WRITE UP ON

AUTOMATIC TURBINE TESTER

PROJECT: 2X500 MW DVC - DURGAPUR TPP STAGE1

CUSTOMER: DAMODAR VALLEY CORPORATION

BHEL DOCUMENT NO.: - 41800057416

THIS DOCUMENT IS EXACTLY SIMILAR TO DOC

NO.4180-00-47-416 OF 2X500 MW KODERMA
TPS PAHSE II

GENERATED BY APPROVED BY

A.L.LYNGDOH C.BHATIA

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 1 OF 14
 Reference Documents:

(i) Automatic Turbine Tester Logic Diagrams

(ii) Write-up on Automatic Turbine Run up System
(iii) Governing Scheme

NOTE: This document is explanatory write-up of document no. (i) mentioned above.

1.0 GENERAL:

The safety devices (protective devices) protect the turbine from impermissible
operating conditions. On response of a safety device, the HP & IP stop valves
close. Closure of control valves is initiated by secondary fluid pressure
reduction.

The Automatic Turbine Tester is used to check / test at a regular interval the
function of the safety devices of the turbine and its 'stop and control valves',
while it is in operation, without causing actual turbine trip.

The Automatic Turbine tester has been divided into two sub-groups viz.

(i) Sub-group Safety Devices.

(ii) Sub-group HP/IP valves.

Each sub-group is further sub-divided into sub-tests for each individual device
covered under the sub-group. The switching on of the sub group control and
subtests shall be in the following modes.

1.1 The selection of the sub-group and sub-test shall be manual from OWS in
control room.

1.2 Both the sub groups are so interlocked that operation of only one subgroup
shall be possible at a time.

1.3 Any of the subgroups can be switched ON or OFF of the concerned SGC by the
control buttons for “SGC- ON/OFF” in OWS. As a result, the display “AUTO ON”
will glow in CRT.

1.4 Any one subtest of the switched-on subgroup can now be selected by clicking
the concerned control button 'SELECTION ON'. As a result, the lamp 'DEVICE
RELEASED' shall glow on the corresponding CRT display. The individual sub-
test selection are also mutually interlocked, so that only one selection and
hence one sub-test can be executed at a time. The selection can be cancelled
by clicking the control button 'SGC ON/OFF'.

1.5 After a subtest has been selected, the subgroup program shall be started by
clicking the control buttons for “START UP” in OWS. If the initial conditions for
the test are fulfilled, the display (in CRT) `PROGRAM RUNNING` will glow.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 2 OF 14
 Otherwise the subtest will be blocked and the missing initial conditions will be
indicated in code form on the criteria display.

1.6 The momentary status of the test program shall be indicated by means of
various text displays in CRT. The test program in progress can be interrupted
at any time by clicking the control button for “SHUT DOWN” from OWS.

1.7 Once started, the testing cannot be switched over to another subtest or the
SGC cannot be switched off, before the program selected has been completed.
If a subtest selected has been completed successfully the lamp `TEST
COMPLETED SUCCESSFULLY' shall glow and the reset program shall start
automatically.

1.8 If a fault e.g. "Running time exceeded" is detected during a test, the respective
pretest or main test shall be discontinued immediately and the shut down i.e.
reset program be started automatically. The missing criteria and concerned
step number shall be indicated on the criteria and step display indications.
Fault alarms can be acknowledged by clicking upon the pushbutton 'SGC
ON/OFF’ only.

1.9 If the test of a selected subgroup is completed successfully, either another

selection is made and test program started again, or the subgroup control is
switched off manually from OWS.

2.0 SUBGROUP `SAFETY DEVICES'

The Automatic Turbine Tester for the 'Safety Devices' consists of the following
sub-tests: -

(i) Remote Trip Device 1 i.e. Solenoid valve 1 (MAX52 AA001).

(ii) Remote Trip Device 2 i.e. Solenoid valve 2 (MAX52 AA002)
(iii) Over speed Trip Device –(MYA10AA001. / MYA10AA002).
(iv) Low Vacuum Trip Device - MAG01 AA011.

