Hydropower Commissioning — The Complete Field Engineer’s Guide to Testing, COD and Documentation

Hydropower commissioning is the most consequential phase of any hydel project. It is where years of civil construction, mechanical installation and electrical work are integrated and tested as a complete system for the first time — and where the consequences of inadequate preparation, poor documentation or incorrect sequencing are measured not in rework costs but in millions of dollars of penalty, damaged equipment worth years of project budget and careers on the line.

This guide covers hydropower commissioning from field experience — not textbook theory — including two real incidents where commissioning failures caused rotor damage and main transformer burnout, delayed Commercial Operation Date and triggered full documentary audits. The paper trail saved the engineers. It always does.

Testing vs Commissioning vs COD — The Distinction That Matters

The single most important concept in hydropower commissioning is one that most engineers only truly understand after their first major project — the fundamental difference between testing, commissioning and Commercial Operation Date. These three terms are used interchangeably in casual conversation and incorrectly in many technical documents, but they describe distinctly different activities with distinctly different accountability implications.

Testing is the verification that individual equipment and systems meet their specified performance requirements — component by component, system by system, in isolation. A transformer insulation resistance test is a test. A protection relay functional check is a test. A governor response simulation is a test. Each produces a specific measured result compared against a specific acceptance criterion defined in an IEC standard, a manufacturer’s specification or a project technical requirement.

Commissioning is the integrated process of bringing the complete plant from individually tested components to a verified operational system ready for commercial electricity generation. Commissioning requires all relevant testing to be complete — but commissioning is significantly broader than the sum of its tests. It involves energization sequences, system integration verification, performance guarantee testing against contracted output specifications and the formal sign-off of multiple independent parties including the owner, lender’s engineer and grid operator.

Commercial Operation Date is the formal contractual milestone — the specific date declared by the plant owner when the generating unit is certified ready for continuous commercial generation. For WAPDA-owned plants the declaration authority rests with WAPDA. For private sector IPP projects it rests with PPIB. COD triggers commercial Power Purchase Agreement payments. It also triggers penalty clauses for delay — penalties that in major hydel projects run into millions of dollars per day. Every day between a commissioning failure and recovered COD has a direct financial cost that every engineer on the project feels personally.

The Complete Quality Chain — From Manufacturer to Grid

Hydropower commissioning does not begin at the project site. It begins at the manufacturer’s facility — sometimes years before the first unit synchronizes to the grid. Understanding the complete quality chain from manufacturer selection through Commercial Operation Date is essential for any engineer responsible for commissioning hydel equipment.

Manufacturer Selection and Quality Audit

The commissioning quality chain begins with manufacturer selection — a process that involves physically visiting the manufacturing facility, reviewing quality management systems, checking welding procedure qualifications, material traceability documentation, nondestructive testing records and previous project references. This is not a procurement formality. It is the first and most important quality gate in the entire commissioning chain. A transformer, generator or turbine manufactured to inadequate quality standards cannot be made acceptable by any amount of site testing or commissioning effort. Quality must be built in at the factory — commissioning can only verify what is already there.

FAT — Factory Acceptance Test

The Factory Acceptance Test is conducted at the manufacturer’s facility before any equipment is approved for shipment to site. Every test mandated by the relevant IEC standard for that equipment type is conducted — witnessed by the owner’s engineer, the lender’s engineer and in many cases the independent engineer appointed by project financiers. For power transformers the applicable standard is IEC 60076. For dry-type transformers IEC 60076-11. Tests conducted include insulation resistance, winding resistance, turns ratio, polarity and vector group verification, no-load loss and current measurement, load loss and impedance voltage measurement, induced overvoltage withstand, applied voltage withstand, temperature rise test and critically — partial discharge measurement. Partial discharge testing is the most sensitive indicator of internal insulation integrity — it detects microscopic discharge activity within the insulation system that may not be visible through any other test method. A transformer that passes all FAT tests including partial discharge is accepted and approved for shipment. A transformer with any test result outside specification is rejected — the manufacturer must rectify and retest before shipment approval is granted. Every FAT test result, every instrument calibration certificate and every witness signature is recorded in the FAT dossier. This document travels with the equipment to site and becomes part of the permanent commissioning record.

SAT — Site Acceptance Test

The Site Acceptance Test repeats the same test suite at the project site after the equipment has been delivered, installed and connected. The purpose is to verify that the equipment survived transportation and installation without damage — and that installation has been completed correctly. Insulation resistance is remeasured and compared with FAT values — a significant drop indicates moisture ingress or transportation damage. Turns ratio is rechecked. Oil sampling and dissolved gas analysis verifies transformer oil condition after filling. Buchholz relay, pressure relief device and winding temperature indicators are all functionally checked. Protection relay settings are verified against the approved protection coordination study. Every SAT test result is recorded, compared with the corresponding FAT baseline and signed off by the commissioning engineer and owner’s representative. SAT sign-off is a mandatory hold point — no energization proceeds without it. This is not a procedural formality. It is a contractual and professional requirement that establishes the baseline condition of the equipment at the point of handover for commissioning.

The Commissioning Dossier — The Engineering FIR

Every commissioning engineer must understand one fundamental principle before setting foot on a commissioning site: the commissioning dossier is not administrative paperwork. It is the engineering equivalent of a First Information Report — the contemporaneous documentary record that establishes what was done, by whom, when, in what sequence and with what result. When something goes wrong during commissioning or in early operation — and across fifteen years of field experience, something always does — the commissioning dossier is the engineer’s only defense.

A complete commissioning dossier contains the energization protocol specifying the exact sequence of steps from first electrical connection through to full load operation, with mandatory hold points at each stage requiring independent sign-off before proceeding. It contains the accountability matrix identifying the responsible engineer for every commissioning activity. It contains all FAT and SAT test records with baseline values. It contains all protection relay setting sheets signed by the protection engineer and verified by the owner’s engineer. It contains all calibration certificates for every instrument used in commissioning testing. It contains the grid operator’s formal clearance confirming the transmission connection is ready to receive generation. It contains signed minutes of every commissioning review meeting. It contains the punch list — the formal record of every identified deficiency, its resolution status and the sign-off confirming closure.

