Document No:

ALSTOM Power HTCT678918

Revision: Doc. Type: Language: Total Pages: Function responsible: Security Level: Derived from: Replaces:
- SOE en 10 Control 2
Prepared by: Checked by: Approved by:
2004-07-09 Cavlina, Antun 2004-07-09 Zambelli, Bruno 2004-07-15 Nickel, Frank

Gas Turbine Protection Concept GT13E2

Document electronically released

Cross-Checked by: Cross-Checked by:
2004-07-09 Engesser, Hermann 2004-07-09 Lazzari, Marco
2004-07-09 Paparic, Martin 2004-07-09 Torchalla, Stephan

Table of Contents:

1. Purpose .................................................................................................................................................................2
2. Protection concept.................................................................................................................................................2
3. Definitions ..............................................................................................................................................................3
4. Protective actions ..................................................................................................................................................3
5. Abbreviations.........................................................................................................................................................4
6. Protection requirements ........................................................................................................................................5
6.1 Rotor ...................................................................................................................................................................6
6.2 Turbine Pressure.................................................................................................................................................6
6.3 Process Temperature Supervision......................................................................................................................7
6.4 Combustor...........................................................................................................................................................7
6.5 Auxiliary Systems................................................................................................................................................8
6.6 Peripheral Systems .............................................................................................................................................9
6.7 Fire and Explosion Protection ...........................................................................................................................10
6.8 Emergency Trip.................................................................................................................................................10

We reserve all rights in this document and in the information contained therein. Reproduction, use or disclosure to third parties without express authority is strictly
forbidden. © ALSTOM (Switzerland) Ltd 2004.
Form: FM 0501 en / Ae.02 / 01-09-07 / GTSQ
(1)
 Revision: Doc. Type: Language: Page:

 - SOE en 2/10
HTCT678918

1. Purpose
This document represents a conceptual description of the GT13E2 standard gas turbine protection system. It
contains the conditions against which the GT is protected and includes the interface to the boiler, steam turbine
and generator with influence to the GT protection.
The site specific adaptation will be the subject of separate documentation provided after commissioning.
This document and all information contained herein is “typical” and is provided for information only, it does not
constitute a warranty or representation by ALSTOM as to any matter. ALSTOM shall have no liability whatsoever
for any consequences arising from the use of this document.

2. Protection concept
The gas turbine is controlled by the open and closed loop controllers which keeps the process within the design
limits. If a controller or component deviates from its intended function, a process value may exceed the design
limits, causing a possibility of damage. Therefore the protective system, independent of the control system, is
provided with the possible tasks:
− to indicate to the operator when a limit is exceeded
− to stop the process from further exceeding a limit
− to activate a safe shut down of the gas turbine.
Conditions and protective actions are listed in section 6. In cases where more than one protective action is defined,
st nd
the activation follows in sequence (e.g. 1 limiting level exceeded = Alarm, 2 limiting level exceeded = PLS, etc.)
The gas turbine protection system consists of 3 redundant protection controllers, with triple redundant, dual
redundant or single measuring loops which are evaluated in a 2oo3, 1oo2 or 1oo1 logic according to the
redundancy of measuring loops. Redundancy of measuring loops are listed in section 6. The protection controllers
activate the hydraulic tripping unit according to a 2oo3 principle, which directs the trip shut-off valves. The
activation follows the closed circuit principle (de-energize to trip).

Figure 1: Simplified overview GT protection system

Measuring
loops

3 Protection
1 2 3 controllers

2oo3 hydraulic
voting block
Trip
Shut-off
valve Hydraulic safety
system

We reserve all rights in this document and in the information contained therein. Reproduction, use or disclosure to third parties without express authority is strictly
forbidden. © ALSTOM (Switzerland) Ltd 2004.
Form: FM 0501 en / Ae.02 / 01-09-07 / GTSQ
(2)
 Revision: Doc. Type: Language: Page:

 - SOE en 3/10
HTCT678918

3. Definitions
The majority of the requirements are presented in a table with each row dedicated to a single protective action for a
given malfunction. The columns of the matrix contan the following information:
REQUIREMENT A meaningful name or a brief description of the malfunction that the machine
needs to be protected against.
PROTECTIVE ACTION A, I, PLS, PLST, TT, (TT), and O-HVCB – see chapter 4
REDUNDANCY ACTIVATION Required redundancy of the signal and number of exceedances to initiate the
protective action in the case of all “good” signals. For a given malfunction there
is one or more monitored parameters. The measured value of the monitored
parameter (called here the “value”) is assigned status “bad” or “good”. All the
signals with assigned “good“ to their value are dealt with in this column. For
instance 2oo3 in this column means that the required redundancy of this
parameter is three and if two of the measured values exceed the limit a
protective action will be initiated. The X*MooN means that there are X groups of
N number of signals and M exceedances in any group will initiate required
protective action. The “mean of valid signals“ in this column means that a mean
(usually simple aritmetic average, if not stated otherwise) is calculated using
only the “good“ signals and this value is compared to the respective limit, while
the “bad“ signals are dealt with separately.
OPERATOR ACTION Provides an indication of how the operator is expected to react to alarms and
indications presented at the Operator Station.
OPTIONAL X identifies optional protective actions, depending on the provided features.