During normal trip the 'Safety Devices' close the stop valves of HP & IP, via the
'Tripping Devices (MAX51AA005+006). The remote Trip Solenoid valves 1+2
actuate the 'Tripping Devices' by stopping the supply of control fluid to them
and opening the trip fluid circuit to drain simultaneously. All other 'Safety
Devices' operate on the 'Tripping Devices' by opening the auxiliary trip fluid
circuit to drain.

An alternative trip fluid circuit is established for the duration of testing of the
'Safety Devices' in order to protect the turbine during testing. In this case by
means of the change-over valve (MAX51 AA211), the trip fluid circuit is
isolated from the `Safety Devices' and supplied with control fluid via the test
trip solenoid valves 1&2 (Remote Trip Solenoid valves during test), MAX51
AA201 + 202.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 3 OF 14
 In order to ensure complete protection for the turbine, emergency trip
conditions during testing cause the solenoid valves MAX51AA201 + 202 to be
de-energized resulting turbine trip and the reset program to be started
simultaneously. During testing, two limit value monitors provide over speed
signal for protection of turbine against actual over speed.

The turbine trip is prevented due to Automatic Testing of the 'Safety Devices'
but the general annunciations are activated. This allows testing of appropriate
part of the alarm annunciation system also. The Automatic Tester thereof
monitors the timings of all commands and the execution. If the monitoring
time is exceeded, the reset program is started in order to re-establish the
initial condition.

2.1 'Startup' program, SG Safety Devices

The start up program of each subtest is divided into two parts viz. pretest and
main test. If the operator switches on the 'subgroup safety devices' as per
clause 1.4 - 1.6, the program would proceed to execute the tests provided
following release criteria are present.

(i) Tripping Devices in operating position, and

(ii) All the monitors in operating position, and
(iii) 'One release' is present (i.e. a selection command is given).

An interlock is provided to switch off the "sub group - safety devices" if "sub
group - safety valves" is already on.

2.1.1 PRETEST

The pretest will be performed before each subtest (MAIN TEST). If this test is
completed successfully it is assured that the protective logic and remote trip
devices during testing are in working order.

Step 1: - In the step 1 a signal is issued to indicate that pretest is 'ON' and two
commands are issued to energize the test trip solenoid valves (MAX51AA201 +
202) (Ref. clause 2.5) causing control fluid pressure to build up at the
changeover valve. A similar command will again be issued with the help of
signal <D> once the test solenoid valves 1 & 2 are individually tested for
successful operation in step 2 & 3. Within 4 sec. of wait/check time the
pressure at switch MAX51CP208 should be established.

Step 2:-In step 2 a simulated over speed signal is fed to de- energize the 'test
trip solenoid valve 1' (MAX51AA201) (Ref. clause 2.5). This should result in
depressurization of the control fluid before the changeover valve. The pressure
at switch MAX51CP207 must drop but the pressure at switch MAX51CP206
should not change as the 'test trip solenoid valve 2' MAX51AA202 is still
energized. These check back criteria indicate the healthiness of the solenoid
valve MAX51AA201 as well as speed limit value monitor 1.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 4 OF 14
 Step 3: - In step 3, a similar simulated over speed signal is used to de-
energize the "test trip solenoid valve 2" (MAX51AA202). This time the
depressurization of control fluid should take place between the two test
solenoid valves, and this check back criterion by pressure switch MAX51CP205
ensures the healthiness of 2nd test trip solenoid valve MAX51AA202 as well as
speed limit value monitor 2.The monitoring time is 3 secs as in step 2.

Step 4: - In step 4, no command is issued but a deliberate waiting time has

been introduced to allow, re-energisation of the two test solenoid valves to
provide control fluid up to the changeover valve.

Step 5: - In step 5, a command is issued to actuate the changeover solenoid

valve MAX61AA201. This initiates draining of control fluid between the solenoid
valve and changeover valve. The pressure differential causes the change over
valve to move to the test position, which is annunciated in the panel insert.

The check back criteria viz. test position of the changeover valve, trip fluid and
auxiliary start up fluid pressure, together with the signal from step 5 generate
signal 'Pretest end’ (completed).

