Tagos-13 Class FMEA 09-11-2020_122451610.pdf

Failure Mode Effect Analysis Design Verification Test Procedure

Monitor and Alarm System Profinet Upgrade for

NOAA TAGOS-13 CLASS

NOAA GUNTER

NOAA SETTE

November 09, 2020

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

NOAA TAGOS-13 CLASS

Failure Mode Effect Analysis Design Verification Test Procedure

Monitor and Alarm System

Table of Contents

1 Overview and Conventions…………………………………….…………….……..

2 System Power………………………………………………………….……………

2.1 Main Power Failure……………………………………………….…...……

2.2 Emergency Power Failure……………………………………...…….…..…

2.3 24 VDC Power Supply “A” Fail……………………………….……...……

2.4 24 VDC Power Supply “B” Fail……………………………….…………...

2.5 UPS Failure…………………………………..…………….………….……

3 Programmable Logic Controller (PLC)…………………………….…………..…..

3.1 PLC Power Supply Failure……………………………………...………….

3.2 PLC CPU Failure……………………………………….…………………..

3.3 PLC Ethernet Module “A” Failure……………….……………….………..

3.4 Profinet Module “A” Module Failure………………………………………

3.5 Profinet Module “B” Module Failure………………………………………

4 Personal Computer (PC) Failures…….…………………………………………….

4.1 PC Failure….………………………………………………………….…

4.2 PC Monitor Failure…..……………………………………………………..

5 I/O Communication Failures………………………………………………………..

5.1 I/O Communication Cable “A” Failure ……………………………………

5.3 I/O Communication Cable “B” Failure ……………………………………

6 PC Communications Failures.…………………………………………...…………

6.1 Ethernet Cable Failure “A” Open………………………………..…………

7 I/O Module Failures………………………………………………………………...

7.1 Profinet Scanner Module 1 Failure………………………………………..

7.2 I/O Module D1-M1 Failure…………………………………………………

7.3 I/O Module D1-M2 Failure…………………………………………………

7.4 I/O Module D1-M3 Failure…..……………………………………………..

7.5 I/O Module D1-M4 Failure…..……………………………………………..

7.6 I/O Module D1-M5 Failure…………………..……………………………..

7.7 I/O Module D1-M6 Failure………..……………………………………….

7.8 I/O Module D1-M7 Failure…………………………………………………

7.9 I/O Module D1-M8 Failure………………………………………………...

7.10 Profinet Scanner Module 2 Failure…...……………………………………

7.11 I/O Module D2-M1 Failure……………………..…………………………..

7.12 I/O Module D2-M2 Failure………………...……..………………………...

7.13 I/O Module D2-M3 Failure………………………..………………………..

7.14 I/O Module D2-M4 Failure…………………………………………………

7.15 I/O Module D2-M5 Failure………………………..………………………..

7.16 Profinet Scanner Module 3 Failure…………………………………………

7.17 I/O Module D3-M1 Failure…………………………………………………

7.18 I/O Module D3-M2 Failure…………………………………………………

7.19 I/O Module D3-M3 Failure…………………………………………………

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.20 I/O Module D3-M4 Failure………………………………..…………...…...

