When the fuel system is installed in cargo and baggage compartments, ensure all material used, including cargo barriers and replacement compartment liners, meet the applicable flammability requirements. The materials in the fuel system and the cargo barrier, it installed, should protect the fuel system from fire or heat from a fire that could occur in the cargo and baggage compartment. As a minimum, a cargo barrier should meet the flammability requirements of cargo and baggage compartment liners.
(3) If the compartment is a Class B compartment, consideration should be given to the required smoke/fire detector and to the access required for a crewmember to fight a fire. If the compartment is a Class C compartment, care should be taken to avoid interfering with or reducing the effectiveness of the approved smoke or fire detector, built-in fire-extinguishing system or ventilation control system. If the compartment is a Class D compartment, consideration should be given to retaining the effectiveness of the ventilation control system and to the prolonged effect of heat from a smoldering fire on the fuel tank system. Classification of the type of cargo and baggage compartment in which the auxiliary fuel system is to be installed should be defined by the applicant and verified by the applicable FAA aircraft certification office.
(4) If holes must be cut through cargo and baggage compartment liners for auxiliary fuel system lines, care should be taken to reseal the liner.
the fuel system is installed in a cargo and baggage compartment and if positive sealing cannot be verified by inspection or localized test, the certified allowable leakage from the compartment should be obtained and evaluated with the auxiliary fuel system total leakage included to ensure that the compartment classification is not affected. This may require a flight test.
(5) When the auxiliary fuel system is designed to be quickly removed, consideration should be given to the method for resealing or plugging holes while the system is removed. Complete maintenance instructions should be provided detailing the method of removal, resealing and restoring the airplane essentially to its original configuration.
AIRPLANE FUEL SYSTEM COMPATIBILITY ($$ 25.901(C), 25.951, 25.953, 25.955,
25.957 and 25.961).
a. Configuration Criteria.
(1) the essential fuel system to ensure that no hazardous fuel transfer or feed conditions exist. The criteria used to make this evaluation will depend on the type of auxiliary fuel system selected. The requirements for the two primary types of auxiliary fuel systems, the transfer and the direct feed type, vary considerably. The transfer type system supplies fuel from the auxiliary tank to an existing main tank or tanks. The direct feed system supplies fuel, in at least one operating mode, directly to an engine.
Chap 1 Par 2 7
(2) The requirements for a direct feed auxiliary fuel system are considerably more stringent than those for a transfer auxiliary fuel system.
These requirements, in general, ensure that an uninterrupted flow of fuel at the required pressure and flow rate is provided to each engine for all operating conditions of the airplane. These requirements also address altitude performance effects and low and high temperature fuel aspects as well as providing fuel system independence in at least one configuration. Failure mode and effects analyses (FMEA) are needed to ensure that no hazardous conditions exist due to a failure of the auxiliary system. Continuous engine operation should be verified when the auxiliary tank system is depleted of fuel, to prevent engine flameout or other unacceptable operating conditions.
(3) Transfer type system requirements are not as stringent but do require basic fuel system considerations such as damage to tank and vent lines due to excessive pressure from over filling, high and low temperature fuel effects, transfer rates, drainage, altitude effects, etc. The auxiliary tank depletion characteristics, especially for bleed pressurization type systems, should also be evaluated to ensure air entrainment, overpressure, etc., does not alter main tank performance. The applicant will need to determine when transfer to an essential system tank should be established and whether transfer should be in increments or continuous. The auxiliary tank quantity, tlow rates, essential system tank levels, etc., are considerations for when to initiate transfer and should be a part of the AFM procedures.
b. Interface Considerations.
(1) The interface of the auxiliary fuel system and the existing airplane fuel system should be evaluated. Use of existing fuel system lines and manifolds can provide considerable weight savings; however, the functions of these lines should be checked to ensure that the added usage does not conflict vith other requirements. for example, auxiliary tuel tanks mignt be pressure fueled from the existing airplane fueling receptacle(s); however, in manj cases, the pressure fueling manifold is also used for emergency fuel dumping or as part of the engine crossfeed system. The use of portions of the original system may create conflicting flow requirements if not thoroughly checked, particularly when a component failure, such as a valve failing to open or close, is involved.
