Doe, Tale: Dsvelsarer and Power management Chews FELS Theat No. T Doe.No: 3BTG 6001-TPM Projet: Varg Field Development RevNo: X02 Document Ope Document Depo TECHNICAL DOCUMENT Functional Design Specification, Diesel starter and Power Management. Far East Levingston Shipbuilding Ltd Saga Petroleum a. Varg Field Development Oil Production and Storage Vessel Safety and Automation System (SAS) File: $4-226007 Functional Design Specification, Power Mngmt revX02 Created by: PRI Hull: B241 Updated by: STG/BL Contract No: PB82007 Approved: HAA Owner Doc. No: $4-226007 Discipline code: I Document type code: FC DOCUMENT STATUS A ONSHORE MASTER LAP ABB Industry Pte Ltd Qe | Oe XO Reed capt 648E649 [OO [FA | AHe | AHe | TG XO Verified by PGS Production | 15-001 | FH [are ‘Ave | TG w 5 Reissued for Design ToT or = Teeued for Design 1096 Re) Saas) Renan foros Dae | snare by | Desek | Aree by Coe by Tar Chests Design ered Reprod cial Arild Hellem ‘Arild Heller ‘Torbjorn Glorstad \Vesion: S4-226007 Functional Design Specification, Power Mngmt revX02ABB Industry Pte Ltd Dos. Tiler FDS, Dissisarier and Power Management Clieas FETS Senor 2 Doe.No: 3BTG6001-TPM Projet: Varg Field Development Rey.No: XZ Section Table of Contents Page 1. GENERAL 2, DEFINITIONS/ABBREVIATION’ 3. DIESEL GENERATOR CONTROL AND SAFETY SYSTEM. 3.1. APPLICATION/FUNCTIONS. 3.2. MAIN DIESEL. 3.2.1. Manual start 3.2.2. Start blocking 3.2.3, Manual stop. 3.24, Engine shutdown based on critical parameters. . 3.2.5, Prelubrication pump control. 3.2.6. Ventilation fan 3.2.7. Fuel feed pump. 3.2.8. Cooling water pre-heater contro. 3.2.9. HP seal oil pump. 3.3. ESSENTIAL DIESEL... 3.3.]. Manual start 3.3.2. Start blocking. 3.3.3, Manual stop. 3.3.4. Engine shutdown based on critical engine parameters. 3.3.5. Prelubrication pump control 3.3.6. Fuel feed pump. 3.3.7. Cooling water preheater control. 3.3.8. Control of arctie charge air system. 3.4, EMERGENCY DIESEL... oa 3.4.1. Manual startstop . 3.4.2. Emergency / Test mode, 3.43. Prelubrication pump control : 3.5. AUTOMATICSTART OF STAND-BY DIESEL ENGINE... 3.5.1, Slow turning. 3.5.2. Stand-by mode selection... 3.5.3. Start order selection method 4, MANUAL OPERATION. 4.1, OPERATION OF TIE BREAKERS . 4.2. MANUAL OPERATION OF A DG anata : 42.1. Manual starUstop of generators from VOU... : 4 4.22. Manual selection of a connected DG — aoeeee 15 ‘S4-226007 Functional Design Specification, Power Mgmt revX02 Version: X02ABB Industry Pte Ltd Does Tales FDS, Dissinarier and Power Mangement Glens FELS Senor 8 Doc.No: 3BTG6001-TPM Progct Vary Fel Development Rew.Nor OZ 5. VDU OBJECT HANDLING vn 5.1. GENERATOR OBJECT VDU 5.2. OBJECT DIALOGUE... 5.3. GENERATOR OBJECT PICTURE 5:4. SHUT DOWN FUNCTION. 5.5. PRE-WARNING ALARM 5.6. PMS CALCULATED ALARMS. 5.6.1. Start Failure... 5.6.2. Sync Failure 3.6.3, Breaker Tripped. 5.64. Disconn Failure, 3.65. Stop Failure... 5.6.6. Run Failure 5.6.7. Power Failure. 5.6.8. Breaker Signal Alarm 5.6.9. Load Failure, 5.6.10, Frequency Fall nm 6, POWER MANAGEMENT SYSTEM. 6.1. APPLICATION/FUNCTIONS. .. 6.2. POWER AUTOMATION. 6.23, SYNCHRONISING, 163.1, Synchronising ofthe DG. 6.3.2. Spncronising of the Tie breaker. 6.4. LOAD-SHARING AND LOAD/FREQUENCY CONTROL 6.4.1, Load-sharing, Isochronous mode. 6.4.2. Load control mode (Droop). 6.4.3, Liquid/Gas Transfer modes 6.4.4. Load-dependent starvstop. ‘6.4.4.1, Load dependent star. 64.4.2, Lond dependent sop. 64.4.3, Limits for load and current dependent start/stop funetions 644.4, Manual selection of minimum number from VDU... 6.4.5. Blackout monitoring and recovery... 6.4.6. Earth fault modes... 64.7. Shorecircult 64.8. Blocking of heavy consumers 6.4.9. Load shedding. 64.10, PMS System Fail ‘34-226007 Panetional Design Specification, Power MngmtrevX02 Version: X02ABB Industry Pte Ltd Doc. Tile: FDS, Diewlnarier and Powor Management Clea FES SteaNor Doe.Na: 3BTG6001-TPM Project: Varg Field Development Rey.Nor X02 1. GENERAL ‘The PMS system is implemented in two identical controllers AC450, each equipped with redundant CPU and memory. Each of the control units will handle the control for 2 generator sets. In addition, the essential generator is included in the PMS application, controlled from a AC110 connected to a AC450 in the forward section. The Units will communicate via a redundant MB300 communication link. ‘The operator communication will be done via the operator stations (OS) located in the control room. The system is configured to allow 8 dedicated operator stations in the SAS system to access and control changeable parameters in the PMS 2. DEFINITIONS/ABBREVIATIONS Wherever in these Specifications the following terms are used, the intent and meaning shall be as follows: ACIIO AC450 AVR CCR DESPEMES DG D-variable DFDG ER ECR ESD FCSS HW LOP. MB300 MMC MSB Modbus. NetCon5000 Os PC PDCS PMS sw vDU SWBD Advant Controller 110 ‘Advant Controller 450 Automatic Voltage Regulator Central Control Room Diesel Engine Speed Measuring System Diesel Generator Set Parameters used in the program Dual Fuel Diesel Generator Engine Room Engine Control Room Emergency Shut Down Fuel Control and Safety System Hardware Local Operator Panel ABB Master Bus 300 (high speed communication link 10 Mbit’s) Man Machine Communication Main Switch Board Protocol for Data Transfer via serial line ‘Net Controller (Woodward Governor) Operator Station ABB Master program modules Power Distribution Control System Power Management System Software Video Display Unit Electrical SwitchBoard ‘S4-226007 Functional Design Specification, Power NagntreyX02, Version: X02ABB Industry Pte Ltd Doe. Tale” FDS, Diewlsurer and Power Marageneat hear FETS Sie Nor = Doe.No: 3BTG6001-TPM Project: Varg Field Development Rev.No X02 3. DIESEL GENERATOR CONTROL AND SAFETY SYSTE! 3.1, Application/Functions. Control and protection monitoring of the generator prime movers constitutes an integral part of the PMS, The AC450 Diesel Starter in this application designed for control of four main dual fuel engines Wartsild 18V32GD, one essential diesel engine Wartsilé 18V32E and one emergency diesel Wartsil SACM. ‘The engines are controlled from the Woodward NetCon5000, which handles start, stop, shutdown, start block function, and the load shearing in ISO mode. The control logic resides in an AC450 process station equipped with a "hot backup" redundant processing unit. The backup processor unit will, upon failure of the main processor or its connections to the system or field bus, automatically take over the control and safety functions ‘without causing any disturbances to the controlled equipment. All input signals used in the shutdown logie for the protection of the diesel engine are loop monitored. ‘The main functions in the AC450 and AC110 Diesel Starter and Safety system are: ‘® Manual start and stop from Operator Station (OS) ‘© Automatic start and stop ‘© Monitoring of critical parameters when the diesel is running ‘Selection of stand-by generator set (OS) 3.2. Main Diesel. 