7.21 I/O Module D3-M5 Failure……………………………………………....…

7.22 Profinet Scanner Module 4 Failure……………………………………...….

7.23 I/O Module D4-M1A Failure……………………………………………

7.24 I/O Module D4-M1B Failure……………………………………………… .

7.25 I/O Module D4-M2A Failure…………………………………………

7.26 I/O Module D4-M2B Failure……….……………………..………………..

7.27 I/O Module D4-M3A Failure…….…………………………..……………..

7.28 I/O Module D4-M3B Failure…….…………………………..………… .….

7.29 I/O Module D4-M4 Failure…………………………………………………

7.30 I/O Module D4-M5 Failure…………………………………………………

7.31 Profinet Scanner Module 5 Failure……………………………..…………..

7.32 I/O Module D5-M1A Failure……………………………………..………..

7.33 I/O Module D5-M1B Failure……………………………………………….

7.34 I/O Module D5-M2A Failure……………………………………………… .

7.35 I/O Module D5-M2B Failure………………………………………..……...

7.36 I/O Module D5-M3A Failure…………………………………..…………..

7.37 I/O Module D5-M3B Failure………………………………..……………...

7.38 I/O Module D5-M4A Failure……………………………………………….

7.39 I/O Module D5-M4B Failure……………………………………………….

7.40 I/O Module D5-M5A Failure……………………………………………….

7.41 I/O Module D5-M5B Failure……………………………………………….

7.42 I/O Module D5-M6A Failure……………………………………………….

7.43 I/O Module D5-M6B Failure……………………………………………….

7.44 Profinet Scanner Module 6 Failure…,,,……………………………….……

7.45 I/O Module D6-M1 Failure………………………………………..………..

7.46 I/O Module D6-M2 Failure………………………………………..………..

7.47 I/O Module D6-M3 Failure…………………………………………………

7.48 Profinet Scanner Module 7 Failure……………………………...…………

7.49 I/O Module D7-M1A Failure……………………………………………….

7.50 I/O Module D7-M1B Failure……………………………………………….

7.51 I/O Module D7-M2 Failure……………………………………………..…..

7.52 I/O Module D7-M3 Failure…………………………………………………

7.53 Profinet Scanner Module 8 Failure………………………………………...

7.54 I/O Module D8-M1A Failure……………………………………………….

7.55 I/O Module D8-M1B Failure……………………………………………….

7.56 I/O Module D8-M2A Failure……………………………………………… .

7.57 I/O Module D8-M2B Failure……………………………………...………..

7.58 I/O Module D8-M3A Failure……………………………………………….

7.59 I/O Module D8-M3B Failure …………………………………………

7.60 I/O Module D8-M4A Failure……………………………………………….

7.61 I/O Module D8-M5 Failure…………………………………………………

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

1 Overview and Conventions This Failure Analysis is intended to examine the integrity of the Monitor and Alarm system to be upgraded aboard the ships. The analysis will focus on failures of the primary system components and the effects on the operators’ ability to monitor the vessels’ machinery and safety systems. The basic assumption used in this FMEA is that the system is operating properly at the time of the failure, the vessel is underway, the propulsion control location is on the bridge and only single non-concurrent failures will be considered. We will also assume the engine room is being operated in the unattended mode. The following structure will be used in each component’s failure analysis.

Failure Describes the failed components in the system.

Effect Describes the effect of the failed component on the system.

Detection Describes how the ships crew is made aware of the failure.

Alternatives Describes alternate means of safely operating the plant until corrective action is taken on the failed component.

Correction Describes what corrective actions are necessary to bring the system back to normal operation.

Test Procedure Describes a test procedure to verify actions in the Failure Analysis.

The MCSC is the “Main Control Station Console” located in the Engine Control Room.

2 System Power This section will examine failures of the Monitor and Alarm System power, including ship supply power, power supplies and UPS.

2.1 Main Power Failure

Failure The Main Power to the system fails.

Effect The ABT will switch to the Emergency Power supply and system operation will be unaffected. The UPS will prevent momentary interruption of power.

Detection 1. "Main Power Fail" alarm is annunciated on the MCSC.

2. "Engineer Trouble" alarm is annunciated on the EAP’s.

3. The "Main Power Available" IL on the MCSC is extinguished.

Alternatives System operates normally on the Emergency power source.

Correction Restore normal power.

Test Procedure 1. Secure the Main Power to MCSC.

2. Verify "Main Power Fail" alarm on MCSC CRT.

3. Verify the "Engineer Trouble" alarm on the EAP’s.

4. Verify the “Main Power Available” IL is extinguished.

5. Verify the system operates properly though the power loss.

Verify

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

2.2 Emergency Power Failure

Failure Emergency Power to the system fails while in operation.

Effect Operation will continue with operation from UPS Power.

Detection 1. “UPS Active" alarm is annunciated on the MCSC.

2. "Engineer Trouble" alarm is annunciated on the EAP’s.

3. The "Emergency Power Available" IL on the MCSC is extinguished.

Alternatives System operates normally on the UPS power source.

Correction Restore Emergency power.

Test Procedure 1. Secure the Emergency Power to MCSC.

2. Verify " UPS Active" alarm on MCSC CRT.

3. Verify the "Engineer Trouble" alarm on the EAP’s.

4. Verify the “Emergency Power Available” IL is extinguished.

5. Verify the system operates properly though the power loss.

Verified

2.3 24 VDC Power Supply “A” Fail

Failure 24 VDC Power Supply "A" fails.

Effect The 24 VDC power load is handled by the redundant "B" power supply. There is no effect on system operation.

Detection 1. "24 VDC "A" Power Supply Fail" alarm is annunciated on the

MCSC.

2. "Engineer Trouble" alarm is annunciated on the EAP’s.

Alternatives System operates normally on the "B" power supply.

Correction Correct problem with 24 VDC "A" power supply.

Test Procedure 1. Remove power to 24 VDC "A" power supply by removing Fuse

PSA.

2. Verify "24 VDC "A" Power Supply Fail" alarm on MCSC CRT.

3. Verify the “Engineer Trouble” alarm on the EAP’s.

4. Verify the system operates properly through the power supply failure.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

2.4 24 VDC Power Supply “B” Fail

Failure 24 VDC Power Supply "B" fails.

Effect The 24 VDC power load is handled by the redundant "A" power supply. There is no effect on system operation.

Detection 1. "24 VDC "B" Power Supply Fail" alarm is annunciated on the

MCSC.

2. "Engineer Trouble" alarm is annunciated on the EAP’s.

Alternatives System operates normally on the "B" power supply.

Correction Correct problem with 24 VDC "B" power supply.

Test Procedure 1. Remove power to 24 VDC "B" power supply by removing Fuse

PSB.

2. "24 VDC "B" Power Supply Fail" alarm on MCSC CRT.

3. Verify the “Engineer Trouble” alarm on the EAP’s.

4. Verify the system operates properly through the power supply failure.

Verified

2.5 UPS Failure

Failure The UPS supplying power to the Monitor and Alarm system fails.

Effect 115 VAC is momentarily interrupted to the Monitor and Alarm system. The monitor and alarm system will restart after the power interruption.

Detection 1. "Engineer's Assistance Needed" alarm will sound on the EAP’s.

2. "UPS Fail" alarm is annunciated on the MCSC after system restarts.

Alternatives System operates normally after restart.

Correction Correct problem with UPS.

Test Procedure 1. Simulate UPS failure by turning UPS ON/OFF switch of OFF.