Another example is the use of the existing airplane vent system for venting of the auxiliary tank(s). The existing vents have been sized to maintain acceptable pressure levels during refueling and flight maneuvers.
When combining the systems, the applicant should verify that no failure conditions result in an overpressure condition, i.e., during refueling or emergency descent. Some systems may require two phase flow analysis (air venting from one tank and liquid fuel venting from another tank through a combined vent system). If the essential fuel system tanks use flexible tank liners, it may be necessary to show by analysis or test that the combined vent system does not cause any hazardous bladder collapse in the essential system tanks due to rapid descent or other operating condition.
Chap 1 8 • Par 3
(3) When the auxiliary fuel system arrangement has been determined and the interfaces with the main fuel system established, a total system failure mode analysis should be conducted to ensure that no hidden failures in the system will lead to an unsafe operating condition. Analyze the system for all modes of operation, including venting, pressure tue ing, detueling, transter, engine feed, crossfeed, and emergency fuel dumping. For example, the auxiliary tank system should be designed so that failure of the system will not result in uncontrollable transfer of fuel from the main tank to the auxiliary tank when the main tank system is in its normal operating configuration.
Other Considerations. Other systems must also be evaluated tor compatibility with the auxiTiary fuel system. Ensure that the auxiliary fuel system electrical power demands do not overtax the airplane electrical system.
Use auxiliary fuel system cockpit indicators and nomenclature which are compatible with the existing cockpit displays. Cockpit instrument compatibility is especially important for the two-man crew cockpit, where pilot workload can become a critical factor and should be evaluated for Adequate cockpit display to indicate auxiliary tank depletion or improper fuel scheduling should be provided and cockpit indication of low fuel state, c.g.
unbalance or other unsafe condition should be considered for the particular Chap 1 Par 3 9
Figure l
OVERALL FRAGMENTATION ZONES Chap 1 10
CHAPTER 2 - AUXILIARY FUEL SYSTEM ARRANGEMENT
4. GENERAL ARRANGEMENT EVALUATION.
System Layout. In addition to the criteria described in the previous section, consideration should be given to the following:
(1) Line Routing, Flexibility and Support ($ 25.993).
(i) General fuel system practices should be adhered to in installing fuel and vent lines. All flexible lines should be adequately supported along the entire line installation length. Ensure that lines will not chafe against control cables, airframe structure or other equipment items.
Avoid locating lines near high temperature sources or near electrical wiring.
Where close proximity of a fuel line to electric wiring is unavoidable, locate the fuel line so that leakage cannot drip onto the wiring. Ensure that the fuel line is adequately clamped to structure to maintain the required spacing. Do not support wire bundles from fuel or vent lines. If adequate compartment ventilation or fuel line shrouding cannot be provided, isolation of electrical wiring from fuel lines may require a vapor barrier or a conduit for the wiring.
(See Chapter 2, paragraph 4a(4).)
(11) Consider the crashworthiness characteristics of the line routing. Where possible, interconnect tanks, rigid metal lines and other major fuel system components with flexible lines. Allow sufficient flexible line length to permit some shifting of the components without breaking the lines or connections. The flexibility of the entire fuselage auxiliary fuel line routing should be sufficient to account for fuselage break points. If lines are routed near structural members, the effect of "guillotine" or slashing action due to a crash landing should be addressed. When routing fuel lines through cabin floor structural lightening holes is necessary, provide sufficient clearance to prevent line severing due to floor deformations on a crash landing. A crashworthiness evaluation report of the auxiliary fuel system installation should be submitted during certification which shows, by analysis or test, that precautions have been taken to minimize the hazards due a survivable crash environment.
(2) Fuel Tank and Component Location, Access, Mounting and Protection ($$ 25.901 (b)(ii), 25.963, 25.965, 25.993 and 25.994).
(i) Each auxiliary fuel tank or tank module design should be evaluated for the basic requirements of $$ 25.963 and 25.965. These requirements address, for example, the basic integrity of the tank, bladder cell requirements, pressurized tank requirements and the tank tests, such as, slosh and vibration, that may be required.
