PPRuNe Forums

PPRuNe Forums (https://www.pprune.org/)
-   Tech Log (https://www.pprune.org/tech-log-15/)
-   -   FADEC issues - are there any? (https://www.pprune.org/tech-log/666590-fadec-issues-there-any.html)

tdracer 20th July 2025 22:38

Good grief - this has all been covered - repeatedly - in the Air India accident threads. I think some people here have a reading comprehension problem... :ugh:

I'll repeat - again: The Fuel Condition Switches are hard wired (with some interposing relays) from the switch to the spar valve and the fuel control High Pressure Fuel Shutoff Valve. PERIOD!!! It doesn't go through the FADEC, it doesn't go through any aircraft computers. IT'S HARD WIRED!!! Moving the fuel switch to CUTOFF provides 28 Vdc to the close coils of the spar valve and the HPSOV solenoid. The FADEC also gets the fuel condition switch position, but only uses it during the engine start sequence - once the engine is running, it doesn't use that signal for anything other than to set maintenance faults if there is some sort of disagree.

Once the engine is running, the only time the FADEC will attempt to shutdown the engine is if an N2 (N3) overspeed is detected, or through TCMA (using the same circuit as the overspeed protection).

Thirsty 20th July 2025 22:41


Originally Posted by BugBear (Post 11926006)
My last Aero patent went through so much money I had to abandon it. I pitched it to Boeing, haven't heard back.. my beer is 35° ....life is good

35 °C or °F? The difference can be critical, depending where you are in the world. Ask that craft crash landing on Mars, part developed by metric speaking engineers, and others using imperial! Passing a parched Aussie a warm beer can invite death, whereas a warm pint for a Brit...

Has Boeing incorporated your idea in their latest designs? Time to approach Airbus too. For some, mere acknowledgement of a brilliant mind is worth more than financial reward. The converse is true - you need to put bread on the table. A 35 degree beer might be the solution. Cheers!

I can just see the latest raft of expert YouBoob videos and the gutter press headlines: Airline industry experts examining if AI171 was running metric software, and pilots wre served warm beer prior to takeoff.

BugBear 20th July 2025 23:55


Originally Posted by Thirsty (Post 11926008)
35 °C or °F? The difference can be critical, depending where you are in the world. Ask that craft crash landing on Mars, part developed by metric speaking engineers, and others using imperial! Passing a parched Aussie a warm beer can invite death, whereas a warm pint for a Brit

Has Boeing incorporated your idea in their latest designs? Time to approach Airbus too. For some, mere acknowledgement of a brilliant mind is worth more than financial reward. The converse is true - you need to put bread on the table. A 35 degree beer might be the solution. Cheers!
Hoping Boeing has lost my proto
I can just see the latest raft of expert YouBoob videos and the gutter press headlines: Airline industry experts examining if AI171 was running metric software, and pilots wre served warm beer prior to takeoff.

35° F. Guinness 55° > hoping Boeing has lost my prototype, they wouldn't use it any way, no room to hide mysterious kit.

Cheers...!!




Musician 21st July 2025 01:57


Originally Posted by tdracer (Post 11926007)
The FADEC also gets the fuel condition switch position, but only uses it during the engine start sequence - once the engine is running, it doesn't use that signal for anything other than to set maintenance faults if there is some sort of disagree.

I was under the impression that cycling to CUTOFF then RUN would reboot the EEC/FADEC?

ignorantAndroid 21st July 2025 02:20


Originally Posted by Musician (Post 11926053)
I was under the impression that cycling to CUTOFF then RUN would reboot the EEC/FADEC?

I've been looking at EAFR data from previous 787 incidents. As soon as the switch goes to CUTOFF, data from the EEC is flagged "invalid" for about 1 second, then becomes valid again. That seems consistent with what tdracer has mentioned (EEC reset takes about 1 second). 6 seconds after CUTOFF, the EEC "Channel In Control" switches.