2. Verify the Engineer's Assistance Needed" alarm sounds on the

EAP’s.

3. Verify the “UPS Fail” alarm is annunciated on the MCSC after system restarts.

4. Verify the system operates properly after system restart.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

3 Programmable Logic Controller (PLC) This section will examine failures in the PLC.

3.1 PLC Power Supply Failure

Failure The PLC power supply module fails.

Effect PLC functions are disabled. This causes I/O processing to terminate.

Detection 1. "Engineer’s Assistance Needed" alarm will sound on the EAP's.

2. "PLC Failure" alarm is displayed on the MCSC CRT.

Alternatives System machinery will need to be monitored locally until failure is corrected.

Correction Replace PLC Power Supply Module.

Test Procedure 1. Simulate PLC Power Supply failure by removing power to CPU.

2. Verify the "Engineer's Assistance Needed" alarm sounds on the

EAP's.

3. Verify the “PLC Failure” alarm is displayed on the MCSC CRT.

4. Verify the system operates properly after PLC power restored.

Verified

3.2 PLC CPU Failure

Failure The PLC CPU module fails.

Effect PLC functions are disabled. This causes I/O processing to terminate.

Detection 1. "Engineer’s Assistance Needed" alarm will sound on the EAP's.

2. "PLC Failure" alarm is displayed on the MCSC CRT.

Alternatives System machinery will need to be monitored locally until failure is corrected.

Correction Replace PLC CPU Module.

Test Procedure 1. Simulate PLC CPU failure by removing power to CPU.

2. Verify the "Engineer's Assistance Needed" alarm sounds on the

EAP's.

3. Verify the “PLC Failure” alarm is annunciated on the MCSC.

4. Verify the system operates properly after the PLC CPU mode is restored on “On Line”.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

3.3 PLC Ethernet Module Failure

Failure The PLC Ethernet communication fails.

Effect PLC to PC communication functions are disabled. This prevents I/O updates to the PC.

Detection 1. "Engineer’s Assistance Needed" alarm will sound on the EAP's.

2. "PLC Failure" alarm is displayed on the MCSC CRT.

Alternatives System machinery will need to be monitored locally until failure is corrected.

Correction Replace PLC Ethernet Module.

Test Procedure 1. Simulate PLC Ethernet Module failure by disconnecting the

Ethernet cable from the PLC Ethernet Module.

2. Verify the "Engineer's Assistance Needed" alarm sounds on the

EAP's.

3. Verify the “PLC Failure” alarm is displayed on the MCSC CRT.

4. Verify the system operates properly after the Ethernet cable is reconnected.

Verified

3.4 Profinet Bus A Fails

Failure Profinet Bus "A" module or cable fails.

Effect PLC to I/O Module communications on Bus "A" are disabled. I/O communications will continue on Bus "B" with no loss of functionality.

Detection 1. “Profinet Bus A Fail” alarm is annunciated on the MCSC.

2. Engineer Trouble" alarm will sound on the system.

Alternatives There is no loss of functionality on the system.

Correction Replace PBM "A" Module or Cable.

Test Procedure 1. Simulate Profinet Bus A fail by disconnecting cable A from

PLC Profinet module.

2. Verify the "Profinet Bus A Fail" alarm is annunciated on the

MCSC.

3. Verify there is no loss or interruption of Monitor and Alarm functionality.

4. Verify the system operates properly after the cable is reconnected.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

3.5 Profinet Bus B Fails

Failure Profinet Bus "B" module or cable fails.

Effect PLC to I/O Module communications on Bus "B" are disabled. I/O communications will continue on Bus "A" with no loss of functionality.

Detection 1. " Profinet Bus B Fail" alarm is annunciated on the MCSC.

2. "Engineer Trouble" alarm will sound on the system.

Alternatives There is no loss of functionality on the system.

Correction Replace PBM "B" Module or Cable.

Test Procedure 1. Simulate Profinet Bus B fail by disconnecting cable B from

PLC Profinet module.

2. Verify the "Profinet Bus B Fail" alarm is annunciated on the

MCSC.

3. Verify there is no loss or interruption of Monitor and Alarm functionality.

4. Verify the system operates properly after the cable is reconnected.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

4 Personal Computer (PC) Failures

This section will examine in the PC, including the circuit boards, drives and monitor.

4.1 PC Failure

Failure The PC fails.

Effect The Monitor and Alarm functions will be disabled until problem corrected.

Detection 1. "Engineer's Assistance Needed" alarm will sound on the EAP's.

2. The PC will have a "No Data" displayed on the monitor.

Alternatives System machinery will need to be monitored locally until failure is corrected.

Correction 1. Changeover to backup PC.

Test Procedure 1. Simulate a PC failure by removing the power connection while the system is in operation.

2. Verify the "Engineer's Assistance Needed" alarm sounds on the

EAP's.

3. Verify there is no PC operation.

4. Verify the system operation returns to normal after power up.

Verified

4.2 PC Monitor Failure

Failure The PC Monitor fails.

Effect The Monitor and Alarm system will function properly except there will be no display on the CRT.

Detection There will be no display on the monitor.

Alternatives 1. The system will operate normally except for display functions.

Correction Replace monitor.

Test Procedure 1. Simulate monitor failure by removing power to the monitor.