When a commissioning failure occurs and a full audit follows — as it inevitably does when COD is delayed and penalties accumulate — every page of this dossier is examined. The question asked of every engineer is the same: was this step completed, was it documented, was it signed off? The engineer who can answer yes to all three — with the paper to prove it — is protected. The engineer who cannot is exposed. This is not theoretical. This is the reality of major hydel project commissioning.

Field Incident 1 — Main Auxiliary Transformer Failure During Commissioning

The following incident is drawn from direct field experience on a major hydropower project. No project names, manufacturer names or personnel details are disclosed — the engineering lessons are universal and the documentation principles apply on every hydel project regardless of scale or location.

During commissioning of a hydropower generating unit, the Main Auxiliary Transformer — a dry-type transformer supplying station auxiliary loads from the generator terminals — failed catastrophically. The internal insulator between the transformer body and the primary winding failed, creating an internal arc that caused severe winding damage. The transformer was destroyed. The unit could not be commissioned. Commercial Operation Date was delayed.

The consequences were immediate and severe. COD delay penalties under the Power Purchase Agreement began accumulating from the first day of delay. The financial exposure ran into millions. A full documentary audit was initiated — every FAT test record, every SAT test record, every commissioning procedure, every sign-off sheet was examined by the owner’s engineer, the lender’s engineer and the project’s legal team simultaneously.

The FAT dossier showed that the transformer had been factory tested per IEC 60076-11 for dry-type transformers. Insulation resistance had been measured and recorded. Partial discharge testing had been conducted and the results were within the acceptance criteria specified in the standard. The transformer had passed all factory tests and been approved for shipment by the owner’s engineer witness. The SAT records showed insulation resistance had been remeasured on site after installation — values were consistent with FAT baseline, confirming no transportation or installation damage.

The audit conclusion was clear — the failure was a latent manufacturing defect in the insulator material that had not been detectable by any standard test method at the time of FAT or SAT. The commissioning team had followed every required procedure, conducted every required test and documented every result. The liability rested with the manufacturer, not the commissioning engineers. The paper trail was the difference between professional protection and personal exposure to a multi-million dollar claim.

The lesson from this incident is not that FAT and SAT always catch every defect — they do not, and no testing regime can guarantee zero field failures. The lesson is that complete, witnessed and signed documentation of every required test is the commissioning engineer’s only protection when the inevitable failure occurs. Without that documentation, the same outcome — transformer destroyed, COD delayed, penalties accumulating — would have had a completely different accountability conclusion.

Field Incident 2 — Turbine Runaway and Rotor Damage During Final Testing

The second incident occurred during the 36-hour continuous final performance test — the last major commissioning milestone before COD declaration. The generating unit was operating at full load when a load rejection event occurred — the generator circuit breaker opened, suddenly disconnecting the unit from the grid and removing all electrical load from the turbine instantaneously.

Load rejection is a known, anticipated event in hydel commissioning. The governor — the turbine speed control system — is specifically designed to respond to load rejection by rapidly closing the guide vanes, reducing water flow and controlling turbine speed within acceptable limits. The overspeed protection relay provides a second independent layer of defense — if turbine speed exceeds approximately 110-115% of synchronous speed, the protection system trips the unit, closes the inlet valve and activates the mechanical braking system. These two independent protection layers — governor response and overspeed protection — are specifically tested and verified during earlier commissioning stages before any performance testing begins.

In this incident, both protection layers failed simultaneously. The governor did not respond adequately to the load rejection. Turbine speed continued rising beyond synchronous speed without effective control. The overspeed protection relay — which should have tripped the unit at 110-115% overspeed — also failed to operate. The turbine continued accelerating toward runaway speed — for Francis turbines typically 140 to 200 percent of synchronous speed depending on specific speed characteristics.

At runaway speed the mechanical consequences were severe. The mechanical braking system activated but was overwhelmed by the rotational energy of a massive rotor at far beyond design speed. Brakes were damaged. Connecting rods were damaged. Heaters were damaged. Most seriously — the rotor winding sustained damage from the extreme centrifugal forces and electromagnetic stress at runaway speed. The generating unit was out of service. COD was delayed. The financial penalties began.

The subsequent audit examined the commissioning dossier with particular focus on two questions. First — had governor response been tested and verified before the 36-hour performance test commenced? Second — had overspeed protection been tested and verified as operational before performance testing began? The answers to both questions, and the documentary evidence supporting those answers, determined the accountability conclusion of the entire incident investigation.

The engineering lesson from this incident goes beyond the specific failure mode. It demonstrates why commissioning sequences have mandatory hold points — stages at which specific tests must be completed, verified and signed off before the next stage can proceed. The overspeed protection test is not a bureaucratic checkbox. It is a safety-critical verification that a last-resort protection system will function when every other control layer has failed. Skipping it, rushing it or inadequately documenting it exposes every engineer involved to consequences that extend far beyond the technical failure itself.

The broader lesson for every commissioning engineer: the sequence of commissioning activities is not arbitrary. Each hold point exists because a real failure, somewhere on a real project, demonstrated exactly what happens when that specific verification is omitted. Respecting the sequence is not procedural compliance — it is the accumulated engineering wisdom of everyone who learned these lessons before.

Dry Testing — The First Phase of Commissioning

Dry testing is the first formal phase of the hydropower commissioning program — conducted entirely without water in the waterway system and without any mechanical rotation. Everything tested during the dry phase is tested in isolation, under controlled static conditions, before the complexity of water, pressure and rotation is introduced. The term “dry” refers specifically to the absence of water in the hydraulic circuit — the penstock, spiral casing, draft tube and all associated waterway components remain empty and unpressurized throughout this phase.

