a load equivalent to90-100% of the continuous
rating. (For the pre-operational test, use 2 h and 22 h.) Verify
that voltageand frequency requirements are maintained.
IEEE 387 7.5.10 Hot restart test MHI will perform testing in GTG
SiteDemonstrate hot restart functional capability at full- Testing
Programload temperature conditions by verifying that
thedieselgenerator unit starts on a manual or auto-startsignal,
attains the required voltage and frequencywithin acceptable limits
and time, and operates for aminimum of 5 mrin.
IEEE 387 7.5.11 Synchronizing test MHI will perform testing in
GTG SiteDemonstrate the ability to Testing Programa) Synchronize
the diesel-generator unit with offsitepower while the unit is
connected to the emergencyload.b) Transfer this load to the offsite
power.c) Isolate the diesel-generator unit.d) Restore the
diesel-generator unit to standby status
IEEE 387 7.5.12 Protective-trip bypass test MHI will perform
testing in GTG SiteDemonstrate that specified automatic diesel-
Testing Programgenerator unit trips are automatically bypassed
asdesigned.Typically, engine overspeed and generator
differentiacurrent trip are not bypassed.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.5.13 Test mode override test MHI will perform testing in GTG
Site
Demonstrate that with the diesel-generator unit Testing
Programoperating in the automatic test mode while connectedto its
bus, a simulated safety injection signal override,the test mode
bya) Returning the diesel-generator unit to standbyoperations.b)
Automatically energizing the emergency loads frorroffsite
power.
IEEE 387 7.5.14 Independence test MHI will perform testing in
GTG SiteDemonstrate that, by starting and running (unloaded)
Testing Programredundant units simultaneously, potential
commonfailure modes that may be undetected in single
dieselgenerator unit tests do not occur.
9/28/2009, 10:59 AM
-
-2939908.xls, MHI
Guide Section Statement, Requirement Design of US-APWR NoteIEEE
387 7.6 Records MHI will document all testing in GTQ
Records shall be maintained for each diesel- Site Testing
Program.generator unit to provide a basis for an analysis of
theunit's overall performance. The records shall be Following
completion of installationretrievable and shall provide a basis for
verifying any the continuation of record keepingassumptions made.
The documentation may also be will be by owner.used to shorten or
extend the replacement intervalsor to extend equipment or station
life. The recordsshall include, as a minimum, the following
features:a) All start attempts, including those from bona
fidesignals; maintenance, repair, and out-of-service timehistories,
as well as cumulative maintenance andoperating data; cumulative
statistical analysis ofdiesel-generator unit test results, together
with resultsof operation of the diesel-generator unit whenrequired
by actual demandb) Critical failure mechanisms, human errors,
andcommon mode failures, including cause andcorrective actionc)
Test parameter data indicated in table 4 that mayhave application
for reliability and data trending
9/28/2009, 10:59 AM
