PLC and I/O modules of a fuel farm control system engineered by ACE
DATA CENTRE FUEL SYSTEMS

Data Centre Fuel Control Systems
Bulk diesel, day tanks and transfer automation that keep backup generators available

Australian Control Engineering (ACE) designs, programs and commissions the fuel control systems behind data centre backup generation. That means bulk tank management, redundant transfer to generator day tanks, and fuel quality and leak protection. It also means the integration that puts fuel inventory and alarms in front of the operators. A generator is only as available as the fuel system behind it.

12 hours minimum on-site fuel at N load required by the Uptime Institute Tier Standard, for every Tier
Class C1 diesel's classification under AS 1940, which sets bunding, overfill and separation requirements
2 independent fuel transfer systems ACE delivered for one data centre's backup generators, each on its own PLC
5 × 200 kL bulk diesel tanks under autonomous tank management in ACE's Iron Bridge fuel farm control system
SOURCES: UPTIME INSTITUTE TIER STANDARD: TOPOLOGY · AS 1940:2017 · ACE CASE STUDIES
THE CHALLENGE

Backup power is only as reliable as its fuel system

Every data centre carries a generator fleet so that a grid outage never reaches the halls. The generators get the attention: sizing, redundancy, paralleling and load testing. Most projects treat the fuel system that feeds them as plumbing. Yet the Uptime Institute's own guidance on fuel system reliability lists the same recurring design errors. A single valve sits between two redundant pumps. One control panel or transfer switch feeds every fuel pump. Nobody has designed a way to run the fuel system by hand when that panel is out of service.

Those are control system problems. Whether fuel reaches each day tank during a long outage depends on level logic, pump duty assignment, failure handover and alarms. It also depends on how the fuel system talks to the generator controllers, the EPMS and the operators. If any of that is an afterthought, the first full-length test is the outage itself.

ACE brings fuel facility control experience from data centre and mining projects together with utility-grade SCADA and telemetry discipline. As a result, we engineer, test and expose the fuel system before the generators ever have to carry the site.

WHAT THE FUEL SYSTEM MUST DO

Six jobs a data centre fuel control system has to do, every time

A fuel system proves itself on the one day the site needs it, after months of sitting idle. These are the functions ACE designs and tests for.

Autonomy

Hold enough fuel at N load for the required runtime. The Tier Standard sets 12 hours as the minimum; owner policy often asks for far more. We calculate usable volume after removing redundant tanks, not from nameplate totals.

Transfer

Move fuel from bulk storage to each generator day tank fast enough to keep up with full-load consumption. The pumps and paths must stay available when any single component fails.

Quality

Keep stored diesel usable with water separation, filtration or polishing, tank monitoring and sampling. Fuel that has sat for months must run engines, not block filters.

Protection

Overfill prevention, high-level alarms, leak detection, bunding and emergency shutdown. Together they meet AS 1940 and the state dangerous goods and environmental requirements for the site.

Visibility

Inventory, transfer status, pump health and alarms delivered to the EPMS, SCADA and the operators. We calculate runtime remaining from measured level and actual load.

Operability

Manual operation when a controller or panel is out of service, plus clear operator screens and procedures. We test failover on a schedule, not once at commissioning.

WHERE SYSTEMS FAIL

Where data centre fuel systems lose availability

None of these is a tank or pump problem in the conventional sense. All of them are control, integration and testing problems. All of them can be engineered out before site.

One control panel for everything

A single PLC, power supply or transfer switch serves every fuel pump. Its loss stops transfer to all generators at once.

Day tank logic that trips the generator

Poorly set levels, slow pumps or a return-path problem let a day tank run low or overheat during a long run. A healthy engine then goes offline.

Fuel quality nobody owns

Diesel degrades in storage. Without treatment and monitoring, water and microbial growth surface as blocked filters in the first hour of an outage.

Alarms that stay in the fuel room

Levels, pump faults and leak alarms live on a local panel and never reach the EPMS or the control room.

Untested handover

The project proves duty-standby and parallel pump logic on paper and first exercises it during a real outage.

Fuel scoped as civil and mechanical

The project procures the tanks and pipework with the building. The control logic, integration and testing arrive late and unowned.

ACE'S APPROACH

How ACE engineers a fuel control system you can rely on

ACE works with the developer, the EPC or M&E contractor, the generator OEM and the fuel system supplier. The scope is the control and integration layer: everything that decides whether fuel reaches the engines.

1

Requirements and autonomy review

First, we work with the generator OEM and the owner's reliability targets to define runtime, usable volume at N load and transfer rates. We also define the protection and compliance functions the control system must enforce.

2

Architecture

We then design independent transfer systems for separate generator groups, with redundant duty-assist or lead-lag pumps. Each has its own PLC and power supply, plus a manual operating mode. As a result, no single failure stops fuel reaching the engines.

3

Control design and programming

Level control, pump sequencing, failure handover, interlocks, overfill and leak protection, and local operator screens. We program them on the PLC platform the project standardises on.

4

Integration

Interfaces to the generator controllers, the EPMS and SCADA, fire and emergency shutdown, tank gauging and fuel quality monitoring. We use Modbus, PROFINET, DNP3 or OPC UA as those systems require.

5

Factory and site acceptance testing

Simulated tank levels, pump failures and controller loss in the factory. Then live transfer, failover and alarm tests on site before anyone relies on the generators.