3.2.1, Manual start Manual start of an engine can be done: 1. Locally from local operator panel (LOP) in aft engine room, 2. Locally from push buttons in the NetCon5000 mimic panel. 3. Remotely from SAS operator stations, At start order from OS, a start signal is issued (digital output) from SAS, this signal is connected to the NetConS000 which will handle the start sequence. '$4206007 Functional Design Specification, Power Mgmt revX02 Version: X02ABB Industry Pte Ltd Doc, Titer FDS, Diewnarter onl Power Management Chen FATS TeeaNor 6 Doc.No: 3BTG6001-TPM Proget: Varg Feld Development Rev.No.: X02 3. rt blocking ‘All start-blocking devices are connected directly to NetCon5000 and will block the start by the following functions: Relay Test Mode Enabled. Diesel oil pressure below 0.5 bar. Run down time not expired, Pre-Lube oil pressure low (signal overridden if black start contact is open). . Turing gear engaged. . FCSS not reset after engine trip. Start fail. 8. Block diesel start from main switchboard. (All start block functions included). Revere ‘The Local/Remote changeover switch will change between SAS control and local operation from main switchboard. When the switch is set to “Local”, the following outputs from SAS will be electrical disconnected: start/stop, increase/decrease, and connect/ddisconnect. “Local” control mode is indicated on the SAS OS screen. ‘When the start sequence is not blocked in the NetConS000, the “Ready to Start” indication is given to SAS. 3.2.3. Manual stop. At stop order from OS, a stop signal is issued (digital output) from SAS, this signal is connected to the NetCon5000 which will handle the stop sequence. 3.2.4, Engine shutdown based on critical parameters. All engine safety functions are included in NetCon5000 for each main engine. The failure status signals and shut down status signals are connected to SAS via normal digital/analogue inputs and via Modbus interface. When the NetConS000, detects a shutdown it will stop the engine and it will also give a shut down signal to the PMS, which will trip the breaker, and immediate start a stand-by generator. 3.2.5. Prelubri pump control ‘The pre-lubricating pump is running whenever the engine is stopped. The running signal (rpm < 300) from the engine is used as reference for starting and stopping the pump. Additionally two level switches from Lub. oil aux. tank will control the start/stop of the pump. Low level switch Tag no. 80-10-00-LSL__008 will stop the pump and high level switch Tag no. 80-10-00-LSH__ 009 will start the pump even if the engine is running. ‘4-226007 Functional Design Specitiation, Power Magmit rxX02 Version: X02ABB Industry Pte Ltd Dos, Tiler FDS, Dieslsarir and Power Management Cheat FELS SierNos 7 Doe.Ne: 3BTG6001-TPM Proect: Varg Field Development Rev.No.» X02 Pre-lubrication pressure low will block the start of the engine, however in case of blackout, starting is allowed within 5 minutes after the pressure has dropped below 0.5 bar. 3.2.6.Ventilation fan ‘The running signal from the fan is used to set a digital output signal “gas trip if fan not running” if the fan stops when the diesel is running, in gas mode. This will also initiate a fuel change form gas to liquid. Fuel feed pump When SAS receive a start order manual or automatic an digital output signal will be given to start the fuel feed pump (Tag no.62-50-00-EM203 / 204 / 205 / 206), and when SAS receive a stop order manual or automatic the pump will be stopped. ‘These start block criteria, will not be indicated at the SAS system, only in the NetCon. This is to always indicate an available engine even without the fuel pump running. ‘The start sequence will first start the fuel pump, and then, when the fuel pressure is established, start the engine. ‘The start block function in the NetCon, is based upon the pressure. 3.2.8, Cooling water pre-heater control There is a separate unit for control of the cooling water pre-heater with temperature switches directly connected to the unit. SAS gives an output contact (Tag n0.80-10-00-XC n01) which is closed when the engine is stopped and open when the engine is running. 3.2.9. HP seal oil pump SAS receive a digital control signal (80-10-00-XS n08) from NetCon5000, this signal is used for start/stop the HP oil pump. ‘54226007 Functional Design Spesifcation, Power Mgmt revX02 Version: X02ABB Industry Pte Ltd Don Tiley FDS, Diewisarer and Power Mamgeneat Clear FACS Sterner 8 Doe.No: 3BTG6001-TPM Project Varg Field Development Rey.Nor—XD2 Manual start of an engine can be done: 1. The engine can be started locally by operating the start air solenoid V301, which will operate the master starting valve. 2, Local from local panel in fiwd high voltage switchboard. 3. Local from push buttons in the mimic panel, 4, Remotely from operator stations in SAS. ‘At start order from OS, maximum 3 start attempts are given, each lasting 5 seconds with 25 seconds pause interval, The start signal will be reset at firing speed (300 rpm) or at generator voltage established or stop signal to engine activated. If starting fails after 3 attempts, start failure alarm is given. 3.3.2. Start blocking Any start is blocked by the following functions: Turning device engaged. Engine running (DG > 300 rpm), Stop signal is activated. Local switch in NETCON panel is in Local position. Local/Remote changeover switch in main switchboard (one for each DG) is in Remote position. 6. Pre-lubrication pressure low. In case of blackout, starting is allowed within 5 minutes after the pressure has dropped below 0.5 bar. 7. Start failure. yaepe Selection of local control at the engine side (and/or tuning gear engaged) will release an alarm in the AC450 system and remote starting both from the switchboard and OS is then blocked. ‘There is an individual alarm for each of the engine local control selector switches. ‘The Local/Remote changeover switch will change between SAS control and local operation from main switchboard. When the switch is set to “Local” the following outputs from SAS will be electrical disconnected: start/stop, increase/decrease, connecv/disconnect control for the electrical part. Local contro] mode is indicated on the SAS PMS picture. ‘The shutdown system for the Essential DG is however active even in “Local” control mode. ‘54226007 Functional Desian Specification, Power Mngt reyX02 Version: X02ABB Industry Pte Ltd Doc, Titer FDS, Diewsarar ani Fower Management Chen FETS Beater Doe.No: 3B TG6001-TPM Project Varg Field Development Rey.No: XO 3.3.3. Manual stop. Normal stop of the engine is done by activating V303, which is controlling the compressed air to cylinders for injection pumps and by closing the run/stop contact to the Woodward 721 controller. If the system receives a stop command for the engine, it will check the