4. Protective actions
A Alarm is an indication presented at the Operator Station alerting the operator to an abnormal
condition. There are basically three categories of alarm: -
1. Alarm warning that parameter is approaching automatic protective action threshold –
investigate in order to prevent nuisance protective action and hence improve availability.
2. Erroneous/failed indication – rectify failed signal/equipment.
3. Safety related condition with no automatic protective action – operating instruction required.
I Interlock, means preventing the named function from being initiated or continued beyond a certain
point (e.g. GT start, ignition, purging, etc.)
PLS Protective Load Shedding followed by normal shut-down; PLS is a protective action which is
implemented wherever possible instead of a trip to reduce thermal stress on the GT. PLS is a
controlled unloading of the gas turbine at a predetermined gradient (100% load in 2 minutes) until
separation from the grid and idle load is reached. After a cooling time of 5 minutes on idle load, the
shut-off and control valves are closed. If the process parameter, which has caused the protective
action, can be brought back within safe limits before the shut-off valves close, the unloading
procedure is automatically interrupted. Once the cause of the malfunction has been eliminated, the
gas turbine may be reloaded after the PLS command has been acknowledged.
PLST Protective Load Shedding with delayed Trip; PLST is used for the same reason as PLS and means a
controlled unloading of the gas turbine similar to protective load-shedding PLS, except that no cooling
time is implemented. As soon as the GT is separated from the grid and idle load is reached the shut
off and control valves are closed.
O-HVCB Opening of the high voltage main circuit breaker, protective action opens HVCB and disconnects GT
from the grid. GT continues to supply power to the auxiliaries.
O-GCB Opening of generator circuit breaker, controlled by generator protection.
(TT) Turbine Trip in starting sequence.
TT Turbine Trip is an immediate closing of all fuel (and water) trip shut-off valves.

We reserve all rights in this document and in the information contained therein. Reproduction, use or disclosure to third parties without express authority is strictly
forbidden. © ALSTOM (Switzerland) Ltd 2004.
Form: FM 0501 en / Ae.02 / 01-09-07 / GTSQ
(3)
 Revision: Doc. Type: Language: Page:

 - SOE en 4/10
HTCT678918

5. Abbreviations

A Alarm – see chapter 4

BDQ Bad Data Quality – faulty signal
CLC/OLC Closed Loop Controller / Open Loop Controller
DC Direct Current
DE/NDE Driven End / Non-Driven End (of generator)
EV Environmental burner
FDS Fuel Distribution System
FGAS/FOIL Fuel Gas / Fuel Oil
FSWO Fuel Switch-over
GT Gas Turbine
O-GCB Opening of Generator Circuit Breaker - see chapter 4
O-HVCB Opening of the High-Voltage Circuit Breaker - see chapter 4
I Interlock – see chapter 4
PK2 Compressor discharge pressure
PLS Protective Load Shedding – see chapter 4
PLST Protective Load Shedding followed by Trip – see chapter 4
PR Protection Requirement
GPT Equipment providing protective function for electrical/generator systems
SFC Static Frequency Converter
SOV Shut Off Valve
TAT Temperature after Turbine
TIT Turbine Inlet Temperature
TK1 Compressor Inlet Temperature
TT Turbine Trip – see chapter 4
(TT) Turbine Trip in starting sequence
VIGV Variable Inlet Guide Vanes

We reserve all rights in this document and in the information contained therein. Reproduction, use or disclosure to third parties without express authority is strictly
forbidden. © ALSTOM (Switzerland) Ltd 2004.
Form: FM 0501 en / Ae.02 / 01-09-07 / GTSQ
(4)
 Revision: Doc. Type: Language: Page:

 - SOE en 5/10
HTCT678918

6. Protection requirements

PR1: ROTOR
PR1.1: ROTOR BEARING
PR1.2: VIBRATION
PR1.3: OVERSPEED

PR2: TURBINE PRESSURE

PR2.1: PROTECTION AGAINST EXPLOSION (within the Gas Turbine)
PR2.2: OVERPRESSURE IN THE EXHAUST SYSTEM (See GCAITN02168)
PR2.3: COMPRESSOR
PR2.3.1: INADEQUATE SURGE MARGIN (INCLUDING UNDERFREQUENCY)
PR2.3.2: BLOW OFF VALVES
PR2.3.3: VARIABLE GUIDE VANES
PR2.3.4: AIR INTAKE
PR2.3.5: INTAKE AIR TEMPERATURE DISTORTION