6

Operational support

Alarm tuning, scheduled failover tests, documentation and change management. The system may sit idle for months and then has to work for days.

EXPERIENCE

Fuel control systems ACE has delivered

Published ACE fuel facility projects. Each links to its case study.

Data centre backup generator fuel control

Two independent fuel transfer systems, each on its own Phoenix Contact PLC, move diesel from dual bulk tanks to separate day tanks. Duty-assist redundancy in a parallel transfer arrangement means fuel reaches each generator even if a system or equipment item fails.

Iron Bridge bulk diesel fuel farm

PLC and HMI configuration and programming for Fortescue's Iron Bridge non-process infrastructure. The system gives turn-key control of a truck unloading skid and autonomous tank management across five 200 kL diesel tanks. It also runs service truck and heavy vehicle refuelling.

Cloudbreak Bigge fuel farm

PLC and operator interface programming for a new mine-site fuel farm, delivered to a compressed programme. The scope included PROFINET communications to variable speed drives, equipment interface logic and operator screens.

Data centre developers and owners EPC and M&E contractors Generator OEMs and packagers Fuel system suppliers Owner's engineers
WHO DOES WHAT

Fuel control, generator control, EPMS and SCADA

Five systems touch the fuel. ACE's scope is the fuel control layer and its integration with the other four.

SystemWhat it doesWho usually supplies itRole in fuel availability
Generator controllerStarts, synchronises and protects the engine; reads its own day tank level.Generator OEMConsumes fuel; signals demand and faults.
Fuel control PLCBulk and day tank levels, transfer pumps and valves, overfill and leak protection, manual mode, local screens.Fuel system supplier or specialist controls engineerDecides whether fuel reaches each engine.
EPMS and SCADAFacility-wide monitoring, alarms, trends, historian and runtime remaining.Electrical OEM or SCADA integratorWhere operators see inventory, transfers and alarms.
Tank gauging and fuel qualityLevel, water-in-fuel, temperature and polishing status.Instrumentation or fuel treatment supplierThe data the control and SCADA layers depend on.
Fire and emergency shutdownEmergency isolation of pumps and valves.Fire services contractorOverrides transfer on a fire or spill event.
FAQ

Data centre fuel control: frequently asked

How much fuel should a data centre store on site?

The Uptime Institute's Tier Standard: Topology requires a minimum of 12 hours of on-site fuel at N load for every Tier. The volume counts only what remains after taking redundant tanks and paths out of service. Two 24-hour tanks in a concurrently maintainable design therefore count as 24 hours, not 48. Many operators specify longer autonomy to suit refuelling logistics and their own risk appetite. Whatever the target, the control system should calculate runtime remaining from measured levels and actual load, not nameplate capacity.

What is a generator day tank and why does it need its own control?

A day tank is the smaller tank beside each generator that the engine draws from. Transfer pumps refill it from bulk storage under level control. The logic has to keep up with full-load consumption and handle a pump or valve failure. It must also prevent overfill and manage heated return fuel on long runs. Errors in any of those take a healthy engine offline. That is why ACE treats day tank control as a reliability function rather than plumbing.

Why does stored diesel need treatment?

Diesel degrades in storage. Water accumulates, microbial growth forms at the fuel and water interface, and sediment builds up. Fuel treatment or polishing systems, tank monitoring and regular sampling keep the fuel usable. The Uptime Institute treats fuel treatment as an operational sustainability matter rather than a topology requirement. Even so, a blocked filter in the first hour of an outage is one of the commonest ways a backup fleet fails.

Which Australian standards apply to data centre fuel storage?

AS 1940:2017, The storage and handling of flammable and combustible liquids, governs bulk diesel storage. Diesel is a C1 combustible liquid under the standard. It sets tank siting and separation, bunding or self-bunded tanks, overfill protection and high-level alarms, signage and emergency provisions. State work health and safety and dangerous goods regulations, environmental approvals and local planning also apply. The control system enforces the overfill, leak and emergency shutdown functions these require. It should therefore be designed with the compliance case in view.

How does the fuel system connect to SCADA and the EPMS?

The fuel control PLC exposes tank levels, pump status, transfer activity and alarms over Modbus, PROFINET, DNP3 or OPC UA. ACE integrates those points into the EPMS or SCADA. Operators then see fuel inventory, runtime remaining and faults alongside the generators and switchboards. ACE prioritises the alarms rather than burying them in a local panel.

What did ACE deliver on its data centre fuel control project?

Two independent fuel transfer systems move diesel from dual bulk tanks into separate generator day tanks. Each runs on its own Phoenix Contact PLC. The redundant design uses duty-assist measures in a parallel transfer arrangement. As a result, fuel reaches each generator even if a system or an item of equipment fails. The generators exist to keep the data centre running through a power loss. The fuel control system is what keeps the generators running.
NEXT STEP

Make the fuel system as reliable as the generators

Talk to ACE about fuel control, transfer redundancy and SCADA integration for your backup generation. We work from concept design through FAT, SAT and commissioning.

Talk to ACE
Sources: Uptime Institute Journal, Fuel system design reliability (Tier Standard: Topology fuel requirements) · Standards Australia, AS 1940:2017 The storage and handling of flammable and combustible liquids · ACE case studies: data centre backup generator fuel control, Iron Bridge fuel farm, Cloudbreak Bigge fuel farm. Information on this page is general in nature; confirm requirements with your certifier, regulator and generator OEM.