- Emergency systems redundancy
- One classical stopping system (wired and with relays, without PLC’s) and one numerical stopping system (with PLC) controlling all stopping installations: wicket gate via emergency shutoff valves; roller gate via emergency closing
- 2 to 4 speed sensors
- redundant power supply from batteries (220 VDC)
- PLC redundancy (unit control, turbine governor, electrical protection, excitation)
- Two identical PLC’s (power supply, CPU, communication modules) in hot standby redundancy
- Communication redundancy
- Redundant process network – one network for each PLC
- Redundant fiber optic ring
- SCADA servers redundancy
- Two identical servers (hardware and software) with redundant power supplies, RAID HDD, UPS, in hot standby redundancy
- Transducers redundancy
- redundant critical sensors and transducers (ex. high pressure oil, high pressure air, temperatures…)
- Self diagnostics
- Auto detection of the faulty components and change over to the redundant equipment
- Alarms for the operation
- Safe emergency stoppage of the hydro units in case of the unit control failure
