BOP Discussion

Chapter 3.
4 Blowout Preventer (BOP) 135
3.4 Blowout Preventer (BOP)
136 Chapter 3.4 Blowout Preventer (BOP)
3.4 Blowout Preventer (BOP)

This section provides a comprehensive, technical overview of the Deepwater Horizon blowout preventer stack
(BOP), including its design, maintenance, and testing history. It also details findings from the Transocean
investigation team on the actions taken by the drill crew to activate its various components during the well
event. The Transocean investigation team participated in the forensic investigation directed by the U.S. Coast
Guard (USCG) and Bureau of Ocean Energy Management, Regulation and Enforcement (BOEMRE) Joint
Investigation Team, as carried out by Det Norske Veritas (DNV). The investigation team reviewed and relied
upon the evidence that DNV has provided to date.
There are two basic types of blowout preventers (BOPs) ram and annular that come in a variety of
styles, sizes, and pressure ratings.1 A BOP stack is comprised of several individual blowout preventers serving
various functions that are assembled or stacked together, with at least one annular BOP on top of several ram
BOPs. These various BOPs can seal around the drill pipe, casing, or tubing; close over an open wellbore; or cut
through the drill pipe with steel shearing blades. The Deepwater Horizon BOP stack included seven individual
BOPs.
In normal drilling operations, primary well control is achieved by hydrostatic pressure: the weight of the drilling
mud counterbalances pressure from the reservoir and prevents hydrocarbons from flowing into the wellbore.
Should problems such as poor casing installation or improper mud control disrupt that balance, a well-control
event may occur.
The BOP stack serves as a secondary means of well control. When a formation influx occurs during drilling,
one or more BOPs are activated to seal the annulus, or wellbore, to shut in the well. Denser or heavier mud
is then circulated into the wellbore to re-establish primary well control. Mud is pumped down the drill string, up
the annulus, out the choke line at the base of the BOP stack, and then up the high-pressure lines on the riser
and through the choke manifold until the downhole pressure is controlled and the influx is circulated out of the
well. Once this kill weight mud extends from the bottom of the well to the top, the well is back in balance and
has been killed. With the integrity of the well re-established, operations may resume.2
The primary functions of the BOP stack include:

Confining well fluid to the wellbore3
Providing a means to add fluid to the wellbore4
Allowing controlled volumes of fluid to be withdrawn from the wellbore5
While performing these primary functions, the BOP stack also:

Regulates and monitors wellbore pressure6
Centralizes and hangs off (i.e., closes a set of pipe rams around the drill string and supports its weight)
the drill string in the wellbore7
Seals the annulus between the drill pipe and the casing to shut in the well8
Prevents additional influx from the reservoir into the wellbore9
Seals the well by completely closing off the wellbore if no pipe is in the hole10
Severs the casing or the drill pipe to seal the well in emergencies (e.g., loss of station keeping/
emergency disconnect)11
Chapter 3.4 Blowout Preventer (BOP) 137
3.4.1 The Deepwater Horizon BOP Stack

As deployed on the sea floor, the Deepwater Horizon BOP stack consisted of an upper section known as the
lower marine riser package (LMRP) and a lower section known as the BOP ram stack (lower BOP stack).
Combined, the two sections formed the BOP stack. See Figures 1 and 2.
The Deepwater Horizon BOP stack was manufactured and supplied by Cameron and built to American
Petroleum Institute (API) Specification 16A.12 As the operator, BP specified the number and configuration of
the individual BOPs. The Transocean crew regularly performed function and pressure tests on the BOP stack
in accordance with regulatory requirements. The forensic evidence from post-incident testing confirms that the
Deepwater Horizon BOP stack was properly maintained and that no maintenance deficiency contributed to the
incident. Appendices H, I, J, and K detail the modifications carried out, the maintenance performed, the testing
performed, and the minor leaks identified before and after the incident on the Deepwater Horizon BOP stack.
Post-incident testing shows that the BOP stack functioned and closed; however, it was overcome by the extreme
dynamic flow conditions created by the blowout.
Crew members on the bridge attempted to activate the emergency disconnect system (EDS), which is designed
to close the blind shear rams (BSRs) and detach the LMRP so that the rig can move away. The explosions on
the rig severed the communication link between the BOP stack and the rig, preventing surface control of the
EDS.13 As a result, efforts to activate the EDS from the bridge were unsuccessful.14
The loss of communication with the BOP stack triggered the automatic mode function (AMF), which activated
the blind shear rams. When the blind shear rams closed, a portion of the drill pipe cross section was outside of
the BSR shearing blades and became trapped between the ram block faces. This prevented the BSR blocks
from completely shearing the pipe, fully closing, and sealing, allowing fluids to continue to flow up the wellbore.
Deepwater Horizon LMRP Design

The Deepwater Horizon LMRP was comprised of the two control pods and two annular BOPs, among other
components.15 The top of the LMRP contained a crossover connection (LMRP riser adapter and flex joint) from
the marine drilling riser to the BOP stack. At the bottom was a hydraulically actuated connector similar to the
wellhead connector that locked onto the lower BOP stack. This arrangement was designed to allow the LMRP
to connect and disconnect from the lower BOP stack, remotely. Once separated from the lower BOP stack, the
rig could move away if needed, while the lower BOP stack remained on the subsea wellhead to seal and protect
the well. See Figure 1.
Annular BOP
Annular BOPs are located at the top of the BOP stack. While only one is required by regulation, two annular
BOPs were installed on the Deepwater Horizon LMRP.16 The Cameron DL Annular BOP has a donut like rubber
seal known as an elastomeric packing element, reinforced with steel ribs or inserts. The packing element is
situated in the annular BOP housing between the head and the top of the hydraulic piston. When the piston is
actuated, its upward movement forces the packing unit to constrict, sealing the annulus or open hole.17 Figure
3 is a cutaway view of a Cameron DL Annular BOP.
Riser Adapter
Flex Joint
Kill Line
Rigid Conduit Line
Blue Pod
Yellow Pod
Rigid Conduit Manifold
53.75 ft.
LMRP
Lower BOP Stack
Kill Line
BOP Outlet Valve and

HP Pipework
Wellhead Connector
Figure 1 The Deepwater Horizon BOP Stack
Riser
Flex Joint
Upper Annular
Lower Annular
LMRP Connector
ST Locks
Blind Shear Rams
Casing Shear Rams
Upper Variable Bore Rams
Middle Variable Bore Rams
Lower Test Rams
Wellhead Connector
Figure 2 Cutaway View of Deepwater Horizon BOP Stack Components
Head
Annular Element
(Elastomeric Packing Unit)
Annular Body
Piston
Figure 3 Typical Cameron DL Annular Blowout Preventer
Deepwater Horizon Lower BOP Stack Assembly

The lower BOP stack contains a series of ram BOPs that can be arranged in a variety of configurations
depending on the operators requirements. The operator specifies the configuration; the drilling contractor is
responsible for ensuring the BOP stack meets or exceeds regulatory requirements. Additional components on
the Deepwater Horizon lower BOP stack included choke and kill valves, a wellhead connector, and associated
piping.18
The Deepwater Horizon lower BOP was fitted with the following components:

One (1) Cameron Upper Ram type TL double-body BOP with ST Locks and sequence valves fitted to
the upper cavity and with super shear bonnets fitted to the lower cavity:
Blind shear ram: shearing blind ram subassemblies19
Casing shear ram: super shear ram subassemblies20
One (1) Cameron Ram type TL BOP single unit with ST Locks and sequence valves:
Upper pipe ram: variable bore ram subassembly21
One (1) Cameron Lower Ram type TL double-body BOP with ST Locks and sequence valves on both
cavities:
Middle pipe ram: variable bore ram subassembly22
Lower pipe ram: variable bore test ram subassembly23
One (1) Vetco Gray Super HD H-4 wellhead connector24
Ram BOP
A ram BOP essentially is a valve that uses a pair of opposing pistons and steel ram blocks. The ram blocks
extend through guide chambers (ram cavities) of the BOP housing (body) and extend (close) toward the center
of the BOP wellbore to halt returning flow, or are left retracted (open) to permit flow. The inner and top faces of
the ram blocks are fitted with elastomeric seals or packers that seal against the ram blocks, between each other,
against the drill pipe running though the wellbore, against the ram cavity, and against the wellbore.25 Outlets
at the sides of the BOP body are used for connection to choke and kill valves and piping.26 The three types of
rams, or ram blocks, in use on the Deepwater Horizon at the time of the incident were variable bore pipe rams
(VBRs), blind shear rams (BSRs), and casing shear rams (CSRs).27
Variable Bore Pipe Rams (VBRs)