2.1.2 MAIN TEST

(A) MAIN TEST of Remote Trip Device 1 & 2 (Remote trip solenoid valve 1:
MAX52AA001 & Remote trip solenoid valve 2: MAX52AA002)

Step 6: - In this step a command is issued to test the Remote Trip Solenoid
Valve MAX52AA001, if release for this is present. The solenoid valve is
energized causing the control oil supply to be blocked and the trip oil circuit to
be connected to drain instantaneously. The tripping devices MAX51AA005 &
006 move immediately to trip position. The trip fluid and auxiliary trip fluid
pressures collapse and the control fluid between the Remote Trip Solenoid
valves only maintain its normal pressure, while the pressure before the
tripping devices 1&2 collapse. The completion of the test is indicated in the
MMI through a status lamp 'Test completed successfully' and the reset program
is initiated automatically to restore all the devices tripped to the normal
operating position.
Then, if the other remote trip device is released, and the pretest is over,
command is issued to test the Remote Trip Solenoid Valve MAX52AA002 in the
same manner and after the test is over, it is annunciated in the panel insert
and reset program is initiated.

(B) MAIN TEST of over speed Trip Device MYA10AA001 + 002:

Step 7: - This step is enabled if over speed Trip Devices have been released
and 'pretest' is over, a command is issued in this step to drive the ' over speed
test Unit' motor MAX62AA001M to open a part and provide the test oil. This
test oil builds up gradually and acts through line MAX62 on the effective area
of fly bolt, test oil pressure test being directly indicating the percentage of the
over speed simulation. If the bolts are functioning correctly, they will come out

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 5 OF 14
 into the trip position when the predetermined pressure is reached and operate
the trip lever to depressurize auxiliary trip fluid circuit instantaneously. This
results in tripping of the Tripping devices 1 and 2 and collapse of the over
speed Trip devices and pressure of test oil are also taken as check back criteria
for completion of the test. If the over speed trip devices trip a little earlier
before the set test oil pressure builds up to set value, it is annunciated in the
panel insert and the reset program started automatically to restore all the
devices tripped to their normal operating positions.

(D) Main Test of Low Vacuum Trip Device MAG01AA011

Step 08: - This step is enabled when the low Vacuum Trip Device has been
released and the 'pretest' is over. A command is issued in this step to actuate
the 'Low Vacuum Trip Device' by energizing the test solenoid valve
MAG01AA201. In low vacuum trip device, actual condenser pressure is applied
to a diaphragm, which is held in its normal position by a spring. If the
condenser pressure is too high, the force acting upon the diaphragm exceeds
that of the spring and connects the auxiliary trip fluid system with the outlet to
drain. When this solenoid valve is energized, the 'Low Vacuum Trip Device' is
disconnected from the Vacuum line and simultaneously connected with
atmosphere through a resistance provided by long spiral tube. The air weakens
the vacuum and at the low vacuum conditions the Device trips, resulting in
draining of auxiliary trip fluid instantaneously, which is taken as one of the
check back criteria for test completion. Collapse of trip fluid pressure and
tripped position of Tripping Device 1 & 2 are also taken as the check back
criteria apart from the simulated condenser pressure and tripped position of
'Low Vacuum trip Device'.

After successful completion of the test, it is indicated in the panel insert, and
the reset program is started automatically to restore all the devices tripped to
their normal operating position.

2.2 Reset (Shutdown) Program: SG-Safety Devices

The reset program is started automatically as soon as any of the main tests
described in clause 2.1.2 are over. It is also started under protection in the
event of turbine trip during testing, represented by trip fluid pressure (<2
kg/cm2), or if the running time is exceeded in any of the main tests or
pretests. The signal starting the resetting program under automatic action gets
reset as soon as a reset step is set so that start up program can be restarted
for other sub-tests or when needed.
The reset program is also started automatically if initiating command (I-
command) from step-7 and over speed test unit position is already at
100%(which is a fault condition).
In the reset program the hydraulic safety devices, which have tripped during
testing, are returned back to their normal operating positions.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 6 OF 14
2.2.1 Step 51

This step is initiated as soon as the reset program starts. A command is issued
to drive the over speed trip test device back to its normal position until the
limit switch actuates. But the check back monitoring is continued until the test
oil pressure is reduced to a negligible value. This double check back is
necessary to ensure that the trip setting of over speed is not reduced by any
residual test oil pressure.

