------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------

Rev 00

WRITE UP Digitally signed by K K Banerji

DN: cn=K K Banerji, c=IN,
o=NTPC, ou=Kahalgaon TF,
email=kkbanerji@ntpceoc.co.
in
Reason: cat-I on BHEL

ON certification basis
Date: 2006.10.11 13:28:16
+05'30'

AUTOMATIC TURBINE TESTER

Project: KORBA STPP (1X 500 MW)STAGE III

Package: NTPC
Product: TG C&I
NTPC drg. no.-2140-108-03HW-PVM-K-019

“THIS DRG IS EXACTLY IDENTICALTO THE CORRESPONDING

APPROVED DRG OF KAHALGAON ST- II PH- II “

21.07.06 BSR Sd./- BSR Sd./- KBB Sd./-

00

REV DATE REMARKS PREPARED CHECKED APPROVED

---------------------------------------------------------------------------------------- PAGE 1 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

Reference Documents :

(i) Automatic Turbine Tester Logic Diagrams

(ii) Write-up on Automatic Turbine Run up System

(iii) Governing Scheme

NOTE: This document is explanatory write-up of

document no. (i) mentioned above.

1.0 GENERAL:

The safety devices (protective devices) protects the turbine from

impermissible operating conditions. On response of a safety device,
the HP & IP stop valves close. Closure of control valves is initiated by
secondary fluid pressure reduction.

The Automatic Turbine Tester is used to check / test at a

regular interval the function of the safety devices of the turbine and its
'stop and control valves', while it is in operation, without causing actual
turbine trip.

The Automatic Turbine tester has been divided into

two sub-groups viz.

(i) Sub-group Safety Devices.

(ii) Sub-group HP/IP valves.

Each sub-group is further sub-divided into sub-tests for each individual

device covered under the sub-group. The switching on of the sub group
controls and subtests shall be in the following modes.

1.1 The selection of the sub-group and sub-test shall be manual from
OWS in control room.

1.2 Both the sub groups are so interlocked that operation of

only one subgroup shall be possible at a time.

1.3 Any of the subgroups can be switched ON or OFF of the concerned SGC
by the control buttons for “SGC- ON/OFF” in OWS. As a result , the
display “ AUTO ON” will glow in CRT.

---------------------------------------------------------------------------------------- PAGE 2 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

1.4 Any one subtest of the switched-on subgroup can now be

selected by clicking the concerned control button 'SELECTION ON'. As a
result, the lamp 'DEVICE RELEASED' shall glow on the corresponding
CRT display. The individual sub-test selection are also mutually
interlocked, so that only one selection and hence one sub-test can
be executed at a time. The selection can be cancelled by clicking the
control button 'SGC ON/OFF'.

1.5 After a subtest has been selected, the subgroup program

shall be started by clicking the control buttons for “START UP” in OWS.
If the initial conditions for the test are fulfilled , the display (in
CRT)`PROGRAM RUNNING` will glow. Otherwise the subtest will be
blocked and the missing initial conditions will be indicated in code
form on the criteria display.

1.6 The momentary status of the test program shall be indicated by

means of various text displays in CRT. The test program in progress
can be interrupted at any time by clicking the control button for “SHUT
DOWN” from OWS.

1.7 Once started, the testing can not be switched over to

another subtest or the SGC can not be switched off, before the
program selected has been completed. If a subtest selected has been
completed successfully the lamp `TEST COMPLETED SUCCESSFULLY'
shall glow and the reset program shall start automatically.

1.8 If a fault e.g. "Running time exceeded" is detected

during a test, the respective pretest or main test shall be discontinued
immediately and the shut down i.e. reset program be started
automatically. The missing criteria and concerned step number shall be
indicated on the criteria and step display indications . Fault alarms
can be acknowledged by clicking upon the pushbutton 'SGC ON/OFF’
only.

1.9 If the test of a selected subgroup is completed

successfully, either another selection is made and test program started
again, or the subgroup control is switched off manually from OWS.

---------------------------------------------------------------------------------------- PAGE 3 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

2.0 SUBGROUP `SAFETY DEVICES'

The Automatic Turbine Tester for the 'Safety Devices'

consists of the following sub-tests:-

(i) Remote Trip Device 1 i.e. Solenoid valve 1

(MAX52 AA001).
(ii) Remote Trip Device 2 i.e. Solenoid valve 2
(MAX52 AA002)
(iii) Overspeed Trip Device –( MAY10AA001 / MAY10AA002).