Variable bore pipe rams can close around a range of tubing and drill pipe outside diameters.28 The Deepwater
Horizon was fitted with VBRs in the third, fourth, and fifth BOP ram cavities (counting from the top), which were
able to close around pipe with a diameter ranging from 3-1/2 in. to 6-5/8 in.29 Figure 4 provides a detailed view
of the VBRs.
At the request of BP, the VBRs in the fifth (bottom) ram cavity on the Deepwater Horizon were converted to test
rams in 2004.30 Test rams are VBRs inverted to seal pressure from above. Test rams reduce the time required
to prepare for BOP pressure testing, as well as the time required to resume drilling operations afterward. By
closing the test ram, the VBRs, annulars, and stack valves above can be pressure tested against the drill string
and the annulus without exposing the well below the BOP to test pressure.
Top Seals
VBR Packers
Figure 4 Typical Variable Bore Ram
Blind Shear Rams (BSRs)

Blind shear rams (also known as shearing blind rams or sealing shear rams) are designed to seal a wellbore
even when the bore is occupied by drill pipe by cutting through the drill pipe as the rams close off and seal
the well.31 The Deepwater Horizon was fitted with blind shear rams in the uppermost BOP ram cavity. Figure 5
provides a detailed view of the blind shear rams.
Upper Ram
Upper Shear Blade
Lower Shear Blade
Bottom Ram
Figure 5 Typical Blind Shear Ram
Shear Rams/Casing Shear Rams

Casing shear rams (also known as super shear rams) cut through heavy wall or large diameter pipe with
hardened steel shear blades but are not designed to seal the well.32 They typically are used for shearing the
heaviest drill pipe and casing. The Deepwater Horizon was fitted with casing shear rams in the second BOP ram
cavity from the top. Figure 6 provides a view of casing shear rams.
Upper Ram
Lower Ram
Figure 6 Typical Casing Shear Ram
Hydro-Mechanical Ram Locking Mechanism (ST Lock)

The Deepwater Horizon lower BOP ram stack (except for the super shear ram cavity) was fitted with hydromechanical ram locking mechanisms known as ST Locks.33 When the rams move to the closed position and
the ST Lock function is activated, hydraulic pressure moves the ST Lock stem and wedge assembly behind the
operating piston tail rod to lock it into the closed position. To keep the stem and wedge in the locked position, the
lock features an overhauling thread arrangement in which the nut rotation stops to lock the mechanism, even if
hydraulic pressure is removed or lost. See Figure 7.
Operating Piston Subassembly
Ram Block
ST Lock Body
Stem & Wedge Assembly
Nut with Overhauling Thread
Stem with Overhauling Thread
Figure 7 Deepwater Horizon ST Lock Arrangement in the Unlock Position
Wellhead Connector
The wellhead connector is attached at the bottom of the BOP stack and is used to lock the BOP stack onto the
wellhead.34 A metal gasket ensures pressure integrity between the connector and the wellhead. Because the
connector is hydraulically actuated, the BOP stack can be remotely attached or released from the wellhead.
Associated Equipment
Deepwater Horizon Diverter System
The diverter is an integral part of the mud control system, directing drilling fluids returning from the well into the
mud processing system.35 When required, the diverter is closed and flow from the well is directed either to the
mud-gas separator (MGS) or through flow lines overboard away from the drilling rig. The Deepwater Horizon
diverter is rated for a maximum working pressure of 500 psi36 with a 14in. diameter line to the MGS, as well as
a 14in. diameter port and starboard overboard flow lines.37 See Figure 8.
12 in. Vent Line to Crown
6 in. Vacuum Breaker
Mud Gas Separator
Mini Trip Tank
Diverter Housing
Starboard Overboard
Line
Gumbo Box &

Overboard Lines
Port Overboard Line

Trip Tank
Drilling Riser
Figure 8 Deepwater Horizon Diverter System
Deepwater Horizon Marine Drilling Riser Tensioner System

A riser tensioning system is required to allow movement of the floating drilling rig in concert with the rising and
falling of the sea. This system is attached to the marine drilling riser telescoping joint to support the marine
drilling riser column with a consistent and adjustable tension.38 This prevents buckling of the riser and maintains
a straight column for the rotating drill pipe. The Deepwater Horizon riser tensioner system had six Hydralift
800,000-lb. N Line tensioners located under the drill floor.39 See figure 9.
Moon Pool
Hydralift Riser Tensioners
Slip Joint Tension

Ring Connections
Figure 9 Deepwater Horizon Hydralift Riser Tensioner System
Marine Drilling Riser

The Deepwater Horizon marine drilling riser string, supplied by ABB Vetco Gray, was rated for 3.5 million lb.
of tensile load.40 The riser joints were 90 ft. long, and many were fitted with buoyancy modules to reduce the
amount of tension required to support and maintain stability of the riser string.41 See figure 10.
Each joint contains two 15,000psi high-pressure choke and kill lines, a stainless steel conduit line to supply the
BOP control fluid and a riser mud boost line. The riser joint consists of a pipe body with a flanged pin on one
end and a flanged box on the other, and it is joined with locking bolts that secure the flanges together.42
The drilling riser becomes a low-pressure continuation of the wellbore annulus from above the BOP stack, and
the drill pipe is routed through the marine drilling riser and the BOP stack.
Figure 10 Deepwater Horizon ABB Vetco Gray Riser with Buoyancy Modules
BOP MUX Control System and Secondary Systems

The Deepwater Horizon BOP had one primary and four secondary methods of controlling the subsea BOP
stack.
Primary
The primary means of operating the BOP was the electro-hydraulic/multiplex control system (MUX). The MUX
control system transmits electrical command signals to operate functions on the BOP. Commands from the
surface control panels are sent through cables to two subsea control pods located on the LMRP. The signals are
processed by the electronics located in the pods and converted to hydraulic signals that operate control valves
directing operating fluid to the BOP stack.43 Each control pod contains an assembly with two subsea electronic
modules (SEMs), two subsea transducer modules (STMs), pressure regulators, solenoid valves, subsea
hydraulic accumulators, and operating valves.44 The STMs monitor the hydraulic control system pressures and
the hydrostatic pressure acting on the BOP.45
Secondary
The four secondary means of BOP control included:

The emergency disconnect system (EDS)
The remotely operated vehicle (ROV) intervention panels
The auto-shear function
The automatic mode function (AMF)46
Emergency Disconnect System

The emergency disconnect system (EDS) is managed by the surface MUX control system. A single-button
activation initiates a pre-defined sequence of functions on the BOP stack to secure the well and disconnect the
LMRP.47 EDS is most frequently used to avoid damage to the BOP and wellhead if a dynamically positioned rig
unexpectedly moves off location.48
ROV Intervention Panels

The ROV intervention panel on the lower BOP stack provides a direct input for an ROV to apply hydraulic
pressure to five predetermined functions on the BOP (wellhead connector unlock; upper blind shear rams
close; lower pipe rams close; wellhead connector gasket release; and wellhead connector flush).49
The ROV intervention panel on the LMRP provides a direct input for an ROV to apply hydraulic pressure to four
predetermined functions on the LMRP (LMRP connector unlock; choke and kill connectors unlock; LMRP
accumulator dump; and LMRP connector ring gasket release).
Auto-shear Function
The auto-shear mechanically activates the high-pressure shear circuit to close the blind shear rams and ST
Locks if the LMRP is unexpectedly disconnected from the BOP stack.50
Automatic Mode Function

The automatic mode function (AMF) is an emergency backup located in the subsea control pods that activates
the high-pressure shear circuit to close the blind shear rams and ST Locks if hydraulic pressure and electric
power are lost to the BOP stack (e.g., in the case of riser failure).51
The AMF consists of a custom-printed circuit board supplied by Cameron, which is dedicated to the AMF
function. Major components associated with the AMF system include the following:

Two subsea electronic modules (SEM A and SEM B) are located in each of the pods for a total of four
SEMs on the BOP stack.A
AMF cards (one per SEM, two per pod, and four in the BOP system)
A dedicated 9-volt (V) DC battery pack per AMF card (one per SEM, two per pod, and four in the BOP
system)
27V DC battery pack shared for both SEM A and B (one per pod and two in the BOP system)
Solenoid 103 is energized to activate the high-pressure shear circuit for 30 seconds when the AMF is
activated
Dedicated subsea hydraulic accumulators to operate the functions commanded by the AMF
system 52, B
3.4.2 Condition of the Deepwater Horizon BOP Stack

To determine the condition of the Deepwater Horizon BOP stack at the time of the incident, the investigation
team reviewed data including but not limited to:

The history of modifications implemented over the life of the BOP
The maintenance history
Leaks that were identified before and after the incident
The test history of the BOP while on the Macondo well
Applicable engineering bulletins, product advisories, and product alerts
Interviews with Transocean maintenance personnel
Data gathered following other post-incident response activities
Modifications
After the Deepwater Horizon BOP stack was commissioned in 2001 and went into service, a total of 20
modifications were made to improve operability and reliability based on recommendations by Transocean,
BP, and/or Cameron. The investigation team concluded that none of the modifications adversely impacted
the operation of the BOP at the time of the incident. A detailed review of the modifications may be found in
Appendix H.
Cameron and Transocean websites were consulted for engineering bulletins, product advisories, and product
alerts concerning the BOP equipment, of which a total of 314 were identified. Of these, 73 had been completed,
113 did not apply to the Deepwater Horizon, and 127 were for information purposes only. While the status of
A
B
When functions are activated from surface controls, the signal is sent to the SEMs to carry out the command by energizing the respective solenoid
valves. The solenoid valves have two operating coils individually connected to one of the two SEMs in the pod so that either SEM can operate the
valve.
Eight each 80-gallon accumulators, 6,000 psi working pressure
one advisory could not be determined, it was found that this advisory did not have an effect on the operation of
the BOP on April 20, 2010.
Maintenance
Transoceans conditioned-based maintenance philosophy is designed to:

Ensure the integrity of safety, environmental, and operations equipment to deliver the required
performance and reliability throughout the assets life cycle
Preserve the installations, facilities, equipment, machinery, and structures to maximize the useful
working life of assets in a cost-effective manner
Manage maintenance activities using standardized processes, focusing on critical equipment, and
planning the work to ensure that it is carried out in a timely manner
Ensure maintenance activities are completed by competent equipment owners and maintenance
personnel
Minimize non-productive operating time through proper planning, execution, evaluation and continuous
improvements to the maintenance system
The Deepwater Horizon BOP was operated in accordance with the maintenance requirements of the Transocean
Subsea Maintenance Philosophy document.53 This document outlines the type and timing of maintenance to
be performed, including preventive and corrective maintenance, component condition evaluation, function and
pressure testing, and major overhauls.
The investigation team reviewed the Transocean maintenance management system and identified 752 tasks for
the BOP and subsea equipment to be performed during the preceding 365-day period. On April 20, 2010, only
four of 752 tasks were overdue. These tasks were related to the following equipment: (1) BOP pipe ram cavities,
(2) BOP stack LMRP connector, (3) choke control unit on the drill floor, and (4) surface choke and kill piping.
These maintenance tasks are briefly summarized below, and a detailed review can be found in Appendix I.
1. The annual maintenance to be performed on the ram blocks (including the piston end, the hydraulic
bonnet studs, and the operating BOP body threads) required non-destructive testing (NDT), inspection,
and service of the ram blocks over a 365 day interval; this was due to commence in January 2010.54 This
work can only be carried out while the BOP is at the surface and would have been completed during
the between-well maintenance at the end of the Macondo well. The independent forensic analysis
performed by DNV confirmed that the BOP pipe rams closed during the response to the well-control
incident, and this outstanding maintenance task did not adversely affect the operation of the BOP.55
2. The maintenance task requiring surface testing and operation of the LMRP connector to determine
connector wear is performed at 180 day intervals and was due to be performed on March 30, 2010. This
work can only be carried out while the BOP is at the surface and would have been completed during
the between-well maintenance after the rig left the Macondo well.56 During the course of operations at
the well, the BOP stack was pressure tested at regular intervals, and those tests confirmed the integrity
of the connector. See Appendix J. The LMRP connector did not contribute to the incident.
3. BOP choke control maintenance is performed at seven-day intervals and was scheduled to be
completed on April 16, 2010.57 The BOP choke control unit was not used during the incident and had
no affect on the well control response.
4. High-pressure choke and kill piping from the choke manifold to the moon pool required inspection and
service at 30 day intervals. This planned maintenance procedure had been performed on March 19,
2010, and was scheduled for April 18, 2010.58 The BOP choke and kill piping had been inspected and
used successfully before the incident and did not contribute to the incident.
As noted, none of the outstanding maintenance tasks adversely affected the operation of the BOP during the
well-control response. Routine operation and testing of the BOP prior to the incident, post-incident intervention
and recovery, and investigations to date have confirmed that the identified items and the BOP were operating
satisfactorily.
Minor Leaks
Five minor leaks were identified in the Deepwater Horizon BOP control system: three identified and assessed
pre-incident and two identified during the post-incident ROV intervention. A detailed review of the five minor
leaks, which had no adverse impact on the functionality of the BOP, may be found in Appendix K, and are as
follows:
Identified Pre-Incident:
1. Leak on the test ram open-side function
2. Leak on the accumulator surge bottle on the upper annular BOP
3. Leak on the lower annular close function
Identified Post-Incident:
4. Leak on a hose fitting to the lock function on the ST Lock circuit.
5. Leak on the tubing from the blind shear ram ST Lock sequence valve to the blind shear ram ST
Lock chamber
1. The test ram is the lowermost ram and is used during function and pressure testing of the BOP stack;
it is not used for well control and, therefore, could not have impacted the events of April 20, 2010.
The Transocean subsea team reported the small volume test ram leak to BP as reflected in the BP
Daily Operations Reports of Feb. 23March 13, 2010.59 The operation report identified the leak as
being on the yellow pod, and the drill crew switched to the blue pod to stop the leak and allow further
investigation.
2. On Feb. 19, 2010, a Transocean senior subsea supervisor identified a leak in the upper annular BOP
close circuit at the hose fitting to the upper annular surge bottle. The leak was detectable but very
small; at a set pressure of 1,500 psi, the leak rate was determined to be 0.1 gallons per minute (gpm).60
A leak of this size would not have adversely affected the operation of the upper annular BOP.
3. Transoceans senior subsea engineer noted a leak in the close function of the lower annular and
confirmed that it was very small and that the annular BOP would still close when needed. The flow
rate of the leak was confirmed to be about 0.1 gpm. The leak appeared as a tick, or a brief flickering
indication, on the hydraulic fluid flow meter located on the BOP control panel. The flow indication
appeared only when the lower annular BOP was in the closed position, and the subsea team did not
identify any fluid leaking externally from the system.61 Such a leak would not and did not impede the
functionality of the lower annular BOP. The lower annular BOP was used for the negative pressure test
but was not used during the well-control incident.
4. During the post-incident response efforts, when the ROV operated the pipe ram function on the ROV
intervention panel, the intervention team noted a leak on the lock function on the ST Lock circuit for
the BOP rams. The team used an ROV to retighten the hose fitting.62 This leak did not prevent the ST
Locks from operating and would not have impacted the well-control response.
5. Transocean identified a leak on April 26, 2010, in the tubing connection that runs from the blind shear
ram ST Lock sequence valve to the ST Lock chamber.63 The leak was not apparent until the pressure
on the ST Lock was above 4,000 psi. The BOP ram must be approximately 90% closed for a sequence
valve to open, allowing fluid to pass through to the ST Lock locking function and creating the conditions
for a leak in this location. The existence of this leak confirmed that the shear ram on this bonnet was
closed. Further, based on the ROV video, this leak was small and would not have prevented the ST
Lock from functioning.64
The five leaks identified above had no adverse impact on the functionality of the BOP. The leaks were small in
volume and would not have impacted the closing or sealing capabilities of the BOP stack.
Testing
The BOP stack is regularly maintained and pressure tested.65 Tests include function tests every seven days
and comprehensive pressure tests every 14 days. Testing is performed to verify the pressure containment
capability of the various BOPs and to identify any malfunctions that may require the BOP stack to be retrieved
and repaired.
See Table 1 for a complete list of all tests performed on the BOP while on the Macondo location. The BOP
passed each of these tests. See also Appendix J.
Test Conducted
Test Date
References
Function Test Both Pods

(Surface Pre-run)
February 5, 2010
Daily Drilling Report, February 5, 2010

(TRN-HCJ-00076220)
Pressure Test BOP

(Surface Pre-run)
February 6, 2010

(TRN-HCJ-00076224)
Function Test Diverter
February 9, 2010

(BP-HZN-BLY00101577)
Pressure Test BOP
February 9, 2010

Pressure Test BOP
February 10, 2010

(TRN-HCJ-00076236)
Function Test BOP
February 10, 2010

(TRN-HCJ-00076236)
Well Casing Integrity Test
February 10, 2010

(TRN-HCJ-00076236)
Pressure Test Upper Annular
February 12, 200

(DOC-00000162)
Function Test BOP
February 17, 2010

(TRN-HCJ-00076240)
February 17, 2010

(TRN-HCJ-00076240)
Pressure Test BOP
February 24, 2010

(TRN-HCJ-00076256)
Pressure Test BOP
February 25, 2010

(TRN-HCJ-00076260)
Function Test BOP
February 25, 2010

(TRN-HCJ-00076260)
February 25, 2010

(TRN-HCJ-00076260)
Casing Integrity Test
March 1, 2010
Daily Drilling Report, March 1, 2010

Table 1 Testing Performed on the BOP while on the Macondo Location
Test Conducted
Test Date
References
Function Test BOP
March 4, 2010