PR3: PROCESS TEMPERATURE SUPERVISION

PR3.1: TURBINE INLET TEMPERATURE
PR3.2: TURBINE EXHAUST GAS TEMPERATURE
PR3.3: ROTOR COOLING AIR
PR3.4: OVERFIRING DUE TO DYNAMIC EFFECTS
PR3.4.1: ACCELERATION
PR3.4.2: CONTROL VALVES (GAS & OIL)

PR4: COMBUSTOR
PR4.1: ANNULAR COMBUSTOR FDS
PR4.2: FLAME SUPERVISION
PR4.3: FUEL SWITCHOVER
PR4.4: COMBUSTOR PULSATION

PR5: AUXILIARY SYSTEMS

PR5.1: LUBE OIL SYSTEM
PR5.2: HYDRAULIC FLUID SUPPLY SYSTEM
PR5.3: INSTRUMENTATION AND CONTROL EQUIPMENT
PR5.4: FUEL SYSTEM
PR5.5: WATER/STEAM INJECTION
PR5.5.1: WATER SYSTEM
PR5.5.2: PRESSURE AT NOx WATER PUMP
PR5.5.3: Nox WATER SUPPLY

PR6: PERIPHERAL SYSTEMS

PR6.1: GENERATOR PROTECTION
PR6.1.1: UNDERFREQUENCY
PR6.1.2: COOLING AIR INLET TEMPERATURE
PR6.1.3: COOLING AIR EXHAUST TEMPERATURE
PR6.1.4: SLOT TEMPERATURE
PR6.1.5: FAILURE OF GPT
PR6.1.6: GPT INITIATED PROTECTION
PR6.1.7: ELECTRIC POWER MEASUREMENT
PR6.2: BOILER PROTECTION

PR7: FIRE AND EXPLOSION PROTECTION

PR8: EMERGENCY TRIP

We reserve all rights in this document and in the information contained therein. Reproduction, use or disclosure to third parties without express authority is strictly
forbidden. © ALSTOM (Switzerland) Ltd 2004.
Form: FM 0501 en / Ae.02 / 01-09-07 / GTSQ
(5)
 Revision: Doc. Type: Language: Page:

 - SOE en 6/10
HTCT678918

6.1 Rotor

Redundancy
Activation
Protective
Requirements

Operator

Optional
Action

Action
PR1: ROTOR
PR1.1: ROTOR BEARING
PR1.1.1: Thrust bearing temperature too high (thrust too high or hot oil). A 4*(1oo1) analog Monitor temperature and investigate possible
Thrust direction versus turbine. failed signal.
PR1.1.2: Thrust bearing temperature too high (thrust too high or hot oil). PLS 2oo4 analog OR 1oo4 & -
Thrust direction versus turbine. 2BDQ
PR1.1.3: Thrust bearing temperature too high (thrust too high or hot oil). TT 2oo4 analog -
Thrust direction versus turbine.
PR1.1.4: Thrust bearing temperature too high (thrust too high or hot oil). A 1oo2 analog Monitor temperature and investigate possible
Thrust direction versus generator. failed signal.
PR1.1.5: Thrust bearing temperature too high (thrust too high or hot oil). PLST 1oo2 analog -
Thrust direction versus generator.
PR1.1.6: Journal bearings temperature too high (hot oil). A 4*(1oo2) analog Monitor temperature and investigate possible
failed signal.
PR1.1.7: Journal bearings temperature too high (hot oil). PLST 4*(1oo2) analog -
PR1.2: VIBRATION
PR1.2.1: Generator Compressor and GT side pedestal vibration A 6*(1oo1) analog Monitor temperature and investigate possible
failed signal.
PR1.2.2: Generator Compressor and GT side pedestal vibration. TT 4 *(1oo1) analog -
PR1.2.3: Failure of vibration monitoring equipment PLS 2oo2 binary -
PR1.3: OVERSPEED
PR1.3.1: Overspeed >limiting value A 1oo3 analog Monitor rotor speed and investigate possible
failed signal
PR1.3.2: Failure of speed signal I start-up - Rectify failed signals
PR1.3.3: Overspeed >limiting value TT 2oo3 analog -