generator load and disconnect the breaker when the load has been reduced to less than 10 % of the nominal generator power. Stop coil activation time is 60 seconds and stop fail alarm is released if the engine has not come to stop within 70 seconds from the moment the stop coil was activated, The shut down is done by activating V604, which is controlling the charge air shut-off flap valve, and by opening the run/stop contact to the 721-speed control. Following parameters are monitored and will initiate shutdown if the Essential Engine is running: Parameter TAG no. Lubrication oil pressure 25 | 83-10-00-PT__008 Cooling water temperature high 95 | 83-10-00-TE__007 Charge air temperature high 8 | -83-10-00-TE__008) Oilmist in crankcase 83-10-00-XS__ 002 Charge air shut-off valve position 83-10-00-GS_004 / 005 Local stop lever not in “run” position 83-10-00-GS_ 003 ‘Main bearing temperature high too [120 | 83-10-00-TE__ 009/019. ‘Alternator winding temperatures high 140] 150 | 83-10-00-TE__038 / 040. ‘Alternator bearing temperatures high ‘50 | 100” |83-10-00-TE__041 / 042 Overspeed _(tacho relay in Despemes) _ 850] '83-10-00-S$_002 ‘Additional the engine is equipped with a complete mechanical overspeed trip device (Tag no. 83-10-00-GS001) independent of the shut down funetion in SAS. ‘After an automatic shut-down , the stop solenoids are activated , and start of the engine inhibited until the shut downs are manually reset from keyboard or locally from the NETCON panel The engine will also be automatically shut down in case of detection of gas in the intake air. In case of over speed or gas detection in intake air, solenoid V604 will be activated in addition to activation of V303 and opening of the run/stop contact. ‘54226007 Functional Design Specification, Power Mgmt revX02 Version: X02ABB Industry Pte Ltd Dos, Taker FDS, Disselsavier and Power Mamagemen Cheat FES Seano; 10 Dos.No: 3BTG6001-TPM Project Varg Field Development Rey.No)—XO2 Monitoring of the loops between safety sensors and the signal input cards will detects short circuit or open loop. If @ fault occur, an alarm will be given. The safety functions are active regardless of local or remote control mode. 3.3.5. Prelubri pump control The pre-lubricating pump is running whenever the engine is stopped. The running signal (rpm < 300) from the engine is used as reference for starting and stopping the pump (output from SAS Tag no. ?). ‘Additionally two level switches from Lub. oil aux. tank will control the start/stop of the pump. Low level switch Tag no. 83-10-00-LSL__008 will stop the pump and high level switch Tag no. 83-10-00-LSH__009 will start the pump even if the engine is running. Pre-lubrication pressure low will block the start of the engine, however in case of blackout, starting is allowed within 5 minutes after the pressure has dropped below 0.5 bar. 3.3.6, Fuel feed pump When SAS receive a start order manual or automatic a digital output signal will be given to start the fuel feed pump (Tag no.62-50-00-FM202), and when SAS receive a stop order manual or automatic the pump will be stopped. 3.3.7. Cooling water preheater control There is a separate unit for control of the cooling water pre-heater with temperature switches directly connected to the unit. SAS gives an output contact (83-10-10-XC_013) which is closed when the engine is stopped and open when the engine is running, 3.3.8. Control of aretie charge air system. There are two valves on the engine, which will by-pass part of the charge air back to the turbocharger air inlets. These are operated by solenoids V601 (Tag no. 83-10-10-XY_005) and V602 (Tag no. 83-10-10-XY__006), which are activated by SAS as follows: A, V601 will be energised when -the air inlet temperature is below 0 DegC (temp sensor Tag no. 83-10-10-TE__004) and the charge air pressure is over 2.4 bar (pressure transmitter Tag no. 83-10-10-PT__006). V601 will be de-energised when -the temperature has exceeded +5 DegC or when the pressure has dropped below 1.9 bar. 26007 Funstonal Design Speciation, Power Mgmt X02 Version: X02ABB Industry Pte Ltd Doe, Tiler FDS, Diewlsavier and Power Management Chess FELS SietNor TT Doe.No: 3BTG6001-TPM Project: Varg Field Development RewNon. X02 B, V601 will be energised when -the air inlet temperature is below 0 DegC and the engine load is >95%. ‘V601 will be de-energised when -the temperature has exceeded +5 DegC or when the engine load has dropped below 95%. C. V602 will be controlled in the same way, but with temperature sensor (Tag no. 83-10-10- ‘TE___005) as reference and temperature set points -10 DegC on and -5 Deg off. 3.4. Emergency diesel 3.4.1, Manual start/stop Manual start/stop can be done from SAS operation stations or locally. 3.4.2. Emergency / Test mode ‘There is an Emergency/Test switch in the local emergency diesel starter panel. The switch is hardwired to the SAS panel. In Emergeney mode SAS will give a digital output closed contact to the engine control box. In Test mode the contact will be open. The signal is used for selection of “full protection” or “emergency protection” of the emergency diesel. All shutdown functions are provided from the engine control box, and will shut down the diesel when: a) Test mode -Overspeed -Lube oil pressure -Cooling water temperature b) Emergency mode -Overspeed If the emergency diesel has been started in “Test” mode and then is required by the ESD system (closed contact from ESD) to be in the emergency mode, SAS will force the local shut down unit from “full protection” to “emergency protection” (close the output contact to the engine control box). If the Test mode has been selected for a longer duration than 35 minutes, SAS will set off an alarm, '$4-226007 Functional Design Sposifcaion, Power Mngt revX2 Version: X02ABB Industry Pte Ltd Doc, Tile: FDS, Diewlanror and Powsr Marageneat Clean FETS SheerNor 12 Doe.No: 3BTG6001-TPM Project: Varg Field Development Rev.Nos X02 3. relubri pump control ‘The pre-lubrication pump is continuously running when the emergency diesel stands still. The pump will trip once the required lube oil pressure is achieved in the engine (pressure signal from Wartsila) In “Test” mode starting of the emergency diesel is inhibited if the pre-lubrication pump is not running. In Emergency mode this function is overridden. 