Figure 33-2. Deviation Profile Method
1. Failure Initiation
2. Failure Recognition by pilot Path of airplane 3. Initiation of Manual Recovery action by pilot wheels as a result 4. Point on Normal/Fault free Wheel path at which autopilot is of failure disengaged 1 sec.
3° Nominal ILS Glideslope Normal/Fault Path of airplane Free Wheel Path wheels as a result Wheel path, of failure tangent 1:29 1 sec.
Minimum Use Height (MUH)
15.2m Threshold Height
4.6m ILS Threshold GP 33-26
Figure 33-3. Height Loss Method
1. Failure Initiation
2. Failure Recognition by pilot Path of airplane 3. Initiation of Manual Recovery action by pilot wheels as a result of failure Height Loss Normal/Fault Free Wheel Path Tangential Wheel Height 33-27
33.7.10.6 Autopilot Override.
33.7.10.6.1 Initial Tests.
The initial tests to demonstrate compliance should be accomplished at an intermediate altitude and airspeed, e.g., 15,000 feet MSL and 250 knots.
With the autopilot engaged in Altitude Hold, the pilot should apply a low force to the control wheel (or equivalent) and verify that the automatic trim system does not produce motion resulting in a hazardous condition.
33.7.10.6.2 Automatic Disengagement.
Disengagement caused by flightcrew override should be verified by applying an input on the control wheel (or equivalent) to each axis for which the FGS is designed to disengage, that is, the pitch and roll yoke, or the rudder pedals (if applicable). The pilot should gradually increase the applied force to the control wheel (or equivalent) until the autopilot disengages. When the autopilot disengagement occurs, observe the transient response of the airplane. Verify that the transient response is no more than minor as required by § 25.1329(d). The inputs by the pilot should increase for each test case to a point where the input is sharp and forceful, so that the FGS can immediately be disengaged for the flightcrew to assume manual control of the airplane.
33.7.10.6.3 Non-Automatic Disengagement.
If the autopilot is designed such that it does not automatically disengage during an autopilot override—and instead provides a flight deck alert to mitigate any potentially hazardous conditions—the timeliness and effectiveness of this alert should be evaluated. The pilot should follow the evaluation procedure identified above until such time as an alert is provided. At that time, the pilot should respond to the alert in a responsive manner consistent with the level of the alert (that is, a caution, a warning) and with the appropriate flightcrew procedure defined for that alert. When the autopilot is manually disengaged, observe the transient response of the airplane and verify that the transient response is no more than minor as required by § 25.1329(d).
33.7.10.6.4 Repeated Test Conditions.
After the initial tests have been successfully completed, the above tests should be repeated at higher altitudes and airspeeds until reaching MMO at high cruise altitudes.
33.7.11 Procedures: Airplane Flight Manual Information.
The following information should be provided in the AFM:
33.7.11.1 Operating Limitations Section: Airspeed and other applicable operating limitations for use with the autopilot.
33-28
33.7.11.2 Operating Procedures Section: The normal operation information.
33.7.11.3 Non-Normal/Emergency Operating Procedures Section: A statement of the maximum altitude loss experienced during malfunction tests in the cruise and maneuvering flight regimes. A statement of the altitude loss should be provided. Further, it should be stated that a 3-degree glideslope was used, and the altitude loss was measured from the glideslope path to a point where maximum vertical deviation from the glideslope exists.
33-29
CHAPTER 34. EQUIPMENT: ELECTRICAL SYSTEMS AND EQUIPMENT
34.1 General—§ 25.1351.
34.1.1 Explanation.
Section 25.1351(a) requires that the electrical generating capacity, and number and kinds of power sources, be determined by an electrical load analysis, and meet the requirements of § 25.1309.
34.1.2 Procedures: § 25.1351(a)—Electrical System Capacity.
Section 25.1351(a) requires the generating capacity, and number and kinds of power sources, to be determined by an electrical loads analysis and meet the requirements of §
25.1309. Additionally, verify by flight test that cooling is satisfactory to maintain component temperatures within the manufacturer’s limits, both on the ground and in flight, with the electrical system operating at maximum limit load.
