Worked Example: Emergency Generator Feeder Cable Sizing — The Piper Alpha Lesson

On 6 July 1988, the Piper Alpha oil platform in the North Sea exploded, killing 167 of 226 workers — the deadliest offshore oil disaster in history. A condensate leak from a blind flange on a pump that was under maintenance ignited, causing a series of explosions that destroyed the platform’s control room and accommodation module.

A critical factor in the death toll was the total loss of emergency power. The emergency diesel generator was located adjacent to the production module and was disabled by the initial explosion. But even on platforms where generators survive the initial event, a documented failure mode haunts emergency power systems worldwide: the generator starts, the essential loads transfer, and then — within seconds — the generator trips on under-frequency because the feeder cable voltage drop under simultaneous motor starting causes the generator to stall.

When every fire pump, bilge pump, emergency ventilation fan, and UPS system starts simultaneously after a blackout (a “black start”), the cable sees 3–5× the normal running current for 10–30 seconds. If the generator feeder cable was sized only for steady-state running current, the transient voltage drop can exceed 15%, causing the generator’s automatic voltage regulator to saturate, frequency to drop below 47 Hz, and the under-frequency relay to trip. The platform goes dark again — permanently.

Size the feeder cable from a 500 kVA emergency diesel generator to the essential services main switchboard (MSB) in an industrial facility.

Essential loads on the MSB:

The generator’s rated current at full load:

I_n = S / (√3 × V) — (Eq. 1)

I_n = 500,000 / (√3 × 415)

I_n = 695 A

At 0.8 power factor, the real power output is 500 × 0.8 = 400 kW. The total connected essential load running current (331 A) is well within the generator’s 695 A capacity. But this steady-state view is dangerously misleading.

During a black-start event, ALL essential loads start simultaneously when the generator picks up and the automatic transfer switch (ATS) closes. The cable must carry the sum of all starting currents:

I_black-start = Σ I_start = 360 + 180 + 110 + 48 + 104 + 120 = 922 A — (Eq. 2)

This is 2.8× the total running current and 1.33× the generator’s rated current. The transient lasts 8–15 seconds until the largest motors (fire pump, bilge pump) reach full speed.

With proper load management (staggered starting with 5-second intervals between motor groups), the peak current can be reduced:

I_staggered ≈ I_{fire-pump-start} + I_{other-running} = 360 + (30 + 44 + 48 + 69 + 80) = 631 A — (Eq. 3)

Even with staggered starting, the cable sees 631 A for the first 8 seconds.

First, determine the continuous current rating requirement. The cable must carry the generator’s full rated current (695 A), not just the current load, because additional essential loads may be connected in the future.

Derating factors per IEC 60364-5-52:

Ambient temperature at 45°C, XLPE 90°C rated cable. From IEC 60364-5-52, Table B.52.14, Row 45°C, Column 90°C:

C_a = 0.87

Grouping: 3 circuits on perforated tray, single layer, touching. From Table B.52.17, Row: single layer on tray, 3 circuits:

C_g = 0.82

Combined derating factor:

C_total = C_a × C_g = 0.87 × 0.82 = 0.713 — (Eq. 4)

Required tabulated current rating:

I_t ≥ 695 / 0.713 = 975 A — (Eq. 5)

From IEC 60364-5-52, Table B.52.4 (Method E, XLPE, copper, 3-core):

No single cable is large enough. We need parallel cables.

Using two cables in parallel per phase, each cable carries half the current. Required rating per cable:

I_t-per-cable ≥ 975 / 2 = 488 A — (Eq. 6)

From IEC 60364-5-52, Table B.52.4:

Selected: 2 × 240 mm² XLPE copper cables in parallel per phase.

For 2 × 240 mm² XLPE copper cables, the combined impedance per metre is halved. From IEC 60364-5-52 Table B.52.1 for 240 mm²:

R = 0.0907 mΩ/m, X = 0.078 mΩ/m (at 90°C operating temperature)

For two parallel cables:

R_parallel = 0.0907 / 2 = 0.0454 mΩ/m

X_parallel = 0.078 / 2 = 0.039 mΩ/m

Voltage drop at rated current (695 A) using the full impedance method per IEC 60364-5-52, Clause 525:

ΔV = √3 × I × L × (R cosφ + X sinφ) — (Eq. 7)

ΔV = √3 × 695 × 80 × (0.0454 × 10⁻³ × 0.8 + 0.039 × 10⁻³ × 0.6)

ΔV = 1.732 × 695 × 80 × (0.0000363 + 0.0000234)

ΔV = 96,278 × 0.0000597

ΔV = 5.75 V

ΔV% = 5.75 / 415 × 100 = 1.39%

At rated running current, the voltage drop is 1.39% — well within the 3% limit recommended for generator feeders by IEEE 446 (Orange Book). PASS.

This is the check that separates a properly designed generator feeder from one that will fail in an emergency. At the staggered black-start peak current of 631 A:

ΔV_start = √3 × 631 × 80 × (0.0454 × 10⁻³ × 0.5 + 0.039 × 10⁻³ × 0.866) — (Eq. 8)

(Using PF = 0.5 during motor starting, typical for induction motors at locked rotor)

ΔV_start = 1.732 × 631 × 80 × (0.0000227 + 0.0000338)

ΔV_start = 87,418 × 0.0000565

ΔV_start = 4.94 V

ΔV_start% = 4.94 / 415 × 100 = 1.19%

At worst-case simultaneous start (922 A):

ΔV_simul = √3 × 922 × 80 × 0.0000565

ΔV_simul = 7.22 V = 1.74%

Both starting scenarios are well within the 10% transient voltage drop limit. The 2 × 240 mm² configuration provides adequate margin.

The generator’s prospective short-circuit current at its terminals:

I_k” = I_n / X”_d = 695 / 0.12 = 5,792 A — (Eq. 9)

Verify the 240 mm² cable can withstand this for the MCCB clearing time. Using the adiabatic equation per IEC 60364-4-43, Clause 434.5.2:

k²S² ≥ I²t — (Eq. 10)

For XLPE copper cable: k = 143. Each parallel cable carries half the fault current.

k²S² = 143² × 240² = 20,449 × 57,600 = 1,177,862,400 A²s

At I_k”/2 = 2,896 A per cable, with MCCB clearing in 0.1 s:

I²t = 2,896² × 0.1 = 838,682 A²s

838,682 A²s << 1,177,862,400 A²s — PASS with very large margin.

Selected: 2 × 240 mm² XLPE copper, 4-core, per phase on perforated cable tray. Both cables identical length (80 m), same route.

The governing factor is continuous current capacity. No single cable available in the IEC table range can carry the generator’s full 695 A rated current after derating for 45°C ambient and grouping. Parallel cables are mandatory, and the parallel cable rules (equal length, same route, same cross-section) must be strictly enforced.

The Piper Alpha disaster was primarily caused by permit-to-work failures and the absence of automatic deluge activation. However, the electrical engineering lessons are universally applicable:

• Size generator feeders for the generator, not the load — the cable must carry the full generator rated current even if current loads are lower, because future loads will be added
• Always check voltage drop at black-start current — this is the check that most designs omit, and it is the check that causes emergency power to fail when needed most
• Implement load management — staggered motor starting (fire pump first, then bilge, then HVAC) reduces peak current by 30–40% and dramatically improves generator stability
• Locate the generator and its feeder route in a separate fire zone — no cable sizing will help if the cable route is destroyed by the event it’s supposed to protect against
• Test black-start annually — a simulated blackout test verifies that the cable, generator, and load management system all work together under realistic transient conditions