3.5, Automatic start of stand-by diesel engi Following conditions will cause start of the stand-by diesel engine: 1. Load-dependent start request from power or current, 2, Pre-Warning alarm at a parallel DG. 3. Manual selection of a parallel DG. Pre-Warning alarm settings. DG. Parameter: Set point TAG no.: Main Diesels | Lub. oil press low 3bar__| 80-10-10-PT__O01A/B/C/D Main Diesels | Lub oil temp high BO degiC_| 80-10-10-TE__002A/B/C/D Main Diesels | Cooling water temp high | 90deg/C_| 80-10-10-TE__001A/B/C/D Essential Diesel _| Lub. oil press low 3.5 bar $3-10-10-PT__001 Essential Diesel_| Lub oil temp high 80 degC 83-10-10-TE__ 002 Essential Diesel_| Cooling water temp high | 90 deg/C 83-10-10-TE__ 001 ‘Any of these conditions will initiate start of a ST-BY DG. In connection with an automatic start-up, the establishment of generator voltage and the synchronising time will be monitored. In case the establishment of the stand-by diesel generator voltage has not taken place within 15 seconds after engine was running or if the synchronising period exceeds 60 seconds, time-out alarm is given, the diesel will continue running and the next stand-by diesel is given start/synehronising order. Not to be implemented ref. Wartsila, ‘54226007 Functional Design Specification, Power Mngmt revX02 Version: X02ABB Industry Pte Ltd ‘Bos. Filer FDS, Disselsarier and Power Management Cie FETS TeaNor 1S Doc.No: 3BTG6001-TPM Project Varg FieKi Development Rey.Noz OD Stand-by mode select Fach generator will be set in a priority array in order to control the start order of the engines The generator with the highest priority will usually run and the next one to start is the one with a lower sequence number. Only the ones which are in AUTO and AVAILABLE will be active members in the array. Unavailable generators will not be considered in the array. If there are no more stand-by generators available, the operator may enable an alarm to be initiated. This function will be selectable. ‘A generator which is running in manual and connected to the MSB will not be treated as a connected generator for the calculation of “NO AVAI GEN CON”(NO of AVALlable GENerators CONnected) This generator will not be a reliable power source. The following mimic will be generated on the VDU for start sequence selection START SEQUENCE SELECTOR cno | 3 | 2 [4/1/15 SEQUENCENO oT Ss as Start order selection method The cursor is pointed at the generator number to be changed and a new number is entered. The entered gen. no. will now be set in this position of the start sequence and the generator previous in this position will swap to the location where the entered generator was located. The activation of the new selected sequence will be delayed some seconds, in order to allow the operator to complete the order change. ‘S4-226007 Functional Design Specification, Power NngmtrevX02 ‘Version: X02ABB Industry Pte Ltd Dos. Tiler FDS, Diswlsarier and Power Namagamenr ‘GieneFELS ‘SheetNos 14 Dee.No: 3BTG6001-TPM Project: Varg Field Development Rey.No X02 4. Manual Operation 4.1. Operation of tie breakers Each tie breaker can be controlled locally at the MSB, or manually from the VDU. ‘The tie breakers is presented at the VDU with a breaker symbol as shown in the figure below: The character indicated in the M | symbol shows the mode of the breaker. The tie breakers can be ~~ set to Auto or Manual from the — dialogue of the object Ifit is seleeted local from the MSB this will be indicated with a L, otherwise it wi aM for manual or A for Auto. The dialogue for the tie breakers is indicated below. ‘Synchr/Connect | Unload/Discon ‘Manual | ‘Auto As each bus have two tie breakers, the first of the breakers to connect, will be connected directly, and the last one will be synchronised. The only Auto function for the tie breakers, is auto connection in case of a blackout at either side of the breaker. Manual operation of a DG Each generator (DG), will have a simple manual operation, which mainly is start and stop of the engine. It will not be possible to synchronise the generator to the bus in manual mode. This can only be performed in AUTO or in LOCAL from the MSB. ‘The start stop selection at the dialogue will only be valid when the object is in MANUAL mode. 4.2.1, Manual start/stop of generators from VDU ‘When the object is set to manual, the engine can be started and stopped from the dialogue. By pressing the start button, a start request is issued to the NetCon5000, and a start sequence will be initiated. If the engine is not running within a predefined time, a alarm will be activated and the start order cancelled. If the stop button is pressed during the sequence, the start order is cancelled, and the engine will stop. ‘84226007 Funetional Design Specification, Power Mgmt revX02 ‘Version: X02,ABB Industry Pte Ltd Dos, Tile: FDS, Diielarier and Power Management Chest FETS mena Doc.No; 3BTG6001-TPM Project: Varg Field Development Rey.Non X02 4.2.2. Manual seleetion of a connected DG Ifa generator is connected in AUTO, and the manual button in the dialogue is pressed, a manual request is initiated for this generator. The system will not allow the DG to be set to manval as long as it is connected to the MSB. In order to maintain the minimum number of generators connected, the system will start and ‘connect the next generator in the sequence, When the next one is connected, the system will unload and disconnect the actual DG. Then, when the DG is disconnected from the MSB, it will continue to run, until itis set to AUTO, or itis stopped manually from the dialogue. ‘54226007 Functional Design Specitiction, Power Mngt revX02 ‘Version: X02$4-226007 Functional Design Specification, Diesel starter and Power Management. SHT. 155 Kap. 4.3 Operation of breakers in switchboard. Power Distribution picture M82-20, M83-20 and M87-20. Operation of (Incomer / Feeder / Bus Tie) on these pictures is under normal condition performed with al breakers in Auto To enable operation of breakers: 1) Press "Dialog Exit’ 2./ Select flag “Br to be tripped” located by the breaker to be tripped When selected - flag will change to filled green Simultaneously a previously filled Mag , by another breaker, will become unfilled. 3,/ Confirm that flag by the side of the breaker to be tripped is filled. 4,/ Select symbol for breaker to be connected in the same switchboard 5,/ In dialog menu for breaker to be connected activate [D3] "MakeB Break’. After command[D3] has been performed, the engagement/disengagement will be performed automatic, no further operations will then be necessary. Selected Breaker to be connected will shortly after the command change status from open to closed. Shortly there after breaker selected to be disconnected will change status from closed to open, CA\Users\ARosvold\AppData\Local\ Microsoft! Windows\Temporary Internet Files\Content.Outlook\M4DQ1VO3\Operation of switchboard breakers from CCR.docABB Industry Pte Ltd Dos. Titer FDS, Diswlsarier and Power Management Chess FETS Guano: 16 Doc.No: 3BTG6001-TPM Project: Varg Field Development Roy.No. X02 5. VDU Object handling 5.1, Generator Object VDU Each DG will be presented at the VDU as an object. The object presentation method is the same as used with PID controllers, motors and valves in the ABB concept. Selecting this object performs all operator communication. Alarms from each generator are also presented in this object. In the bottom of each abject, the actual mode of the