34.1.3 Procedures: § 25.1351(b)(1)—Electrical Power Configuration.
34.1.3.1 Verify that electrical power sources function properly when independent and when connected in combination.
34.1.3.2 For airplanes with autoland capability, verify proper electrical power reconfiguration for each available autoland mode.
34.1.3.3 Verify that no hazardous airplane systems reaction occurs to a partial loss of the electrical distribution system by simulating loss of individual busses. Simulate loss of individual busses by opening circuit breakers/relays.
34.1.3.4 Verify proper transfer of electrical power between the different power sources (i.e., external power, APU, engines).
34.1.4 Procedures: § 25.1351(b)(2)—Failure of Power Source.
Verify proper operation of system during simulated power failures by flight test functional demonstrations. The applicant must show by design analysis or laboratory demonstration, that no failure or malfunction of any power source, including the battery can create a hazard or impair the ability of remaining sources to supply essential loads.
34.1.5 Procedures: § 25.1351(b)(3)—System Voltage and Frequency.
For probable operating conditions, verify that system voltage and frequency, as applicable, at the terminals of all essential load equipment can be maintained within the limits for which the equipment is designed. This may be accomplished in a laboratory environment.
34-1
34.1.6 Procedures: § 25.1351(b)(4)—System Transients.
The applicant must show by design analysis, laboratory demonstration, and/or flight demonstration that system transients due to switching, fault clearing, or other causes during normal operations do not make essential loads inoperative, and do not cause a smoke or fire hazard. Flight test recordings may be useful to verify laboratory demonstrations of system transients and electromagnetic interference (EMI) during normal operations.
34.1.7 Procedures: § 25.1351(b)(5)—Power Source Disconnection.
34.1.7.1 Verify that there are means accessible in flight, to the appropriate crewmembers, for the individual and collective disconnection of the electrical power sources from the system.
34.1.7.2 Demonstrate that the airplane can be flown with one less generator than allowed by the MMEL. Also verify that prior to switching off the nonessential electrical loads specified in the AFM, the remaining generators’ short-term (up to 5 minutes) capacity is not exceeded.
34.1.8 Procedures: § 25.1351(b)(6)—Power Source Indicators.
34.1.8.1 Verify that there are means to indicate, to the appropriate crewmembers, the generating system quantities essential for the safe operation of the system, such as the voltage and current supplied by each power source, if appropriate to type of aircraft, i.e., glass cockpit design may provide information on multi-function display (MFD), electronic centralized aircraft monitor (ECAM), engine indicating and crew alerting system (EICAS), etc.)
34.1.8.2 Verify proper operation of electrical power system warning, caution, and advisory indications, if any, and that these indications comply with §§ 25.1309(c) and 25.1322.
34.1.9 Procedures: § 25.1351(c)—External Power.
If provisions are made for connecting external power to the airplane, and that external power can be electrically connected to equipment other than that used for engine starting, verify that a means is provided to ensure that no external power supply having a reverse polarity, a reverse phase sequence, overvoltage, or reverse phase/neutral can supply power to the airplane’s electrical system. This demonstration may be accomplished in a laboratory environment.
34.1.10 Procedures: § 25.1351(d)—Operation without Normal Electrical Power.
The applicant must demonstrate that the airplane can be operated safely in visual flight rules (VFR) conditions, for a period of not less than five minutes, with the normal electrical power (electrical power sources excluding the battery) inoperative, with critical type fuel (from the standpoint of flameout and restart capability), and with the airplane initially at the maximum certificated altitude.
34-2
34.1.11 Procedures: Emergency Electrical Power System.
34.1.11.1 For airplanes with a type certification basis that includes amendment 25-23, the FAA has applied a general policy that following total failure of the electrical power system, if not shown to be extremely improbable, emergency electrical power should be available to power instrument displays, systems, equipment, or parts of the airplane essential for safety of flight during IMC operations for at least 30 minutes. It may also be advisable to check that in the event when normal operation is reestablished following the use of emergency power devices, such devices can withstand, or at least do not adversely affect, the subsequent reversion to “normal” operation.
34.1.11.2 Thirty-Minute Requirement Test.
34.1.11.2.1 Accomplish ground and/or flight testing to verify that the main battery/non time-limited power source (e.g., auxiliary power unit (APU), ram air turbine, pneumatic or hydraulic motor, etc.) is sufficient to power the essential loads required for safety of flight during IMC operations for at least 30 minutes. If the emergency power is provided by a non-time-limited power source, the main battery capacity should be sufficient for at least 5 minutes to show compliance with § 25.1351(d).