Dry testing covers the complete verification of all electrical systems, control systems and mechanical systems that can be meaningfully tested without water or rotation. Generator stator winding insulation resistance and polarization index are measured. High voltage tests are conducted per IEC standards. Rotor field winding resistance and insulation resistance are measured and recorded. All current transformer circuits are verified for polarity, continuity and correct burden. Every protection relay is individually tested — each function verified to operate at its set threshold with all outputs confirmed to energize the correct trip and alarm contacts.

Control system dry testing verifies every analog input, every digital input and every control output loop by loop — each calibrated, each verified to read correctly at the control system display and each verified to operate the correct field device. Auto-start and auto-stop sequences are tested in simulation before any live equipment is involved. SCADA displays are verified for correct values and correct alarm annunciation. Emergency stop functions are verified from all control locations simultaneously.

Mechanical dry testing covers turbine assembly verification against manufacturer erection drawings — runner clearances, wicket gate operation, guide vane opening and closing stroke, servomotor travel limits. Shaft alignment is measured and recorded. Bearing oil systems are flushed, filled and circulation verified. Cooling water systems are pressure tested and flow rates confirmed. Air gap is measured around the full circumference of the rotor with the shaft installed — the rotor rotated by hand while dial gauges record uniformity at multiple positions.

Every dry test result is recorded in a dedicated test sheet, signed by the responsible commissioning engineer and countersigned by the owner’s representative. No wet testing phase begins until every dry test is completed, all results are within acceptance criteria and all test sheets are signed. The dry testing dossier is the foundation of the complete commissioning record — it establishes the baseline condition of every system before water and rotation introduce the complexity that makes subsequent fault diagnosis genuinely difficult.

Wet Testing — Water in the System for the First Time

Wet testing introduces water into the hydraulic circuit for the first time — a critical milestone that reveals problems invisible during dry testing. The waterway system — headrace tunnel or canal, forebay, penstock, spiral casing, draft tube and tailrace — is filled progressively under controlled conditions. The turbine runner does not rotate during wet testing. This phase tests the hydraulic integrity of civil and mechanical structures under real water pressure, not the generation system.

Penstock filling is the most carefully controlled wet testing activity. The penstock is filled slowly — typically over several hours for large diameter high head penstocks — with pressure monitored continuously at multiple points along its length. Filling rate is controlled to avoid water hammer and to allow trapped air to escape through designated air release valves. At each pressure hold point the penstock is inspected for leaks, seepage through flanges and expansion joint behavior. Any leakage identified during filling is investigated and resolved before pressure is increased further. A penstock that has not been pressure tested and proven leak-free before first rotation represents an unacceptable risk — a penstock failure under operating pressure is catastrophic.

Spiral casing filling follows penstock filling. Water fills the complete spiral casing surrounding the turbine runner — the runner itself remaining stationary. Inspection access points and drainage valves are monitored for leakage. Wicket gate sealing under water pressure is verified — any leakage past closed wicket gates is measured and compared against acceptance criteria. Draft tube flooding verifies the draft tube and tailrace connection is watertight and that water level in the draft tube stabilizes at the correct level relative to the tailrace.

Inlet valve operation under full hydraulic pressure is tested and verified during wet testing — the valve must open and close smoothly under differential pressure conditions that cannot be replicated during dry testing. Bypass valve sequencing is verified. All water-wetted mechanical seals — shaft seals, guide vane stem seals, wicket gate seals — are inspected for leakage under pressure and compared against allowable leakage rates specified in the equipment contracts.

Cooling water systems are commissioned during the wet phase — service water supply to generator air coolers, transformer oil coolers, bearing oil coolers and shaft seal water supply are all commissioned and flow rates verified against design values. Fire detection and suppression systems are wet tested where applicable. Drainage and dewatering systems are tested under realistic conditions with the waterway filled.

The wet testing phase concludes when all hydraulic systems have been verified under pressure, all leakage is within acceptance criteria, all mechanical seals are performing correctly and all water-related auxiliary systems are operational. Only after wet testing sign-off does the commissioning sequence proceed to first rotation — the moment when water flow and mechanical rotation are combined for the first time.

Pre-Commissioning — Before Anything Is Energized

Pre-commissioning is the systematic verification that every component and system is correctly installed, correctly connected and ready for energization before any electrical power is applied or any mechanical rotation begins. Pre-commissioning is entirely a static activity — nothing moves, nothing is energized. It is the most unglamorous phase of commissioning and the most important. Every deficiency identified during pre-commissioning costs nothing to correct. The same deficiency discovered during energization or first rotation costs equipment, time and potentially careers.

Civil and Structural Completion Checks

Powerhouse civil works must be verified complete before any mechanical or electrical pre-commissioning begins. Turbine pit dimensions, draft tube configuration, spiral casing installation, anchor bolt torques, grouting completion and draft tube gate operation are all verified against design drawings. Access hatches, drainage systems, sump pumps and ventilation systems are checked functional. Fire detection and suppression systems are verified installed and tested. Any outstanding civil punch list items are formally recorded and tracked.

Mechanical Pre-Commissioning

Turbine assembly is verified against manufacturer’s erection drawings — runner clearances, wicket gate operation, guide vane opening and closing stroke, servomotor travel limits, oil pressure unit function and penstock inlet valve operation. Shaft alignment is measured and verified within specified tolerances — this single measurement has more influence on long term unit reliability than almost any other pre-commissioning activity. Bearing oil systems are flushed, filled and circulation verified. Cooling water systems are pressure tested and flow rates confirmed. Air gap is measured around the full circumference of the rotor with the shaft installed — the rotor rotated by hand while dial gauges record air gap uniformity at multiple positions. Any non-uniformity outside tolerance requires bearing adjustment before proceeding.