At the same instant two more commands are issued to switch on disconnection
relays of channel 1 & 2 in order to switch off the remote trip relays 1 & 2
(MAX52AA001 + 002), provided anyone of these remote trip relays are on.
This is to avoid spurious turbine trip after the safety devices have been
restored to their normal operating positions. The status in panel insert
indicates that resetting is on.

The check-back signals in this step ensure that the safety devices are in their
normal operating positions and no simulated trip condition is present. After all
the check-back criteria are present, the reset program proceeds to step 52.

There is also a bypass condition which bypasses all the above criteria except
those which ensure that the over speed trip device unit is in normal operating
positions and the collapse of test oil pressure. This bypass is effective when the
turbine has tripped. This is because of the reason mentioned at para 2.2.2(i)
below. Step 51 is also enabled from step 53 for recycling purposes.

2.2.2 Step 52

In this step command is issued to energize the reset solenoid valves MAX48AA
201 & 202 so that auxiliary start up fluid is supplied with control fluid which
forces all safety devices viz. Tripping Devices (MAX51AA005 & 006), Manual
Turbine Trips (Levers 1&2) and over speed trip devices (MAY10AA001+002), to
return back to their operating position, and the trip fluid pressure then builds
up to normal values. After 6 sec. time which will allow completion of this
resetting the reset solenoid valve MAX48AA201 is de-energized to shutoff the
control fluid supply through it and thus cause pressure at MAX48CP201 to
drop. The additional 4 sec in the waiting time has been envisaged to allow
sufficient time for the establishment of this check back criterion for signal <T>
to enable step 53.

The check-backs are bypassed in the case of reset program due to turbine trip
or exceeding of running time for the following purposes (i) & (ii):

i) In the event of turbine trip during test, the pretest or main test is discontinued
immediately and the reset (shutdown) program started under protection. In
the reset program only ' over speed trip device' is restored to its operating
position so that the turbine can be restarted with the over speed trip device in
its normal operating position.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 7 OF 14
ii) If the running time of the pretest or a main test exceeds (due to non-fulfillment of
a step criterion), the pretest or main test currently running is discontinued and
the reset program started under protection to restore the normal operating
position. If the running time exceeds during reset program the respective step
is held up and the resetting can be restarted again, to repeat the resetting
when the missing criterion is made available.

The fault causing the running time to exceed is to be eliminated immediately

keeping the turbine monitoring equipment under observation.

2.2.3 Step 53:

As soon as the step 53 is enabled the reset solenoid valve MAX48AA202 is de-
energized and the auxiliary start up fluid pressure between the two reset
solenoid valves also collapses which is taken as one of the check back criteria.
The other check back criteria are the same as those of step 52. Here again
waiting time and all check-back criteria are bypassed in case of resetting due
to turbine trip [ref. para 2.2.2(i)]. Also ref. Para 2.2.2 (ii) for the requirement
of manual resetting.

2.2.4 Step 54

In this step command is issued to close the solenoid valve MAX61AA201 by

reenergizing it. This closes the drain port and control fluid pressure builds up
which pushes the changeover valve to its normal working position. Additional 3
sec. in waiting/check time has been provided for ensuring trip fluid pressure
building to normal value through tripping devices. The status indication of
'change over valve' in test position is also removed. Another command is
issued here simultaneously to reset all the memories to register cancellation of
all the selection.

2.2.5 Step 55

In this final step, after change over valve has changed to normal working
position, commands are issued to de-energize the remote trip test solenoids 1
& 2 (MAX51AA201 & 202), by resetting the memory circuits. This is the last
step of returning to normal operating conditions and the check back criteria are
the collapse of pressure of the control fluid between the remote trip test
solenoids and before the changeover valve. The program remains stay-put
here by resetting the memory, unless the sub-group is switched off or unless
another sub-test is initiated. The status indication "resetting on" is also
removed after getting the check back criteria.

