Main Engine Automatic Slowdown and Shutdown Systems

An automatic shutdown stops the main engine by cutting off the fuel supply when a serious fault occurs, preventing major or catastrophic damage.

An automatic slowdown reduces the engine speed to a preset safe level, reducing mechanical and thermal loading and allowing the developing fault to be corrected before it becomes critical.

Two Shutdown Parameters

1. Lube Oil (LO) Inlet Pressure Low-Low

• Why it is applied: To prevent serious mechanical damage to the engine's moving parts.
• A critical loss of lube oil pressure can cause the hydrodynamic oil film in the main, crankpin and crosshead bearings to break down.
• This can quickly result in bearing wipe, severe crankshaft scoring or seizure.

2. Engine Overspeed — typically 107–115% of Maximum Continuous Rating

• Why it is applied: To prevent severe structural damage to the engine.
• Excessive engine speed greatly increases centrifugal and inertial forces, which may cause the flywheel to burst, connecting rods to bend or break, and severe damage to the running gear.

Two Slowdown Parameters

1. Jacket Cooling Water (JCW) Outlet Temperature High — e.g. above 85–88°C

• Why it is applied: To reduce the thermal load on the combustion chamber components, such as the cylinder liner, cylinder cover and piston.
• Excessive temperature can cause thermal cracking and breakdown of the cylinder lubricating oil film, which may lead to piston scuffing and eventual seizure.

2. Scavenge Air Temperature High — e.g. above 65°C

• Why it is applied: An abnormally high scavenge air temperature may indicate a scavenge space fire or severe piston-ring blow-by.
• Slowing the engine reduces the fuel index and exhaust-gas energy, thereby reducing turbocharger speed.
• This reduces the supply of fresh air/oxygen to the scavenge space, helping to extinguish a scavenge fire while reducing internal temperatures.

Before testing any shutdown or slowdown parameter on a running engine:

• Inform the Duty Officer on the bridge and the Chief Engineer.
• Put the relevant channel on the Engine Safety System panel into “Test”, “Bypass” or “Override” mode, as applicable.
• This allows the alarm and safety logic to be verified without actually operating the shutdown/slowdown function and affecting the running engine.

1. Lube Oil Inlet Pressure Low-Low — Shutdown Test

• Method: Isolate the pressure transmitter/switch from the main lube oil line using its dedicated 3-way test valve.
• Slowly open the drain/vent side of the 3-way valve to bleed off the trapped oil pressure in the sensor line.
• Monitor the pressure gauge or digital readout while the pressure decreases.
• Verify that the alarm and shutdown logic operate at the specified low-low setpoint.
• After testing, close the drain and re-open the valve to the main lube oil line.

2. Engine Overspeed — Shutdown Test

• Method: Test electronically using the safety system's built-in overspeed simulation/test function. The engine should not be physically oversped.
• With the safety system in test mode, activate the “Overspeed Test” sequence.
• The system electronically lowers the overspeed trip setpoint to a value just below the engine's current running RPM.
• Verify that the system detects the simulated overspeed and initiates the shutdown logic, including the relevant relays and alarms.
• Alternatively, a frequency generator may be used to inject a high-frequency signal into the tachometer circuit to simulate an overspeed condition.

3. JCW Outlet Temperature High & Scavenge Air Temperature High — Slowdown Tests

• Method: Use a portable dry-block temperature calibrator to simulate the high-temperature condition.
• With the relevant channel bypassed, carefully remove the RTD or thermocouple sensor from its thermowell, keeping the thermowell in place to prevent water/air leakage.
• Insert the sensor into the dry-block calibrator.
• Slowly increase the calibrator temperature until the specified high-temperature slowdown setpoint is reached.
• Confirm that the alarm and slowdown logic activate on the safety panel.
• After verification, return the sensor to its correct housing.