Electrical Pre-Commissioning

Generator stator winding insulation resistance and polarization index are measured and recorded. High voltage test is conducted per IEC standard. Rotor field winding resistance and insulation resistance are measured. Excitation system functional checks verify AVR operation across its full control range. All current transformer circuits are verified for correct polarity, continuity and burden. Voltage transformer circuits are verified for correct ratio, polarity and fusing. Every protection relay is tested individually — each function verified to operate at its set threshold, each output verified to energize the correct trip and alarm contacts. Protection relay test results are recorded in individual test sheets, signed by the protection engineer and countersigned by the owner’s engineer. These individual relay test sheets form a critical section of the commissioning dossier — they are the documentary evidence that protection systems were verified functional before the equipment they protect was energized.

Unit Control System — Governor and AVR Commissioning

The Unit Control System is the automation layer directly responsible for starting, stopping, loading and protecting the individual generating unit. It integrates the governor — turbine speed and load controller — the Automatic Voltage Regulator, the unit protection system and all unit-level interlocks and sequences into a coordinated control architecture. Unit control system commissioning establishes the foundation on which every subsequent commissioning phase depends.

Governor commissioning begins with static parameter verification — confirming all PID settings, droop settings, dead band values and rate limiters match the approved governor commissioning document before any dynamic testing begins. Governor hydraulic system pressure and oil cleanliness are verified. Servomotor stroke and travel limits are calibrated against guide vane position. Speed sensing inputs are verified for correct signal scaling and redundancy changeover. Governor simulation testing — applying speed input signals electronically without water flow — verifies governor response characteristics across the full operating range before first rotation.

AVR commissioning follows a similar sequence — static parameter verification first, then functional testing with the machine at standstill, then dynamic testing during first rotation and synchronization. AVR channel redundancy and automatic changeover between main and backup channels is tested. Under-excitation limiter, over-excitation limiter and volts-per-hertz limiter functions are all individually verified. Power system stabilizer commissioning — where included — requires specific testing methodology to verify correct stabilizing signal injection without introducing instability.

Unit sequence logic — the automated start, synchronize, load, unload and stop sequences — is tested in simulation during dry testing phase, verified in slow motion during first rotation and confirmed under real conditions during load testing. Every interlock condition that must be satisfied before each sequence step proceeds is individually verified. The unit control system sequence logic is the automation equivalent of the commissioning hold point — it enforces the correct operational sequence automatically, preventing operator error from bypassing critical verification steps during normal operation.

Protection IEDs and Substation Automation System — IEC 61850 Commissioning

The Substation Automation System is the digital protection, control and monitoring architecture for the high voltage switchyard — integrating all protection Intelligent Electronic Devices, bay controllers and the station HMI into a coordinated system based on the IEC 61850 communication standard. SAS commissioning is technically distinct from unit protection relay testing and requires specific expertise in IEC 61850 architecture, GOOSE messaging and sampled values.

Individual protection IED commissioning begins with hardware verification — each IED’s firmware version, configuration file version and hardware configuration are verified against the approved engineering documents. Settings are verified against the protection coordination study — every threshold, every time delay, every characteristic curve confirmed correct before any secondary injection testing begins. Secondary injection testing applies known test currents and voltages to each IED input and verifies correct operation of every protection function at its set threshold. Each IED test is individually documented in a protection test sheet signed by the protection engineer and countersigned by the owner’s engineer.

IEC 61850 GOOSE message commissioning verifies the high-speed peer-to-peer communication between protection IEDs that enables schemes impossible with traditional hardwired protection — busbar protection, breaker failure protection and inter-tripping between geographically separated substations all depend on GOOSE messaging operating correctly within defined time constraints. Each GOOSE message — its content, its publisher, its subscribers and its maximum transmission time — is individually verified. A GOOSE message that arrives too late or not at all during a fault condition causes the protection scheme to fail exactly when it is needed most.

Station bus communication — the IEC 61850 process bus or station bus connecting IEDs to bay controllers and the station HMI — is tested for correct data flow, correct addressing and correct time synchronization. IEEE 1588 precision time protocol synchronization — which timestamps protection events to microsecond resolution across all IEDs — is verified and confirmed across the entire SAS network. Without correct time synchronization the Sequence of Events records from different IEDs cannot be reliably correlated during fault analysis.

End-to-end protection scheme testing — applying primary injection current through the complete current transformer circuit, through the IED, through the GOOSE network and verifying the correct circuit breaker trip — is the final and most important SAS commissioning test. It verifies not just that individual components work correctly in isolation but that the complete protection chain from primary fault current to breaker trip operates correctly as an integrated system. End-to-end test results are the most critical records in the protection commissioning dossier — they are the evidence that the protection system will actually operate correctly when a real fault occurs.

Station Auxiliary Power System — Commissioning the Plant’s Power Supply

The Station Auxiliary Power System supplies electrical power to every operational load within the plant — cooling pumps, lubrication oil pumps, drainage pumps, ventilation fans, control panels, instrumentation, lighting, heating and all other plant services that keep the powerhouse operational independently of the main generating unit output. Without a functioning auxiliary power system nothing else in the plant works — it is the operational foundation that every other system depends on.

Auxiliary power system commissioning begins with the station service transformer — energized from the grid connection or from the generator terminals via the unit auxiliary transformer tap. Protection relays, metering and interlocks are tested before energization. The LV main switchboard — typically 415V three phase — is energized progressively, feeder by feeder, each outgoing circuit verified before the next is commissioned. Motor control centers for pump and fan loads are commissioned individually — each motor starter verified for correct direction of rotation, correct overload protection setting and correct interlock with its associated process system.

Critical auxiliary loads require specific commissioning attention. The DC battery system — supplying control and protection power independently of AC supply — must be verified for correct charging, correct float voltage, correct battery capacity and correct autonomy duration under full DC load. Protection systems must remain operational during a complete AC auxiliary failure — the DC system is their power supply of last resort. UPS systems for SCADA computers and control systems are verified for correct automatic transfer to battery on AC failure and correct transfer back on AC restoration, with battery autonomy confirmed by load test.