2. Initiate an alarm.

3. Verify the alarm is sounds on the MCSC.

4. Verify the “Engineer Trouble” alarm annunciates on the

EAP’s.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

5 I/O Communication Failures

This section will consider failures of the I/O Communications bus.

5.1 I/O Communication Cable “A” Failure

Failure The I/O Communication cable fails due to an open in one of the conductors in the "A" Bus cable.

Effect I/O Module to PLC communication on Bus "A" is disabled. I/O communications will continue on Bus "B" with no loss of functionality.

Detection 1. "Profinet Bus "A" Fail: alarm is annunciated on the MCSC.

2. "Engineer Trouble" alarm will sound on the EAP's.

Alternatives There is no loss of functionality on the system.

Correction Repair problem with cable.

Test Procedure 1. Simulate I/O Communications failure by lifting one of the wires for Bus "A" located on the PSM "A" Module in the PLC.

2. Verify the "Profinet Bus "A" Fail" alarm is annunciated on the

MCSC.

3. Verify “Engineer Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality.

5. Verify the alarm clears on the MCSC after replacing the lifted wire.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

5.3 I/O Communication Cable “B” Failure

Failure The I/O Communication cable fails due to an open in one of the conductors in the "B" Bus cable.

Effect I/O Module to PLC communication on Bus "B" is disabled. I/O communications will continue on Bus "A" with no loss of functionality.

Detection 1. "Profinet Bus "B" Fail: alarm is annunciated on the MCSC.

2. "Engineer Trouble" alarm will sound on the EAP's.

Alternatives There is no loss of functionality on the system.

Correction Repair problem with cable.

Test Procedure 1. Simulate I/O Communications failure by lifting one of the wires for Bus “B” located on the PSM “B” Module in the PLC.

2. Verify the "Profinet Bus “B” Fail" alarm is annunciated on the

MCSC.

3. Verify the “Engineer Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality.

5. Verify the alarm clears on the MCSC after replacing the lifted wire.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

6 PC Communication Failures This section will consider failures of the PC to PLC Communications bus.

6.1 Ethernet Cable Failure Open

Failure The Ethernet cable fails due to an open in one of the conductors of the cable.

Effect PLC TO PC communication is disabled. Monitor and Alarm functions will be disabled.

Detection 1. “PC/PLC Communication Failure” alarm is displayed on the

MCSC CRT.

2. “Engineers Assistance Needed” alarm will sound on the EAP’s.

Alternatives System machinery will need to be monitored locally until problem is corrected.

Correction Repair problem with cable.

Test Procedure 1. Simulate I/O Communications failure by disconnecting the

Ethernet cable from the PLC Ethernet Adapter.

2. “Verify the “PC/PLC” Communication Failure” alarm is displayed on the MCSC CRT.

3. Verify the “Engineers Assistance Needed” alarm sounds on the

EAP’s.

4. Verify the alarm clears and system returns to normal after replacing the Ethernet cable.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7 I/O Module Failures This section will examine failure of the I/O modules and their effect on the system. Each

I/O Module will have a table listing the I/O Points affected. The “I/O Type” field of the table has the following legend:

● DI - Digital Input – Contact closure input, normally 24 VDC and is an alarm indication or a status.

● DO – Digital Output – This I/O Type is normally associated with an indicating light or a relay.

● AI – Analog Input – This is a 4-20mA or voltage input. A continuous display will be available from this type of input.

● AO – Analog Output – This is a 4-20mA or voltage output. This I/O Type normally drives a meter display.

● RTD – Resistance Temperature Detector input. This is temperature dependant element sensor. A continuous display will be available from this type of input.

● TC – Thermocouple sensor input. A continuous display will be available from this type of input.

7.1 Profinet Scanner Module “PSM” Failure

Failure PSM 1 fails. This is the communications interface for I/O Modules D1-

M1, D1-M2, D1-M3, D1-M4, D1-M5, D1-M6, D1-M7, D1-M8.

Effect There will no communications to the above I/O Modules. (See the failure cases for the individual modules for I/O data points affected).

Detection 1. “PSM 1 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace PSM 1 Module

Test Procedure 1. Simulate PSM 1 failure by removing power to the PSM.

2. “Verify the “PSM 1 Fail” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after restoring power to PSM

1.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.2 I/O Module D1-M1 Failure

Failure I/O Module D1-M1 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M1.

Detection 1. “D1-M1 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M1 Module

Test Procedure

1. Simulate D1-M1 failure by removing this module from the rack.

2. Verify the “D1-M1” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M1 to the rack.

Verified

Channel No. I/O Type Description

050 TC MAIN DSL # 1 CYL # 1 TEMP

051 TC MAIN DSL # 1 CYL # 2 TEMP

052 TC MAIN DSL # 1 CYL # 3 TEMP

053 TC MAIN DSL # 1 CYL # 4 TEMP

054 TC MAIN DSL # 1 CYL # 5 TEMP

055 TC MAIN DSL # 1 CYL # 6 TEMP

056 TC MAIN DSL # 1 CYL # 7 TEMP

Table D1-M1

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.3 I/O Module D1-M2 Failure

Failure I/O Module D1-M2 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M2.