Essential loads for safety of flight during IMC operations are considered to include the following:
Those essential for continued safe flight and landing during visual meteorological conditions (VMC) operations.
One display of attitude, direction, airspeed and altitude as specifically stated in § 25.1333(b), a free-air temperature indicator, and pitot/static heat capability, if required.
Communication, intercommunication, and navigation capability (for IMC operations) necessary cockpit and instrument lighting, and any other instrument displays, systems, equipment, or parts of the airplane that are necessary to safely complete the flight.
34.1.11.2.2 Perform a VMC approach and landing with the airplane powered with emergency electrical power only. Verify acceptable operation of the emergency equipment.
34.1.11.2.3 Perform a simulated night IMC approach and landing with the airplane powered with emergency electrical power only. Verify acceptable visibility and operation of the emergency equipment. This test can be accomplished on a simulator.
34-3
34.1.11.3 Electrical Attitude, Altitude, Direction, and Airspeed Systems Using Battery Standby Power.
34.1.11.3.1 The FAA has published additional policy that applies to certification of flight instrument installations where: (1) all displays of any of the essential flight information (e.g., altitude, attitude, airspeed, or direction) require electrical power; and (2) the back-up source of electrical power is timelimited. See Policy Statement PS-ANM100-2001-116, “Policy Statement with respect to All Electrical Attitude, Altitude, Direction and Airspeed Systems using Battery Standby Power,” dated April 27, 2001.
34.1.11.3.2 Flight evaluations of such installations should be used to make sure that all the essential safety related flight instrument parameters are displayed, that the pilots do not have to take any action to display them when normal power is lost, and that the standby display(s) can be effectively used for all flight tasks required for safe flight and landing.
34.2 Electrical Equipment and Installations—§ 25.1353. [Reserved]
34.3 Distribution System—§ 25.1355.
34.3.1 Explanation.
Section 25.1355(a) defines the distribution system, including the distribution busses, their associated feeders, and each control and protective device.
34.3.2 Procedures: Section 25.1355(c)—Independent Power Sources.
For equipment or systems that are required to have two independent sources of electrical power, verify by airplane demonstration that in the event of a failure of one power source for such equipment or system, another power source (including its separate feeder) is automatically provided or can be manually selected to maintain equipment or system operation.
34.4 Circuit Protective Devices—§ 25.1357.
34.4.1 Explanation.
If the ability to reset a circuit breaker or replace a fuse is essential to safety in flight, § 25.1357(d) requires that the applicant locate and identify the circuit breaker (this includes solid state circuit breakers) or fuse so that the flightcrew can readily reset or replace them in flight. For airplane systems for which the ability to remove or reset power during normal operations is necessary, § 25.1357(f) requires that the applicant design the system so that circuit breakers are not the primary means to remove or reset power during normal operations unless the circuit breaker is specifically designed for use as a switch.
34-4
34.4.2 Reference.
See AC 25.1357-1A for additional guidance.
34.4.3 Procedures.
34.4.3.1 For compliance with § 25.1357(d), AC 25.1357-1A defines a circuit protective device (e.g., a circuit breaker or fuse) as essential to safety in flight if its disconnection would result in a major, hazardous, or catastrophic failure condition using the definitions of failure condition classifications according to that AC. AC 25.1357-1A also states that an “accessible” circuit protective device is one that a flightcrew member can readily reset or replace without leaving his or her seat, and that is the intent of the rule.
34.4.3.2 For compliance with § 25.1357(f), the applicant should evaluate procedures for normal operation to ensure they do not call for using circuit protective devices as the means to remove or reset system power unless the device is specifically designed for use as a switch.
34.4.3.3 The applicant should minimize the use of non-normal or emergency procedures involving flightcrew use of circuit breakers. Non-normal or emergency procedures should not call for pulling circuit breakers or resetting or replacing circuit protective devices in flight, except as part of an approved fault-clearing and isolation procedure. The applicant should evaluate, during ground and/or flight tests, the location and identification of circuit protective devices whose actuation is called for in non-normal or emergency procedures to confirm their accessibility as part of the review and approval of those procedures.