2.3 ATT Selections: Safety Devices:

2.3.1 The released signal for any of the safety devices, to be used as one of the
release criteria for start-up program as well as enabling criteria of the
respective main test, shall be generated if all of the following conditions are
present:

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 8 OF 14
 (i) The push button 'selection on' on the panel insert of the concerned safety
device switched-on.
(ii) Main test of the respective sub-test not at its end.
(iii) None of the safety devices released.
(iv) Sub group safety devices switched-on.

2.3.2 The released signal shall be reset (removed) if any of the following conditions
are present:

(i) 'Released' signal for any other safety device present.

(ii) 'SGC ON/OFF' push button of sub-group safety devices pressed and the test
program is not running.
(iii) Command from step 56 issued.

2.3.3 The memories for release signal generation for testing of "speed limit value
monitors" at the time of PRETEST [ref. clause 2.1.1 (step 2&3)], are set from
the signals of step 1 & step 3. They are reset by completion of individual
testing or by command from step 51.

2.4 ATT Annunciations:

2.4.1 Signals 'Change over valve test position', 'one or more monitors tripped',
'remote trip during test on' and 'trip devices resetting on' shall be generated
for annunciation on the respective text display tiles of panel insert, provided
sub-group is switched on and the devices are in the respective conditions.

2.4.2 Separate signals as applicable representing completion of main test of

respective safety devices are issued for indication 'Test completed successfully'
on the respective tiles of panel insert as well as for the purpose of interlock as
per clause 2.3.1(ii). These signals shall continue to persist unless the
memories are reset by switching off the sub-group control.

2.4.3 Signals for indicating 'pretest', 'Main Test', 'Resetting' and 'fault' conditions at
the text display tiles of MMI and signal representing trip by over speed during
testing for central annunciation are generated. These are described below.

2.4.3.1 The signal 'Pretest ON' shall be generated by setting the memory due to
command from step 1. The signal shall persist unless the memory is reset by
any one of the following conditions: -

i) Pretest end.
ii) Command from step 51 issued.
iii) Subgroup control is switched off.

2.4.3.2 The signal 'Main Test On' shall be generated if pretest is completed or the
main test of valves is on (ref. clause 3.4). The signal shall persist unless the

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 9 OF 14
 memory is reset by command from step 51 and the 'Main Test valves ON'
signal memory is reset by command from step 51 of sub-group valves.

2.4.3.3 The signal 'resetting ON' shall be generated by setting any of the memories
by command from step 51 of the respective subgroups (also ref. clause 3.4).
The signal shall persist unless both the memories are reset by signal issued
after respective resetting is complete. The memory will also reset if SGC is
switched off.

2.4.3.4 If the turbine is tripped during testing or running time is exceeded, a 'fault'
alarm is generated, which disappears on acknowledgement by pressing "SGC -
ON/OFF" control pushbutton.

2.4.3.5 The signal 'Trip by over speed during test' shall be generated if turbine
speed, sensed by any or both of the speed limit value monitors exceeds 110%
while changeover valve is in test position.

2.5 ATT turbine trip during test: channels 1 & 2

The two commands 'Control Fluid provide' issued at step 1 will set two
separate memories to issue separate commands to energize the test solenoid
valves (MAX51AA201 & 202), if the turbine speed, sensed by the speed limit
value monitors 1&2, is less than 110% or the release for testing of speed limit
value monitor is present.

On successful completion of testing of speed limit value monitors in step 2 & 3

of PRETEST, a signal is fed to de-energize the test trip solenoid valves
MAX51AA201 & 202, and the memories to reset.

After step 4 the two commands 'Control Fluid provide' are again issued which
will energize the two test solenoids. The two solenoids will remain energized
and the two memories will continue in set position to ensure turbine protection
during testing.

The memories will reset and the test solenoid valves de-energized, if any of
the following conditions are present: -

i) Command from step 55.

ii) Respective Electrical Turbine Trip is operated.
iii) Actual turbine speed, sensed by the respective speed limit value monitor
crosses the limit i.e. 110 %.
iv) Respective manual Turbine Trip is operated.

The conditions (ii) through (iv) mentioned above shall cause the turbine to trip.