(TRN-HCJ-00076264)
March 4, 2010

(TRN-HCJ-00076264)
MMS BOP Test Extension
March 12, 2010

(BP-HZN-CEC019117)
MMS BOP Test Extension
March 13, 2010

(DOC-00000191)
Pressure Test BOP
March 15, 2010

(TRN-MDL-00011448)
Function Test BOP
March 15, 2010

(TRN-MDL-00011448
Function Test Blind Shear Rams
March 21, 2010

(TRN-MDL-00026217)
Pressure Test Blind Shear Rams
March 21, 2010

(TRN-MDL-00026217)
Function Test BOP
March 22, 2010

(TRN-OIG-00154567)
March 26, 2010

(TRN-HCJ-00076276)
March 26, 2010

(TRN-HCJ-00076276)
March 26, 2010

(TRN-HCJ-00076276)
Function Test BOP
March 27, 2010

(TRN-HCJ-00076280)
Pressure Test BOP
March 27, 2010

(TRN-HCJ-00076280)
Test Diverter
March 31, 2010

(TRN-HCJ-00090932)
April 1, 2010
Daily Drilling Report, April 1, 2010

(TRN-HCJ-00090935)
April 1, 2010

(TRN-HCJ-00090935)
Function Test BOP
April 3, 2010

(DOC-00000212)
Table 1 (contd)
Test Conducted
Test Date
References
April 3, 2010

(DOC-00000212)
April 8, 2010

(TRN-HCJ-00090959)
April 8, 2010
Pressure Test BOP
April 9, 2010

(TRN-OIG-00154585)
Pressure Test BOP
April 10, 2010

(TRN-OIG-00154589)
Function Test BOP
April 10, 2010

(TRN-OIG-00154589)
April 10, 2010

(TRN-OIG-00154589)
Function Test BOP
April 17, 2010

(TRN-HCEC-00065051)
April 17, 2010

(TRN-HCEC-00065051)
April 17, 2010

(TRN-HCEC-00065051)
April 19, 2010

(TRN-MDL-00011512)
April 20, 2010

(TRN-MDL-00011518)
April 20, 2010

(TRN-MDL-00011518)
Table 1 (contd)
Conclusions on the Condition of the Deepwater Horizon BOP

The BOP stack and BOP control systems were maintained in accordance with the company maintenance
management system. The modifications to the BOP stack, identified in Appendix H, maintained or improved
performance. The leaks identified prior to the incident did not adversely impact the functionality of the BOP
stack. The BOP stack was fully operational, and there were no known maintenance deficiencies on April 20,
2010, that would have adversely impacted the BOP stack.
3.4.3 BOP Activation

When flow in the well was detected at approximately 9:42 p.m., the drill crew took the following actions:

Closed the upper annular BOP element66
Alerted BP and Transocean personnel onboard the rig
Closed the diverter packer (seal within the diverter housing just below the rig floor) and diverted the
flow to the MGS67
Closed the upper and middle variable bore rams (VBRs) at approximately 9:47 p.m.68
Upper Annular BOP Closed

Prior to displacement operations, it is typical for the
driller to locate and position the drill pipe tool jointC
in the BOP, to ensure that a continuous length of drill pipe of
uniform diameter runs through the rams, allowing the rams
to properly close around the drill pipe and not on the larger
diameter tool joint, for which they are not designed.69
At the time of the incident on April 20, 2010, the extreme flow
rate from the well created sufficient force to lift the drill string,
moving the tool joint up and partly into the upper annular
BOP element.70 This position of the tool joint was confirmed
from the pipe sections recovered with the riser joint at the
NASA Michoud facility. The analysis compared the distance
between the BOP rams and annulars to the drill pipe from the
BOP stack and riser, along with markings on the drill pipe.
See Appendix L.71
FLOW RATE IN CONTEXT

When the annular closed at approximately 9:43

p.m., the flow rate from the well at the BOP was
approximately 100 barrels per minute (bpm).
A typical flow rate for a kick is 1015 bpm.
1 bbl is equal to 42 gallons, and a typical residential swimming pool is roughly 10,000 to 20,000
gallons.
Thus, a flow rate of 100 bpm would fill a typical

backyard swimming pool every 2.55 minutes.
Figure 11 Drill Pipe Tool Joint Lifted by Flow into Upper Annular
A tool joint is where two sections of pipe are threaded together, resulting in a larger diameter segment.
Figure 11 shows the drill pipe tool joint in the upper annular BOP element stack as a result of the upward force
from the flowing well.
At approximately 9:41 p.m., the drill crew directed flow to the trip tank to monitor the well and observed a rising
fluid level in the tank.72 The drill crew activated the upper annular BOP from the drill floor at approximately 9:43
p.m.73 During the 26 seconds required for the annular BOP to fully close,74 hydrocarbons and well debris flowed
with increasing velocity between the rubber annular BOP packing element and the drill pipe tool joint. This flow
eroded both components, carving a flow path for hydrocarbons through the annular BOP packing element and
into the riser.
Figure 12 Drill Pipe Erosion
Figure 12 depicts the erosion of the drill pipe and annular BOP during the initial attempt to shut in the well and
shows the eroded drill pipe recovered from the Deepwater Horizon riser at the NASA Michoud facility. The
distance between the upper and lower fingers of the annular element is 18 in., which corresponds to the section
of drill pipe shown in the figure.75 The contact with the lower fingers can be clearly identified on the tool joint. The
erosion on the upper section of the drill pipe aligns with the area of the upper fingers of the annular element.
Diverter Packer Closed

The gas expanded as it moved up the riser, pushing mud onto the drill floor.76 The drill crew closed the diverter
packer to redirect the flow from the well to the MGS pursuant to BP and Transocean standard practice.77 As the
flow from the well increased due to the rapid expansion of gas in the riser, the flow rate exceeded the capacity
of the MGS.78 At approximately 9:48 p.m.,79 witnesses said mud began flowing out of the MGS vacuum breaker
line located halfway up the derrick, and fluid overflow from the MGS filled the mini trip tank.80 See Figure 13.
Variable Bore Rams Closed

Although the drill crew had closed the upper annular BOP, hydrocarbons continued to flow through the washedout rubber packing element and around the eroded drill pipe. The drill crew then closed the upper and middle
VBRs at approximately 9:47 p.m. The closing of the VBRs stopped the flow through the annulus and caused
pressure inside the drill pipe to increase to 5,750 psi at the surface at approximately 9:49 p.m., as recorded on
the last transmission of real-time data.81, D
Additional evidence confirming closure of middle and upper ram BOPs by the driller includes:
Upper VBRs

No ROV intervention occurred to the upper VBRs post incident, which indicates the upper VBRs had
been closed by the drill crew prior to the post-incident ROV intervention.82
Radiographic surveys were completed by May 15, 2010, and indicated that the rams were closed and
the ST Locks were locked.83
When the yellow pod was re-deployed from the Q4000 oilfield service vessel and the upper VBRs close
function was activated on May 26, 2010, the flow count was 0.4 gallons, confirming that the VBRs were
closed. (Normal close volume is approximately 24 gallons.) This process was repeated a second time
to confirm.84
The upper VBRs were found closed during a video camera inspection of the BOP on board the Q4000
on Sept. 9, 2010.85
Middle VBRs
ROV intervention on May 5, 2010, cut the blue pod middle VBR close hose to the shuttle valve, installed
an ROV connection, and pressured the function with a subsea accumulator bank.86 The middle VBRs
pressured up immediately to 3,500 psi with no indication of flow, confirming the rams were closed
previously by the drill crew.
Radiographic surveys were completed by May 15, 2010, and indicated that the rams were closed and
that the ST Locks were locked.87
The middle VBRs were found closed during the BOP forensic inspection at NASA Michoud.88
The kill line was lined up with the BOP upper kill valves open to the wellbore. When the upper VBRs were closed, the kill line was isolated from the
well. At approximately 9:47 p.m., pressure in the kill line dropped rapidly and the pressure in the drill pipe increased rapidly, indicating that the VBRs
were closed
Figure 13 illustrates the path of return flow to the MGS after the diverter was closed.
Mud Gas Separator
Overboard Line
Gumbo Box
Diverter Housing
Overboard Line
Overboard Chute
Figure 13 Path of Return Flow after Diverter was Closed and then Overcome
Drilling Riser
Figure 13 Path of Return Flow after Diverter was Closed and then Overcome
Drill Pipe Bows in the BOP

Once the variable bore rams (VBRs) were closed, the shut-in well pressure below the rams increased to more
than 7,000 psi, and the force of the pressure pushing upward on the drill pipe exceeded 150,000 lb.89, E The
drill pipe tool joint was restrained by the upper annular BOP packing element as well pressure forced the drill
pipe upward, bowing the drill pipe in the BOP bore between the upper VBRs and the upper annular packing
element.90
The rig lost power at 9:49 p.m., followed by explosions and fires resulting in a loss of station keeping ability.91 As
the Deepwater Horizon drifted off location, the drill pipe was pulled between the traveling block on the rig floor
and the BOP stack. At the BOP stack, the internal drill pipe pressure at the upper annular continued to climb
above 8,000 psi.F Within minutes, the forces ruptured the drill pipe above the upper annular where the pipe had
been weakened by severe erosion.92
Figure 14 illustrates the rupture in the drill pipe above the upper annular BOP.
The well flow previously was contained below the VBRs but now flowed through the ruptured drill pipe above
the upper annular BOP. The Deepwater Horizon then drifted farther off location, pulling on the drill pipe until it
parted at the rupture. Inspection of the parted drill pipe and drift-off calculations indicate that there likely was
sufficient tension to part the ruptured drill pipe within six minutes after power loss.
Figure 15 illustrates the moment when the pipe parted due to the tension in the drill string; the photo demonstrates
the tensile failure of the drill pipe.
3.4.4 Automatic Mode Function Activation (AMF)