Detection 1. “D1-M2 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M2 Module

Test Procedure

1. Simulate D1-M2 failure by removing this module from the rack.

2. Verify the “D1-M2” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M2 to the rack.

Verified

Channel No. I/O Type Description

057 TC MAIN DSL # 1 CYL # 8 TEMP

058 TC MAIN DSL # 1 CYL # 9 TEMP

059 TC MAIN DSL # 1 CYL # 10 TEMP

060 TC MAIN DSL # 1 CYL # 11 TEMP

061 TC MAIN DSL # 1 CYL # 12 TEMP

062 TC MAIN DSL # 2 CYL # 1 TEMP

063 TC MAIN DSL # 2 CYL # 2 TEMP

Table D1-M2

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.4 I/O Module D1-M3 Failure

Failure I/O Module D1-M3 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M3.

Detection 1. “D1-M3 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M3 Module

Test Procedure

1. Simulate D1-M3 failure by removing this module from the rack.

2. Verify the “D1-M3” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M3 to the rack.

Verified

Channel No. I/O Type Description

066 TC MAIN DSL # 2 CYL # 3 TEMP

067 TC MAIN DSL # 2 CYL # 4 TEMP

068 TC MAIN DSL # 2 CYL # 5 TEMP

069 TC MAIN DSL # 2 CYL # 6 TEMP

070 TC MAIN DSL # 2 CYL # 7 TEMP

071 TC MAIN DSL # 2 CYL # 8 TEMP

072 TC MAIN DSL # 2 CYL # 9 TEMP

Table D1-M3

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.5 I/O Module D1-M4 Failure

Failure I/O Module D1-M4 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M4.

Detection 1. “D1-M4 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M4 Module

Test Procedure

1. Simulate D1-M4 failure by removing this module from the rack.

2. Verify the “D1-M4” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M4 to the rack.

Verified

Channel No. I/O Type Description

073 TC MAIN DSL # 2 CYL # 10 TEMP

074 TC MAIN DSL # 2 CYL # 11 TEMP

075 TC MAIN DSL # 2 CYL # 12 TEMP

076 TC MAIN DSL # 3 CYL # 1 TEMP

077 TC MAIN DSL # 3 CYL # 2 TEMP

078 TC MAIN DSL # 3 CYL # 3 TEMP

079 TC MAIN DSL # 3 CYL # 4 TEMP

Table D1-M4

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.6 I/O Module D1-M5 Failure

Failure I/O Module D1-M5 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M5.

Detection 1. “D1-M5 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M5 Module

Test Procedure

1. Simulate D1-M5 failure by removing this module from the rack.

2. Verify the “D1-M5” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M5 to the rack.

Verified

Channel No. I/O Type Description

082 TC MAIN DSL # 3 CYL # 5 TEMP

083 TC MAIN DSL # 3 CYL # 6 TEMP

084 TC MAIN DSL # 3 CYL # 7 TEMP

085 TC MAIN DSL # 3 CYL # 8 TEMP

086 TC MAIN DSL # 3 CYL # 9 TEMP

087 TC MAIN DSL # 3 CYL # 10 TEMP

088 TC MAIN DSL # 3 CYL # 11 TEMP

Table D1-M5

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.7 I/O Module D1-M6 Failure

Failure I/O Module D1-M6 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M6.

Detection 1. “D1-M6 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M6 Module

Test Procedure

5. Simulate D1-M6 failure by removing this module from the rack.

6. Verify the “D1-M6” alarm is annunciated on the MCSC.

7. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

8. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M6 to the rack.

Verified

Channel No. I/O Type Description

089 TC MAIN DSL # 3 CYL # 12 TEMP

090 TC MAIN DSL # 4 CYL # 1 TEMP

091 TC MAIN DSL # 4 CYL # 2 TEMP

092 TC MAIN DSL # 4 CYL # 3 TEMP

093 TC MAIN DSL # 4 CYL # 4 TEMP

094 TC MAIN DSL # 4 CYL # 5 TEMP

095 TC MAIN DSL # 4 CYL # 6 TEMP

Table D1-M6

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.8 I/O Module D1-M7 Failure

Failure I/O Module D1-M7 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M7.

Detection 1. “D1-M7 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M7 Module

Test Procedure

9. Simulate D1-M7 failure by removing this module from the rack.

10. Verify the “D1-M7” alarm is annunciated on the MCSC.

11. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

12. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M7 to the rack.

Verified

Channel No. I/O Type Description

098 TC MAIN DSL # 4 CYL # 7 TEMP

099 TC MAIN DSL # 4 CYL # 8 TEMP

100 TC MAIN DSL # 4 CYL # 9 TEMP

101 TC MAIN DSL # 4 CYL # 10 TEMP

102 TC MAIN DSL # 4 CYL # 11 TEMP

103 TC MAIN DSL # 4 CYL # 12 TEMP

104 TC MAIN DEISEL 1 EXHAUST TEMP

Table D1-M7

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.9 I/O Module D1-M8 Failure

Failure I/O Module D1-M8 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D1-M8.

Detection 1. “D1-M8 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D1-M8 Module

Test Procedure

13. Simulate D1-M8 failure by removing this module from the rack.

14. Verify the “D1-M8” alarm is annunciated on the MCSC.

15. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

16. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D1-M8 to the rack.