(iv) Low Vacuum Trip Device - MAG01 AA011.

During normal trip the 'Safety Devices' close the stop

valves of HP & IP , via the 'Tripping Devices (MAX51AA005+006 ).
The remote Trip Solenoid valves 1+2 actuate the 'Tripping Devices' by
stopping the supply of control fluid to them and opening the trip fluid
circuit to drain simultaneously. All other 'Safety Devices' operate on the
'Tripping Devices' by opening the auxiliary trip fluid circuit to drain.

An alternative trip fluid circuit is established for the duration of testing

of the 'Safety Devices' in order to protect the turbine during testing. In
this case by means of the change-over valve (MAX51 AA211), the trip
fluid circuit is isolated from the `Safety Devices' and supplied with
control fluid via the test trip solenoid valves 1&2 (Remote Trip
Solenoid valves during test), MAX51 AA201 + 202.

In order to ensure complete protection for the turbine,

emergency trip conditions during testing cause the solenoid valves
MAX51AA201 + 202 to be de-energized resulting turbine trip and
the reset program to be started simultaneously. During testing , two
limit value monitors provide overspeed signal for protection of
turbine against actual overspeed.

The turbine trip is prevented due to Automatic Testing of

the 'Safety Devices' but the general annunciation are activated. This
allows testing of appropriate part of the alarm annunciation system
also. The timings of all commands and the execution thereof are
monitored by the Automatic Tester. If the monitoring time is exceeded,
the reset programme is started in order to re-establish the initial
condition.

2.1 'Startup ' program, SG Safety Devices

---------------------------------------------------------------------------------------- PAGE 4 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

The start up program of each subtest is divided into two parts viz.
pretest and main test. If the operator switches on the 'subgroup safety
devices' as per clause 1.4 - 1.6, the program would proceed to
execute the tests provided following release criteria are present.

(i) Tripping Devices in operating position, and

(ii) All the monitors in operating position, and
(iii) 'One release' is present (i.e. a selection command
is given).

An interlock is provided to switch off the "sub group - safety devices"

if "sub group - safety valves" is already on .

2.1.1 PRETEST

The pretest will be performed before each subtest (MAIN

TEST). If this test is completed successfully it is
assured that the protective logic and remote trip devices
during testing are in working order.

Step 1:-
In the step 1 a signal is issued to indicate that pretest is 'ON' and two
commands are issued to energize the test trip solenoid valves
(MAX51AA201 + 202) (Ref. clause 2.5) causing control fluid pressure to
build up at the changeover valve. A similar command will again be
issued with the help of signal <D> once the test solenoid valves 1 & 2
are individually tested for successful operation in step 2 & 3 . Within 4
sec. of wait/check time the pressure at switch MAX51CP208 should be
established.

Step 2:-
In step 2 a ON line testing is done by deriving actual turbine speed in
0-3600 RPM range and adding 360 RPM to it , if the output signal is
greater than 3300 RPM generated thru LVM then a test signal is
generated and fed to de-energize the 'test trip solenoid valve 1'
(MAX51AA201) (Ref.clause 2.5). This should result in depressurization
of the control fluid before the changeover valve. The pressure at
switch MAX51CP207 must drop but the pressure at switch MAX51CP206
should not change as the 'test trip solenoid valve 2' MAX51AA202 is
still energized. These check back criteria indicate the healthiness of
the solenoid valve MAX51AA201 as well as speed limit value monitor
1. These are checked/monitored within 3 sec.

Step 3:-
In step 3, a similar test signal as above is used to de-energize the
"test trip solenoid valve 2" (MAX51AA202). This time the
depressurization of control fluid should take place between the two

---------------------------------------------------------------------------------------- PAGE 5 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

test solenoid valves, and this check back criterion by pressure switch
MAX51CP205 ensures the healthiness of 2nd test trip solenoid valve
MAX51AA202 as well as speed limit value monitor 2 and the EPS
channels once again. The wait/monitoring time is 3 secs as in step 2.

Step 4:-
In step 4, no command is issued but a deliberate
waiting time has been introduced to allow, re-energisation of
the two test solenoid valves to provide control fluid upto the
changeover valve.

Step 5:-
In step 5, a command is issued to actuate the
changeover solenoid valve MAX61AA201. This initiates draining of
control fluid between the solenoid valve and changeover valve. The
pressure differential causes the change over valve to move to the test
position, which is annunciated in the panel insert.