Musician 21st July 2025 02:25


Originally Posted by galaxy flyer (Post 11925984)
The “Flight Deck” cannot select CUTOFF, only a human can do that. As you continue to offer hypotheticals, posit there’s a massive failure of all four poles of BOTH switches resulting in both engines shutting down. The engines wind down, at some point around 55% N2 all generators go offline with no other source of power, the RAT deploys, the APU starts an auto-start sequence using the APU battery. RAT comes online, probably within 2-3 seconds, APU around 60 seconds. Quick Relight would not happen because, in your hypothetical, the ALL four poles of BOTH switches failed in CUTOFF. Or, you could offer the hypothetical that switches failed back to RUN and they quick relight.do you see why this scenario is so ludicrously unlikely?

The main electrical generators go offline almost immediately, regardless of turbine speed. The alternator that powers the FADEC keeps working. Compare:

Originally Posted by tdracer (Post 11925153)
Something to remember.
On the 787 (also 777 and 747-8), when the fuel control switch is cycled to CUTOFF, the electrical generation doesn't stop when the engine N2/N3 drops too low - it happens much sooner than that.
In order to facilitate a 'breakless' power transfer during an engine shutdown, the fuel control switch sends a signal to the electrical system, which reconfigures to drop the related generators from the system before they drop off line. This takes ~0.25 seconds, not the several seconds it takes for the N2/N3 to drop sub-idle.

So in the case of the Air India 787, the system would have lost all main-bus power generation a fraction of a second after the second fuel control switch was moved to CUTOFF, commanding the RAT deployment.

Regarding the quick relight, I found this post instructive.

albatross 21st July 2025 02:59


Originally Posted by tdracer (Post 11926007)
Good grief - this has all been covered - repeatedly - in the Air India accident threads. I think some people here have a reading comprehension problem... :ugh:

I'll repeat - again: The Fuel Condition Switches are hard wired (with some interposing relays) from the switch to the spar valve and the fuel control High Pressure Fuel Shutoff Valve. PERIOD!!! It doesn't go through the FADEC, it doesn't go through any aircraft computers. IT'S HARD WIRED!!! Moving the fuel switch to CUTOFF provides 28 Vdc to the close coils of the spar valve and the HPSOV solenoid. The FADEC also gets the fuel condition switch position, but only uses it during the engine start sequence - once the engine is running, it doesn't use that signal for anything other than to set maintenance faults if there is some sort of disagree.

Once the engine is running, the only time the FADEC will attempt to shutdown the engine is if an N2 (N3) overspeed is detected, or through TCMA (using the same circuit as the overspeed protection).

Thank you TDRACER for answering my question from post 176.
All the speculation about how the switches worked made no sense to me.

Someone Somewhere 21st July 2025 04:03

It would only take one pole failing (on EACH switch) to command the LPSOVs (and HPSOVs?) shut, or the associated relays failing. Still an extremely unlikely double failure, especially 1s apart.

This would also be, IMHO, blatantly obvious on the DFDR because you would see a fuel valves indicating closed and the engines running down, but the RDCs directly looking at two other poles of each switch would show the engines still being commanded to run. We haven't heard of this. It would be a smoking gun that would justify immediate grounding.

tdracer 21st July 2025 04:59


Originally Posted by Musician (Post 11926053)
I was under the impression that cycling to CUTOFF then RUN would reboot the EEC/FADEC?

IgnorantAndroid has already addressed this, but yes, when the fuel switch is transitioned to "CUTOFF", a signal is sent to the FADEC to 'reset' - which takes about a second. This is done because - in flight - the N2 won't normally drop below the 'stay alive' PMA speed, so if the FADEC computer has 'hung' - this effectively does a reboot that will (hopefully) allow the FADEC to recover. This reset signal is a hardwired discrete (driven by one of those interposing relays that are driven by the fuel switch).
During that ~one second reset, all digital parameters output from the FADEC will be invalid.

pax2908 21st July 2025 09:18


Originally Posted by tdracer (Post 11926088)
IgnorantAndroid has already addressed this, but yes, when the fuel switch is transitioned to "CUTOFF", a signal is sent to the FADEC to 'reset' - which takes about a second. This is done because - in flight - the N2 won't normally drop below the 'stay alive' PMA speed, so if the FADEC computer has 'hung' - this effectively does a reboot that will (hopefully) allow the FADEC to recover. This reset signal is a hardwired discrete (driven by one of those interposing relays that are driven by the fuel switch).
During that ~one second reset, all digital parameters output from the FADEC will be invalid.