The diesel emergency generator — the final backup power source — is commissioned for automatic start on loss of normal auxiliary supply, correct voltage and frequency within specified time, automatic load transfer and sustained operation at full auxiliary load for the required duration. Automatic transfer back to normal supply on restoration is tested. Monthly automatic test run programming is verified. The diesel generator must be completely reliable — it is the power source that enables safe controlled shutdown of the plant during a prolonged grid outage.

Earthing system commissioning verifies the complete earthing network — equipment earth connections, lightning protection earth, instrument earth and clean earth for sensitive electronic equipment. Earth fault loop impedance measurements confirm adequate fault current path for protection operation. Touch and step voltage measurements verify personnel safety within the earthing system design limits.

Back Feeding and Powerhouse Black Start — Energizing Before Generation Begins

Two distinct scenarios require the hydropower plant to operate its auxiliary systems before any generating unit is producing electricity — back feeding from the grid and powerhouse black start from the diesel emergency generator. Both scenarios are critical commissioning considerations and both must be specifically planned, tested and documented before Commercial Operation Date.

Back Feeding — Energizing Through the Grid

During commissioning, before the generating unit produces a single watt of electricity, the main step-up transformer and complete HV switchyard must be energized from the grid itself — not from the generator which is not yet running. This reverse energization process is called back feeding. The HV transmission line is energized from the grid substation, feeding voltage through the HV circuit breaker into the AIS or GIS switchyard busbars at full transmission voltage — 132kV, 220kV or higher depending on the project. The main step-up transformer receives HV supply on its primary winding and steps down to generator voltage level on the secondary winding. This stepped-down voltage then supplies the unit auxiliary transformer, which steps further down to 415V supplying the complete station auxiliary system — giving the plant operational power from the grid before generation begins.

Back feeding has critical implications for commissioning sequencing. The entire HV switchyard is live at full transmission voltage from the moment back feeding begins. All transformer protection including differential protection with inrush restraint correctly set, HV busbar protection and transmission line protection must be fully commissioned, correctly set and armed before the HV line is energized. Transformer inrush current — the high transient current drawn when a large transformer is first energized — must be accounted for in differential protection settings to prevent the transformer tripping on its own energization. This is one of the most common and most avoidable commissioning problems on any hydel project. The SAS commissioning sequence must reach a defined completion milestone before back feeding is approved — because from that moment the site is a live HV installation requiring full HV safety management.

Powerhouse Black Start — Restarting From Local Resources

The powerhouse black start scenario occurs when all generating units are shut down and AC auxiliary power from back feeding is unavailable or has been lost. The battery bank keeps critical DC systems alive — protection relay supplies, control panel power, emergency lighting and SCADA — but cannot sustain the heavy AC loads required to restart a generating unit. The Hydraulic Power Unit motor, cooling water pumps, lubrication oil pumps and ventilation fans all require AC supply that the battery bank cannot provide.

In this condition, the diesel emergency generator is the plant’s only path to unit restart. The diesel starts — manually by the operator or automatically on loss of AC auxiliary supply detection — and picks up the critical AC loads sequentially. The sequence is deliberate and specific: HPU first — hydraulic oil pressure must be restored before guide vanes can be operated. Lubrication oil pumps next — bearing protection before any rotation. Cooling water pumps — thermal protection before excitation. AVR control power and GCB spring charging circuits from the diesel-supplied auxiliary bus — ensuring the generator circuit breaker can operate and the AVR can control excitation during startup.

The HPU motor starting current deserves specific attention during commissioning. Starting current for an HPU motor on direct-on-line starting is typically six to eight times full load current — a significant transient demand on the diesel generator. The diesel must maintain adequate voltage throughout this starting transient to prevent connected sensitive loads — AVR electronics, control systems, protection relay DC supplies — from experiencing voltage dips sufficient to cause malfunction or dropout. Diesel generator sizing calculations must specifically account for HPU motor starting current as the most demanding single load event in the black start sequence. This calculation must be verified during commissioning by actually starting the HPU from the diesel and monitoring voltage throughout the starting transient.

With HPU running and lubrication and cooling systems operational, the unit start sequence begins. The governor opens guide vanes, the turbine accelerates toward synchronous speed, the AVR builds terminal voltage and the unit synchronizes — either to the grid through the back feed path if grid is available, or in island mode supplying its own auxiliary loads if grid is not yet restored. As the unit reaches stable generation, the unit auxiliary transformer picks up station auxiliary loads from the generator terminal and the diesel generator is offloaded and returned to standby. Normal auxiliary power supply is restored from the generating unit itself.

Black start capability must be specifically tested during commissioning — not assumed. The diesel start, HPU motor starting voltage transient, sequential auxiliary load pickup and transition from diesel to UAT supply are all verified under real conditions and documented in the commissioning dossier. A plant that has never demonstrated its black start capability during commissioning cannot be relied upon to perform it correctly during an unplanned outage.

SCADA Commissioning — Integrating the Complete Plant Picture

The SCADA system is the plant-wide supervisory layer that integrates data from the unit control system, the SAS, the auxiliary power system and all field instruments into a single operational picture — providing the operator interface, sequence automation, alarm management, historical data recording and remote communication through which the entire plant is managed on a daily basis. SCADA commissioning is consistently one of the most time-consuming phases of the complete commissioning program and one of the most frequently underestimated in project planning schedules.

SCADA hardware commissioning verifies servers, operator workstations, engineering workstations, communication gateways and network infrastructure for correct installation, correct power supply and correct network connectivity before any process data is connected. Network architecture — fiber optic or copper communication backbone connecting field systems to SCADA servers — is tested for signal integrity, correct addressing and adequate bandwidth for the required data throughput.

Signal commissioning — verifying every field signal from every instrument and device into the SCADA database — is the most labor-intensive element. Every analog input is verified by injecting known test signals at the field instrument and confirming the SCADA display shows the correct engineering value with correct units, correct scaling and correct alarm limits. Every digital input is verified to change state correctly at the SCADA display when the associated field device operates. Every control output is verified to operate the correct field device when the SCADA command is issued. With hundreds or thousands of signals in a typical hydel plant SCADA system, signal commissioning requires systematic discipline and meticulous documentation — a single incorrectly scaled temperature input or incorrectly mapped control output can cause operational confusion or worse during actual plant operation.

