A steam turbine system operative to receive motive steam and drive an electric generator and produce electric power, said turbine comprising a plurality of turbine sections, a plurality of throttle and governor valves for directing steam through said turbine sections, and a control system including multiple digital computers including at least a first digital computer and a second digital computer, means for generating input signals representing at least turbine speed and turbine rotor related temperature and other predetermined process variables associated with said steam turbine, means for coupling the input signals to both of said computers, each of said computers including means for generating a speed reference as a function of turbine rotor steam calculated from the rotor related temperature, each of said computers including means for sequentially controlling its programmed operation and substantially identical means for generating control outputs for operating said throttle and governor valves of said steam turbine as a function of the input signals, means for sensing predetermined control system malfunctions, said control output generating means including a speed control for operating said turbine valves in response to the speed reference and a representation of actual speed during turbine acceleration to synchronous speed, means for coupling the turbine valve control outputs of one of said computers to operate said steam turbine valves, means for substantially conforming the structure of the other computer to the structure of said one computer in real time including means for generating turbine valve control outputs in the other computer substantially equal to those from said one computer, said conforming means including an intercomputer data link for periodically transmitting to said other computer at least data employed by said one computer in generating the speed reference as a function of the rotor related temperature, and means for smoothly executing a transfer in the control of the steam turbine valves from the control outputs of said one computer to the control outputs of said other computer when said sensing means detects a control system malfunction during turbine startup.