The checkback criteria viz. test position of the changeover valve, trip
fluid and auxiliary start up fluid pressure, together with the signal
from step 5 generate signal 'Pretest end'(completed).

2.1.2 MAIN TEST

(A) MAIN TEST of Remote Trip Device 1 & 2 (Remote trip solenoid valve 1 :
MAX52AA001 & Remote trip solenoid valve 2 : MAX52AA002)

Step 6:-
In this step a command is issued to test the Remote Trip
Solenoid Valve MAX52AA001, if release for this is present. The solenoid
valve is energized causing the control oil supply to be blocked and the
trip oil circuit to be connected to drain instantaneously. The tripping
devices MAX51AA005 & 006 move immediately to trip position. The trip
fluid and auxiliary trip fluid pressures collapse and the control fluid
between the Remote Trip Solenoid valves only maintain its normal
pressure, while the pressure before the tripping devices 1&2 collapse.
The completion of the test is indicated in the MMI through a status lamp
'Test completed successfully' and the reset program is initiated
automatically to restore all the devices tripped to the normal operating
position.
Then, if the other remote trip device is released, and the pretest is
over, command is issued to test the Remote Trip Solenoid Valve
MAX52AA002 in the same manner and after the test is over, it is
annunciated in the panel insert and reset program is initiated.

(B) MAIN TEST of Overspeed Trip Device

MYA10AA001 + 002 :

---------------------------------------------------------------------------------------- PAGE 6 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

Step 7:-
This step is enabled if Overspeed Trip Devices have been
released and 'pretest' is over , a command is issued in this step to
drive the 'Overspeed test Unit' motor MAX62AA001M to open a part
and provide the test oil. This test oil builds up gradually and acts
through line MAX62 on the effective area of fly bolt, test oil pressure
test being directly indicating the percentage of the overspeed
simulation. If the bolts are functioning correctly, they will come out
into the trip position when the predetermined pressure is reached and
operate the trip lever to depressurize auxiliary trip fluid circuit
instantaneously . This results in tripping of the Tripping devices 1 and 2
and collapse of the overspeed Trip devices and pressure of test oil are
also taken as check back criteria for completion of the test. If the
overspeed trip devices trip a little earlier before the set test oil
pressure builds up to set value, it is annunciated in the panel insert
and the reset program started automatically to restore all the devices
tripped to their normal operating positions.

(D) Main Test of Low Vacuum Trip Device MAG01AA011

Step 08:-
This step is enabled when the low Vacuum Trip Device has
been released and the 'pretest' is over. A command is issued in this
step to actuate the 'Low Vacuum Trip Device' by energizing the test
solenoid valve MAG01AA201. In low vacuum trip device, actual
condenser pressure is applied to a diaphragm which is held in its
normal position by a spring. If the condenser pressure is too high, the
force acting upon the diaphragm exceeds that of the spring and
connects the auxiliary trip fluid system with the outlet to drain. When
this solenoid valve is energized, the 'Low Vacuum Trip Device' is
disconnected from the Vacuum line and simultaneously connected with
atmosphere through a resistance provided by long spiral tube. The air
weakens the vacuum and at the low vacuum condition the Device
trips, resulting in draining of auxiliary trip fluid instantaneously which
is taken as one of the check back criteria for test completion.
Collapse of trip fluid pressure and tripped position of
Tripping Device 1 & 2 are also taken as the check back criteria apart
from the simulated condenser pressure and tripped position of 'Low
Vacuum trip Device'.

After successful completion of the test, it is indicated in the panel

insert, and the reset programme is started automatically to restore all
the devices tripped to their normal operating position.

2.2 Reset (Shutdown) Program : SG-Safety Devices

---------------------------------------------------------------------------------------- PAGE 7 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

The reset program is started automatically as soon as any of the main

tests described in clause 2.1.2 are over. It is also started under
protection in the event of turbine trip during testing , represented by
trip fluid pressure (<2 kg/cm2), or if the running time is exceeded in
any of the main tests or pretests. The signal starting the resetting
program under automatic action gets reset as soon as a reset step is
set so that start up program can be restarted for other sub-tests or
when needed.
The reset program is also started automatically if initiating command
(I-command) from step-7 and overspeed test unit position is already at
100%(which is a fault condition).
In the reset program the hydraulic safety devices which
have tripped during testing are returned back to their normal
operating positions.

