DPA-B Anomalous Shutdown

What is it?

The DPA-B shuts down anomalously, presumably due to a spurious command.

Note

The diagnosis and response to this anomaly presented in this document assumes that the active BEP is powered by DPA side A.

When did it happen before?

The DPA-B has shut down once:

  • December 13, 2007: 2007:347:17:50, obsid 58072

Will it happen again?

It appears likely that the anomaly will occur again if the mission continues.

How is this anomaly diagnosed?

Within a major frame (32.2 seconds), one should see:

  • 1DPPSB (DPA-B Power Supply On/Off) change from 1 to 0 (On to Off)
  • 1DPP0BVO (DPA-B +5V Analog Voltage) drop to 0.0 +/- 0.3 V
  • 1DPICBCU (DPA-B Input Current) drop to < 0.2 A (this value is noisy, so take an average)
  • DPA-B POWER should go to zero
  • 1DP28BVO (DPA-B +28V Input Voltage) is expected to have a small uptick, ~0.5 V, consistent with the load suddenly dropping to zero
  • If 1STAT2ST = 0, the DPA-B shutdown has caused a watchdog reboot of the BEP in use. This will happen if the DPA-B shuts down during an observation which is using B-side FEPs.

All other hardware telemetry should be nominal. The current values for these can be found on our Real-Time Telemetry pages. Older data can be examined from the dump files or the engineering archive.

What is the response?

Our real-time web pages will alert us and the Lead System Engineer will call us. We need to:

  • Send an email to the ACIS team at the official anomaly email address. If it is off-hours, call Peter and Bob.
  • Send an email to sot_red_alert announcing that the ACIS team is aware of the DPA-B shutdown and is investigating, and that a telecon will be called when more information is available.
  • Contact the GOT Duty Officer to inform that we need the dump data as soon as possible and to email or call us when the dump file is available.
  • Process the dump data and make sure that there is nothing anomalous in the data BEFORE the shutdown. We want to know if a new occurrence looks just like the single previous occurrence. If yes, it should appear as if in one frame the DPA-B turned off.
  • Once analysis of the dump data is complete, convene a telecon at the next reasonable moment with the ACIS team and review the diagnosis. The MIT ACIS team (Peter Ford, Bob Goeke, Mark Bautz, and Bev LaMarr) should also be included in the discussion, either in the telecon or via email. If the diagnosis is consistent with previous DPA-B anomalies, proceed with the recovery. If the diagnosis is not consistent with previous DPA-B anomalies, stop and start a more involved analysis with the ACIS team.
  • As soon as the time of the DPA-B shutdown is known, inform sot_yellow_alert.
  • Identify whether or not additional comm time is needed and if so ask the OC/LSE to request it.
  • Send an email to sot_red_alert and call a telecon with the FOT, SOT, and FDs to brief them on the diagnosis and the plan to develop a CAP to recover.
  • Prepare a CAP and submit it for review to capreview AT ipa DOT harvard DOT edu, and cc: acisdude. It will also be necessary to call the OC/CC to determine which number should be used for the CAP. The steps in the CAP will depend on whether or not the active BEP has executed a watchdog reboot. This may happen if the shutdown occurs during an observation that utilitizes the side B FEPs (side B powers FEPs 3-5), or if a subsequent observation requests them. Note that this implies that a watchdog reboot of the BEP will be avoided only if it occurs during an observation using only 1 or 2 CCDs, and until an observation occurs using 3 or more CCDs.
    1. If the BEP has not executed a watchdog reboot, the steps should be:
      • Turn on DPA side B (SOP_ACIS_DPAB_ON, this can be executed even if a science run is currently in progress, see note below).
    2. If the BEP has executed a watchdog reboot, the steps should be:
  • Execute the CAP at the next available comm.
  • Write a shift report and distribute to sot_shift to inform the project that ACIS is restored to its default configuration.

Note

At this point in the mission (Jan 2017), it is standard practice to power off unused FEPs to reduce power consumption and keep the electronics temperatures lower. For this reason, it is believed that it is safe to power on the DPA side B during a science run that does not use these FEPs. If this practice is changed later in the mission, this procedure may have to be revisited.

Impacts

  • Until the DPA-B is powered back on, science operations which require the use of the side B FEPs will be affected.
  • If it is necessary to warm boot the BEP, this will reset the parameters of the TXINGS patch to their defaults. They can be updated in the weekly load through a SAR.

Relevant Procedures

FOT Procedures

  • SOP_ACIS_DPAB_ON (PDF) (DOC)
  • SOP_61021_STANDBY (PDF) (DOC)
  • SOP_ACIS_WARMBOOT_DEAHOUSEKEEPING (PDF) (DOC)

CAPs

  • CAP 1055 (Commanding to Turn On DPA Side B and Warm Boot BEP Side A) (PDF) (DOC)