Sequence of Events recording is specifically tested and verified during SCADA commissioning. The SOE function timestamps every alarm and event to millisecond resolution, allowing precise reconstruction of event sequences during incident investigation. Both real commissioning incidents described in this guide — the transformer failure and the turbine runaway — required detailed SOE analysis during subsequent investigations. Correct time synchronization across all SCADA components and all connected IEDs is verified — without millisecond-accurate time stamping across the complete system the SOE record cannot be reliably used for multi-system fault analysis.

The digital synchroscope display — showing real-time phase angle relationship between the incoming generator and the live grid — is verified during SCADA commissioning before any synchronization attempt. The auto-synchronizer module is tested using simulated signals before live synchronization. In modern hydel plants this complete synchronization picture — generator voltage, grid voltage, frequency difference, phase angle and slip rate — is displayed on HDMI monitors in the central control room, replacing the separate analog instruments that previous generations of engineers managed simultaneously.

SCADA historian configuration — the database recording all process values at defined scan intervals for long term trending and analysis — is verified for correct data storage, correct retrieval and correct display in trending screens. The historian becomes invaluable during operation — allowing engineers to correlate process trends with events, identify slowly developing problems before they cause failures and demonstrate performance compliance to owners and lenders over the operational life of the plant.

Grid operator SCADA interface commissioning — the communication link between the plant SCADA and the national grid operator’s energy management system — is tested last, after all plant-side SCADA commissioning is complete. This interface allows the grid operator to monitor plant output, receive alarms and in some configurations issue remote dispatch instructions. The grid operator formally accepts the communication interface before COD is declared — their connection to the plant is part of the accountability chain that the commissioning dossier must document.

First Rotation — The Most Anticipated Moment in Hydel Commissioning

First rotation is the moment every commissioning team works toward from the first day on site. It is when the turbine runner turns for the first time under water flow — when a structure of steel and copper that has taken years to build becomes a machine. It is also one of the highest-risk moments in the entire commissioning sequence. Problems that were invisible during static pre-commissioning reveal themselves immediately under rotation.

The first rotation sequence begins with partial opening of the turbine inlet valve — just enough water to initiate slow rotation, far below synchronous speed. Speed is monitored continuously on multiple independent instruments. Vibration is measured simultaneously at the upper guide bearing, lower guide bearing, turbine bearing and stator frame — establishing baseline vibration signatures at low speed before any load is applied. Bearing temperatures are monitored from the moment rotation begins. Any abnormal reading — a vibration spike, a bearing temperature rise, an unusual noise — stops the sequence immediately for investigation.

Speed is increased in controlled steps toward synchronous speed. At each step hold points allow the commissioning team to assess vibration, temperature and noise before proceeding. The governor is tested for speed control response at each step — verifying its ability to maintain stable speed at each operating point. Critical speed ranges — where mechanical resonance may occur — are passed through quickly, not held at. The shaft is observed for any visible runout or wobble. Seal water flows are verified. Cooling water temperatures are monitored.

Approaching synchronous speed, the excitation system is brought online — field current is applied to the rotor, building the rotating magnetic field and inducing terminal voltage in the stator windings. Terminal voltage is verified to rise smoothly to rated value as field current increases along the open circuit characteristic. The relationship between field current and terminal voltage — the open circuit characteristic — is measured and compared with the manufacturer’s design curve. Any significant deviation indicates a generator design or assembly problem requiring investigation before synchronization proceeds.

Synchronization — Grid Interconnection — Connecting to the National Grid

Synchronization is the most precisely controlled operation in hydropower commissioning — the moment the running generator is connected to the live national grid. Four conditions must be simultaneously satisfied within tight tolerances before the generator circuit breaker can be closed. Generator terminal voltage must match grid voltage within typically ±5%. Generator frequency must match grid frequency — 50Hz — within ±0.2Hz. Phase sequence must match the grid. Phase angle between the generator and grid must be at or approaching zero at the moment the circuit breaker closes.

Closing the circuit breaker with any of these conditions unsatisfied causes an immediate, violent electromagnetic transient — a synchronization shock that applies severe mechanical stress to the generator shaft, rotor poles, stator windings and all connected mechanical components simultaneously. A badly out-of-phase synchronization can cause catastrophic damage to a generator that survived years of construction and weeks of pre-commissioning without incident. This is why synchronization is never rushed and never approximated.

Modern hydel plant control systems incorporate auto-synchronizer modules that monitor all four conditions simultaneously and initiate circuit breaker closing automatically at the precise moment all conditions are within tolerance — typically when the phase angle is within a few degrees of zero and closing at the right rate. The digital synchroscope — displayed on control room monitors — shows the rotating phase angle relationship between generator and grid in real time, with the auto-synchronizer armed and waiting for the correct closing window. The grid operator is formally notified before synchronization proceeds and their clearance is confirmed — because from the moment the circuit breaker closes, the grid operator shares accountability for what happens on that line.

First synchronization is witnessed by the owner’s engineer, the lender’s engineer, the grid operator representative and the commissioning team simultaneously. The exact time of synchronization, the voltage, frequency and phase angle at the moment of closing, and the initial power output are all recorded in the commissioning dossier. This record establishes the unit’s first grid connection — a milestone that is referenced throughout the plant’s operational life.

Load Testing — From First Synchronization to Full Output

Load testing progressively increases generating unit output from initial synchronization through to full rated capacity — verifying stable, reliable operation at every load point along the way. Load is not increased continuously or rapidly. It is increased in defined steps — typically 25%, 50%, 75% and 100% of rated output — with hold periods at each step to assess thermal performance, vibration, bearing temperatures, protection system behavior and governor stability before proceeding to the next level.