object will be presented. ‘The actual modes are: AUTO, MANUAL and LOCAL. Normally the object is shown as an open circle, and if the breaker is closed, the object will be filled. Four different colours is used to indicate the different conditions of the DG. | Green :The DG is in AUTO and are available. Red — :The DG isin alarm condition and not available White :The DG is in LOCAL and controlled from the MSB. Grey :The DG is set to MANUAL, and is not available. Object Dialogue LOCAL, When the object is selected, a dialogue will appear, and all possible selections will be displayed in the dialogue. AUTO: MANUAL ISO MODE DROOP MODE | INC POW SP START STOP GAS FUEL LIQUID FUEL | DEC POW SP ‘54226007 Functional Desig Spevifcaion, Power Mngmt revX02 Version: X02ABB Industry Pte Ltd ‘Doe. Tiler FDS, Disestaner and Power Management Giese FELS SeaNos 17 Doo.No: 3BTG6001-TPM Project Varg Fie Development Rey.No: X02 enerator Object Picture Each object has attached a object picture, which presents all detailed information of the selected object. This picture contains the following information: Generator Power Generator Frequency Auto / Manual indication Local Remote indication Breaker status Shut Down Indication Pre-warning Indication All general Alarm Indications Start blocking © Signal Fail indication © GAS/LIQUID Fuel selected 5.4. SHUT DOWN function ‘The NetCon5000 takes care of the shutdown system. ‘The NetCon5000 will issue a SHUT DOWN signal to the PMS, and the PMS will immediately disconnect the breaker, and start the next generator in the sequence. ‘The actual generator will be set to MANUAL. PRE-WARNING Alarm ‘Any defined change-over alarm, will initiate the DG stop sequence. First the system will start the next available DG in the starting sequence defined at the VDU. ‘When the new generator is synchronised and connected to the MSB, the actual generator will be unloaded and disconnected and stopped. ‘The aetual generator will be forced to MANUAL mode as soon it is disconnected. The DG will not be available for start until the alarm has been reset from the VDU, and manually set back to AUTO. 5.6. PMS calculated alarms Each generator object has a number of calculated alarms. The alarm functions is explained in detail in this chapter. All alarms needs to be reset by the operator, and some of the alarms will not disappear until the condition is reset. ‘4226007 Functional Design Specification, Power Mngt reyX02 Version: X02ABB Industry Pte Ltd ‘Dos: Titer FDS, Diswisurer and Power Mamageneat Cine FES SeaNor 18 Doe.No: 3BTG6001-TPM Project Vang Field Development Rev.No: X02 Start Failure This alarm is activated when the start order has been activated in the time defined for maximum start time. Actions: Alarm Not Available Starts the next generator jure This alarm is activated when the syne. order has been activated in the time defined for maximum syne time. Actions: © Alarm © Not Available ‘© Starts the next generator 5.6.3. Breaker Tripped ‘This alarm is activated when the breaker is disconnected in REMOTE and AUTO, without any disconnect order issued from the PMS. Actions: © Reconnects the breaker, if there is no failure indication from the MSB © Alarm © Starts the next generator, only if not re-connected after syne time. Disconn Failure This alarm is activated if the breaker is not disconnected when the PMS has issued a disconnect signal. © Alarm © Not Available ® Set to MANUAL Stop Failure This alarm is activated if the engine is not stopped after a certain time limit, when the PMS has issued a stop order. Actions: © Alarm © Not Available © Set to MANUAL ‘54226007 Functional Design Specification, Power Mgnt revX02 Version: X02ABB Industry Pte Ltd “Das Tiler FDS, Dessarer and Power Managemen Glen FELS—_SioatNos 19. Doc.No: 3BTG600I-TPM Project Varg Field Development Rey.No.s X02 un Failure This alarm is activated if the engine is stopped without any order from the PMS. Only activated in REMOTE and AUTO. Actions: © Alarm © Not Available Power Failure Activated when there is detected a failure to the power measurement. This alarm is normally detected when there is a broken wire or a fuse failure. ‘As PMS no longer can detect the correct power consumption at the net, this alarm is eritical, and will lead to a PRE- WARNING. (ST-BY gen started) Actions: © Alarm © PRE-WARNING 5.6.8. Breaker Signal Alarm This alarm is activated if the PMS detects power at a generator where the connected signal is not active. This indicates a failure in the signal for breaker status, Actions: © Alarm 6.9. Load Failure This alarm is activated if the power of the generator is not changing when the increase or decrease signals is activated from the PMS. This alarm will detect errors in the inerease/decrease function. Not applicable when running iso- synchronous loadchearing Actions: © Alarm 10. Frequency Fail This alarm is activated if the frequency of the generator is not established within a certain time delay. Actions: © Alarm © PRE-WARNING ‘$4-226007 Functional Design Specification, Power Mgmt reyX02, Version: X02ABB Industry Pte Ltd Doe. Tite: FDS, Dieselsurier and Power Mangement Cheas FELS ‘Siena 20 Doc.No: 3BTG6001-TPM Projet: VargFieli Development Rey Nor X02 6. POWER MANAGEMENT SYSTEM. 6.1. Application/Funetions. ‘The PMS functions provides control and monitoring of the IIkV, 3 Phase, 50 HZ power generation, supply and distribution system. ‘The main generators are feeding the two main 11 kV switchboards aft, and the essential generator is feeding the essential 11 kV forward switchboard. The aft switchboards are connected by a busbar. The forward 11 kV switchboard is split by a busbar, The aft 11 kV switchboards are located in separate rooms, one port and one starboard. There is separate connection between each aft 11 KV switchboards and each half of the forward 11 kV buses. Normal power is provided by the four main generators, each rated 6750 kW, located in two separate engine rooms aft, One essential generator, rated 6750 kW is located in the forward part of the vessel. The main generators are intended for parallel operation and they ean also run in parallel with the essential generator. The generators are controlled either from the switch gear rooms or from the SAS. ‘The essential generator supplies consumers required to operate in “survival at sea” conditions. It is also normally required to be in operation in order to start the main generators, In normal operation the bus breakers on the aft 11 kV switchboards are closed, while all other bus breakers are open. During normal conditions the emergency 690 V switchboard is fed from the starboard essential 690 V switchboard. ‘The main generators shall normally be synchronised from the generator income breaker. However, synchronisation of the forward and aft 11 kV systems may also be possible from the circuit breaker in the essential switchboard in order