6.2 Turbine Pressure

Redundancy
Protective

Activation

Requirements
Operator

Optional
Action

Action

PR2: TURBINE PRESSURE

PR2.1: PROTECTION AGAINST EXPLOSION (within the Gas Turbine) X
PR2.1.1: Build-up of explosive gas mixture in the machine before ignition I ignition 1oo3 analog - X
PR2.2: OVERPRESSURE IN THE EXHAUST SYSTEM (See X
GCAITN02168)
PR2.2.1: Flue gas path not open A 1oo3 Investigate and rectify appropriate valve(s). X
PR2.2.2: Flue gas path not open I start-up 2oo3 Rectify flap valve fault X
PR2.2.3: Flue gas path not open. PLST 2oo3 - X
PR2.3: COMPRESSOR
PR2.3.1: INADEQUATE SURGE MARGIN (INCLUDING
UNDERFREQUENCY)
PR2.3.1.1: Inadequate surge margin (speed too low) A Maximum of valid signals ( which Shut-off steam injection and/or inlet air cooling
are not BDQ) if is speed<98% system
PR2.3.1.2: Inadequate surge margin (speed too low) HVCBT 2oo3 -
PR2.3.1.3: Inadequate surge margin (speed and TK1) HVCBT 2oo3 -
PR2.3.1.4: Inadequate surge margin (speed and TK1) TT 2oo3 -
PR2.3.2: BLOW OFF VALVES
PR2.3.2.1: Blow off valves in incorrect position during start-up I start-up 1oo4 binary -
PR2.3.2.2: Blow off valves in incorrect position during start-up (TT) 1oo2 binary -
PR2.3.2.3: Blow off valves in incorrect position during start-up (TT) 1oo1 binary -
PR2.3.2.4: Blow off valves in incorrect position during start-up (TT) 1oo1 binary -
PR2.3.2.5: Blow-off valve not closed during operation. A 1oo4 binary Monitor GT operation and investigate possible
failed signal
PR2.3.2.6: Blow-off valve not closed during operation. PLS 1oo2 binary -
PR2.3.2.7: Blow-off valve not closed during operation. PLS 2*1oo1 binary -
PR2.3.3: VARIABLE GUIDE VANES
PR2.3.3.1: Variable inlet guide vanes (VIGV) below minimum position. PLST and Minimum of valid signals (which are -
blocking VIGV not in BDQ) if is position <-33°
PR2.3.3.2: Variable guide vanes signal difference between transducer A 1oo2 analog Monitor GT operation and investigate possible
too big. failed signal
PR2.3.4: AIR INTAKE
PR2.3.4.1: Risk of ice build up and shedding into compressor based on A 2oo2 analog Operator action is to activate anti-icing system. X
ambient temperature and humidity
PR2.3.4.2: Risk of ice build up and shedding into compressor based on A 1oo1 analog Operator action is to activate anti-icing system. X
ambient temperature and humidity
PR2.3.4.3: Intake filter fouled clogged or iced A 1oo1 binary Operator action is to check and monitor
differential pressure. Shut down GT if critical
differential pressure is exceeded.
PR2.3.4.4: Evap cooler common alarm A 1oo 1 binary Check evap cooler X
PR2.3.4.5: Bypass door open. A 1oo1 binary Shutdown GT and clean filter X
PR2.3.4.6: Roller shutter door not locked open. I start-up and A 2oo2 binary Check and lock roller shutter in position X
PR2.3.5: INTAKE AIR TEMPERATURE DISTORTION X
PR2.3.5.1: TK1 spread outside the limits A Maximum spread of valid signals. Shut-off intake air cooling system X
PR2.3.5.2: TK1 spread outside the limits PLS Maximum spread of valid signals. - X

We reserve all rights in this document and in the information contained therein. Reproduction, use or disclosure to third parties without express authority is strictly
forbidden. © ALSTOM (Switzerland) Ltd 2004.
Form: FM 0501 en / Ae.02 / 01-09-07 / GTSQ
(6)
 Revision: Doc. Type: Language: Page:

 - SOE en 7/10
HTCT678918

6.3 Process Temperature Supervision

Redundancy
Protective

Activation
Requirements

Operator

Optional
Action

Action
PR3: PROCESS TEMPERATURE SUPERVISION
PR3.1: TURBINE INLET TEMPERATURE
PR3.1.1: Turbine inlet gas temperature TIT (in ºC) too high A TIT calculated using TAT Monitor GT operation and investigate possible failed
Mean Delta and Max PK2 signal. Deload if unable to restore temperature
Delta signal 1oo1 within limits.
PR3.1.2: Turbine inlet temperature TIT (in ºC) too high PLS TIT calculated using TAT -
Mean Del and Max PK2 Del
signal. 1oo1
PR3.1.3: Turbine inlet temperature TIT (in ºC) too high TT TIT calculated using TAT -
Mean Del and Max PK2 Del
signal. 1oo1
PR3.2: TURBINE EXHAUST GAS TEMPERATURE
PR3.2.1: Exhaust mass weighted mean gas temperature (ºC) TAT too A TAT mean of 30 (Dynamically Monitor GT operation and investigate possible failed
high Corrected) signal. Deload if unable to restore temperature with
limits.
PR3.2.2: Exhaust mass weighted mean gas temperature (ºC) TAT too PLST TAT mean of 30 (Dynamically -
high Corrected)
PR3.2.3: Exhaust gas temp. (ºC) TAT too high-Strike A 1oo30 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore temperature with
limits.
PR3.2.4: Exhaust gas temp. (ºC) TAT too high-Strike PLST 1oo30 analog -
PR3.2.5: Exhaust gas temp. (ºC) TAT spread maximum / minimum to A 30*(1oo1) analog Monitor GT operation and investigate possible failed
average not acceptable signal. Deload if unable to restore temperature with
limits.
PR3.2.6: Exhaust gas temp. (ºC) TAT spread maximum / minimum to PLS 2oo30 analog -
average not acceptable
PR3.2.7: BDQ handling for TAT measurements PLST 3*(5oo10) analog -
PR3.2.8: BDQ handling for TAT measurements I start-up 4oo30 analog -
PR3.3: ROTOR COOLING AIR
PR3.3.1: Cooling and Sealingair nozzle A 1oo2 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore cooling air
system within limits.
PR3.3.2: Combustor cooling air hood A 4*(1oo1) analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore cooling air
system within limits.
PR3.3.3: Rotor Cooling air (centre or rotor) A 1oo2 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore cooling air
system within limits.
PR3.3.4: Rotor end face temperature A 1oo1 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore temperature
within limits.
PR3.4: OVERFIRING DUE TO DYNAMIC EFFECTS
PR3.4.1: ACCELERATION
PR3.4.1.1: Rate of acceleration too low A 2oo3 analog Monitor acceleration and investigate possible failed
signal.
PR3.4.1.2: Rate of acceleration too low (TT) 2oo3 analog -
PR3.4.2: CONTROL VALVES (GAS & OIL)
PR3.4.2.1: Control valve opens too far during start. Fuel Gas. (TT) 1oo1 analog -
PR3.4.2.2: Control valve opens too far during start. Fuel Oil. (TT) 2*(1oo1) analog - X
PR3.4.2.3: Control valve opens too far during start. Fuel Oil. (TT) 2*(1oo1) analog - X
PR3.4.2.4: Stroke supervision of Fuel Oil control valve during start-up (TT) 2*(1oo1) analog - X
PR3.4.2.5: Stroke supervision of Fuel Oil control valve during start-up I start-up 2*(1oo1) analog Investigate possible failed signals. X
PR3.4.2.6: Actual position of the Fuel Oil Control Valve measured PLST 3*(2oo2) analog/ binary - X
versus it’s commanded position out of limits. (Valve commanded open but
Valves are still closed)

6.4 Combustor
Redundancy
Activation
Protective

Requirements
Operator

Optional
Action

Action

PR4: COMBUSTOR
PR4.1: ANNULAR COMBUSTOR FDS X
PR4.1.1: No purging of lance at shut down for dual fuel machines. I start-up 5*(1oo1) Investigate possible failed signal and then start X
purge
PR4.1.2: No purging of lance at shut down or fuel changeover. Purge PLS 1oo3 analog - X
supervision
PR4.1.3: At least one Servo or Sector valve in wrong postion (Fuel Oil) PLST 7*(1oo1) binary - X
PR4.1.4: At least one Servo or Sector valve in wrong postion (Fuel Oil) PLST 7*(1oo1) binary - X
PR4.1.5: At least one drain valve in wrong postion (Foil) PLST 3*(1oo1) binary - X
PR4.1.6: At least one drain valve in wrong postion (Foil) PLST 3*(1oo1) binary - X
PR4.1.7: At least one vent valve in wrong postion (Foil) PLST 3*(1oo1) binary - X
PR4.1.8: At least one vent valve in wrong postion (Foil) PLST 3*(1oo1) binary - X
PR4.2: FLAME SUPERVISION
PR4.2.1: Flame extinguished A 3*(1oo1) binary In normal operation follow GT shutdown procedure.
In abnormal operation investigate possible failed
signal.
PR4.2.2: Flame extinguished TT 2oo3 binary -
PR4.2.3: Flame extinguished During Oil Ignition Phase TT 1oo2 binary -

(7)
 Revision: Doc. Type: Language: Page:

 - SOE en 8/10
HTCT678918

Redundancy
Protective

Activation
Requirements

Operator

Optional
Action

Action
PR4.3: FUEL SWITCHOVER X
PR4.3.1: Fuel Switch-over during run-up to idle I FSWO - - X
PR4.4: COMBUSTOR PULSATION
PR4.4.1: Combustor pulsation A 1oo1 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore pulsation levels
within limits.
PR4.4.2: Combustor pulsation A 1oo1 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore pulsation levels
within limits.
PR4.4.3: Combustor pulsation A 1oo1 analog Monitor GT operation and investigate possible failed
signal. Deload if unable to restore pulsation levels
within limits.
PR4.4.4: Combustor pulsation PLS 1oo1 analog -
PR4.4.5: Combustor pulsation PLS 1oo1 analog -
PR4.4.6: Combustor pulsation PLS 1oo1 analog -
PR4.4.7: Combustor pulsation PLS 1oo1 analog -
PR4.4.8: Combustor pulsation TT 1oo1 analog -