Verified

Channel No. I/O Type Description

105 TC MAIN DEISEL 2 EXHAUST TEMP

106 TC MAIN DEISEL 3 EXHAUST TEMP

107 TC MAIN DEISEL 4 EXHAUST TEMP

Table D1-M8

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.10 Profinet Scanner Module PSM 2 Failure

Failure PSM 2 fails. This is the communications interface for I/O Modules D2-

M1, D2-M2, D2-M3, D2-M4, D2-M5.

Effect There will no communications to the above I/O Modules. (See the failure cases for the individual modules for I/O data points affected).

Detection 1. “PSM 2 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace PSM 2 Module

Test Procedure 1. Simulate PSM 2 failure by removing power to the PSM.

2. Verify the “PSM 2 Fail” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after restoring power to PSM

2.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.11 I/O D2-M1 Failure

Failure I/O Module D2-M1 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D2-M1.

Detection 1. “D2-M1 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D2-M1 Module

Test Procedure

1. Simulate D2-M1 failure by removing this module from the rack.

2. Verify the “D2-M1” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D2-M1 to the rack.

Verified

Channel No. I/O Type Description

113 RTD P PRPLN MTR COMM FLD TEMP

114 RTD S PRPLN MTR COMM FLD TEMP

115 RTD P PRPLN MTR SHNTFLD TEMP

116 RTD S PRPLN MTR SHNTFLD TEMP

Table D2-M1

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.12 I/O Module D2-M2 Failure

Failure I/O Module D2-M2 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D2-M2.

Detection 1. “D2-M2 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D2-M2 Module

Test Procedure

1. Simulate D2-M2 failure by removing this module from the rack.

2. Verify the “D2-M2” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D2-M2 to the rack.

Verified

Channel No. I/O Type Description

117 RTD P PRPLN MTR AFT THR BRG TEMP

118 RTD S PRPLN MTR AFT THR BRG TEMP

119 RTD P PRPLN MTR FWD THR BRG TEMP

120 RTD S PRPLN MTR FWD THR BRG TEMP

Table D2-M2

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.13 I/O Module D2-M3 Failure

Failure I/O Module D2-M3 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D2-M3.

Detection 1. “D2-M3 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D2-M3 Module

Test Procedure

1. Simulate D2-M3 failure by removing this module from the rack.

2. Verify the “D2-M3” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D2-M3 to the rack.

Verified

Channel No. I/O Type Description

121 RTD P PRPLN MTR FWD JNL BRG TEMP

122 RTD S PRPLN MTR FWD JNL BRG TEMP

123 RTD P PRPLN MTR AFT JNL BRG TEMP

124 RTD S PRPLN MTR AFT JNL BRG TEMP

Table D2-M3

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.14 I/O Module D2-M4 Failure

Failure I/O Module D2-M4 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D2-M4.

Detection 1. “D2-M4 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D2-M4 Module

Test Procedure

1. Simulate D2-M4 failure by removing this module from the rack.

2. Verify the “D2-M4” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D2-M4 to the rack.

Verified

Channel No. I/O Type Description

125 RTD P PRPLN MTR COOLING AIR TEMP

126 RTD S PRPLN MTR COOLING AIR TEMP

127 RTD NO. 1 DSL LUBO TEMP

128 RTD NO. 2 DSL LUBO TEMP

Table D2-M4

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.15 I/O Module D2-M5 Failure

Failure I/O Module D2-M5 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D2-M5.

Detection 1. “D2-M5 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D2-M5 Module

Test Procedure

5. Simulate D2-M5 failure by removing this module from the rack.

6. Verify the “D2-M5” alarm is annunciated on the MCSC.

7. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

8. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D2-M5 to the rack.

Verified

Channel No. I/O Type Description

129 RTD NO. 3 DSL LUBO TEMP

130 RTD NO. 4 DSL LUBO TEMP

131 RTD NO. 1 DSL J.W. HIGH TEMP

132 RTD NO. 2 DSL J.W. HIGH TEMP

Table D2-M5

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.16 Profinet Scanner Module PSM 3 Failure

Failure PSM 3 fails. This is the communications interface for I/O Modules D3-

M1, D3-M2, D3-M3, D3-M4, D3-M5.

Effect There will no communications to the above I/O Modules. (See the failure cases for the individual modules for I/O data points affected).

Detection 1. “PSM 3 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace PSM 3 Module

Test Procedure 6. Simulate PSM 3 failure by removing power to the PSM.

7. Verify the “PSM 3 Fail” alarm is annunciated on the MCSC.

8. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

9. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

10. Verify the alarm clears on the MCSC after restoring power to PSM

3.

Verified

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.17 I/O Module D3-M1 Failure

Failure I/O Module D3-M1 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D3-M1.

Detection 1. “D3-M1 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D3-M1 Module

Test Procedure

1. Simulate D3-M1 failure by removing this module from the rack.

2. Verify the “D3-M1” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D3-M1 to the rack.

Verified

Channel No. I/O Type Description

133 RTD NO. 3 DSL J.W. HIGH TEMP

134 RTD NO. 4 DSL J.W. HIGH TEMP

135 RTD GEN NO. 1 WINDING TEMP # 1

136 RTD GEN NO. 1 WINDING TEMP # 2

Table D3-M1

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.18 I/O D3-M2 Failure

Failure I/O Module D3-M2 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D3-M2.