2.2.1 Step 51

This step is initiated as soon as the reset program

starts. A command is issued to drive the overspeed trip test device
back to its normal position until the limit switch actuates. But the
checkback monitoring is continued until the test oil pressure is
reduced to a negligible value. This double check back is necessary to
ensure that the trip setting of overspeed is not reduced by any residual
test oil pressure.

At the same instant two more commands are issued to

switch on disconnection relays of channel 1 & 2 in order to switch off
the remote trip relays 1 & 2 ( MAX52AA001 + 002), provided anyone of
these remote trip relays are on. This is to avoid spurious turbine trip
after the safety devices have been restored to their normal
operating positions. The status in panel insert indicates that resetting
is on.

The check-back signals in this step ensure that the

safety devices are in their normal operating positions and no simulated
trip condition is present. After all the check-back criteria are present,
the reset program proceeds to step 52.

There is also a bypass condition which bypasses all the

above criteria except those which ensure that the overspeed trip
device unit is in normal operating positions and the collapse of test
oil pressure. This bypass is effective when the turbine has tripped.
This is because of the reason mentioned at para 2.2.2(i) below. Step
51 is also enabled from step 53 for recycling purposes.

---------------------------------------------------------------------------------------- PAGE 8 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

2.2.2 Step 52

In this step command is issued to energize the reset

solenoid valves MAX48AA 201 & 202 so that auxiliary start up fluid is
supplied with control fluid which forces all safety devices viz. Tripping
Devices (MAX51AA005 & 006), Manual Turbine Trips (Levers 1&2) and
over speed trip devices (MAY10AA001+002), to return back to
their operating position, and the trip fluid pressure then builds up to
normal values. After 6 sec. time which will allow completion of this
resetting the reset solenoid valve MAX48AA201 is de-energized to
shutoff the control fluid supply through it and thus cause pressure
at MAX48CP201 to drop. The additional 4 sec in the waiting time has
been envisaged to allow sufficient time for the establishment of this
check back criterion for signal <T> to enable step 53 .

The check-backs are bypassed in the case of reset

program due to turbine trip or exceeding of running time for the
following purposes (i) & (ii) :

i) In the event of turbine trip during test, the pretest or main test is
discontinued immediately and the reset (shutdown) program started
under protection. In the reset program only 'overspeed trip
device' is restored to its operating position so that the turbine can
be restarted with the overspeed trip device in its normal operating
position.

ii) If the running time of the pretest or a main test exceeds

(due to non-fulfillment of a step criterion), the pretest or main test
currently running is discontinued and the reset program started under
protection to restore the normal operating position. If the running time
exceeds during reset program the respective step is held up and the
resetting can be restarted again, to repeat the resetting when the
missing criterion is made available.

The fault causing the running time to exceed is to be

eliminated immediately keeping the turbine monitoring equipment
under observation.

2.2.3 Step 53:

As soon as the step 53 is enabled the reset solenoid

valve MAX48AA202 is de-energized and the auxiliary start up fluid
pressure between the two reset solenoid valves also collapses which is
taken as one of the check back criteria. The other check back criteria
are the same as those of step 52. Here again waiting time and all
check-back criteria are bypassed in case of resetting due to turbine
trip [ ref. para 2.2.2(i) ] . Also ref. Para 2.2.2 (ii) for the requirement
of manual resetting.

---------------------------------------------------------------------------------------- PAGE 9 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

2.2.4 Step 54

In this step command is issued to close the solenoid

valve MAX61AA201 by reenergizing it. This closes the drain port
and control fluid pressure builds up which pushes the change-over
valve to its normal working position. Additional 3 sec. in
waiting/check time has been provided for ensuring trip fluid pressure
building to normal value through tripping devices. The status
indication of 'change over valve' in test position is also removed.
Another command is issued here simultaneously to reset all the
memories to register cancellation of all the selection.

2.2.5 Step 55

In this final step, after change over valve has changed to normal
working position, commands are issued to de-energize the remote trip
test solenoids 1 & 2 (MAX51AA201 & 202), by resetting the memory
circuits. This is the last step of returning to normal operating
conditions and the check back criteria are the collapse of pressure of
the control fluid between the remote trip test solenoids and before the
change-over valve. The programme remains stay-put here by resetting
the memory, unless the sub-group is switched off or unless another
sub-test is initiated. The status indication "resetting on" is also
removed after getting the check back criteria.

