Originally Posted by
max motor
Would this incident still have happened if each Back Up Generator had it's own, completely independent, Converter?
It does appear that the backup generator/converter system was involved and may have been the root cause of this sequence of events. If so, there are two possible solutions: Provide separation within the backup system so as to eliminate a single fault from taking both main AC buses with it. Or make ELMS smarter so as to clear faults with greater selectivity and not disconnect unfaulted sources and buses.
It all comes down to certification costs. While redesigning the backup system to provide additional channel separation would seem to be a more sound solution, there is a strong motive to 'fix it in software'. So I'm betting on a patch to ELMS.