Human error and poor Boiler maintenance are the number one causes of combustion related accidents in boilers each year, according to the National Board of Boiler and Pressure Vessel Inspectors. The majority of these can be prevented with appropriate training. While there are numerous circumstances that can cause explosions, fires and outages, a split second decision by a few staff members may determine whether or not employees are killed or injured, and whether or not thousands have a job in the morning.
It would be impossible to list every boiler or fuel system-related upset scenario and the appropriate methods to deal with them. However, below are three case studies that discuss common issues that have actually occurred. These examples are presented as a basis to help stimulate the most important training you can provide at your facility, “Emergency Upset Drills.” Training has various meanings to different people but there is one issue with no room for discussion; regular training is a requirement by law in every state and within every boiler code.
The ASME (American Society of Mechanical Engineers) suggests that good training programs include some element of emergency upset drills. Please carefully review these cases, share them with fellow employees and maybe help prevent a horrible accident at your facility. Ask everyone to consider if these situations happened, how they should best be handled.
Case No. 1: A high-pressure steam boiler, water-tube style. The boiler is a D type configuration, rated at 300 PSIG Maximum allowable working pressure.
Application: Providing process steam at 185 PSIG.
You have a modulating firing rate on your boiler and it is operating at 75 percent capacity. There are three water level indicators; a drum level transmitter; gauge cocks and a gauge glass. The drum level transmitter and the gauge glass were in agreement last week when you checked the boiler. Now the gauge glass indicates a high water level and the transmitter indicates a dangerously low level. So where do you put your trust?
The first order of business is to determine the true water level. Since the boiler may be in a low water condition, time is of the essence. The initial action is to manually open the lowest gauge cock (try cock) to see if water comes out. If it does, the water level in the boiler is high enough to be safe for now. If the gauge cock cannot be operated or if steam and/or nothing discharges from the gauge cock, the boiler should be shutdown immediately using established original equipment manufacturer’s (OEM) safe emergency shutdown procedures.
Assuming that water came out of the lowest gauge cock, the next action would be to blow down the water column, and then the gauge glass. To achieve this process, observe the water level in the gauge glass. The column drain valve should be opened and you should determine if the gauge glass is responding by loss of water in the gauge glass. Close the drain valve and water should return rapidly in the gauge glass. It is also necessary to ensure that no lines are plugged and that the water level is responding, by opening the gauge glass drain valve.
If the water rises rapidly in the gauge glass, to a level below the original level, your gauge glass is most likely now providing a true boiler water level. With the gauge glass now indicating a proper water level and the drum transmitter showing a low water condition, the drum transmitter is the next, most likely area to look at more closely. The next step would be to repair, replace or possibly re-calibrate the drum transmitter.
The drum level transmitter or gauge glass indication (even both) could have been incorrect. The try cocks give a definitive reading of the water level. The steam or water connecting piping to either the water column or the gauge glass connections could have become blocked with sediment and sometimes lead to more than one inaccurate water reading.
Make a note about the water level discrepancy in the boilers logbook so that other operators can be made aware of the problem. Ensure blow downs are occurring daily or even every shift. Schedule maintenance as soon as possible to clean possible reoccurring sediment. Occasionally, transmitter-sensing lines may become plugged with sediment and must also be checked regularly to ensure they are clean and capable of functioning.
Case No. 2: Safety Valve Run Away Load “Pop:” High Pressure Steam Boiler – Fire tube 150 PSIG; Application: Produces process steam at 110 PSIG.
The main process boiler has been running at 100 percent of firing capacity all day long. As the second shift operator, you have completed your shift change checks and everything is normal. The production manager tells you that the production area is going to be cutting back during this shift. The boiler-firing rate is being controlled by a modulating pressure controller, which controls the fate of 20 different process reactors that are using steam.
Suddenly, one of the two safety valves “pops” at its proper set point. Steam escapes with a deafening roar, and the boiler pressure continues to rise in spite of the valve relieving. Looking at the second safety valve you see, its set point has been exceeded without it opening. The pressure is now 130 psig and has exceeded the high-pressure steam limit control set point. The burner is still on and firing.
Following OEM’s established safe shutdown procedures, take the boiler off line immediately at the fuel source. If provided, press the emergency stop button. Close, lock and tag all combustion train components. Now, wait until the pressure in the boiler has decreased to about 5 psig and then open the boiler vent. This will prevent a vacuum from being formed in the boiler.
You have a number of issues and possible problems that need to be addressed. Of course, the most pressing is why both the high-pressure steam limit didn’t shut down firing and why the second relief valve didn’t open. Other related issues are a possible failure of the firing rate controller and the possibility that the process control system has slammed shut 20 process valves at once, making for an immediate instantaneous reduction in load with the boiler system not able to respond as quickly.
The first safety valve lifted due to over pressurization as it was designed to do. Possible causes are the sudden closing of process valves, or failure of the firing control to reduce the firing rate with the loss of load. The boiler firing control should have at least gone to a low fire position with a sudden reduction in load. Most steam boilers have a high-pressure limit controller. This is designed to shut down burner firing if a pressure set point is exceeded. In this case, the control didn’t work. In many cases, our firm finds these important safety interlocks have failed. Many are found to have been installed without siphon loops (designed to protect the switch from steam). When this mistake is made often, the sensing diaphragms become unresponsive and don’t let the switch do its job. In other cases, these controls are set inappropriately. Your site should decide a strategy for where this device should be set to lift. Some installations have them set before, while others are after.