Step Load Tests

At each load step, vibration levels at all measurement points are recorded and compared with baseline first rotation values. Bearing temperatures are allowed to stabilize before the next step proceeds — a bearing temperature still rising when the next load increase is applied gives no meaningful baseline for the new load level. Stator winding temperatures are monitored via resistance temperature detectors — the most critical thermal monitoring point on the entire unit. Generator terminal voltage, active power output, reactive power output and power factor are all recorded. Any anomaly at any load step stops the sequence until the cause is understood and resolved.

Load Rejection Test

The load rejection test is the most demanding single test in the entire commissioning sequence — and the test most directly connected to the field incident described earlier in this guide. The unit is operating at full rated load when the generator circuit breaker is deliberately opened, instantly removing all electrical load from the turbine. The governor must respond immediately — closing guide vanes rapidly to control the speed rise within specified limits. Overspeed protection must be verified armed and set correctly before this test is conducted. Speed rise is measured continuously throughout the transient — the maximum speed reached, the time to return to synchronous speed and the governor response characteristics are all recorded and compared with design specifications.

The load rejection test must only be conducted after explicitly verifying that overspeed protection is correctly set, correctly wired and has been independently tested to operate at its set threshold. This verification must be documented in the commissioning dossier as a mandatory hold point sign-off before the load rejection test proceeds. The field incident described earlier — where both governor and overspeed protection failed during a load rejection, resulting in runaway speed and rotor damage — is the direct consequence of inadequate verification of these protection systems before performance testing commenced. This is not a lesson from a textbook. It is a lesson from a real project, with real financial consequences and real equipment damage.

Performance Guarantee Tests — Post Commissioning

Performance guarantee tests represent the final formal milestone of the commissioning program — conducted after the generating unit has demonstrated stable, reliable operation through all load testing phases. These tests measure actual plant performance against the contracted performance specifications agreed between the owner and the equipment manufacturers at the time of contract award. They are conducted under strictly defined reference conditions — specific net head, specific water temperature, specific grid frequency — to ensure results are directly comparable with the design basis.

The tests are witnessed simultaneously by the owner’s engineer, the lender’s independent engineer, the turbine manufacturer’s representative and the generator manufacturer’s representative. Every measurement instrument used in performance guarantee testing is independently calibrated immediately before the test and calibration certificates are included in the test record. Any instrument found out of calibration invalidates the test — it must be repeated with verified instruments.

Output guarantee verification measures actual active power output at guaranteed net head and flow — confirming the unit delivers its contracted MW. Efficiency guarantee verification measures actual hydraulic efficiency across the guaranteed operating range — confirming the turbine converts the available water energy into mechanical energy at the guaranteed percentage. Auxiliary power consumption is measured — the power consumed by the unit’s own cooling systems, lubrication systems and control systems, which reduces the net power delivered to the grid. Noise and vibration levels are measured and compared against guaranteed limits.

The 72-hour or 30-day continuous operation trial — the duration specified in the specific project contract — runs the unit at full load for an extended period, demonstrating reliability and thermal stability under sustained operating conditions. All temperatures, vibrations and performance parameters are monitored and recorded continuously throughout the trial. Any unplanned shutdown during the trial typically requires the trial to be restarted from the beginning once the cause is resolved.

Commercial Operation Date — The Final Milestone

Commercial Operation Date is not a technical event — it is a contractual declaration. It is the formal statement by the plant owner that the generating unit has successfully completed all commissioning activities, all performance guarantee tests and all documentation requirements, and is ready for continuous commercial electricity generation under the terms of the Power Purchase Agreement.

COD declaration authority varies by project structure and jurisdiction. For publicly owned hydel projects, COD is typically declared by the national utility or government power authority — WAPDA in Pakistan, NHPC in India, NEA in Nepal, or equivalent national entities globally. For privately developed IPP projects, COD is declared when the developer satisfies all conditions precedent defined in the Power Purchase Agreement — typically requiring simultaneous sign-off from the project owner, the lender’s independent engineer and the grid operator. In multilaterally financed projects involving World Bank, ADB or IFC funding, additional financing agreement conditions must also be satisfied before COD can be formally declared. Regardless of jurisdiction or project structure, the commissioning dossier is the documentary evidence that all technical conditions have been met

The COD declaration triggers the commercial terms of the Power Purchase Agreement — the tariff payments begin, the debt service obligations begin and the operational performance monitoring regime begins. Every day before COD that should have been after COD — due to commissioning failures, equipment damage or documentation deficiencies — is a day of penalty. In major hydel projects these penalties are structured to be genuinely painful — sufficient to incentivize every party to complete commissioning correctly and on schedule rather than cut corners and recover later.

The COD Dossier

COD cannot be declared without a complete commissioning dossier. The COD dossier is the compiled documentary evidence that every required commissioning activity has been completed, every required test has been conducted and recorded, every punch list item has been resolved and every required party has signed off. It typically includes the complete FAT records for all major equipment, the complete SAT records, all protection relay test sheets, the governor and overspeed protection test records, the synchronization record, all load test records including load rejection test results, the performance guarantee test report, the punch list with all items closed, the grid operator’s formal connection agreement and the lender’s independent engineer’s commissioning completion certificate.

This document is not filed and forgotten. It is the foundational reference for the entire operational life of the plant. When a protection relay malfunctions five years into operation, the commissioning relay test sheet is the baseline. When a generator bearing fails ten years into operation, the commissioning vibration records are the reference. When a dispute arises about whether equipment was correctly commissioned and handed over, the COD dossier is the evidence. Building this document correctly during commissioning is one of the most important contributions a commissioning engineer makes to the long term success of any hydel project.

Common Commissioning Failures — Field Experience

Fifteen years of hydropower commissioning experience across multiple major projects reveals recurring failure patterns that every commissioning engineer should anticipate, prepare for and specifically verify against during pre-commissioning and commissioning activities.