(ii) As a general rule, all components, such as valves, pressure transmitters or switches, filters, etc., should be directly mounted to the airplane structure or to supports which are directly attached to the structure.
If fuel or other system lines or fittings are used to support auxiliary fuel Chap 2 Par 4 11
system "in-line" small/lightweight components, it should be shown that this practice does not result in excessive structural stresses when subjected to the vibration and other loads expected in service.
Although function will dictate the appropriate location of components in the airplane, there is usually some latitude which will allow selection of a specific area which is more suitable than others. Component location should be considered from the aspects of both access and protection.
Access is especially important for components which will require routine periodic inspection and maintenance such as strainers, filters and drain valves or components with known short service life expectancy. Where possible, such components should be located in areas where there are currently existing access doors and openings on the airplane. When new access provisions are required, lightning and crashworthiness vulnerability as well as structural security should be considered.
(iv) Locating components in areas where there is a high probability that they can be stepped on or tripped over by personnel during the routine servicing or maintenance of the airplane should be avoided. The crashworthiness of the location should also be considered. Components should not be installed below the fuselage cargo floor if they may be crushed, scraped oft, or cause penetration into the auxiliary fuel tank which can result in leakage during a wheels-up landing. Protection from damage due to shifting baggage and other objects which may not be tied down in the cargo area should be provided. See Chapter 1, paragraph 2d for cargo barrier criteria.
(v) For components which must be located inside the fuel tanks, the crashworthiness aspects of the installation should be considered. Means to prevent component sharp edges from penetrating the tank surface due to deflection of the surface under crash load conditions should be provided, especially where flexible tank bladder cells are used.
(3) Tank Penetration Points (Access, Quantity Probes, Float Switches and Fuel Fittings) ($§ 25.963, 25.973; 25.975, 25.977).
(!) The location and arrangement of all tank penetration points should be considered. Tank penetration points are all locations where openings exist in the tank walls for access (inspection or repairs), for mounting fuel quantity probes, float switches, etc., and for tank venting, drainage and tuel transfer or fueling.
(ii) Auxiliary tanks should have access openings large enough to permit completion of required inspections. Component and line penetrations may be usable as access/inspection openings, dependent on size and location, and should be evaluated for acceptability.
(iii) All tank fuel line to airplane structure attachments should be evaluated tor the flight, flight vibration and crash loads which may be ransmitted to the tank walls. From the crashworthiness standpoint, to prevent fuel tank fittings from being torn out of the tank wall, it may be advisable to Chap 2 12 Par 4
consider the need for frangible disconnect valves or fittings, mounted on the external surface of the tank, which separate and shut off any hazardous fuel flow from the tank in event of a crash. However, a tallure analysis must show that inadvertent closure of these frangible fittings will not interfere with continued safe flight.
(4) Electrical Wiring Routing and Support ($$ 25.1301 and 43.13). The following practices should be adhered to for wire routing and support; however, in all cases, clearance between wires and fuel or oxygen lines and control cables should be adequate to prevent damage due to deflections of structure or support which may occur during a survivable crash.
(i) A minimum clearance of 3 inches between wires and any control cable should be maintained unless a shield is provided.
(ii) Wires should be located above (preferably), or on a level with, metallic fluid lines. A minimum clearance of 6 inches between wires and combustible fluid or oxygen lines should be maintained whenever possible.
a 6-inch clearance cannot be maintained, install additional clamps to provide separation. The fluid lines should not be used as a means of supporting wire bundles. Additional clamps should be installed to support the wire bundle and these clamps fastened to the same structure used to support the fluid or oxygen lines to prevent relative motion.
(iii) A minimum separation of at least 1/2-inch should be maintained between noncombustible plumbing lines and any wire.
(iv) Wires and wire bundles should be supported with clamps meeting Specification MS-21919, Clamp, Looptype, Cushion Support, or equivalent.
(v) Where wires or wire bundles pass through cutouts in bulkheads or other structural members, a grommet and suitable clamp should be provided to prevent abrasion if the clearance is less than 1/4-inch.
