6.2 Power Management System

What the PMS is (and is not)

The Power Management System (PMS) is the automation layer that keeps the electrical plant alive, balanced, and protected. On a DP vessel it is as safety-critical as the DP controller—but it is a different system with a different job.

Exam trap: do not credit the PMS with thrust allocation, PRS selection, or writing the DP logbook. Do not credit the DP controller with synchronising generators. When a stem says “which system starts the standby generator and sheds non-essential load,” the answer is almost always PMS (or integrated power automation under PMS philosophy).

Core PMS functions

A modern marine PMS typically provides some or all of the following:

1. Automatic generator start/stop based on load thresholds, schedule, or operator request.
2. Synchronising — matching frequency, phase, and voltage so a genset can close onto a live bus safely.
3. Load control / load sharing — distributing kW (and often kVAr) among online sets.
4. Blackout prevention — limiting load or shedding consumers before frequency collapses.
5. Preferential trip interfaces — ordered disconnection of non-essential loads.
6. Monitoring and alarms — voltage, frequency, power, breaker status, failed starts, overload.
7. Mode/philosophy settings — number of required online sets, bus configuration awareness, DP-mode power policies where integrated.

Auto start/stop of gensets

When average load rises toward a configured percentage of online capacity—or when spinning reserve falls below a set threshold—the PMS starts a standby genset, runs it up, synchronises, and closes its breaker. When load falls and excess capacity is online, the PMS may unload and stop a set after a delay, saving fuel and running hours—if operational policy allows (during critical DP, engineers and DPOs often inhibit auto-stop so reserve stays high).

For DP critical work, company standing orders and ASOG often require a minimum number of generators online and minimum spinning reserve regardless of low average hotel load. Auto-stop that is fine on passage may be wrong during a dive or heavy-lift DP setup.

Synchronising

Synchronising means bringing an incoming generator into step with the bus before the breaker closes:

• frequency matched,
• voltage matched,
• phase angle within tolerance.

If a breaker closes out of synchronism, severe mechanical and electrical damage can result. PMS auto-synchronisers handle this continuously in normal operation; engineers still verify healthy synchronising when in manual or after maintenance. As DPO you mainly need to know: a generator is not “available power” until it is synchronised and on the board, and a “standby ready” indication is not the same as “already sharing load.”

Load control and blackout prevention

Generators have thermal and dynamic limits. Thruster VFDs can demand power faster than engines can accept if unconstrained. PMS blackout-prevention strategies include:

• Load-dependent start of extra gensets before overload.
• Thruster power limitation — signal to DP/thruster system to cap demand so remaining generators stay within limits.
• Ramp rate limiting on large consumers where fitted.
• Preferential trip — automatically trip non-essential feeders if overload or underfrequency develops.
• Bus monitoring — detect abnormal frequency/voltage and act before total collapse.

The goal is simple: keep the bus alive. A controlled thruster unload that causes a larger footprint is better than a full blackout that removes all thrusters and DP computers (until UPS and recovery complete).

Preferential trip interfaces

Preferential trips (load shedding stages) disconnect consumers in a pre-planned priority order. Non-essential hotel or industrial loads go first; DP-essential thrusters and control power are protected as long as possible. Exact lists are vessel-specific and should appear in vessel documentation / FMEA operational notes. Conceptual exam ranking:

1. Shed non-essential convenience loads.
2. Shed or limit heavy industrial loads not required for immediate safety/position.
3. Limit thruster demand as a controlled power-protection action (via PMS–DP interface).
4. Do not casually trip DP control computers or UPS-backed essential control as a “first” shed step.

Operator oversight: what the DPO watches

Even with excellent automation, the DPO (with the engineer) provides oversight:

• How many gensets are online on each bus section?
• What is percentage load on each set and total?
• Is spinning reserve adequate for the weather and thruster demand expected?
• Are auto-start / auto-stop inhibited or enabled deliberately?
• Are there standing alarms (failed standby, high load, bus abnormal)?
• After a thruster spike or generator trip, did the PMS start standby and limit load as expected?
• Is communication with the engine control room clear when plant configuration changes?

Simulator assessments often fail candidates who stare only at position footprint and ignore a generator page showing 95% load on the last two sets with no standby available.

Alarms that must change your risk picture

When reserve is lost, the operational response is not “hope the weather drops.” It is reduce concurrent risk: stop critical external work if ASOG requires, prepare contingency, get another genset online, and confirm thruster power limits are understood.

Worked PMS scenario

A vessel in Auto DP is on three gensets at 70% average load when a sudden current shift drives thrusters hard. Frequency dips; PMS applies thruster load limitation and starts the fourth genset. Frequency recovers; thrusters regain headroom; footprint grows only briefly. If the DPO had disabled thruster load limiting “to keep full thrust available” against standing orders, the same spike might have stalled the engines and blacked the bus—full drift-off. Available thrust beyond plant capability is an illusion.

Exam traps for PMS items

Bottom line: the PMS starts, synchronises, load-controls, and protects generation so thrusters can keep working. Know its functions, its interface to thruster load limiting, and the alarms that force you to reduce operational risk.