Protection Relay Miscoordination

Incorrect protection relay settings — either wrong values entered or correct values entered on the wrong relay — are among the most common commissioning problems and among the most dangerous. A differential protection relay with incorrect current transformer ratio compensation causes false differential current and spurious tripping. An overspeed protection relay set at the wrong threshold — too high — fails to operate when genuinely needed, as the field incident described above demonstrates. Every protection relay setting must be independently verified against the approved protection coordination study by a qualified protection engineer before energization. The setting verification must be documented — not assumed.

Current Transformer Polarity Errors

Incorrect current transformer polarity — a CT secondary wired with reversed polarity — causes the differential protection to see false differential current under normal load conditions, causing spurious tripping. Or worse, it causes the differential protection to operate in the wrong direction — seeing no differential current during a genuine internal fault. CT polarity verification is a mandatory pre-commissioning check that must be performed on every CT in every protection circuit, with results documented in individual CT test sheets. This check is commonly rushed or assumed correct — and commonly found incorrect when properly verified.

Governor Instability

Governor hunting — oscillation of turbine speed and power output around the setpoint — indicates incorrect governor PID parameter tuning. Governor parameters optimized during factory testing or on a previous project frequently require adjustment when connected to a real grid with specific characteristics. Governor commissioning requires systematic parameter optimization across the full load range — a process that cannot be rushed and cannot be assumed complete until stable operation is demonstrated at every load point including load rejection.

AVR Instability

Automatic Voltage Regulator hunting — oscillation of terminal voltage or reactive power output — indicates incorrect AVR parameter tuning, similar in nature to governor instability but on the electrical side. AVR commissioning requires careful parameter optimization specific to each generator and each grid connection point. A generator connected to a weak grid — common in remote hydel locations — requires different AVR settings than the same generator connected to a strong transmission system. AVR instability that is not resolved during commissioning becomes an operational problem that affects grid voltage quality and generator thermal loading throughout the plant’s life.

Insulation Failures

Insulation failures — in generator stator windings, transformer windings or cable terminations — during commissioning and early operation are more common than the industry publicly acknowledges. Some are latent manufacturing defects that standard testing cannot detect. Some result from moisture ingress during transportation or storage. Some result from installation damage. Tracking insulation resistance values from FAT through SAT through commissioning and into early operation, and investigating any downward trend immediately rather than dismissing it as normal variation, is the most effective early warning system available to commissioning engineers.

Field Engineer’s Perspective — What Commissioning Actually Feels Like

Commissioning a hydropower generating unit is unlike any other engineering activity. The months of pre-commissioning work — the static checks, the relay tests, the loop verifications, the punch list reviews — happen largely in isolation, one system at a time, in a powerhouse that is still a construction site. Then first rotation happens, and everything changes.

The moment water enters the spiral casing and the runner begins to turn, every system that was tested in isolation must now work together simultaneously and correctly. The governor must control speed. The bearing oil system must maintain lubrication. The cooling water must flow. The temperature monitoring must read correctly. The protection systems must be armed and ready. The control system must respond correctly to every operator input. None of these systems can be retested in isolation once the unit is rotating under load — they must all work, together, correctly, from the first moment.

The weight of that integration is something every commissioning engineer carries from first rotation through to COD declaration. Every anomaly — a bearing temperature reading slightly higher than expected, a vibration value at the upper limit of acceptance, an AVR that takes slightly longer than expected to settle — requires judgment under pressure. Is this within acceptable limits or is this the early warning of a developing problem? Getting that judgment wrong in either direction has consequences. Stopping unnecessarily delays COD and costs money. Not stopping when a genuine problem is developing costs equipment and potentially more.

The two incidents described in this guide — the main auxiliary transformer that failed from a latent insulation defect and the turbine that reached runaway speed when two independent protection layers failed simultaneously — both happened despite diligent commissioning work by experienced engineers. They happened because hydel commissioning involves complex equipment operating under demanding conditions for the first time. They were resolved — professionally, financially and technically — because the commissioning documentation was complete, accurate and signed. The paper trail was not just an administrative requirement. It was the difference between a manageable incident with clear accountability and a professional catastrophe.

After fifteen years of commissioning hydel projects — from small run of river schemes to major underground powerhouse developments — the lesson that stands above all others is this: respect the sequence, complete the documentation and never assume that because a test was done it was done correctly until the signed record in front of you confirms it. The commissioning dossier is not what you build after commissioning is complete. It is what you build during commissioning, one signed page at a time, knowing that every page may one day be the most important document in the room.

Conclusion — Commissioning Is Where Engineering Becomes Accountable

Hydropower commissioning is the phase where engineering theory meets operational reality — and where the consequences of getting it wrong are measured in damaged equipment, delayed COD, financial penalties and professional liability. The complete quality chain from manufacturer selection through FAT, SAT, commissioning and COD declaration is not a bureaucratic process imposed on engineers by contracts and standards. It is the accumulated engineering wisdom of everyone who learned — sometimes painfully — what happens when any link in that chain is skipped, rushed or inadequately documented.

The distinction between testing, commissioning and COD matters because each stage has different accountability implications, different sign-off requirements and different consequences when something goes wrong. Understanding this distinction before arriving on site — not learning it during the first major incident — is what separates a prepared commissioning engineer from an exposed one.

The commissioning dossier is the engineering FIR. Build it correctly, one signed page at a time, from the first FAT witness sheet to the final COD declaration. It will never be more important than on the day something goes wrong — and something always does.

For deeper technical knowledge on the equipment at the center of every hydropower commissioning program explore our complete guides on the Hydro Generator, How Do Hydropower Plants Work and Hydel Power Advantages and Disadvantages.

Hydropower Commissioning Protocol — Coming Soon

The complete Hydel Energy Hydropower Commissioning Protocol — a field-ready document covering every test sequence, every hold point, every documentation requirement and every sign-off format from FAT through COD declaration — is currently in development.

This is not a generic checklist compiled from textbooks. It is a practical, field-tested commissioning protocol built from direct experience commissioning generating units on major hydropower projects — the same experience that documented the incidents described in this guide.

Register interest via the Connect page to be notified when the protocol becomes available.