Detection 1. “D3-M2 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D3-M2 Module

Test Procedure

1. Simulate D3-M2 failure by removing this module from the rack.

2. Verify the “D3-M2” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D3-M2 to the rack.

Verified

Channel No. I/O Type Description

137 RTD GEN NO. 1 WINDING TEMP # 3

138 RTD GEN NO. 2 WINDING TEMP # 1

139 RTD GEN NO. 2 WINDING TEMP # 2

140 RTD GEN NO. 2 WINDING TEMP # 3

Table D3-M2

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.19 I/O D3-M3 Failure

Failure I/O Module D3-M3 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D3-M3.

Detection 1. “D3-M3 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D3-M3 Module

Test Procedure

1. Simulate D3-M3 failure by removing this module from the rack.

2. Verify the “D3-M3” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D3-M3 to the rack.

Verified

Channel No. I/O Type Description

141 RTD GEN NO. 3 WINDING TEMP # 1

142 RTD GEN NO. 3 WINDING TEMP # 2

143 RTD GEN NO. 3 WINDING TEMP # 3

144 RTD GEN NO. 4 WINDING TEMP # 1

Table D3-M3

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.20 I/O Module D3-M4 Failure

Failure I/O Module D3-M4 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D3-M4.

Detection 1. “D3-M4 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D3-M4 Module

Test Procedure

1. Simulate D3-M4 failure by removing this module from the rack.

2. Verify the “D3-M4” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D3-M4 to the rack.

Verified

Channel No. I/O Type Description

145 RTD GEN NO. 4 WINDING TEMP # 2

146 RTD GEN NO. 4 WINDING TEMP # 3

147 RTD PORT STERN TUBE BEARING TEMP

148 RTD STBD STERN TUBE BEARING TEMP

Table D3-M4

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.21 I/O Module D3-M5 Failure

Failure I/O Module D3-M5 fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D3-M5.

Detection 1. “D3-M5 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D3-M5 Module

Test Procedure

1. Simulate D3-M5 failure by removing this module from the rack.

2. Verify the “D3-M5” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D3-M5 to the rack.

Verified

Channel No. I/O Type Description

149 RTD NO. 1 DSL J.W. LOW TEMP

150 RTD NO. 2 DSL J.W. LOW TEMP

151 RTD NO. 3 DSL J.W. LOW TEMP

152 RTD NO. 4 DSL J.W. LOW TEMP

Table D3-M5

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.22 Profinet Scanner Module PSM 4 Failure

Failure PSM 4 fails. This is the communications interface for I/O Modules D4-

M1, D4-M2, D4-M3, D4-M4, D4-M5.

Effect There will be no communications to the above I/O Modules. (See the failure cases for the individual modules for I/O data points affected).

Detection 1. “PSM 4 Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace PSM 4 Module

Test Procedure 1. Simulate PSM 4 failure by removing power to the PSM.

2. Verify the “PSM 4 Fail” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after restoring power to PSM

4.

Verified e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.23 I/O Module D4-M1A Failure

Failure I/O Module D4-M1A fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D4-M1A.

Detection 1. “D4-M1A Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D4-M1A Module

Test Procedure

1. Simulate D4-M1A failure by removing this module from the rack.

2. Verify the “D4-M1A” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D4-

M1A to the rack.

Verified

Table D4-M1A

Channel No. I/O Type Description

701 DO PORT PRPLN SYSTEM POWER LIMITING

702 DO PORT BARRING GEAR BOT STOWED

DO PORT PRPLN MOTOR LUBE HEAD TANK

LEVEL LOW

704 DO ABNORMAL ASSIGNMENT PORT SCR

705 DO NO. 1 STEERING GEAR MOTOR RUNNG

706 DO NO. 1 STEERING GEAR CKT BKR OPEN

707 DO NO. 1 STEERING GEAR PHASE FAILURE

708 DO PORT PRPLN MOTOR L.O. LEVEL LOW

DO STARBOARD PRPLN SYSTEM POWER

LIMITING

710 DO STARBOARD BARRING GEAR NOT STOWED

DO STARBOARD PRPLN MOTOR LUBE HEAD

TANK LEVEL LOW

712 DO ABNORMAL ASSIGNMENT STARBOARD SCR

713 DO NO. 2 STEERING GEAR MOTOR RUNNING

714 DO NO. 2 STEERING GEAR CKT BKR OPEN

715 DO NO. 2 STEERING GEAR PHASE FAILURE

716 DO STARBOARD PRPLN MOTOR L.O. LEVEL LOW

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.24 I/O D4-M1B Failure

Failure I/O Module D4-M1B fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D4-M1B.

Detection 1. “D4-M1B Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D4-M1B Module

Test Procedure

1. Simulate D4-M1B failure by removing this module from the rack.

2. Verify the “D4-M1B” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D4-

M1B to the rack.

Verified

Channel No. I/O Type Description

717 DO FIRE PUMP NO. 1 RUNNING

718 DO FIRE PUMP NO. 1 SUCTION VALVE OPEN

719 DO FIRE PUMP NO. 1 SUCTION VALVE CLOSED

720 DO FIRE PUMP NO. 1 DISCHARGE VALVE OPEN

721 DO FIRE PUMP NO. 1 DISCHARGE VALVE CLOSED

722 DO ENGINEER TROUBLE HORN/ETEA 700E

725 DO FIRE PUMP NO. 2 RUNNING

726 DO FIRE PUMP NO. 2 SUCTION VALVE OPEN

727 DO FIRE PUMP NO. 2 SUCTION VALVE CLOSED

728 DO FIRE PUMP NO. 2 DISCHARGE VALVE OPEN

729 DO FIRE PUMP NO. 2 DISCHARGE VALVE CLOSED

Table D4-M1B

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.25 I/O D4-M2A Failure

Failure I/O Module D4-M2A fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D4-M2A.