2.3 ATT Selections : Safety Devices :

2.3.1 The released signal for any of the safety devices, to be

used as one of the release criteria for start-up program as well as
enabling criteria of the respective main test, shall be generated if all of
the following conditions are present:

(i) The push button 'selection on' on the panel insert of the
concerned safety device switched-on.

(ii) Main test of the respective sub-test not at its end.

(iii) None of the safety devices released.

(iv) Sub-group safety devices switched-on.

2.3.2 The released signal shall be reset (removed) if any of the following
conditions are present:

(i) 'Released' signal for any other safety device present.

---------------------------------------------------------------------------------------- PAGE 10 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

(ii) 'SGC ON/OFF' push button of sub-group safety devices

pressed and the test program is not running.

(iii) Command from step 54 issued.

2.3.3 The memories for release signal generation for testing of "speed limit
value monitors" at the time of PRETEST [ref. clause 2.1.1 (step 2&3)],
are set from the signals of step 1 & step 3. They are reset by
completion of individual testings or by command from step 51.

2.4 ATT Annunciations :

2.4.1 Signals 'Change over valve test position', 'one or more

monitors tripped', 'remote trip during test on' and 'trip devices resetting
on' shall be generated for annunciation on the respective text display
tiles of panel insert, provided sub-group is switched on and the devices
are in the respective conditions .

2.4.2 Separate signals as applicable representing completion of

main test of respective safety devices are issued for indication 'Test
completed successfully' on the respective tiles of panel insert as
well as for the purpose of interlock as per clause 2.3.1(ii). These
signals shall continue to persist unless the memories are reset by
switching off the sub-group control.

2.4.3 Signals for indicating 'pretest', 'Main Test', 'Resetting' and 'fault'
conditions at the text display tiles of MMI and signal representing trip by
overspeed during testing for central annunciation are generated. These
are described below.

2.4.3.1 The signal 'Pretest ON' shall be generated by setting the

memory due to command from step 1. The signal shall persist
unless the memory is reset by any one of the following conditions:-

i) Pretest end .
ii) Command from step 51 issued.
iii) Subgroup control is switched off.

2.4.3.2 The signal 'Main Test On' shall be generated if pretest is completed
or the main test of valves is on (ref. clause 3.4). The signal shall
persist unless the memory is reset by command from step 51 and
the 'Main Test valves ON' signal memory is reset by command from
step 51 of sub-group valves.

---------------------------------------------------------------------------------------- PAGE 11 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

2.4.3.3 The signal 'resetting ON' shall be generated by setting any of the
memories by command from step 51 of the respective subgroups (also
ref. clause 3.4 ). The signal shall persist unless both the memories
are reset by signal issued after respective resetting is complete. The
memory will also reset if SGC is switched off .

2.4.3.4 If the turbine is tripped during testing or running time is exceeded, a

'fault' alarm is generated, which disappears on acknowledgement by
pressing "SGC - ON/OFF" control pushbutton .

2.4.3.5 The signal 'Trip by overspeed during test' shall be generated if

turbine speed, sensed by any or both of the speed limit value monitors
exceeds 110% while changeover valve is in test position.

2.5 ATT turbine trip during test : channels 1 & 2

The two commands 'Control Fluid provide' issued at step 1 will set two
separate memories to issue separate commands to energize the test
solenoid valves (MAX51AA201 & 202), if the turbine speed, sensed by
the speed limit value monitors 1&2, is less than 110% or the release
for testing of speed limit value monitor is present.

On successful completion of testing of speed limit value

monitors in step 2 & 3 of PRETEST , a signal is fed to de-energize the
test trip solenoid valves MAX51AA201 & 202, and the memories to
reset.

After step 4 the two commands 'Control Fluid provide' are again issued
which will energize the two test solenoids. The two solenoids will
remain energized and the two memories will continue in set position to
ensure turbine protection during testing.

The memories will reset and the test solenoid valves de-energized,
if any of the following conditions are present:-

i) Command from step 55 .

ii) Respective Electrical Turbine Trip is operated.

iii) Actual turbine speed , sensed by the respective speed limit value
monitor crosses the limit i.e. 110 %.

iv) Respective manual Turbine Trip is operated.

The conditions (ii) through (iv) mentioned above shall cause the
turbine to trip.