6.5 Auxiliary Systems

Redundancy
Activation
Protective

Requirements

Operator

Optional
Action

Action
PR5.1: LUBE OIL SYSTEM
PR5.1.1: Insufficient lube oil supply measured by too low supply A 1oo1 Investigate lube oil system and possible failed
pressure signal.
PR5.1.2: Insufficient lube oil supply measured by too low supply TT 2oo3 binary -
pressure
PR5.1.3: Failure of one of two main lube oil pumps A 4*(1oo1) Investigate lube oil system and possible failed
signal.
PR5.1.4: Failure of two main lube oil pumps. TT 4oo4 binary -
PR5.1.5: Failure of emergency lube oil supply system. A 1oo1 binary Consider shutting down GT
PR5.1.6: Failure of emergency lube oil supply system. A 1oo1 binary Consider shutting down GT
PR5.1.7: Failure of emergency lube oil supply system. I lube oil program 1oo1 binary Rectify failed equipment
PR5.1.8: Lube oil supply temperature too high. A 1oo1 analog Investigate lube oil system and possible failed
signal.
PR5.1.9: Lube oil supply temperature too high. I start-up 1oo1 analog Rectify lube cooling system fault.
PR5.1.10: Lube oil supply temperature too low at start-up. A 1oo1 analog Investigate lube oil system and possible failed
signal.
PR5.1.11: Lube oil supply temperature too low at start-up. I start-up 1oo1 analog Rectify lube oil heater fault
PR5.1.12: Lube oil supply temperature too low in operation. A 1oo1 analog Investigate lube oil system and possible failed
signal.
PR5.1.13: Too low lube oil level in the system. A 1oo1 binary Add lube oil. Investigate lube oil system and
possible failed signal.
PR5.1.14: Lube oil filter clogged A 2*(1oo1) binary Switch to redundant filter and change clogged filter.
Investigate possible failed signal.
PR5.1.15: Blocking of rotor rotation (checked by rotor barring) A 1oo1 binary Investigate cause of blocked rotor or possible failed
signal.
PR5.1.16: Blocking of rotor rotation (checked by rotor barring) I SFC 1oo1 binary Check rotor barring system. Allow GT to cooldown
PR5.2: HYDRAULIC FLUID SUPPLY SYSTEM
PR5.2.1: Hydraulic fluid supply pressure too low A 2*1oo2 binary for active pump Investigate hydraulic system and possible failed
signal.
PR5.2.2: Hydraulic tripping unit blocked in closed position I start-up 1oo3 binary Investigate hydraulic system and possible failed
signal.
PR5.2.3: Hydraulic tripping unit blocked in closed position PLS 2oo3 binary -
PR5.2.4: Hydraulic fluid supply filter clogged A 1oo1 binary Switch to redundant filter and change clogged filter.
Investigate possible failed signal.
PR5.3: INSTRUMENTATION AND CONTROL EQUIPMENT
PR5.3.1: Control equipment failure (2 closed loop controllers. 2 open A OLC & CLC: 1oo2 Investigate control equipment
loop controllers. 3 protection controllers) Prot. Controller: 1oo3 A &
switch over to redundant
controller.
PR5.3.2: Control equipment failure (2 closed loop controllers. 2 open TT CLC & OLC: 2oo2 binary -
loop controllers. 3 protection controllers) Prot. Controller: 2oo3 binary
PR5.3.3: Internal Supervision of Processors in the Egatrol TT 1oo1 -
PR5.3.4: Cabinet temperature too high A 3*(1oo1) analog + 2oo3 Check cabinet ventilation
analog
PR5.3.5: Cabinet temperature too high PLS 2oo3 analog -
PR5.3.6: PLS not executed TT 3*(1oo1) binary -
PR5.3.7: PLST not executed TT 3*(1oo1) binary -
PR5.4: FUEL SYSTEM
PR5.4.1: Fuel in the turbine casing sump I start-up 1oo2 binary Interlock ignition and interrupt the start (switch off
SFC)
PR5.4.2: High level in fuel sump tank PLS 2oo2 binary -
PR5.4.3: Incorrect postion of leakage and drain valve I start-up 1oo4 binary Rectify drain system fault.
PR5.4.4: Fuel gas system pressure upstream main shut-off valve too low I start-up 1oo1binary Check main and standby gas compressors. X
(Dual Fuel Machines)
PR5.4.5: Pressure too low upstream gas control valve. (Dual Fuel A 1oo1 analog Investigate fuel gas system and possible failed X
Machines) signal
PR5.4.6: Pressure too low upstream gas control valve. (Dual Fuel PLST 1oo1 analog - X
Machines)
PR5.4.7: Fuel gas system pressure upstream main shut-off valve too low I start-up 1oo1binary Check main and standby gas compressors.
(Gas Only Machines)
PR5.4.8: Pressure too low upstream gas control valve. (Gas Only A 1oo1 analog Investigate fuel gas system and possible failed
Machines) signal

(8)
 Revision: Doc. Type: Language: Page:

 - SOE en 9/10
HTCT678918

Redundancy
Protective

Activation
Requirements

Operator

Optional
Action

Action
PR5.4.9: Pressure too low upstream gas control valve. (Gas Only PLST 1oo1 analog -
Machines)
PR5.4.10: Fuel oil pressure low upstream of the fuel pump A 1oo1 binary Investigate fuel oil forwarding system and possible X
failed signal.
PR5.4.11: Fuel oil pressure low upstream of the fuel pump I start-up 1oo1 binary - X
PR5.4.12: Fuel oil pressure low downstream of the fuel pump A 1oo1 analog Rectify fuel forwarding system / fuel pump fault X
PR5.4.13: Fuel oil pressure low downstream of the fuel pump PLST 1oo1 analog - X
PR5.4.14: Fuel oil supply temperature low A 1oo1 analog - X
PR5.4.15: Fuel oil supply temperature low I start -up 1oo1 analog - X
PR5.4.16: High differential pressure across fuel oil filter A 1oo1 binary Check fuel oil filter and possible failed signal. X
PR5.4.17: High level in fuel leakage tank A 2*(1oo1) binary Investigate sump tank drain system and possible X
failed signal.
PR5.4.18: High level in Centrifugal Extractor PLS 1oo1 binary - X
PR5.4.19: Leakage through leakage & water drain valve. A 3*1oo1 analog Investigate drain system and possible failed signal. X
PR5.4.20: Leakage through leakage & water drain valve. PLST 1oo1 analog - X
PR5.4.21: Leakage through leakage & water drain valve. PLS 1oo2 analog - X
PR5.4.22: Level in oil fuel / water drain tank too high A 1oo1 Investigate water/fuel system and possible failed X
signal.
PR5.4.23: Level in oil fuel / water drain fire trap too high A 1oo1 Investigate water/fuel system and possible failed X
signal.
PR5.5: WATER/STEAM INJECTION X
PR5.5.1: WATER SYSTEM X
PR5.5.1.1: Incorrect position of water shut-off valves (Valves should be I start-up 2*(1oo1) binary Rectify water system fault. X
open)
PR5.5.1.2: Incorrect position of water control valves (Valves should be I start-up 3*(1oo2) analog/ binary Rectify water system fault. X
closed)
PR5.5.1.3: Incorrect position of water control and shut off valves during PLST Ctrl Valves: 3*(1oo2) analog/ - X
oil operation (Valves should be open). binary SOVs: 1oo1 binary
PR5.5.1.4: Actual position of the Water Control Valve measured versus PLST 3*(2oo2) analog/ binary - X
it’s commanded position out of limits. (Valve commanded open and valves
are still closed)
PR5.5.2: PRESSURE AT NOx WATER PUMP X
PR5.5.2.1: NOx water pressure low upstream the pump A 1oo1 binary - X
PR5.5.2.2: NOx water pressure low upstream the pump I water purge 1oo1 binary - X
PR5.5.2.3: NOx water pressure low downstream the pump A 1oo1 analog In fuel oil operation reduce load and shut down EV X
in case of water supply failure. Consider switching
to fuel gas.
PR5.5.2.4: NOx water pressure low downstream the pump I start-up 1oo1 analog - X
PR5.5.2.5: NOx water pressure low downstream the pump PLST 1oo1 analog - X
PR5.5.3: Nox WATER SUPPLY X
PR5.5.3.1: Pressure in accumulator too low or too high (too high after A 1oo1 Investigate Nox water accumulator(s) and possible X
accumulator test at unit start up or shut down). failed signal.
PR5.5.3.2: Pressure in accumulator too low or too high (too high after I water purge 1oo1 analog pressure profile - X
accumulator test at unit start up or shut down). after activation of the
accumulator
PR5.5.3.3: Delta p across NOx filter high. A 2*(1oo1) binary Check Nox water filter and investigate possible X
failed signal
PR5.5.3.4: Temperature after NOx water pump too high. A 1oo1 analog Investigate NOx water system and possible failed X
signal.

6.6 Peripheral Systems

Redundancy
Activation
Protective

Requirements
Operator

Optional
Action

Action

PR6: PERIPHERAL SYSTEMS

PR6.1: GENERATOR PROTECTION
PR6.1.1: UNDERFREQUENCY
PR6.1.1.1: Underfrequency. A Mean of valid signals Investigate the cause of underfrequency with grid
controller and possible failed signal.
PR6.1.1.2: Underfrequency O-HVCB Mean of valid signals -
PR6.1.1.3: Underfrequency TT Mean of valid signals -
PR6.1.2: COOLING AIR INLET TEMPERATURE
PR6.1.2.1: Generator cooling air inlet temperature DE/NDE too high A 2*(1oo1) analog Monitor generator temperature and investigate
possible failed signal.
PR6.1.2.2: Generator cooling air inlet temperature DE/NDE too high PLST 1oo2 analog -
PR6.1.3: COOLING AIR EXHAUST TEMPERATURE
PR6.1.3.1: Generator cooling air exhaust temperature too high A 2*(1oo1) analog Monitor generator temperature and investigate
possible failed signal.
PR6.1.4: SLOT TEMPERATURE
PR6.1.4.1: Slot temperature too high A 1oo6 analog Monitor generator temperature and investigate
possible failed signal.
PR6.1.4.2: Slot temperature too high PLST 2oo6 -
PR6.1.5: FAILURE OF GPT
PR6.1.5.1: Failure of generator protection channel A or B I start-up 1oo2 Investigate GPT
PR6.1.5.2: Failure of generator protection channel A and B PLST 2oo2 -
PR6.1.6: GPT INITIATED PROTECTION
PR6.1.6.1: Generator protection PLST 2oo3 -
PR6.1.6.2: Reverse Power results in GT being motored by generator. O-GCB + 1oo2: -
opening the
exciter breaker
PR6.1.7: ELECTRIC POWER MEASUREMENT
PR6.1.7.1: Failure of electric power measurement A 2oo2 Investigate and rectify electric power measurement