(vi) Refer to AC 43.13-1A, Acceptable Methods, Techniques, and Practices--Aircraft Inspection and Repair, for more details regarding routing and supporting of wires, acceptable methods, techniques and practices-aircraft inspection and repair.
b. Fuel Containment Secondary Barriers ($$ 25.967, 25.863). For auxiliary fuel systems which are located in the passenger or cargo and baggage compartments (Appendix 1), isolation of the fuel and tue, vapors trom other areas of the compartment is of critical importance. lanks, line tittings, connections and other components, such as valves, pressure transmitters, regulators etc., must de shrouded or provided with redundant barriers such that eaks from any of these sources will not present a fire hazard. Some of the important characteristics of the secondary barrier system are:
(1) The system should be capable of containing and isolating any leakage. To contain any leakage, integrity at the maximum system operating pressure should be demonstrated.
Chap 2 Par 4 13
(2) Secondary barrier spaces should be vented and drained in accordance The drain system also serves as a periodic visual means of detecting any be connected to other types of fluid drain systems.
(3) The secondary barrier drain system materials, construction and sealing characteristics must be compatible with fuel and capable of long life under the altitude/cabin pressure cycling, vibration and wear to which they will be exposed in service.
(4) The drain system should be reviewed from the installation location aspects to preclude the possibility of inadvertant damage by ground personnel or shifting cargo.
c. Tank, Fuel and Vent Line and Component Shrouds ($ 25.967).
Auxiliary fuel tanks installed in a passenger or cargo and baggage compartment should be completely shrouded. This means that all fittings connected to and through the tank walls should also be provided with secondary barriers. Figures 2 and 3 show some acceptable designs for shrouding equipment items and fittings installed on or through the tank walls. Each tank penetration design should be reviewed to ensure a single failure (such as a seal failure) does not result in fuel or fuel vapors entering the compartment.
A primary seal with a secondary shroud/seal provides the required protection if indication of a primary seal failure is also provided and the secondary seal is pressure tested periodically.
(2) All vent and fuel fittings and connections in a passenger or cargo compartment should also be shrouded. An example of this is shown in Figure 4.
3) valves and other components, unless otherwise protected, can nave possible leak paths through shatts and at control motor or solenoid connections or other seals in addition to their line connections, and should be completely shrouded.
(4) Electrically operated components are of particular concern because of the possible need to route electrical leads through the secondary barrier spaces. The space should be considered an abnormal vapor zone containing flammable fluid similar to the interior of the fuel tank. Thus an evaluation of the electrical connector and wiring temperatures should be made for both normal and fault load conditions. It may be necessary from this evaluation to install the wiring in vapor-proof conduit, except where shown to be intrinsically safe.
d. Fuel Tank Secondary Barrier Cavity Venting ($ 25.967). The changes in tank secondary barrier cavity pressure during all airplane maneuvers, including emergency descent, must be accounted for in the design of the auxiliary fuel tank. Bladder type tanks may be critical under emergency descent conditions, Chap 2 14 Par 4
depending on the cavity vent line sizing. The vent/drain configuration must provide the required positive and negative pressure reliet between the outer shell and the bladder or inner wall to prevent collapse or over expansion of the inner tank. Depending on the location of the overboard vent/drain exit and the airtlow characteristics around the exit or exit mast, a flight test may be required to evaluate the emergency descent characteristics of the cavity vent system with the airplane in both the "clean" and "wheels and flaps down" configuration.
e. Other Secondary Barrier Vent and Drain Provisions ($$ 25.954 and
25.967).
(1) All secondary barrier spaces should be vented and drained. The spaces in some designs are manifolded for venting and drainage as shown in the figures in the previous section or are independently vented and drained.
Figures 2 and 3 the tank fitting cavities are ported into the tank shroud cavity proper. In Figure 4 the line fitting shroud vents to the tank fitting cavity; and this cavity, in turn, is vented to the tank shroud cavity.
Eventually all cavities must vent and drain to an exit external to the airplane.
The overboard exit should be located to prevent fluid reingestion into such areas as the wheelwell and other critical areas of the airplane. On many airplanes there are existing exit drain masts, which are used to vent and drain the secondary barrier cavities of the airplane main fuel tanks or shrouds. The use of these existing drain masts is recommended. The attachment of the auxiliary system drain to the existing airplane drain should ensure that backflow does not occur in either system.