3.0 SUB GROUP 'HP/IP' VALVES:

The 'Stop and Control Valves' are the final control elements of the 'Safety
Devices' and hence their serviceability is just as important as that of 'Safety

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 10 OF 14
 Devices' themselves. The testing of these valves in conjunction with the safety
devices ensures that all elements, which must operate if an emergency trip is
initiated, has been fully tested for serviceability.

There are 2 combined HP stop valves and control valves and two combined IP
stop valves and control valves. They are grouped together to the selector push
button tiles for individual testing to form following sub-tests: -
i) HP stop and control valve -1
ii) HP stop and control valve -2
iii)IP stop and control valve -1
iv)IP stop and control valve -2

Following tests are performed :

a) Test of HP & IP control valves for freedom of movement.
b) Functional check of HP and IP stop valves.
c) Check of maximum permissible closure time of HP & IP valves.

The test procedures for all valve combination are identical and hence there is a
common program, actuating and testing any combination depending upon
manual preselection and permissible conditions prevailing.

All testing equipment is part of the trip fluid system, which is depressurized in
the event of a trip. Thus in the event of an actual turbine trip during testing,
the closing of valve is no way effected regardless of the stage of testing
reached. This is also applicable for control valves because there is no
interference with the secondary fluid circuit and therefore, the pressure there
can be reduced without difficulty.
3.1 Start -up program: sub-group HP/IP valves

If the operator switches on the 'subgroup HP/IP valves' as per clause 1.4 - 1.6,
the program would proceed provided the following release criteria are present:

i) Release for testing of any one valve combination is present.

ii) Unit load is less than a particular value (80 %).
iii) All the stop valves are 100 % open.
iv) Load controller is in action.

An interlock is provided to switch off the 'sub-group HP/IP valve' if 'sub-group

safety devices' is already on.

3.1.1 Step 1: Closing of the Control Valve

In this step, a command is issued to the control valve actuator motor of the
selected stop & control valve combination from HP/IP valves, to close the
control valve. The motor acts on the feedback system of the servomotor, and
produces a closing action. The closure is slow and steady, as necessitated for
maintaining constant load by Electro hydraulic Controller, which opens the
other valve combination as per requirement. The motor continues to run until
the limit switch indicates complete closure of the control valve. i.e. zero

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 11 OF 14
 position which enables step 2. A stroking time applicable for the valve is used
as monitoring (check) time.

A signal from this step is also used to generate the signal "Main test: valves -
ON”.

3.1.2 Step 2: Closing of the Stop Valve

In this step, a command is issued to energize the stop valve of the selected
stop & control valve combination from HP/IP valves. The solenoid valve causes
the trip fluid supply to be interrupted through it, and drains the fluid under the
stop valve piston disc immediately. As soon as the pressure falls slightly below
the piston parting pressure, monitoring of the stroking time of the valve begins
in step 3.

3.1.3 Step 3: Monitoring of the SV closure time

This step monitors the time taken by the selected stop valve to close. It should
close within 0.2 seconds. A successful closure marks the end of the "Partial
test" - i.e. testing of one HP/IP valve combination. Automatically the "reset
program" is initiated and the end of a test annunciated through the
corresponding control tile lamp "Test completed successfully".

3.2 Reset (Shut down) Programme 'sub-group' HP/IP Valves:

The reset program is started automatically as soon as a partial-test, as

described in para 3.1.1 - 3.1.3, is over. It is also started under protection if the
'Running time' is exceeded in any of the main tests or the turbine trips during
testing.

In this program the stop and control valves, which had been closed during the
main test, are returned to the operating position. However, if the reset
program is initiated by turbine trip then in the reset program only the control
valve actuator is reset at step 55, and other steps are bypassed.

The signal starting the reset program under Automatic action gets reset as
soon as a reset step is set, so that startup program can be restarted for other
subtests or when needed.

3.2.1 Step 51

In this step, the memory of 'Main test valve' ON is reset (ref. clause 3.4 below)
to stop 'Main Test' on indication on the panel (ref. clause 2.4.3.2). The signal
"resetting on" is generated and annunciated in the panel insert (ref. clause
2.4.3.3).