The Deepwater Horizon BOP and multiplex (MUX) control system were fully operational at the time of the
incident, and the drill crew successfully operated several functions the upper annular BOP, two sets of VBRs,
and the diverter in response to the well-control event.93 The explosions on the rig severed the communication
link between the BOP and the rig, preventing surface control of the BOP emergency disconnect system (EDS).94
As a result, efforts to activate the EDS from the bridge were unsuccessful.95
The explosions and fire subsequently damaged or destroyed the BOP secondary hydraulic supply line hose
and the BOP MUX control cables, resulting in the loss of hydraulic supply pressure and electrical power to the
BOP. This, in turn, automatically activated the AMF system in both the blue and yellow pods. The AMF activated
the high-pressure shear circuit to close the blind shear rams utilizing the stored hydraulic pressure in the
accumulator bottles mounted on the lower BOP stack. Pressure from the accumulators closed the blind shear
rams (BSRs) and activated the ST Locks on all of the closed rams (BSRs, upper VBR, and middle VBR). See
Figures 16 and 17. When the BOP is operated from the surface via the control panels, the ST Locks are not
automatically engaged; this is a manual function performed by the drill crew. The fact that the ST Locks were
engaged on the BSRs and both VBRs confirms that the high-pressure shear circuit was activated by the AMF.G
E 5.5-in. drill pipe = 23.75 in.2 x 7,000 psi = 166,250 lb. lift.
F 5,750 psi surface pressure plus the hydrostatic pressure of seawater in the drill pipe.
G The Deepwater Horizon ST locks were not functioned as a standard practice when the BOP was subsea except for hurricane abandonment prior
to disconnect of the LMRP from the lower BOP stack. It was unlikely that the driller/toolpusher activated the ST Lock lock function after closing the
upper and middle VBRs. All functions on the MUX pods shifted to the vent position when power was lost to the pods. Closing pressure was then
vented to the upper and middle VBRs. The rams stay closed with the assistance of adequate wellbore pressure. The AMF system fired the HP
shear circuit locking the ST Locks behind the upper and middle VBRs moments after the power was lost to the pods. If the AMF had not fired, the
rams would have had to have been held closed by only the wellbore pressure for 33.5 hours until the auto-shear pin was cut by an ROV. When the
auto-shear pin was cut on April 22, 2010, at 7:30 a.m., there was no indication of fluid discharge from the control pods indicating that the BSR and
the ST Locks were already in the closed and locked position. If the BSR was still open, approximately 30 gallons of fluid would visibly discharge
from the open side of the BSR and ST Locks.
Condition of Yellow Pod

The yellow pod was fully functional at the time of the incident.
The yellow pod was retrieved from the BOP 15 days after the incident and transferred to the Q4000, the vessel
used to assist with BOP intervention and other support activities.96 The pod was inspected, tested, and prepared
to operate the Deepwater Horizon BOP system for the post-incident response.H During the inspection of testing
of the yellow pod, it was determined that:

The AMF batteries registered acceptable voltage levels (8.85V for both 9V SEM battery packs and 26V
for the 27V battery pack).97
Solenoid 103 (for the HP shear circuit) did not function mechanically when activated with one SEM at
a time (two SEMs per pod). Solenoid 103 was replaced with a spare solenoid and taken into evidence
by the JIT investigation.
Solenoid 3A (for the upper annular regulator increase) did not function mechanically when activated
with one SEM at a time (two SEMs per pod). Solenoid 3A was replaced with a spare solenoid and taken
into evidence by the Joint Investigation Team.
The AMF system was re-tested and functioned as expected and designed.98
The yellow pod was lowered and latched to the Deepwater Horizon BOP on May 19, 2010. The pod was used
to operate functions remotely from the Q4000 on the rig BOP stack for 114 days up until the BOP was loaded
on the barge to be sent ashore on Sept. 10, 2010.
Drill Pipe Rupture
Drill pipe rupture
Figure 14 Rupture of Drill Pipe at Upper Annular BOP
The yellow pod AMF system was tested at NASA Michoud on March 3, 2011, with the original solenoid 103
installed. Testing of the yellow pod produced the following findings:

The AMF batteries were still at acceptable voltage levels (8.67V for SEM A and 8.44V for SEM B 9V
battery packs, and 28.15V for the 27V pod battery pack).
Original solenoid 103:
Functioned hydraulically as designed with no leaks
Functioned every time with both SEM A and SEM B activated (direct activation of the Portable Electronic
At all times during the process, a representative from the U.S. Coast Guard and the Bureau of Ocean Energy Management, Regulation and
Enforcement (BOEMRE) was present to witness all work on the pod.
Test Unit (PETU) or by the AMF system)

While technicians incorrectly described the E-cable and plug assembly as non-OEM supply, the parts
were in fact made by Camerons supplier. The E-cable and plug assembly were new when installed on
the yellow pod in February 2010, prior to deploying the BOP on the Macondo well.
Three functions of the AMF system were tested with SEM A and SEM B armed according to normal
operating conditions when the BOP is subsea. The AMF functioned as expected and designed each
time, functioning Solenoid 103 and pressurizing the pilot line to the HP shear circuit.99
Further testing of Solenoid 103 at NASA Michoud is ongoing at the time of publication of this report.
Drill pipe parted under tension
Figure 15 Tensile Separation of Drill Pipe at Upper Annular
Investigation Team Findings

Testing performed on the yellow pod at NASA Michoud confirms the AMF system activated solenoid 103, and
solenoid 103 activated the HP shear circuit to close the BSRs at the time of the incident.100
Condition of Blue Pod

The blue pod was fully functional at the time of the incident.
The blue pod was retrieved from the BOP 74 days after the incident and loaded onto the Discoverer Enterprise,
a Transocean drillship on site to assist with post-incident activities.101 The pod was inspected, tested, and
prepared to operate the Deepwater Horizon BOP for the post incident response.I
During the surface inspection and testing of the blue pod, it was found that:

The AMF battery voltage levels were recorded at 8.87V for SEM A 9V, 0.142V for SEM B 9V battery
pack, and 7.61V for the 27V battery pack.102
The blue pod AMF system was tested and did not initiate the sequence (i.e., solenoid 103 was not
activated due to low 27V battery power).103
When 230V power was re-applied from the PETU to the pod, the AMF system initiated and completed
the sequence and activated solenoid 103.104
I At all times during the process, a representative from the U.S. Coast Guard and the BOEMRE was present to witness all work on
the pod.
ST Locks
Blind Shear Rams
Casing Shear Rams
Upper Variable Bore Rams
Middle Variable Bore Rams
Lower Variable Bore Rams
Figure 16 Position of Blind Shear Rams and VBRs Following AMF Activation.
Ram Block
Locked Position
Operating Piston Subassembly

Locked Position
Stem and Wedge Assembly
Stem and Nut with

Overhauling Thread
Figure 17 Blind Shear Ram ST Lock in Locked Position Following AMF Activation
The blue pod was lowered and latched to the Deepwater Horizon BOP on July 9, 2010. The pod was ready but
not used for the incident response. It was recovered with the BOP in September 2010.
The blue pod AMF system was tested at NASA Michoud on March 3, 2011, with the following results:

The AMF battery voltage levels were recorded at 8.90V for SEM A 9V battery, 8.61V for SEM B 9V and
0.71V for the 27V battery pack.105
It was determined by the NASA engineer at Michoud that the initial battery voltage readings taken in
July 2010 on the Discoverer Enterprise were incorrectly measured by the technician. The readings
taken on the pod at Michoud were verified three times and are correct.
The AMF system was tested and did not initiate the sequence.106
When 230V power was re-applied from the PETU to the pod, the AMF system completed the sequence
and activated solenoid 103.107
SEM A AMF processor was inactive, confirming that it had completed the sequence and shut down as
designed.
SEM B AMF processor was active, confirming that it had not completed the sequence due to a low
amperage 9V battery pack.
Further inspection of the blue pod AMF system is ongoing at NASA Michoud at the time of publication
of this report.
Voltage measurements taken on the blue pod 9V AMF batteries showed that they were at satisfactory voltage
levels; however, voltage tests alone are not indicative of the battery condition. The batteries must be tested
under load to determine whether sufficient energy remains to operate the AMF processor.
Investigation Team Findings