Not sure I understand (most likely not) - are you saying this is an intended dual-purpose of the switch: fuel shutoff (as primary use), but also reboot. Presumably, the latter is not actually used that much ... or is it?

Someone Somewhere 21st July 2025 10:34


Originally Posted by pax2908 (Post 11926192)
Not sure I understand (most likely not) - are you saying this is an indended dual-purpose of the switch: fuel shutoff (as primary use), but also reboot. Presumably, the latter is not actually used that much ... or is it?

Run-cutoff-run seems to be something of a last-ditch effort in all the troubleshooting guides.

Happened in US1549 where it almost certainly couldn't have helped as neither engine flamed out. Same as people were suggesting was intentional here.

I think there are suggestions that cutting and reintroducing fuel might clear some types of persistent compressor stall, but modern FADECs can probably detect that and do it themselves if necessary.

BugBear 21st July 2025 22:03

td
 
"Once the engine is running, the only time the FADEC will attempt to shutdown the engine is if an N2 (N3) overspeed is detected, or through TCMA (using the same circuit as the overspeed protection)."

Does FADEC Rebooting count...? Is the FADEC actioned cutoff logged in DFDR?⁸

So.....
Very suspicious... FO "Did you Cutoff?" CAPTAIN "NO, I did not"..... Neither one did, nonetheless there was CUTOFF
FADEC THEN .

Who better to reboot the FADEC than the Captain, who has thousands of hours in the Dream, and with respect, knows it better than anyone here??

CUTOFF was recorded at EAFR. Giving Boeing the excuse to claim the pilot(s) started the loss of thrust.

Knowing FADEC, WHEN HEALTHY, IS FASTER AT RELIGHTING OR RESTARTING THAN A PILOT, DID CAPTAIN CHOOSE TO WAIT FOR FADEC TO SORT THE GEs ???

I Dunno. But we know they did not restart in time.

Bugly







Someone Somewhere 22nd July 2025 00:15

The FADEC cannot action the fuel cutoff switches - those are mechanical switches with no solenoid or motor. Their position is recorded in the EAFR as recorded by I think one of the remote data concentrators (RDCs).

A FADEC initiated shutdown will show up in the EAFR data as TCMA or N2 Overspeed - someone posted the exact names for the fields earlier.

I am not certain whether a FADEC reset alone necessarily flames out the engine. This would presumably have to be initiated by a FADEC self-test failure or an electrical fault, to get a reset without cutting fuel.


Who better to reboot the FADEC than the Captain, who has thousands of hours in the Dream, and with respect, knows it better than anyone here??
I'm not saying I do, but we've seen plenty of evidence that line pilots don't fully understand their aircraft.


Knowing FADEC, WHEN HEALTHY, IS FASTER AT RELIGHTING OR RESTARTING THAN A PILOT, DID CAPTAIN CHOOSE TO WAIT FOR FADEC TO SORT THE GEs ???
The FADEC is the only thing that can restart the engines. All the pilot can do is give or refuse permission. 'Full Authority' digital engine controller.

HAMSTERWHEEL ALARM

Timmy Tomkins 27th July 2025 12:17

Not really Hamster territory. I find it an interesting, informative discussion. Also, I suspect that tdracer knows a lot more than many pilots.

stilton 30th July 2025 13:36

In case this hasn’t been asked

How many more seconds would have been needed for the engine that was closest to relighting before it could produce enough thrust to save the aircraft ?

Musician 1st August 2025 22:19

Simon Hradecky writes:
The case of NH-985 of Jan 17th 2019 has shown however, that following the checklists was not successful. The Boeing 787-8 had landed safely, when after touch down both engines rolled down. Despite the crew exactly following the checklists, the engines could not be restarted. Subsequent simulator tests showed, that rapid cycling (quick transition from CUTOFF to RUN) would very often not be successful, however, relight (reset of the EEC) would have been possible if the crew had waited at least 5, better 10 seconds to return the fuel switch to RUN after bringing the fuel switch to CUTOFF in order to ensure, that the EEC does get reset – this timing window was found essential for relighting engines.

