(a) General. (1) All main boilers, regardless of intended mode of operation, must be provided with the automatic safety trip control system(s) of paragraphs (h)(1), (h)(2)(i) and (ii), and (i) of this section to prevent unsafe conditions after light off.

(2) Manual alternate control of boilers must be located at the boiler front.

(3) A fully automatic main boiler must include—

(i) Automatic combustion control;

(ii) Programming control;

(iii) Automatic feedwater control;

(iv) Safety controls; and

(v) An alarm system.

(4) Following system line-up and starting of auxiliaries, fully automatic main boilers must only require the operator to initiate the following sequences:

(i) Boiler pre-purge.

(ii) Trial for ignition of burners subsequent to successful initial burner light-off.

(iii) Normal shutdown.

(iv) Manual safety trip control operation.

(v) Adjustment of primary control setpoints.

(5) All requirements for programming control subsystems and safety control systems must be met when a boiler—

(i) Automatically sequences burners;

(ii) Is operated from a location remote from the boiler front; or

(iii) Is fully automatic.

(6) Where light oil pilots are used, the programming control and burner safety trip controls must be provided for the light oil system. Trial for ignition must not exceed 15 seconds and the main burner trial for ignition must not proceed until the pilot flame is proven.

(b) Feedwater control. Automatic feedwater control subsystems must sense, at a minimum, boiler water level and steam flow.

(c) Combustion control. Automatic combustion control subsystems must provide—

(1) An air/fuel ratio which ensures complete combustion and stable flame with the fuel in use, under light off, steady state, and transient conditions; and

(2) Stable boiler steam pressure and outlet temperatures under steady state and transient load conditions; and

(3) A low fire interlock to prevent high firing rates and superheater damage during boiler warm up.

(d) Programming control. The programming control must provide a programed sequence of interlocks for the safe ignition and normal shutdown of the boiler burners. The programming control must prevent ignition if unsafe conditions exist and must include the following minimum sequence of events and interlocks:

(1) Prepurge. Boilers must undergo a continuous purge of the combustion chamber and convecting spaces to make sure of a minimum of 5 changes of air. The purge must not be less than 15 seconds in duration, and must occur immediately prior to the trial for ignition of the initial burner of a boiler. All registers and dampers must be open and an air flow of at least 25 percent of the full load volumetric air flow must be proven before the purge period commences. The prepurge must be complete before trial for ignition of the initial burner.

(2) Trial for ignition and ignition. (i) Only one burner per boiler is to be in trial for ignition at any time.

(ii) Total boiler air flow during light off must be sufficient to prevent pocketing and explosive accumulations of combustible gases.

(iii) The burner igniter must be in position and proven energized before admission of fuel to the boiler. The igniter must remain energized until the burner flame is established and stable, or until the trial for ignition period ends.

(iv) The trial for ignition period must be as short as practical for the specific installation, but must not exceed 15 seconds.

(v) Failure of the burner to ignite during a trial for ignition must automatically actuate the burner safety trip controls.

(3) Post-purge. (i) Immediately after normal shutdown of the boiler, an automatic purge of the boiler equal to the volume and duration of the prepurge must occur.

(ii) Following boiler safety trip control operation, the air flow to the boiler must not automatically increase. Post purge in such cases must be under manual control.

(e) Burner fuel oil valves. Each burner must be provided with a valve that is—

(1) Automatically closed by the burner or boiler safety trip control system; and

(2) Operated by the programming control or combustion control subsystems, as applicable.

(f) Master fuel oil valves. Each boiler must be provided with a master fuel oil valve to stop fuel to the boiler automatically upon actuation by the boiler safety trip control system.

(g) Valve closure time. The valves described in paragraphs (e) and (f) of this section must close within 4 seconds of automatic detection of unsafe trip conditions.

(h) Burner safety trip control system. (1) Each burner must be provided with at least one flame detector.

(2) The burner valve must automatically close when—

(i) Loss of burner flame occurs;

(ii) Actuated by the boiler safety trip control system;

(iii) The burner is not properly seated or in place; or

(iv) Trial for ignition fails, if a programming control is provided.

(i) Boiler safety trip control system. (1) Each boiler must be provided with a safety trip control system that automatically closes the master and all burner fuel oil valves upon—

(i) Boiler low-low water level;

(ii) Inadequate boiler air flow to support complete combustion;

(iii) Loss of boiler control power;

(iv) Manual safety trip operation; or

(v) Loss of flame at all burners.

(2) The low-low water level safety trip control must account for normal vessel motions and operating transients.

[CGD 81-030, 53 FR 17838, May 18, 1988, as amended by USCG-2002-13058, 67 FR 61278, Sept. 30, 2002]