Retrofit of Legacy SCADA Cabinet in Offshore Oil Platform, North Sea

Scenario

An aging offshore platform in the UK Continental Shelf (UKCS) replaced its 1990s Modicon TSX PLC with a modern Schneider Electric M580 ePAC for critical fire & gas (F&G) monitoring. Power is supplied via 240 V AC UPS (double-conversion, <2% THD), with strict SIL 2 compliance requirements per IEC 61511. Space is severely limited inside the hazardous-area-certified (ATEX Zone 2) cabinet; only compact 18 mm wide breakers are permitted. Salt-laden, high-humidity environment demands corrosion-resistant components and conservative derating.

Given Data

• Voltage: 240 V
• Nominal current of PLC: 8.7 A (including redundant power supply, F&G I/O, and HART multiplexers)
• Inrush factor: 6.2 (validated via oscilloscope capture during cold boot with all 32 analog inputs energized simultaneously)
• Total impedance: 0.085 Ω (includes 0.5 m of marine-grade tinned copper busbar + contact resistance in Ex d terminals)

Calculation

Using the Circuit Breaker Selector tool:

1. Inrush current = 8.7 A × 6.2 = 53.94 A
2. Tool applies a robust inrush-handling heuristic: breaker_rating = ceil(inrush_current ÷ 4.0) to ensure ≥4× Iₙ margin for sustained magnetic trip immunity — 53.94 A ÷ 4.0 = 13.49 A → next standard rating = 16 A.
3. Short-circuit capacity: 240 V ÷ 0.085 Ω = 2823.5 A = 2.8 kA.

Result and Decision

A Havells Ex-rated 16 A, B-curve, 10 kA Icu breaker (model HVL-EX-B16) was installed. Its 10 kA rating provides 3.5× margin over the 2.8 kA fault level, satisfying both IEC 60947-2 short-circuit performance and platform-specific P&ID requirements. The 16 A rating also accommodates 20% long-term derating for humidity/corrosion without compromising trip reliability. Third-party SIL verification confirmed the breaker’s PFDₐᵥg remains <10⁻³ when combined with the M580’s diagnostics.

Lesson

In safety-critical retrofits, inrush validation under worst-case operational conditions (e.g., all analog sensors powered simultaneously) is mandatory — the initial estimate using generic ‘5×’ would have yielded a 12 A breaker, which tripped twice during commissioning F&G loop tests. Real-world measurement prevented a costly 72-hour platform shutdown.