to be able to connect the aft and forward switchboard together, if the forward and aft 11 KV nets have been operated as separate systems, A selector switch is installed in the synchronisation panel in the essential 11 kV switchboard to switch the synchronisation responsibility between the two places. ‘Synchronisation is also possible from SAS. The emergency generator, rated 2100 kW, is located in the forward part of the vessel. All control of the emergency diesel generator resides within the emergency generator room and the emergency switchboard. PMS will only provide monitoring of the emergency diesel/generator status. For more details see chapter 5. VARG FPSO - elecirical system - operational philosophy. ‘4226007 Funetonal Design Specification, Power Mngt revX02 Version: X02ABB Industry Pte Ltd Doo, Titer FDS, Diswlsarier and Power Management Cleat TELS Seater 21 DoeNo: 3BTG6001-TPM Project Varg Field Development Rey.No. QZ Power Automation, PMS will provide for fully automatic power management system selectable at one of the operator work stations in the control room. Equipment controlled automatically by the PMS power automation system is: © 4ea, Main Diesel Generators 6750 kW © Lea, Essential Diesel Generator 6750 kW © 2ca. Busctie breakers (5 & 6) All automatic functions can individually be selected ON or OFF. Should a change be required to the prescribed solutions that will be carried out by the PMS, an operator can intercede in the process via the LOP. The facility is designed so that the operator can take full account of the ships operating scenario. The main functions controlled by the Advant Power Management System are: Overview of power supply and distribution system status. Automatic synchronising of diesel generators Synchronising of bus-tie breaker Automatic load-sharing and frequency control Load control Load-dependent start/stop Blackout monitoring and recovery Blocking of heavy consumers Load shedding ‘The four main engines are equipped with NetCon5000 controllers. In Isochronous mode, these controllers will take care of the load sharing, loading / unloading and frequency control without interference from PMS (load sharing function in PMS disabled). NetCon5000 will also perform the Fuel Scheduling Functions, for further information see system description for NetCon5000. ‘The following control signals can be given from PMS to FCSS (all signals are hardwired): Start Stop Raise Lower Droop Mode/ISO Mode iquid Mode Gas Mode Reset ‘54226007 Functional Design Speciation, Power Mngt revX02. ‘Version: X02,ABB Industry Pte Ltd Tas. Tile: FDS, Dissinarir and Power Namigerenr Giese FELS Seas 2D Doc.No: 3BTGS001-TPM Project Varg Field Development Rev.No.: XO In addition following signals will be given automatically: © Black out detection © low spinning reserve PMS receive following signals from FCSS: Ready to Start Ready to Synchronise Engine running Gas/Diesel mode indication Transfer fuel in progress For monitoring of critical engine parameters there is a Modbus interface between PMS and FCSS. The hardwired connection is a RS-485 serial link. The following power distribution breakers are manually remote controlled from the OS of the PMS: Bus tie 80-20-00-EQO02A (5), 80-20-00-EQO01A (6), 82-20-00-EQOOIA (15), 82-20-00-EQ001B (16), 82-20-00-EQ002A (17), 82-20-00-EQU02B (18), 222272? (24), 83-20-00-EQOOIB (32), 84-20-00-EQOOIB (33), 83-20-00-EQ002A (30), 83-20-00-EQ002B (31). Feeders: 83-22-00-EQOOIB (11), 80-20-00-EQ001B (12), 83-22-00-EQOOIA (13), 80-20-00-EQOO1A (14), 82-20-00-EQ005B (7), 82-20-00-EQ004B (8), 82-20-00-EQODSA (9), 82-20-00EQOD4A (10), 82-20-00-EQ006B (19), 82-20-00-EQ003B (20), 82-20-00-EQ006A (21), 82-20-00-EQ003A (22) 83-20-00-F Q004B (26), 83-22-00-EQ002B (27), 83-20-00-EQU04A (28), 83-22-00-EQO02A (29). Reference to: YARD DWG. DE-871-EE- 020 for operational philosophy. ‘S4-226007 Functional Design Specification, Power Mngt rev X02 Version: X02ABB Industry Pte Ltd ‘Dos. Tider FDS, Disestarar and Power Management Cieas FELS SheetNoz 23 Doc.No: 3BTG6001-TPM Project Varg Field Development Rey.No X02 6.3. Synchronising. 6.3.1. Synchronising of the DG ‘The automatic synchronising of diesel generators are performed by use of five fully automatic synchronising units (ABB Synpol D) located in the high voltage switchboard, one unit in each generator section. PMS selects which generator to be synchronised to the bus bar by giving a synchronising command signal to the synchronising unit, There is one command signal per diesel generator. ‘The signal is active when the auxiliary engine is running, synchronising is selected to auto mode, the generator is not connected to the bus bar, generator voltage is established and no other diesel generator at the same switchboard side is synchronising. The synchronising unit gives signals for governor (NetCon5000) up / down, checks that the voltage and frequency deviations between the generator and bus bar are within the pre-set limits and gives breaker close signal when correct frequency and phase differences between generator aan bus bar is obtained. (Note that the limits are set on the synchronising unit). As soon as the generator breaker is closed, the synchronising signal is released and the NetCon5000 take over and perform the load sharing (isochronuos mode). Synchronising time-out alarm is released and the synchronise command signal is reset if the synchronising time exceeds one minute. The diesel engine will continue to run and, if there is an automatic start situation, another diesel will be started. The synchronising time-out alarm is reset either by connection of the generator breaker, by reset command from OS or by stop of the auxiliary engine, If voltage and frequency on generator has not reached 90% of nominal value within 15 seconds from the diesel engine reached the firing speed after auto start, the FREQ_FAIL or VOLT_FAIL alarm is released and next stand-by or ready diesel is given start order. In a blackout situation the stand-by diesel generator will be connected immediately, only if one was running when the blackout occurred. If no diesels were running, the essential diesel will be started immediately. The synchronise command signal is set as soon as generator voltage is established. Synchronising must be in auto mode. The synchronising unit is by-passed by a “blackout detection” relay in the main switchboard, and the breaker will close immediately. Syncronising of the Tie breaker This is only initiated locally at the MSB, or manually from the VDU. From the VDU, the operator selects the tie breaker object at the PMS picture, and from the dialogue selects the Syncr/Connect button. ‘$4226007 Functional Design Specification, Power Mgmt rrX02 Version: X02ABB Industry Pte Ltd ‘Dos. Titer FDS, Dswlsarer and Power Managemen Gin FETS Taner 24 Dos.No: 3BTG6001-TPM Project: Varg Field Developmen’ ReviNo X02 The PMS, will now set droop mode at all generators connected to the Port bus bar, and put a variating bias to the frequency setpoint at the port side. ‘The semi-automatic synchronising unit in the MSB, performs a check synchronising function only, and gives breaker close signal when voltage, frequency, and phase difference are within the pre-set limits. (Note that the limits are set on the synchronising unit.) If one busbar side is not powered, the Bus-tie breaker will close immediately, by "direct-in" signal. The “direct-in" logic is enabled only if PMS and the main switchboard relays reads the same busbar status. 