Test, reset, and possibly replace the high steam pressure interlock switch. Verify that it is installed as per the manufacturer’s requirements. Both safety valves should be replaced or at least tested and repaired, by a qualified and certified valve company. The second valve is a major concern since it never lifted.
The burner firing controls should be checked for proper operation and connection. If the modulating firing rate controller is found to be at fault, remember that fuel air ratios need to be “set” by experienced burner tuning technicians. Linkage set screws or locking nuts and fixtures can come loose through vibration or intentional “tinkering”. If it is determined that linkages are out of adjustment, they must only be corrected by someone with the proper experience and flue gas measurement tools.
The firing rate modulating motor must be checked for “full range” of motion, which can be accomplished by attempting a dry light off. This process includes closing the firing gas valve and pilot supply, starting light off sequence and observing the motor through purge and low fire positioning. Make sure that process engineers consider the closing rate of control valves and what this may do to a steam system that can’t respond as quickly.
Case No. 3: “Dry Fire” Could Mean Big Time Danger. High Pressure “D” Type Water Tube Boiler, with a de-aerator tank, and two feed water pumps (primary and spare). Application: Produces process steam at 135 PSIG.
Production is being pushed because your company has just received a new order and the delivery date is tight. Everyone is working hard to meet their shift quotas. The boiler is running at 100 percent high fire day after day. Everything has been operating smoothly when the boiler’s low water alarm sounds. Next, the boiler shuts down via the low water fuel cutoff. You check the gauge glass and the water is no longer visible. The feed water pump has failed and you see a wisp of smoke coming from one of the bearings. The boiler has been in a low water condition for at least 4 to 5 minutes.
Following OEM’s established safe shutdown procedures, shut down the boiler immediately at the electrical power and fuel sources. Note: Some boiler controls require keeping the combustion air fan operating for post purge. This also helps ensure gradual cooling and minimize risk of tube/shell metallurgy fatigue, warping, and/or damage. Close the feed water inlet valve, close, lock and tag all combustion train components, and shut off all electric feeds to boiler feed water systems. DO NOT, UNDER ANY CIRCUMSTANCE, ADD WATER.
Next, close the boiler stop valve where steam normally exits. Evacuate the immediate and adjacent premises, or perhaps a larger area, depending upon the boiler size. Giving the boiler enough time to cool sufficiently can take many hours; be patient! Now, wait until the pressure in the boiler has decreased to about 5 psig and then open the boiler vent. This will prevent a vacuum from being formed in the boiler. Allow the boiler to cool sufficiently and drain the boiler. Once the boiler is drained, close, lock and tag the bottom blow down valves. This is good practice and becomes very necessary when the blow down valve is piped with other boilers. Finally close, lock and tag all steam valves.
The feed water pump failed, which led to a low water condition. You should never introduce water to a hot boiler that is in a low water condition. The boiler may have hot heating surfaces exposed above the water level. Incoming water can immediately flash to steam when it hits these surfaces resulting in a catastrophic explosion. Even if incoming water does not flash into steam, the heating surfaces can become warped and distorted. Allowing the boiler to cool naturally will minimize the risk of this kind of damage to the boiler.
Open the boiler, and inspect the waterside and fireside for damage. It may also be necessary, and certainly prudent, to contact the site’s jurisdictional or insurance related boiler inspector and have them inspect for damage. Repair each damaged area as required; examples may include refractory breakdown, tube failures and ruptures. After repairs are complete, perform a hydrostatic pressure test of the boiler. These are usually done by a qualified contractor in the presence of your jurisdictional boiler inspector.
Although you may have a spare feed water pump, the primary must be fixed. Try to determine the cause of the bearing failure. For example, if the mechanical seal was leaking, it could have been the cause of the bearing damage. There are a variety of reasons that bearings fail including: improper or no lubrication to bearing, loss of cooling water if water cooled bearing housings, pump/motor/drive is out of alignment or perhaps the age and service life of the bearing.
Production will need to rely on another boiler until this one is properly fixed. This entire process may take days. Local practices vary but usually you will be able to operate only after you receive the jurisdictional inspector’s approval.
The three examples cited above routinely occur. If not handled properly, they can create catastrophic, history making events. Oftentimes, split second thinking from trained individuals makes the difference. Please understand the example responses provided are hypothetical. You need to work out what the best response is for your facility and equipment. The actions suggested will not be correct for every facility in every instance.
Regular training is required by law in the case of all boiler codes and laws. Training should include emergency upset drills that cause operations and maintenance staff to think through the kinds of situations presented above for their site’s actual equipment and conditions. This effort should be thorough and should not stop until everyone on every shift understands the correct responses for the chosen upset drill conditions.
Remember, this equipment only gives you one chance to make the right call. When that time happens, you want to make sure that you have prepared your people well with all of the best information possible.
Honeywell Combustion Safety has been in business since 1984. With engineers and staff members that sit on Code committees such as NFPA 56, NFPA 85, NFPA 86, and NFPA 87, our inside expertise is integrated within all of our practices and our global reach ensures that customers around the world are kept safe. Honeywell Combustion Safety offers Testing and Inspections, Engineering & Upgrades/Retrofits, Gas Hazards Management, Training, and Field Services for all industrial facilities and different types of fuel fired equipment. Contact Honeywell Combustion Safety at +1 216.749.2992 or visit www.combustionsafety.com for additional information.