(9)
 Revision: Doc. Type: Language: Page:

 - SOE en 10/10
HTCT678918

Redundancy
Protective

Activation
Requirements

Operator

Optional
Action

Action
PR6.1.7.2: Failure of electric power measurement I start-up 1oo2 -
PR6.2: BOILER PROTECTION X
PR6.2.1: Interlock for boiler protection I start-up & I 2*1oo1binary Rectify failed systems. X
ignition
PR6.2.2: PLS for boiler protection PLS 1oo1 binary - X
PR6.2.3: PLST for boiler protection PLST 2oo3 binary - X

6.7 Fire and Explosion Protection

Redundancy
Protective

Activation
Requirements

Operator

Optional
Action

Action
PR7: FIRE AND EXPLOSION PROTECTION
PR7.1: Fire within thermal block enclosure with combustor or auxiliary A 1ooN binary .
compartment
PR7.2: Fire within thermal block enclosure with combustor or auxiliary TT 2ooN; interface to GT control -
compartment 2oo3 binary
PR7.3: Fire outside thermal block enclosure: (Control module- Excitation A 1ooN binary According to 1AHA018790
module- Excitation compartment- DC power module- Starting module-
Battery module- Generator breaker compartment- Transformator H2O spray
active- Generator compartment- H2/Seal oil (if available)- Fuel oil block-
CO2 System released- Common fire alarm- Common fault- Fire system
disabled)
PR7.4: Fire on turbine bearing in the exhaust duct A 1oo2 binary; interface to GT According to 1AHA018790
control 1oo1 binary
PR7.5: Fire on turbine bearing in the exhaust duct PLST 1oo2 binary; interface to GT -
control 1oo1 binary
PR7.6: Escaping gas from fuel gas system in combuster area (valves- A 1oo1 binary According to 1AHA018790
flanges- pipe fittings)
PR7.7: Escaping gas from fuel gas system in combuster area (valves- (TT) 2oo3 binary -
flanges- pipe fittings)
PR7.8: Escaping gas from fuel gas system in combuster area (valves- A 1oo1 binary According to 1AHA018790
flanges- pipe fittings)
PR7.9: Escaping gas from fuel gas system in combuster area (valves- PLST 1oo1 binary -
flanges- pipe fittings)
PR7.10: Escaping gas from fuel gas system in combuster area (valves- TT 2oo3 binary -
flanges- pipe fittings)
PR7.11: Escaping gas from fuel gas system outside combustor area A 1oo1 binary According to 1AHA018790
(valves- flanges- pipe fittings): Ignition gas cabinet- Control valve block
PR7.12: Failure of thermal block Enclosure Vent A 1oo1 binary Check SAM panel. Investigate failed signal.
PR7.13: Failure of thermal block Enclosure Vent A 1oo2 Check SAM panel. Investigate failed signal.
PR7.14: Failure of thermal block Enclosure Vent PLS. I 2oo2 -
PR7.15: Failure of generator. auxiliary block ventilation A 1oo1 binary Check SAM panel. Investigate failed signal.
PR7.16: Failure of the fire protection system A 2*1oo1 binary -
PR7.17: Failure of the explosion protection system A 2*1oo1 binary Shut down GT
PR7.18: Failure of the explosion protection system I start-up 1oo3 binary Shut down GT
PR7.19: Failure of the explosion protection system PLST 1oo1 binary -
PR7.20: Temperature in thermal block enclosure high A 1oo1 binary Monitor temperature and consider shutting down GT
PR7.21: Pressure after propane gas filter two low A 1oo1 binary Monitor Pressure and consider shutting down GT

6.8 Emergency Trip

Redundancy
Activation
Protective

Requirements
Operator

Optional
Action

Action

PR8: EMERGENCY TRIP

PR8.1: Manual pushbutton trip at GT Themal Block TT 2oo3 binary -
PR8.2: Manual pushbutton trip at Electronic Room TT 2oo3 binary -
PR8.3: Manual pushbutton trip at Control Room TT 2oo3 binary -

(10)