6.4. Load-sharing and Load/frequency control. 6.4.1, Load-sharing, Isochronous mode Isochronuos (ISO) mode is the normal load-sharing mode for this system, where the ‘NetCon3000 handles the load and frequeney control. The DG will only be in droop mode when it is disconnected, in local, in unloading sequence or in load control mode set by the operator at the VDU. 6.4.2. Load control mode (Droop) ‘The operator can decide if he want to run one generator on a constant load. This is done, from the generator object dialogue, where the operator can select DROOP mode or ISO mode. When the DG is set to Droop mode, the actual load setpoint will be controlled from the INC POW SP and DEC POW SP buttons in the dialogue. A press at the INC/DEC button will cause the load setpoint to be increased/decreased with 5%. This setpoint can be increased up to a max. limit, 95 %, and lowered to a minimum limit, 5%. Ifone of the other generators running in parallel is loaded above 90 % or below 10 %, the power of droop GEN will be modified by the PMS, in order to prevent the parallel generators to be under or over loaded. The setpoint selected by the operator will still be set in the system, and will be re-established by the PMS when the load situation is back normal. Only one D/G can be set to droop mode at the time and if no other generators is connected, this, ‘generator will of course take the total load. ISO mode is default, and will always be set from the PMS when the generator is disconnected. ‘54226007 Funetional Design Specification, Power Mgmt revX02 Version: X02ABB Industry Pte Ltd Das. Tale: FDS, Dieslsarier and Power Management Cleat FECS ‘SeerNos 25 Doc.No: 3B1G6001-TPM Project Varg Fleki Development Rey.Now” XO? 6.4.3. Liquid/Gas Transfer modes The preferred fuel mode for each DG, is selected from the generator object dialogue. Due to the load requirements for mode change for this engines, the PMS will calculate when a mode change can be done, and indicate this at the VDU. If the total power is too high for mode change, it will be blocked. The preferred mode is always set even if the generator is disconnected, If GAS is selected as the preferred mode, the PMS will automatically change to gas, when the load is within the specified load limits. The NetCon5000 will independently of the PMS command, trip the engine back to diesel when this power limits is passed. 6.4.4. Load-dependent start/stop. PMS measures the load on each generator and calculates the busbars total load as well as the busbars nominal power (based on the capacity of the generators connected). Reserved power is the nominal power of running heavy consumer(s) less the sum of measured power for the same consumer(s). The available power is then calculated as: Available power = Nominal power - Total load - Reserved power ‘The available power is compared to the load dependent start and stop limits, and the stand-by ‘generator is started or stopped depending on the available load. 6.4.4.1, Load dependent start A generator in AUTO mode, available, and selected as the next to start in the sequence array, will be started by the load program when the total average power have exceeded a certain load (POW_START_LIM) for a certain time, (POW_START_TIM) or the average current has exceeded a certain load (CUR_START_LIM) for a certain time. (CUR_START_TIM) ‘The DG will start and connect to the MSB, and the load increase program in the NetCon5000 will bring the DG up to the mean load within the specified time. 6.4.4.2, Load dependent stop This program will handle the automatic stop of the DG with the lowest priority if the number of available gen. connected is higher than the number required by the power limits. ‘The stop timer will start to run when the load at each generator will be less than the POW_STOP_LIM and the current is less then the CUR_STOP_LIM after the disconnection of the next in sequence. ‘After this time delay, the DG will first be unloaded, and first when the load is below a certain limit (LOW POW DISC) the generator breaker will be disconnected. ‘54-226007 Functional Design Speificatin, Power Mngt revX02 Version: X02ABB Industry Pte Ltd Das. Tie: FDS, Diswlsavier and Power Maragement ‘Gene FELS ‘SheetNor 26 Doc.No: 3BTG6001-TPM Project Varg Feld Development Rey.No.: X02 The engine will be kept running for a certain time (COOL TIME) before the stop solenoid is activated, 6 for load and current dependent start/stop functions Parameter description Parameter name in PMS | Default value High mean power limit POW_START_LIM 80% Start time delay power POW_START TIM 15 Sec Low mean power limit, POW_STOP_LIM 75% Start time delay power POW _STOP_TIM _| 120 See High mean current limit CUR _START_LIM 95% Start time delay current CUR_START_TIM 5 Sec Low mean current limit CUR_STOP_LIM 90% Start time delay current CUR_STOP_TIM 60 See All this limits can be adjusted from the VDU. 6.4.4.4. Manual sel of minimum number from VDU In order to enable the operator to select a minimum number of generators to be connected, regardless of the power and current consumption, there is provided a changeable variable at the VDU. This variable is the VDU_MIN_NO. The PMS will at any time try to cheep the number of available connected generators to this number, but if the power/current consumption requires it, a higher number will be connected. 