The 9V battery for SEM B in the blue pod did not have sufficient power to boot the AMF processor, which
triggered a cycle that attempted activating the process every three minutes, reducing battery charge each
time. The AMF cards have a low voltage drop out feature that prevents the 9V battery from powering the
Programmable Logic Controller (PLC) when voltage is less than 5V. This allows the 9V battery to rest and
regenerate; however, a higher voltage reading is not indicative of the remaining stored energy. The investigation
team demonstrated this phenomenon in the lab where a 9V battery was drained to 0V at 32F. The voltage
readings increased as the battery returned to room temperature but tested near 0V when put under load,
indicating that voltage readings alone are not a valid indicator of battery condition.
Once the AMF is armed at the surface control panel, upon loss of power from the rig to the BOP, the 27V battery
will power the subsea transducer module (STM) that measures surface hydraulic and subsea hydrostatic
pressures that are parameters used to activate the AMF sequence. The 27V battery remains connected to the
STM while both SEM PLCs boot, execute, then reset and disconnect the 27V battery from the STM. In the case
of the blue pod, SEM B PLC did not boot or reset (indicating low 9V battery power). From the time of the incident
until the blue pod was recovered 74 days later on the Discoverer Enterprise, the SEM B AMF card continued to
cycle the 27V battery power to the STM transducers each time the AMF card initiated the restart process, thus
draining the 27V battery pack. The dead 27V battery combined with SEM B not re-setting during the AMF test
at the NASA Michoud facility indicates the blue pod AMF activated on SEM A at the time of the incident.
Testing performed by the investigation team is further explained in Appendix N, and testing performed on the
blue pod at NASA Michoud indicated that the AMF system activated solenoid 103 on SEM A, and then solenoid
103 activated the HP shear circuit to close the BSRs at the time of the incident.108
3.4.5 Blind Shear Rams

Within minutes after the first explosion, communication from the rig to the pods was lost, and the AMF activated
the high-pressure shear function to close the BSRs. Forensic evaluation by DNV revealed that a portion of
the drill pipe cross section was outside of the BSR shearing blades and became trapped between the ram
block faces, preventing the blocks from completely shearing the pipe and fully closing and sealing. This also
prevented upward movement of the drill pipe and exposed it to further flow wash at the upper annular.109 The
resulting flow path allowed the high-pressure fluid to wash around and through the BSR ram blocks, the BOP
stack, and the drill pipe.110 The erosion around the BSR from the washout is shown in Figure 18. Hydrocarbons
flowed up through the drill pipe held in the VBRs, around the flow-washed areas of the BSRs, around the tool
joint in the annular BOP element, and up the drilling riser.
Approximately 30 minutes after the fire began, the drill line (hoisting cable) severed completely and the traveling
block fell to the rig floor.111 The drill pipe held by the top drive fell, and the severed bottom of the drill pipe landed
on the partially closed upper annular BOP element.112
Upon shearing and subsequent parting of the drill pipe at the BSRs, pressure and fluid flow forced the section
of pipe above the BSRs up through the upper annular BOP element and into the riser.113, J
Figure 19 illustrates the sheared pipe being forced above the annular from the flow of hydrocarbons.
At 7:30 a.m. on April 22, 2010, an ROV cut the auto-shear plunger pin mounted on the lower BOP stack to
activate the high pressure shear circuit using the remaining pressureK in the eight 80-gallon accumulators
mounted on the lower BOP stack to close the blind shear rams. The blind shear rams may have been closed
further by this action.
At 10:30 a.m. on April 22, 2010 the Deepwater Horizon sank, and the riser pipe buckled 4 ft. above the riser
adapter, trapping the two sections of drill pipe in the bent section of riser. Figure 20 shows the final position of
the riser. Table 2 and Figure 21 show the details of the drill pipe segments recovered from the riser and the
BOP during the forensic analysis of the Deepwater Horizon BOP by the JIT at the NASA Michoud facility. See
Appendix L.
3.4.6 Flow through the BOP

As previously outlined, the BOP is used to seal the wellbore in the event that the well becomes underbalanced
and hydrocarbons enter the wellbore and begin to displace the drilling mud to the surface.114 The investigation
team has concluded that the Deepwater Horizon BOP stack functioned but was unable to seal off the well as it
was overcome by the conditions created by the extreme dynamic flow.
The Deepwater Horizon BOP stack included a total of seven BOPs. Five BOPs were used for sealing wellbore
pressure, including two annular preventers, two variable bore rams (VBRs), and one blind shear ram (BSR)
preventer. The other two BOPs were a non-sealing casing shear ram (CSR) and a test ram.
The five sealing barriers of the Deepwater Horizon BOP stack are designed to contain wellbore pressures
as high as 15,000 psi (10,000 psi for the upper annular BOP element; 5,000 psi for the lower annular BOP
element). However, they are tested in static conditions and were not analyzed by the manufacturer to determine
limits on containing dynamic flows.115 All of these barriers use replaceable rubber seals that were newly installed
prior to arrival of the rig at the Macondo well. The BOP stack and components frequently were function and
pressure tested prior to and during the drilling of the Macondo well.
BOP design requirements from the API do not address sealing on high flow rates. High flow rates primarily affect
the sealing of the rams, the ram packers, and the annular packers.116 API provides only minimal guidance on the
design of these elements because the manufacturer controls the design.117 Additionally, all design verification
J
K
The timing for this event is known to be after the pipe parted and before the Deepwater Horizon sank.
The AMF activated the high pressure shear circuit minutes after the explosions and fires utilizing approximately 30 gallons of the stored fluid in
the eight 80-gallon accumulators mounted on the lower BOP. When the AMF vented off the high pressure shear circuit, 30 seconds after it was
activated, the remaining pressure in the accumulator bottles was preserved for use when the auto-shear plunger activated the high pressure shear
circuit.
testing of the rams, and the ram and annular packers, is performed in static conditions.118
If there is flow from the formation into the wellbore, the expansion of gas as it migrates up the wellbore will
displace the drilling mud through the BOP stack. A significant expansion of a gas influx will push the flow
velocities to a point where they exceed the capabilities of the BOP stack and may prevent ram and annular
BOP elements from effectively sealing the well. During high-velocity well flow conditions, when ram or annular
BOP elements are closing, the flow area in the bore of the BOP gradually is reduced, resulting in even higher
flow velocity and pressure.119
Erosion of BOP Body

and Ram Block
Figure 18 Eroded Area 2 around the Blind Shear Ram
Riser collapsed after

Deepwater Horizon
sinks
Sheared section of
drill pipe forced above
upper annular
Two lengths of drill pipe

trapped in riser
Figure 19 Sheared Drill Pipe Forced

through Upper Annular
Figure 20 Final Position of Riser
The ram and annular BOPs do not close instantaneously to seal the wellbore. They are activated by hydraulic
fluid moving pistons and, therefore, take seconds to move from the open to closed position (16 seconds for
ram BOPs and 26 seconds for annular BOPs of the Deepwater Horizon BOP stack).120 When BOPs are closed
during high-velocity conditions, increased jetting pressure and fluid flow may damage the seals and prevent the
annulars, VBRs, and BSRs from sealing, thus preventing isolation of the wellbore flow. Leakage through ram
or annular BOP elements would continue to erode the BOP components and allow the influx of hydrocarbons
to continue.
3.4.7 Blowout Preventer (BOP) Findings of Fact

The findings from the investigation team and those of independent industry experts conclude the following:

The Deepwater Horizon BOP and MUX control system were fully operational at the time of the incident
and functioned as designed.
The equipment was maintained in accordance with Transocean requirements, and all implemented
modifications maintained or improved the performance of the BOP.
Minor leaks identified pre-incident did not adversely affect the functionality of the BOP.
Upon detection of the flowing well, the drill crew shut in the well by (1) closing the upper annular BOP;
(2) closing the diverter packer and diverting the flow to the mud-gas separator; and (3) closing the
upper and middle VBRs, which initially sealed the well.
The high flow rate of hydrocarbons from the well prevented the annular BOP element from sealing on
the drill pipe and subsequently eroded the drill pipe in the sealing area.
Increased pressure inside the drill pipe and external damage caused by erosion ruptured the drill pipe,
allowing hydrocarbons to flow up the riser. The drill pipe then parted as the Deepwater Horizon drifted
off location.
The explosions and fire severed the communication link between the BOP and the rig, preventing
activation of the BOP emergency disconnect system (EDS) from the toolpushers control panel.
The automatic mode function (AMF) operated as designed to close the blind shear rams following the
explosion.
High pressure bowed the drill pipe partially outside of the BSR shearing blades, trapping it between
the ram blocks and preventing the BSR from completely shearing the pipe, fully closing, and sealing.
Description
Length
234
XX
Bottom of upper annular element to the center of the blind shear ram
Start of the flow-wash damage to the tool joint connection break
AA-1
Tool joint connection break at flow-wash end to the riser shear cut
111.5
AA-2
Riser shear cut to saw cut section
7.5
AA-3
Section recovered from inside the upper annular in the Deepwater Horizons LMRP
109
AA
BB
CC
234
43.5
42
142
142
420
XX
Total length of drill pipe section
Center of the blind shear ram to center of casing shear ram
Section recovered from below the BSR and above the CSR
Center of the casing shear ram to the center of the lower test rams
Section recovered from below the CSR that extends to the lower test rams
Bottom of upper annular element to the center of the lower test rams
Tool joint connection to the start of the flow-wash damage on the tool joint
AA-1
Upper tool joint connection break at flow-wash end to riser shear cut
111.5
AA-2
Riser shear cut to saw cut section
7.5
AA-3
109
BB
Section recovered from below the BSR and above the CSR
42
CC
Section recovered from below the CSR that extends to the lower test rams
142
DD
418
552
EE-1
Total length of drill pipe section (AA + BB + CC)
Nominal Length of the Deepwater Horizons S-135 Drill Pipe = (+/- 6 inches)
Upper section recovered from the riser joint above the BOP
388
EE-2
136
EE-3
Flow-washed tool joint connection to failed end
27
EE
Total length of upper drill pipe section
551
Table 2 Drill Pipe Measurements (Refer to Figure 22)
(inches)
EE
AA
DD
BB
CC
Figure 21 Drill Pipe Location in the BOP at the Time the BSR Cut the Pipe
1.
University of Texas, Petroleum Extension Service, A Primer of Oilwell Drilling, Seventh Edition, 2008, 184, 207, 223, 224.
2.
The University of Texas, Petroleum Extension Service, A Primer of Oilwell Drilling, Seventh Edition, 2008, 184188.
3.
4.
5.
Ibid.
6.
Ibid.
7.
American Petroleum Institute, Recommended Practices for Blowout Prevention Equipment Systems for Drilling Wells, RP 53,
Third Edition, March 1997, 3.1.42, 4.
8.
The University of Texas, Petroleum Extension Service, A Primer of Oilwell Drilling, Seventh Edition, 2008, 184, 186.
9.
Ibid.
10. Ibid.
11. The University of Texas, Petroleum Extension Service, A Primer of Oilwell Drilling, Seventh Edition, 2008, 184, 227.
12. American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, December 1997.
13. Testimony of Curt Kuchta, Hearing before the Deepwater Horizon Joint Investigation Team, May 27, 2010, 171:17172:4;
Testimony of Chris Pleasant, Hearing before the Deepwater Horizon Joint Investigation Team, May 28, 2010, 105:23106:7;
Testimony of Jimmy Harrell, Hearing before the Deepwater Horizon Joint Investigation Team, May 27, 2010, 10-1711:10.
14. Testimony of Jimmy Harrell, Hearing before the Deepwater Horizon Joint Investigation Team, May 27, 2010, 1222; Testimony
of Chris Pleasant, Hearing before the Deepwater Horizon Joint Investigation Team, May 28, 2010, 132:925; Testimony of Steve
Bertone, Hearing before the Deepwater Horizon Joint Investigation Team, June 20, 2010, 41:715.
15. Cameron, R&B Falcon Deepwater Horizon TL BOP Stack Operation & Maintenance Manual, Initial Release, Rev. A, September
2000, 1-16, 1-17; Vastar Resources Inc. and R&B Falcon Drilling Co., Exhibit B-2 of Drilling Contract RBS-8D, Semisubmersible
Drilling Unit, Contract No. 980249, Dec. 9, 1998, E.2.9, 33, E.3.2, 33.
2000, 17, 111.
17. American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, December 1997, 3.1.6, 4.
2000, 17, 18, 111.
2000, 37, 38, 334, 338.
20. Ibid.
21. Deepwater Horizon TL BOP Stack Operation & Maintenance Manual, Initial Release, Rev. A, September 2000, 310, 311, 337.
22. Deepwater Horizon TL BOP Stack Operation & Maintenance Manual, Initial Release, Rev. A, September 2000, 34, 35, 337.
23. Ibid.
24. ABB Vetco Gray, Databook, A-2.
2000, 1-8, 1-11; Vastar Resources Inc. and R&B Falcon Drilling Co., Exhibit B-2 of Drilling Contract RBS-8D, Semisubmersible
Drilling Unit, Contract No. 980249, Dec. 9, 1998, 32, 33.
2000, 3-34, 3-37, 3-38.
28. American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, 5, December 1997, 3.1.56, 5.
2000, 3-37.
30. George Coltrin e-mail to Darrell Boudreaux, et. al., Oct. 19, 2004, BP-HZN-BLY00056058; Cameron Field Service Order 121096,
January 3, 2005, CAM_CIV_0011451; Change Proposal, Proposal No. SS-10, Deepwater Horizon, BOP Test Rams, Nov. 21,
2004.
32. Cameron, Cameron Engineering Bulletin EB 852D, Rev. A1, Oct. 30, 1998, 7; IADC Deepwater Well Control Guidelines, First
Edition, October 1998, 3.1.2, 3-3.
33. Deepwater Horizon TL BOP Stack Operation & Maintenance Manual, Initial Release, Rev. A, September 2000, 1-7, 1-11.
34. ABB Vetco Gray, Field Service Manual for R&B Falcon RBS8D 21 HMF H Marine Riser System and Wellhead Connector
Manual, FSM00105, June 2000, 1, Part 1.1, Operating & Service Procedure 6192, BP-HZN-BLY00031145.
35. American Petroleum Institute, Recommended Practice for Diverter Systems Equipment and Operations, RP64, Second Edition,
November 2001, 5.1, 6-7.
36. Hydril, R&B Falcon RBS-8D Deepwater Horizon, Hydril S.O. 615911 P.O. 087 00014, FS 21x60-500 Diverter Housing, FS 21x60500 Diverter, FS 21x60-500 Handling Tool, June 23, 2010, 1-1 1-3, 3-5 (Table 3-2).
37. Hydril, R&B Falcon RBS-8D Deepwater Horizon Hydril S.O. 615911 P.O. 087-00014, June 23, 2000, 1-1 to 1-5.
38. American Petroleum Institute, Recommended Practice for Design, Selection, Operation and Maintenance of Marine Drilling Riser
Systems, 16Q (RP 16Q), First Edition, November 1, 1993, 2.4.1, 6, 7 (Figure 1-1).
39. Hydralift, Reading & Bates RBS8D Deepwater Horizon N-Line Drilling Riser Tensioner System Operation and Maintenance
Manual P/N HA13862, Rev. A, Initial Release, 10/06/00, Revision: B- As Builts, 10.06.00, 2, 2 of 8 (11 of 267).
40. ABB Vetco Gray, Field Service Manual for R&B Falcon RBS8D 21 HMF-H Marine Riser System and Wellhead Connector
Manual, FSM00105, June 2000, 2, 66, BP-HZN-BLY00031145, 210.
Manual, FSM00105, June 2000, 2, 66, BP-HZN-BLY00031145, 203.
Manual, FSM00105, June 2000, 2, Part 2.1, Operating & Service Procedure 6215, BP-HZN-BLY00031145, 210.
43. Cameron Controls, RBS8D Multiplex BOP Control System, R&B Falcon Deepwater Horizon, 139 or 56 of 79.
44. Cameron Controls, RBS8D Multiplex BOP Control System, R&B Falcon Deepwater Horizon, 130, or 50 of 79.
45. Cameron Controls, RBS8D Multiplex BOP Control System, R&B Falcon Deepwater Horizon, Vol. 1, 2000, 9.
46. Cameron, Emergency, Back Up and Deepwater Safety Systems, May 2004, 12.
47. Cameron, Emergency, Back Up and Deepwater Safety Systems, May 2004, 5.
48. American Petroleum Institute, Specification for Control Systems for Drilling Well Control Equipment and Control Systems for
Diverter Equipment, Spec 16D, Second Edition, 5.7.1, 37.
51. See Appendix P; American Petroleum Institute, Specification for Control Systems for Drilling Well Control Equipment and Control
Systems for Diverter Equipment, Spec 16D, Second Edition, 5.9.3, 41.
52. Cameron Controls, RBS8D Multiplex BOP Control System, R&B Falcon Deepwater Horizon, Vol. 1, 2000, 77.
53. Subsea Maintenance Philosophy, Family 400, Recommended Practices HQS-OPS-RP-400-001, May 16, 2007.
54. 365 Day-Ram BOP NDT Job Plan Report, Oct. 16, 2009.
55. DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
56. PM05-Connector-Service Job Plan Report, Nov. 6, 2009.