34.5 Electrical System Tests—§ 25.1363.
34.5.1 Explanation.
Laboratory tests are conducted to verify that the control, regulation, protection, and automatic operation of the electrical system comply with §§ 25.1351 through 25.1357.
Laboratory tests must be conducted on a mockup using the same type and length of feeder wires, and generating equipment that will be installed in the airplane.
Additionally, the generator drives must simulate the actual prime movers on the airplane with respect to their reaction to generator loading, including loading due to faults. Section 25.1363(b) states that for each flight condition that cannot be adequately simulated in the laboratory or by ground tests on the airplane, a flight test must be conducted.
34.5.2 Procedures: Negative Acceleration Performance.
Verify that no hazardous malfunctions of the electrical power system occur when the airplane is operated at the negative accelerations within the flight envelope prescribed in § 25.333. This should be shown for the greatest duration expected for the acceleration.
34-5
This test is normally conducted in conjunction with the engine negative acceleration test to comply with § 25.943.
34-6
CHAPTER 35. EQUIPMENT: LIGHTS
35.1 Instrument Lights—§ 25.1381.
35.1.1 Explanation.
None.
35.1.2 Procedure.
Under actual or simulated nighttime conditions, evaluate instrument lighting for the following characteristics:
35.1.2.1 Illumination of adequate intensity is provided for all appropriate cockpit instruments/controls/equipment.
35.1.2.2 Illumination is of appropriate color, intensity is evenly distributed, and is free of objectionable flicker, glare, or reflection.
35.1.2.3 Dimming capability allows smoothly adjustable illumination intensity between appropriate limits.
35.2 Landing Lights—§ 25.1383.
35.2.1 Explanation.
None.
35.2.2 Procedure.
The landing lights should be evaluated to determine that they are:
35.2.2.1 Aimed properly, provide sufficient intensity to facilitate night landings, and are acceptable at different pitch attitudes during landing approach with various CG, flap settings and airspeed;
35.2.2.2 Not a source of objectionable glare or halation; and
35.2.2.3 Functional in MMEL configurations and during operations in adverse weather.
35.3 Position Light System Installation—§ 25.1385.
35.3.1 Explanation.
Section 25.1385(a) requires the position light system to comply with detailed technical specifications contained in §§ 25.1387 through 25.1397. These sections define location, color, visibility, and intensity requirements with considerable precision. An in-depth examination of the installed position light system with regard to these requirements is not necessarily considered appropriate or within the scope of a flight test evaluation, 35-1
unless it becomes apparent while accomplishing the following procedures that further examination is warranted.
35.3.2 Procedures.
35.3.2.1 Operate the position light system. Verify that general locations and color are as prescribed in § 25.1385(b) and (c).
35.3.2.2 Verify that position light illumination does not cause objectionable glare to the flightcrew.
35.4 Anti-Collision Light System—§ 25.1401.
35.4.1 Explanation.
35.4.1.1 Section 25.1401(a)(2) requires the anti-collision light system to comply with the detailed specifications contained in § 25.1401(b) through (f).
These sections define coverage, color, flash rate, and intensity requirements with some precision. An in-depth examination of the installed anti-collision system, with regard to all of these requirements, is not necessarily considered appropriate or within the scope of a flight test evaluation, unless it becomes apparent while accomplishing the following procedures that further examination is warranted.
35.4.1.2 Policy statement ANM-111-06-001, Modifications Which Impact Airplane Exterior Lighting, dated May 14, 2007, specifies that applicants need to perform an analysis for airplane modifications involving external antenna installations to evaluate compliance to § 25.1401. The analysis should include an evaluation of the impact of the new installation on the anticollision light system and its associated master minimum equipment list (MMEL) dispatch relief.
35.4.2 Procedures.
35.4.2.1 Operate the anti-collision light system. Verify that one or more red or white lights are installed in locations that appear to provide the required visibility and which flash at the appropriate rates.
35.4.2.2 Verify that the anti-collision lights are not a source of objectionable glare or halation, to the flightcrew.
35.4.2.3 Evaluate anti-collision lights during flight in clouds.
35-2