The Challenger Accident (1986): Cold O-Rings That Recovered Too Slowly
On January 28, 1986, the Space Shuttle Challenger broke apart about 73 seconds after launch and all seven crew members died. The Presidential Commission found that the cause was the failure of the pressure seal in a joint of the right solid rocket booster. The launch morning was the coldest to date, and the cold rubber O-rings were slow to return to their original shape.
What happened
- Date
- January 28, 1986, 11:38 a.m. (EST)
- Vehicle
- Space Shuttle Challenger (mission 51-L)
- Casualties
- The vehicle broke apart about 73 seconds after launch at about 46,000 ft (about 14 km); all seven crew members died
- Temperature
- 36 °F (about 2 °C) at launch, 15 °F colder than the next coldest previous launch
- Joint
- Aft field joint of the right solid rocket booster; estimated at 28 ± 5 °F (about −2 °C) at the joint’s 300-degree location
- Investigation
- Report of the Presidential Commission on the Space Shuttle Challenger Accident (1986)
Sequence of events and the investigation’s findings
At 0.678 seconds after liftoff, a strong puff of gray smoke was already coming from near the aft field joint of the right solid rocket booster, and the puffs that followed grew blacker. A flicker of flame appeared on the same booster at 58.788 seconds and became a continuous plume at 59.262 seconds. At 73.124 seconds a circumferential white vapor pattern appeared on the bottom of the external tank, regarded as the beginning of the structural failure of the hydrogen tank. Structural breakup of the vehicle began at about 73 seconds.
The Commission concluded that the cause of the accident was the failure of the pressure seal in the aft field joint of the right solid rocket motor, due to a faulty design that was unacceptably sensitive to a number of factors, including temperature, physical dimensions, materials, the effects of reusability, processing and the joint’s reaction to dynamic loading.
The chain of causes from the materials side
The booster joint was sealed by two rubber O-rings with a cross-section diameter of 0.280 in (about 7.1 mm). The primary sealing mechanism is gas pressure pressing on the upstream side of the O-ring. The putty in the joint was meant as a thermal barrier to keep combustion gas from touching the O-rings directly, and its performance as a pressure seal is highly variable.
Right after ignition the joint gap opens (joint rotation), and dynamic effects increase the opening. The Commission found that O-ring resiliency is directly related to temperature, that a warm compressed O-ring returns to its original shape much more quickly than a cold one, and that at the cold launch temperature the O-ring would be very slow to return to its rounded shape and probably did not follow the opening gap. It also found that the putty’s temperature, humidity and other variables could delay the application of pressure to the O-ring and could have been a factor in the initial joint failure, and that water in the joint may have frozen, impeding the secondary seal.
In earlier flights, only four launches at 61 °F or above showed thermal distress of the O-rings, whereas every launch below 61 °F showed thermal distress in one or more O-rings.
On interpretations of the cause: some university teaching material (the University of Michigan) explains that the launch-day temperature was below the rubber’s glass transition temperature, so the O-rings became brittle. The Presidential Commission’s report states that the O-rings’ resilience slowed with temperature and that they probably did not follow the opening of the gap.
The clues that revealed the cause
- The launch temperature was the lowest to date Service temperature: Low (below about 0 °C)
- The seals were rubber (elastomer) O-rings Material: Rubber or elastomer (seal…
- At ignition the joint was pressurized suddenly and its gap opened Loading: Impact or a sudden large …
- Numerous tests had shown O-ring resiliency degrading with lower temperature Material: Rubber or elastomer (seal…
- Every launch below 61 °F had shown thermal distress of the O-rings Service temperature: Low (below about 0 °C)
Open the guide with this case’s clues
Opening the guide with these clues ranks loss of elasticity and embrittlement of polymers at low temperature at the top.
Related failure modes: Loss of elasticity and embrittlement of polymers at low temperature
What changed afterwards: design, rules and inspection
- The Commission recommended that the faulty solid rocket motor joint and seal be changed. Joint integrity should be insensitive to dimensional tolerances, assembly, environmental effects and more, and certification should use tests that duplicate launch conditions as closely as possible over the full operating range, including temperature. It also asked for an independent committee of the National Research Council to oversee the design.
- It also recommended a policy governing the imposition and removal of launch constraints, and steps to ensure that technical information reaches decision-makers fully.
- The redesigned joint added a capture feature that gives metal-to-metal interference to limit gap opening, a third O-ring, a design that keeps the O-rings always compressed (the compressed O-ring never fills more than 90% of its groove), and an extra port for leak checks after assembly; the internal insulation was sealed with a deflection relief flap instead of the putty.
- External heaters with integral weather seals were fitted to the field joints to keep the seal temperatures at or above 75 °F (about 24 °C).
Lessons
- Material properties change greatly with temperature. Verify parts by testing at the most severe temperature, in conditions close to real use.
- What matters for a seal is whether it works under real conditions, with a moving gap, not in a static state.
- The trend that colder launches showed more O-ring heat damage was already visible in earlier flight records.
- A design sensitive to many conditions fails when any one of them is off. Aim for designs that are insensitive to conditions.
- Organizations need ways to make sure the information engineers hold reaches decision-makers fully and in time.