57. SPM01 CTRU-Service Job Plan Report, July 20, 2009.
58. SPM01-PIPE-BOP Choke & Kill Checks Job Plan Report, Nov. 6, 2009.
59. Daily Operations Report, February 23, 2010, BP-HZN-MBI 135226.
60. Deepwater Horizon Subsea Supervisor (Owen McWhorter) e-mail to Deepwater Horizon OIM, Feb. 19, 2010.
61. Testimony of Mark Hay, Hearing before the Deepwater Horizon Joint Investigation Team, Aug. 25, 2010, 246, 10247:17.
62. Boa SubC Daily Log, April 26, 2010.
63. Ibid.
64. BP, Deepwater Horizon Accident Investigation Report, Sept. 8, 2010, 170.
65. 30 C.F.R. 250.446449.
66. Stress Engineering Services Inc., Hydraulic Analysis of Macondo #252 Well Prior to Incident of April 20, 2010; DNV, Forensic
Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
67. Testimony of Micah Sandell, Hearing before the Deepwater Horizon Joint Investigation Team, May 29, 2010, 911.
68. Sperry Drilling Services data logs (drilling parameters with cement unit data), April 1520, 2010; DNV, Forensic Examination of
Deepwater Horizon Blowout Preventer, March 20, 2011.
69. Transocean Well Control Handbook, March 31, 2009, 5, Subsection 3, 81.
70. Stress Engineering Services Inc., Hydraulic Analysis of Macondo #252 Well Prior to Incident of April 20, 2010; Stress Engineering
Services Inc. Structural Analysis of the Macondo #252 Work String.
72. Sperry Drilling Services data logs (mud pit data), April 1920, 2010, BP-TO11000827.
73. Sperry Drilling Services data logs (drilling parameters), April 5, 2010April 20, 2010; Sperry Drilling Services data logs (drilling
parameters with cement unit data), April 1520, 2010.
74. BOP Subsea Hydrostatic Test, Feb. 10, 2010, 3.
75. Deepwater Horizon TL BOP Stack Operation & Maintenance Manual, Initial Release, Rev. A, September 2000, 3-74, 3-78.
76. BP Investigation Team Interview of Donald Vidrine, April 23, 2010.
77. Stress Engineering Services Inc., Hydraulic Analysis of Macondo #252 Well Prior to Incident of April 20, 2010; BP Well Control
Manual, Transocean Well Control Handbook, March 31, 2009; 8, Subsection 4, 2224.
78. Stress Engineering Services Inc., Hydraulic Analysis of Macondo #252 Well Prior to Incident of April 20, 2010; BP Investigation
Team Interview of Donald Vidrine, April 23, 2010.
79. Sperry Drilling Services data logs (drilling parameters), April 520, 2010; Sperry Drilling Services data logs (drilling parameters
with cement unit data), April 1520, 2010.
80. Testimony of Heber Morales, Hearing before the Deepwater Horizon Joint Investigation Team, May 29, 2010, 148150; Sperry
Drilling Services data logs (drilling parameters), April 520, 2010; Sperry Drilling Services data logs (drilling parameters with
cement unit data), April 1520, 2010.
81. Stress Engineering Services Inc., Hydraulic Analysis of Macondo #252 Well Prior to Incident of April 20, 2010; DNV, Forensic
Examination of Deepwater Horizon Blowout Preventer, March 20, 2011. Sperry Drilling Services data logs (drilling parameters),
April 520, 2010; Sperry Drilling Services data logs (drilling parameters with cement unit data), April 1520, 2010.
82. BPTODDI, ERC e-mail to James Bjornestad, et. al., May 26, 2010.
83. BP, Deepwater Horizon Accident Investigation Report, Sept. 8, 2010, BP-HZN-BLY0000001, 161162.
84. Cameron Controls, Daily Report Sheet, Subsea Pod Intervention, Horizon, BP, May 5, 2010, 3.
85. Expro and Oceaneering video taken in the bore of the BOP on board the Q4000 - September 2010.
86. Preliminary BOP Function Timeline, May 11, 2010.
87. BP, Deepwater Horizon Accident Investigation Report, Sept. 8, 2010, BP-HZN-BLY0000001, 161162.
89. Stress Engineering Services Inc. Structural Analysis of the Macondo #252 Work String.
90. Stress Engineering Services Inc. Structural Analysis of the Macondo #252 Work String.
91. Sperry Drilling Services data logs (drilling parameters), April 520, 2010.
93. See Appendices H, I, K, N, and O. DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
94. Testimony of Curt Kuchta, Hearing before the Deepwater Horizon Joint Investigation Team, May 27, 2010, 171:17172:4;
Testimony of Chris Pleasant, Hearing before the Deepwater Horizon Joint Investigation Team, May 28, 2010, 105:23106:7;
Testimony of Jimmy Harrell, Hearing before the Deepwater Horizon Joint Investigation Team, May 27, 2010, 10-1711:10.
95. Testimony of Jimmy Harrell, Hearing before the Deepwater Horizon Joint Investigation Team, May 27, 2010, 1222; Testimony
of Chris Pleasant, Hearing before the Deepwater Horizon Joint Investigation Team, May 28, 2010, 132:925; Testimony of Steve
Bertone, Hearing before the Deepwater Horizon Joint Investigation Team, June 20, 2010, 41:715.
97. Cameron Controls, Daily Report Sheet, Subsea Pod Intervention, Horizon, BP, May 5, 2010, 3, 8.
99. See Appendices N and O; DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
100. Ibid.
101. Cameron Controls, Daily Report Sheet, Subsea Blue Pod Intervention, Horizon/BP, June 28, 2010.
102. Cameron Controls, Daily Report Sheet, Subsea Blue Pod Intervention, Horizon/BP, June 28, 2010.
103. Ibid.
104. Ibid.
105. See Appendix N; DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
106. Ibid.
107. Ibid.
108. See Appendices N and O; DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
109. See Appendix O; DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
110. See Appendix L; DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
111. Testimony of Daun Winslow, Hearing before the Deepwater Horizon Joint Investigation Team, Aug. 24, 2010, 13:1725.
112. See Appendix L; DNV, Forensic Examination of Deepwater Horizon Blowout Preventer, March 20, 2011.
113. Ibid.
114. The University of Texas, Petroleum Extension Service, A Primer of Oilwell Drilling, Seventh Edition, 2008, 184.
115. American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, December 1997, 4.5, 18, 4.5.1.2,
18; 4.7, 19.
116. American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, December 1997, 4.4.2.1,18;
American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, December 1997, 4, 6.
118. American Petroleum Institute, Specification for Drill Through Equipment, 16A, Second Edition, December 1997, 4.5, 18, 4.5.1.2,
18; 4.7, 19.
119. Stress Engineering Services Inc., Hydraulic Analysis of Macondo #252 Well Prior to Incident of April 20, 2010.
120. Deepwater Horizon BOP Subsea Test, Well Num. MC 252 Macondo #1, Feb. 1011, 2010.

BOP Discussion

Uploaded by

Copyright:

Available Formats

BOP Discussion

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

BOP Discussion

Uploaded by

Copyright:

Available Formats

Chapter 3.

4 Blowout Preventer (BOP) 135

3.4 Blowout Preventer (BOP)

136 Chapter 3.4 Blowout Preventer (BOP)

3.4 Blowout Preventer (BOP)

Confining well fluid to the wellbore3

Providing a means to add fluid to the wellbore4

Allowing controlled volumes of fluid to be withdrawn from the wellbore5

While performing these primary functions, the BOP stack also:

Regulates and monitors wellbore pressure6

Prevents additional influx from the reservoir into the wellbore9

Chapter 3.4 Blowout Preventer (BOP) 137

3.4.1 The Deepwater Horizon BOP Stack

Deepwater Horizon LMRP Design

138 Chapter 3.4 Blowout Preventer (BOP)

Rigid Conduit Line

Rigid Conduit Manifold

Lower BOP Stack

BOP Outlet Valve and

Figure 1 The Deepwater Horizon BOP Stack

Chapter 3.4 Blowout Preventer (BOP) 139

Casing Shear Rams

Upper Variable Bore Rams

Middle Variable Bore Rams

Lower Test Rams

Figure 2 Cutaway View of Deepwater Horizon BOP Stack Components

140 Chapter 3.4 Blowout Preventer (BOP)

Figure 3 Typical Cameron DL Annular Blowout Preventer

Deepwater Horizon Lower BOP Stack Assembly

One (1) Vetco Gray Super HD H-4 wellhead connector24

Chapter 3.4 Blowout Preventer (BOP) 141

Variable Bore Pipe Rams (VBRs)

Figure 4 Typical Variable Bore Ram

142 Chapter 3.4 Blowout Preventer (BOP)

Blind Shear Rams (BSRs)

Lower Shear Blade

Shear Rams/Casing Shear Rams

Figure 6 Typical Casing Shear Ram

Chapter 3.4 Blowout Preventer (BOP) 143

Hydro-Mechanical Ram Locking Mechanism (ST Lock)

Operating Piston Subassembly

Stem & Wedge Assembly

Nut with Overhauling Thread

Stem with Overhauling Thread

Figure 7 Deepwater Horizon ST Lock Arrangement in the Unlock Position

144 Chapter 3.4 Blowout Preventer (BOP)

12 in. Vent Line to Crown

6 in. Vacuum Breaker

Mud Gas Separator

Mini Trip Tank

Gumbo Box &

Port Overboard Line

Chapter 3.4 Blowout Preventer (BOP) 145

Deepwater Horizon Marine Drilling Riser Tensioner System

Hydralift Riser Tensioners

Slip Joint Tension

Figure 9 Deepwater Horizon Hydralift Riser Tensioner System

Marine Drilling Riser

146 Chapter 3.4 Blowout Preventer (BOP)