---------------------------------------------------------------------------------------- PAGE 12 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

3.0 SUB GROUP 'HP/IP' VALVES:

The 'Stop and Control Valves' are the final control elements of
the 'Safety Devices' and hence their serviceability is just as
important as that of 'Safety Devices' themselves. The testing of
these valves in conjunction with the safety devices ensures that all
elements, which must operate if an emergency trip is initiated, has
been fully tested for serviceability.

There are 2 combined HP stop valves and control valves and two
combined IP stop valves and control valves. They are grouped
together to the selector push button tiles for individual testing to
form following sub-tests:-
i) HP stop and control valve -1
ii) HP stop and control valve -2
iii)IP stop and control valve -1
iv)IP stop and control valve -2

Following tests are performed :

a) test of HP & IP control valves for freedom of movement .
b) functional check of HP and IP stop valves.
c) check of maximum permissible closure time of HP & IP valves.

The test procedures for all valve combination are identical and
hence there is a common program, actuating and testing any
combination depending upon manual preselection and permissible
conditions prevailing.

All testing equipment is part of the trip fluid system which is

depressurized in the event of a trip. Thus in the event of an actual
turbine trip during testing, the closing of valve is no way effected
regardless of the stage of testing reached. This is also applicable for
control valves because there is no interference with the secondary fluid
circuit and therefore, the pressure there can be reduced without
difficulty.

3.1 Start -up programme: sub-group HP/IP valves

If the operator switches on the 'subgroup HP/IP valves' as per clause

1.4 - 1.6, the program would proceed provided the following release
criteria are present:
i) release for testing of any one valve combination is present.
ii) unit load is less than a particular value (80 %) .
iii) all the stop valves are 100 % open .
iv) load controller is in action .

---------------------------------------------------------------------------------------- PAGE 13 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

An interlock is provided to switch off the 'sub-group HP/IP valve' if

'sub-group safety devices' is already on.

3.1.1 Step 1: Closing of the Control Valve

In this step, a command is issued to the control valve actuator motor

of the selected stop & control valve combination from HP/IP valves,
to close the control valve. The motor acts on the feedback system
of the servomotor, and produces a closing action. The closure is slow
and steady, as necessitated for maintaining constant load by Electro
hydraulic Controller, which opens the other valve combination as per
requirement. The motor continues to run until the limit switch
indicates complete closure of the control valve. i.e. zero position which
enables step 2. A stroking time applicable for the valve is used as
monitoring (check) time.

A signal from this step is also used to generate the signal

"Main test : valves - ON" .

3.1.2 Step 2: Closing of the Stop Valve

In this step , a command is issued to energize the stop valve of the

selected stop & control valve combination from HP/IP valves. The
solenoid valve causes the trip fluid supply to be interrupted through it,
and drains the fluid under the stop valve piston disc immediately. As
soon as the pressure falls slightly below the piston parting pressure,
monitoring of the stroking time of the valve begins in step 3 .

3.1.3 Step 3: Monitoring of the SV closure time

This step monitors the time taken by the selected stop valve to close .
It should close within 0.2 seconds. A successful closure marks the end of
the "Partial test" - i.e. testing of one HP/IP valve combination.
Automatically the "reset program" is initiated and the end of a test
annunciated through the corresponding control tile lamp "Test
completed successfully".

3.2 Reset (Shut down ) Programme 'sub-group' HP/IP Valves :

The reset program is started automatically as soon as a partial-test, as

described in para 3.1.1 - 3.1.3, is over. It is also started under

---------------------------------------------------------------------------------------- PAGE 14 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

protection if the 'Running time' is exceeded in any of the main

tests or the turbine trips during testing.

In this program the stop and control valves, which had

been closed during the main test, are returned to the operating
position. However, if the reset program is initiated by turbine trip
then in the reset program only the control valve actuator is reset at
step 55, and other steps are bypassed.

The signal starting the reset program under Automatic action gets
reset as soon as a reset step is set, so that startup program can be
restarted for other subtests or when needed.

3.2.1 Step 51

In this step, the memory of 'Main test valve' ON is reset (ref. clause 3.4
below) to stop 'Main Test' on indication on the panel (ref. clause
2.4.3.2). The signal "resetting on" is generated and annunciated in the
panel insert (ref. clause 2.4.3.3).

The bypass condition of the waiting time is applicable when the

concerned stop valve is already open up to 100%.