Detection 1. “D4-M2A Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D4-M2A Module

Test Procedure

1. Simulate D4-M2A failure by removing this module from the rack.

2. Verify the “D4-M2A” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D4-

M2A to the rack.

Verified

Channel No. I/O Type Description

733 DO WATERTIGHT DOOR NO. 1 OPEN

734 DO WATERTIGHT DOOR NO. 2 OPEN

735 DO WATERTIGHT DOOR NO. 3 OPEN

736 DO WATERTIGHT DOOR NO. 4 OPEN

737 DO WATERTIGHT DOOR NO. 1 CLOSED

738 DO WATERTIGHT DOOR NO. 2 CLOSED

739 DO WATERTIGHT DOOR NO. 3 CLOSED

740 DO WATERTIGHT DOOR NO. 4 CLOSED

741 DO PORT PRPLN MOTOR L.O. PUMP RUNNING

742 DO

STARBOARD PRPLN MOTOR L.O. PUMP

RUNNING

743 DO MCSC IN CONTROL

744 DO PILOT HOUSE IN CONTROL

745 DO WINCH HOUSE IN CONTROL

746 DO

PILOT HOUSE IN CONTROL

(BOW THRUSTER)

747 DO

WINCH HOUSE IN CONTROL

(BOW THRUSTER)

Table D4-M2A

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.26 I/O Module D4-M2B Failure

Failure I/O Module D4-M2B fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D4-M2B.

Detection 1. “D4-M2B Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D4-M2B Module

Test Procedure

1. Simulate D4-M2B failure by removing this module from the rack.

2. Verify the “D4-M2B” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D4-

M2B to the rack.

Verified

Channel No. I/O Type Description

749 DO AC COMP. NO. 1 RUNNING

750 DO AC COMP. NO. 2 RUNNING

751 DO AC COMP. NO. 3 RUNNING

752 DO THRUSTER MOTOR COOLING PUMP RUNNING

753 DO EMERGENCY GENERATOR RUNNING

754 DO NO. 1 BILGE LEVEL HIGH

755 DO

ENGINEER NEEDS ASSISTANCE (MTD. IN

ENG. ROOM)

756 DO PRINTER RELAY

757 DO ENGINEERING TROUBLE SUMMARY

758 DO FIRE SUMMARY

759 DO BILGE LEVEL SUMMARY

760 DO ENGINEER TROUBLE HORN

761 DO STEERING GEAR MALFUNCTION

762 DO PROPULSION MOTOR MALFUNCTION

763 DO DIESEL GENERATOR MALFUNCTION

764 DO LOW LEVEL FOR FUEL SERVICE TANK

Table D4-M2B

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.27 I/O Module D4-M3A Failure

Failure I/O Module D4-M3A fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D4-M3A.

Detection 1. “D4-M3A Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D4-M3A Module

Test Procedure

1. Simulate D4-M3A failure by removing this module from the rack.

2. Verify the “D4-M3A” alarm is annunciated on the MCSC.

3. Verify the “Engineers Trouble” alarm sounds on the EAP’s.

4. Verify there is no loss or interruption of Monitor and Alarm functionality, except for the affected I/O Module.

5. Verify the alarm clears on the MCSC after returning Module D4-

M3A to the rack.

Verified

Channel No. I/O Type Description

765 DO ENGEERING TROUBLE SUMAMRY

766 DO FIRE SUMMARY

767 DO BILGE LEVEL SUMMARY

768 DO ENGINEER TROUBLE HORN

769 DO STEERING GEAR MALFUNCTION

770 DO PROPULSION MOTOR MALFUNCTION

771 DO DIESEL GENERATOR MALFUNCTION

772 DO LOW LEVEL FOR FUEL SERVICE TANK

773 DO ENGINEERING TROUBLE SUMMARY

774 DO FIRE SUMMARY

775 DO BILGE LEVEL SUMMARY

776 DO ENGEER TROUBLE HORN

777 DO STEERING GEAR MALFUNCTION

778 DO PROPULSION MOTOR MALFUNCTION

779 DO DIESEL GENERATOR MALFUNCTION

780 DO LOW LEVEL FOR FUEL SERVICE TANK

Table D4-M3A

S e e A

B S H o u s to n L e tt e r R e f T D a te d

-J

A N

-2

7.28 I/O Module D4-M3B Failure

Failure I/O Module D4-M3B fails.

Effect I/O data points monitored by this module will be disabled. A list of these points is shown in Table D4-M3B.

Detection 1. “D4-M3B Fail” alarm is annunciated on the MCSC.

2. “Engineers Trouble” alarm will sound on the EAP’s.

Alternatives The affected points will need to be monitored locally until problem is corrected.

Correction Replace D4-M3B Module

Test Procedure

1. Simulate D4-M3B failure by removing this module from the rack.

2. Verify the “D4-M3B” alarm is annunciated on the MCSC.

3. Verify the “Engineers…