It is further stated, that it is possible to repeat the sequence if the engine(s) do not relight, if repeat attempts are to be made, wait 10 seconds between CUTOFF and RUN.
Is this true? He doesn't cite any sources.

andihce 2nd August 2025 18:08


Originally Posted by Musician (Post 11932098)
Simon Hradecky writes:
The case of NH-985 of Jan 17th 2019 has shown however, that following the checklists was not successful. The Boeing 787-8 had landed safely, when after touch down both engines rolled down. Despite the crew exactly following the checklists, the engines could not be restarted. Subsequent simulator tests showed, that rapid cycling (quick transition from CUTOFF to RUN) would very often not be successful, however, relight (reset of the EEC) would have been possible if the crew had waited at least 5, better 10 seconds to return the fuel switch to RUN after bringing the fuel switch to CUTOFF in order to ensure, that the EEC does get reset – this timing window was found essential for relighting engines.

It is further stated, that it is possible to repeat the sequence if the engine(s) do not relight, if repeat attempts are to be made, wait 10 seconds between CUTOFF and RUN.
Is this true? He doesn't cite any sources.

I don't know anything about the claim of engine relight needing an extended pause in the "CUTOFF" state, but IIRC, it has been stated here or in the main 787 crash thread that if the FCS's are switched to cutoff with the engines running, the engine starter-generators are preemptively disconnected from their electrical buses, without waiting for the engines to roll back below normal idle. This would invalidate a key part of Hradecky's analysis.

TURIN 2nd August 2025 18:43


Who better to reboot the FADEC than the Captain, who has thousands of hours in the Dream, and with respect, knows it better than anyone here??
With respect...one thing I've learned since I've been on PPrune is that there's always someone who knows more than you do.
There are pilots and engineers within these boards that have forgotten more about the 787 than the AI captain ever knew.
​​​​​​​

andihce 7th August 2025 04:50


Originally Posted by Musician (Post 11932098)
Simon Hradecky writes:
The case of NH-985 of Jan 17th 2019 has shown however, that following the checklists was not successful. The Boeing 787-8 had landed safely, when after touch down both engines rolled down. Despite the crew exactly following the checklists, the engines could not be restarted. Subsequent simulator tests showed, that rapid cycling (quick transition from CUTOFF to RUN) would very often not be successful, however, relight (reset of the EEC) would have been possible if the crew had waited at least 5, better 10 seconds to return the fuel switch to RUN after bringing the fuel switch to CUTOFF in order to ensure, that the EEC does get reset – this timing window was found essential for relighting engines.

It is further stated, that it is possible to repeat the sequence if the engine(s) do not relight, if repeat attempts are to be made, wait 10 seconds between CUTOFF and RUN.
Is this true? He doesn't cite any sources.

A further comment: I also tried posting to AVHerald a comment on Simon's article, similar to the one I made here (and at about the same time) regarding the supposed preemptive shutdown of electrical output from the engines with operation of the FCS to CUTOFF. That post disappeared into the Internet ether, in what I assumed was some AVHerald glitch, and having spent some minutes composing it, I just gave up and did not try again. The AVHerald reply mechanism requests an email address that is supposedly kept private. But as I don't have confidence in such assurances, I offered a backup email I use for such occasions, but don't regularly monitor.

Today I was surprised to find Simon had made, some days ago, a long and detailed private response to my comment via that email. He also stated that my referencing PPRUNE in that comment was cause for my comment to be suppressed: "Referencing other sites is not permitted, whether by URL, name, abbreviation of [sic] whatever. Hence your message was suppressed." (Seems a bit strange!)

I'm just recovering from 24-odd straight hours of SLF flying, so am not compos mentis enough to study the considerable details in both the original Hradecky post and his personal reply, but if I have time in the next few days, I will do so.

But meantime I would simply suggest posting your question to AVHerald (but for heavens sake, don't mention "PPRUNE") and I suspect he will respond.



All times are GMT. The time now is 15:50.


Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.