3.2.2: Step 52

In this step command is issued for tightening of the spring between

the piston and the piston disc, of the selected stop valve. The reset
solenoid valve MAX47AA211 etc. is energized to move the test valve
MAX47AA011 (or its equivalent in other valve combination) to its test
position and allow trip fluid to press over the piston and compress
the spring till the piston seats on the disc. This causes a rise in
pressure (>6 kg/cm2) above the piston and indicates completion of
preloading of the servomotor. This condition gets stabilized within
the waiting time of 40 seconds, and then the program proceeds to
step 53. But if the selected stop valve is already open or the turbine
is tripped, then this waiting time is by passed.

3.2.3 Step 53

In this step, a command is issued to de-energize the test solenoid

MAX61AA211 ( or its equivalent in other valve combination) of the
stop valve of the selected valve combination, to allow trip fluid to
flow below the piston of stop valve, through the test valve. The
check back criteria is the building up of pressure in the trip fluid line
between the test solenoid and the test valve.

---------------------------------------------------------------------------------------- PAGE 15 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

The check back criteria and the waiting time are bypassed if the
concerned stop valve is already open, or if the turbine has tripped.

3.2.4: Step 54

In this step commands are issued to open the stop valve by de-
energizing the reset solenoid valve and the test solenoid valve to
drive them to operating positions, which make the test valve
(MAX47AA011 etc.) to go back to its initial position and allows the fluid
pressure above the piston of the stop valve to drain. The
resultant pressure differential causes the pre-loaded
piston/piston disc unit to open the stop valve to 100% position.

A deliberate waiting time had been envisaged to take care of the time
required for smooth building up of the pressure. Again this waiting
time is bypassed if the turbine trips during testing.

3.2.5: Step 55

After the stop valve has opened up to 100%, the concerned

control valve is actuated to open by driving the actuator in the open
direction. Operating on the feedback of the control valve servomotor,
this causes the control valve to be returned to a position corresponding
to secondary fluid pressure . Here again, the load is kept constant by
the EHC acting on the other SV/CV combination, at the same time.
The motor continues to run until the actuator is brought to normal
position sensed by the limit switches as check back criteria. The
stroking time of the valve is also used here for monitoring satisfactory
operation of this step of the reset program.

3.2.6: Step 56

This step is set after the resetting is successfully completed and here
the monitoring time is blocked and the program remains stay put. An
interlock cancels the selection (release) by resetting the memories
and removes the resetting on annunciation on the panel insert
(ref. clause 2.4.3.3). If another subtest is selected the program
runs again, or else sub group control is switched off.

---------------------------------------------------------------------------------------- PAGE 16 OF 17---------------------------------

CIE, BHEL, HARDWAR
------------------------------------------------------------------------------------------------- 4 18000 26 416 --------------------------
Rev 00

3.3: ATT Selection valves

3.3.1 The 'Released' signal for any of the valve combinations are
generated/canceled in the same way as done for safety devices(ref.
clauses 2.3.1 and 2.3.2).

There is one more interlock for the testing of IP valves. The "release"
signal for IP valves are cancelled if the "secondary fluid pressure to IP
control valves", becomes less than 5 Kg/cm2. This condition ensures
that the testing of IP can only be done if both the IP control valves
are fully open.

3.2.2 Separate signals, as applicable, representing completion of main test of

respective valve combinations are issued for indication 'Test
completed successfully' on the respective tiles of panel insert as well
as for interlock for issuing 'released' signal. The signals shall continue to
persist unless the memories are reset by switching off the sub-group
control.

3.4 ATT Annunciation valves

If the turbine trips and both the HP-Stop valves are closed the
disconnection relays are energized to de-energize the turbine trip
relays. Turbine trip is represented by trip fluid pressure < 2 Kg/cm2.
The signal ‘Main Test Valves ON’ is generated once the testing starts.
This signal disappears as soon as the resetting starts and the signal
"Resetting valves ON" is generated. These signals are further utilized to
generate the signals "MAIN TEST” and "RESETTING" on, as written in
clause 2.4.3.2 and 2.4.3.3.

Note : 1. All control tiles for ATT (mentioned above) shall be

realized in MMI for control and testing from CRT/KBD.

2. ATT logics shall be realized in hot redundant processor.

---------------------------------------------------------------------------------------- PAGE 17 OF 17---------------------------------

CIE, BHEL, HARDWAR