The bypass condition of the waiting time is applicable when the concerned stop
valve is already open up to 100%.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 12 OF 14
3.2.2: Step 52

In this step command is issued for tightening of the spring between the piston
and the piston disc, of the selected stop valve. The reset solenoid valve
MAX47AA211 etc. is energized to move the test valve MAX47AA011 (or its
equivalent in other valve combination) to its test position and allow trip fluid to
press over the piston and compress the spring till the piston seats on the disc.
This causes a rise in pressure (>6 kg/cm2) above the piston and indicates
completion of preloading of the servomotor. This condition gets stabilized
within the waiting time of 40 seconds, and then the program proceeds to step
53. But if the selected stop valve is already open or the turbine is tripped, then
this waiting time is by passed.

3.2.3 Step 53

In this step, a command is issued to de-energize the test solenoid

MAX61AA211 (or its equivalent in other valve combination) of the stop valve of
the selected valve combination, to allow trip fluid to flow below the piston of
stop valve, through the test valve. The check back criteria is the building up of
pressure in the trip fluid line between the test solenoid and the test valve.

The check back criteria and the waiting time are bypassed if the concerned
stop valve is already open, or if the turbine has tripped.
3.2.4: Step 54

In this step commands are issued to open the stop valve by de-energizing the
reset solenoid valve and the test solenoid valve to drive them to operating
positions, which make the test valve (MAX47AA011 etc.) to go back to its
initial position and allows the fluid pressure above the piston of the stop valve
to drain. The resultant pressure differential causes the pre-loaded piston/piston
disc unit to open the stop valve to 100% position.

A deliberate waiting time had been envisaged to take care of the time required
for smooth building up of the pressure. Again this waiting time is bypassed if
the turbine trips during testing.

3.2.5: Step 55

After the stop valve has opened up to 100%, the concerned control valve is
actuated to open by driving the actuator in the open direction. Operating on
the feedback of the control valve servomotor, this causes the control valve to
be returned to a position corresponding to secondary fluid pressure. Here
again, the load is kept constant by the EHC acting on the other SV/CV
combination, at the same time. The motor continues to run until the actuator is
brought to normal position sensed by the limit switches as check back criteria.
The stroking time of the valve is also used here for monitoring satisfactory
operation of this step of the reset program.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 13 OF 14
3.2.6: Step 56
This step is set after the resetting is successfully completed and here the
monitoring time is blocked and the program remains stay put. An interlock
cancels the selection (release) by resetting the memories and removes the
resetting on annunciation on the panel insert (ref. clause 2.4.3.3). If another
subtest is selected the program runs again, or else sub group control is
switched off.

3.3: ATT Selection valves

3.3.1 The 'Released' signal for any of the valve combinations are generated/canceled
in the same way as done for safety devices (ref. clauses 2.3.1 and 2.3.2).

There is one more interlock for the testing of IP valves. The "release" signal for
IP valves are cancelled if the "secondary fluid pressure to IP control valves",
becomes less than 5 Kg/cm2. This condition ensures that the testing of IP can
only be done if both the IP control valves are fully open.

3.2.2 Separate signals, as applicable, representing completion of main test of

respective valve combinations are issued for indication 'Test completed
successfully' on the respective tiles of panel insert as well as for interlock for
issuing 'released' signal. The signals shall continue to persist unless the
memories are reset by switching off the sub-group control.

3.4 ATT Annunciation valves

If the turbine trips and both the HP-Stop valves are closed the disconnection
relays are energized to de-energize the turbine trip relays. Turbine trip is
represented by trip fluid pressure < 2 Kg/cm2. The signal ‘Main Test Valves
ON’ is generated once the testing starts. This signal disappears as soon as the
resetting starts and the signal "Resetting valves ON" is generated. These
signals are further utilized to generate the signals "MAIN TEST” and
"RESETTING" on, as written in clause 2.4.3.2 and 2.4.3.3.

Note:
1. All control tiles for ATT (mentioned above) shall be realized in
MMI for control and testing from CRT/KBD.
2. ATT logics shall be realized in hot redundant processor.

CONTROL & INSTRUMENTATION ENGINEERING DIVISION

BHEL, HARDWAR
REVISION NO:00 W/U ON ATT
DATE: 16.06.08 SH. NO. 14 OF 14