6.4.5, Blackout monitoring and recovery. Blackout can be on one busbar side only, or on both busbars depending on the position of the Bus-tie, The Bus-tie breaker is normally closed. If the bus-tie breaker is open, blackout occurs on both busbars. The blackout is true if: © All diesel generator breakers are open © No voltage or frequency at the busbar. Ifa blackout occur with bus-tie breaker closed, the condition for acceptance of the blackout is: © Blackout signal from both busbar no. 1 and no. 2 must be present © No voltage or frequency at the busbar. @ All diesel generator breakers are open When the blackout is confirmed, a start signal is given to the essential diesel. If the blackout ‘occurred only at one side of the tie breaker, and no failure is indicated at the actual switch board, the tie breaker will be closed ‘54226007 Functional Design Specification, Power MagrtrevX02 ‘Version: X02ABB Industry Pte Ltd Dos, Tike: FDS, Diswlsurer and Power Management Clea FELS Seanor aT DoeNo: 3BTG6001-TPM Project Varg Field Development Rey.No”—XO2 When the voltage has been established at the MSB, start orders will be given to the aft generators, and the essential generator will be disconnected. All consumers controlled from the SAS can be included in the reconnection after blackout program. Individual time delays will be used for each heavy consumer, and entered during commissioning, x It modes Earth The switchboards are equipped with an earth fault-tripping device. When an earth fault occurs, in the switchboard, both tie breakers will be tripped first, and then the generator breakers at the faulty side. The PMS will in this case detect on which side the fault is present from the earth fault indication signals from each switchboard. In order to block connection of a generator to a faulty switchboard, internal blocking is arranged in the switchboard. These have to be reset locally in the switchboard room. Short-cirew If short-circuit is detected in the main switchboard, the Bus-tie and transfer breakers will automatically be opened first, and then the generator breakers. Each breaker will be blocked from re-connection by devices in the switchboard. If the breaker is blocked, this will be indicated with the AVAILABLE signal from the actual breaker, and the SAS will treat the breaker or the generator as not available. 6.4.8. Blocking of heavy consumer Only heavy 11kv consumers assigned for the process plant are covered by the blocking system. The other marine consumers are relatively small compared to the generator capacity (6,75 MW cach) and will not cause any problem regarding to starting current, The start block function is based on two conditions 1: Min number generators connected to SWBD. 2: Min available power The table below shows the minimum start condition for each consumer. If minimum conditions is not established a red text ‘no power’ will be shown next to the motor symbol on the VDU screen. An additional generator must be connected to the SWBD to be able to start the new consumer. The operator can do this by increasing ‘min no of generators’ on the PMS VDU screen, The next generator in the pre-selected starting sequence will then automatically start and ‘S4-226007 Fonetional Design Specification, Power Mgmt revX02 Version: X02,ABB Industry Pte Ltd Dos, Tie: FDS, Dieselsarer and Power Managemeat Ghene FELS ‘SneeeNos 28 Dee.No: 3BTG6001-TPM Proeet: Varg Feld Development. Revo: X02 connect to the SWBD. The ‘no power’ red text next to the motor symbol will disappear and motor is now ready for manual start. TAG No Description Nominal] Min no of in power | Generators | Available rating. | connected | Power 31-30-13-EM001_| Water injection pump 1 3,3 MW, 3 7MW 51-30-14-FM001_| Water injection pump 2 3,3 MW 3 7MW 26-20-00-FM003_| HP Compressor A. 3MW 3 oMW 26-20-00-EM002_| HP Compressor C 3MW 3 oMW 26-20-00-EM001_| HP Compressor B 3 MW 3 oMW 23-20-00-EM001_| Booster Compressor 0.671 MW NA 2MW 50-11-00-EM101_| Seawater lift pump no.l | 0,560 KW NA 2MW 50-11-00-EM102_| Seawater lift pump no.2 | 0,560 MW NA 2MW Note: Thruster drives is not a part of this system due to the fact that they are of variable speed type. See also chapter 6.4.9. Load shedding. 6.4.9. Load shedding. ‘The Load Shedding system is designed to disconnect non-essential process load from the net. Failure/trip on one generator-set can overload the other generator-sets if these loads are not disconnected from the net. The load calculation is based on generator current from each generator. The average current on each aft 11kv SWBD js calculated and shown as 2 individual barographs (0-100% Port & Stbd) on the PMS overview graphics. If one of these average current calculations exceeds 100%, load shedding will take place immediately, Consumer load shedding will start on the corresponding SWBD by first disconnect Water Inj. Pump, thereafter the gas compressors. If the SWBD is still overloaded a load shedding command will be transferred via HW signals to the other SWBD and start consumer shedding according to same sequence. Prior to activation the operator will be alarmed by tag: GEN_AVER_PORT (port SWBD) or GEN_AVER_STBD (starboard SWBD). A pre-alarm is set to 95%. Important Note: Special attention should be given to the current transducers in all the five TIKV generator breaker-sets. Failure in one of these units will cause error in the current calculation and cause Load Shedding not to activate correctly and cause ‘black-out’. Note: Thruster drives is not handled by this system, however a separate function built in the Posmoor system called ‘speed (rpm) reduction’ is implemented. This will not allow thrusters to increase speed/load unless power is available. Loss of avail power will automatically reduce speed/load on all thrusters. ‘S4-226007 Functional Design Specification, Power Mngt revX02 Version: X02ABB Industry Pte Ltd ‘Dos. Titer FDS, Diswelsiarer and Power Management Gieas FES SwetNoz 29) Doe.No: 3BTGS001-TPM Project Varg Field Development’ Rey.No OZ 6.4.10. PMS System Fail ‘The PMS function in this system is divided into three different process stations, system A,B and system C. All stations are equipped with redundant CPU, and, in addition, the different parts of the PMS can be operated independently of each other. Generators A & B are connected to system A (NODE 22) and C & D is connected to system B (NODE 21), normally controlled from system A, The essential generator is connected to system C (NODE 24), but normally controlled from system A. ‘Normally all generators are controlled from system A, and commands are transferred through the communication link to system B and system C, In case one of the two PMS units for some reason should fail, this will be detected by the other units, and they will initiate a PMS FAILURE ALARM, in order to inform the operator that one of the two main systems are lost. If system B fails, this will have no consequences for the system A, except that the control of the C & D generators are lost. The generators will remain connected if they were connected, and will not be possible to start from the SAS. The generators Aé&B will work normally. At the VDU, the symbols for generrator C&:D will not be indicated. If system A fail, system B, will automatically take over the control of its generators C&D and system C of its essential generator. The backup control system in SYSTEM B & C are not equipped with all PMS functions, such a load dependent start stop, and start sequence control from VDU. The generators controlled in this backup situation, will always be connected to the switchboard, and will have to be disconnected manually. ‘When the faulty system recovers the others will detect it, and normal operation mode is automatically restored '$4-226007 Functional Design Specification, Power Mngt rev X02 Version: X02