(2) For secondary barriers located in passenger or cargo areas, the cavity vent and drain exit should always be open and vented to ambient pressure.
Avoid the use of push-to-drain valves at both ends of the drain to check the cavity condition. Multiple drain outlets utilizing push-to-drain or other type valves should not inhibit venting.
(3) If a new exit mast is required, consider carefully the location and configuration from the standpoint of lightning vulnerability and conductivity (see Chapter 2, paragraph 6b). Drain masts should not be located upstream of air inlets or other openings in the airplane external surface. Physical inspection by the cognizant FAA personnel of all drain locations on the actual airplane should be accomplished to ensure all interfaces are considered.
Verification that liquid discharge from the mast will flow clear of the airplane and not impinge or reenter at another airplane surface should be accomplished by impingement tests conducted in flight. Ensure that freezing does not occur during the tests and that the test results will be representative of a fuel leak.
5. FUEL SYSTEM CONTAMINATION PREVENTION ASSESSMENT (99 25.971, 25.977 and
25.997). The primary concerns of fuel contamination with respect to auxiliary fuel system design are water and debris contamination. The certification requirements are quite specific, and the installer should be familiar with the requirements of § 25.971, Fuel Tank Sumps, and § 25.977, Fuel Tank Outlets.
Chap 2 Par 4 15
There may also be a need to refer to § 25.997, Fuel Strainer or Filter. This regulation would be applicable for auxiliary fuel systems which feed fuel to a positive displacement pump which in turn feeds the engine or to some alternate auxiliary fuel tank direct engine feed system. The existing main fuel system design should already satisfy $ 25.997 requirements. The installer should, however, verity that these requirements are maintained when an auxiliary fuel system is installed. The following features should be considered with respect to auxiliary fuel system contamination.
a. Fuel Tank Sumps and Fuel Strainers.
(1) Sump Location and Capacity.
(i) Sumps should be installed at the lowest point in the auxiliary fuel system with the airplane in its normal ground static attitude. This will allow water in the system to migrate to the sump where it can be drained before flight. The sump may be an integral part of the tank, providing the bottom of the tank is the lowest point in the system, or may be a separate tank specifically installed for sumping purposes. If the sump is a separate tank and located within a passenger or cargo compartment, it should be designed to the shrouding criteria set forth in the previous section for fuel tanks including the overboard drain exit requirements. Separate sump tanks should not be located below the cargo compartment floor if they will be vulnerable to damage in the event of a wheels-up landing.
(ii) Sumps and sump tanks must have the capacity specified in § 25.9/1. It a separate sump tank is used for a number of tanks or modules that are interconnected together to function as a single tank system, the required capacity of the sump is based on the capacity of the total tank system.
(2) Sump Drain Provisions. All sumps should have provisions which allow complete drainage of the sump. These drainage provisions should be carefully designed to provide high reliability in service and a high degree of crashworthiness. Drain valves should be positive locking and reliable. Drain valve installations should provide double seals to prevent overboard leakage from a single seal failure. Lightning aspects of the overboard access should be addressed as discussed in the next section. Locate the drain valve at or near the sump. Do not locate drain valves on the bottom surface of the fuselage or other areas where they may be inadvertently damaged or opened. In passenger/cargo compartments, sump drains should be shrouded in accordance with the provisions described in the previous section and the shrouds provided with vents per normal shroud procedures. The shrouded fitting between the sump drain and the overboard penetration should provide a "fuse" point or other means to ensure that upward penetration of the tank does not occur during a crash landing.
(3) Fuel Strainers ($$ 25.951 (c) and 25.977).
(i) One purpose of using a fuel tank outlet strainer is to prevent the intrusion of debris of a size sufficient to damage or jam components Chap 2 16 Par 5
downstream of the tank outlet. Fuel strainers of this type should be used in the fuel tank outlets of auxiliary tank systems which transfer fuel by mechanical pump means or which have gravity fuel fillers incorporated, where there is a probability of debris inadvertently entering the tank.
The mesh or size requirements are defined in § 25.977.
However, because of the problem of icing, the effective flow area of the strainer should be selected considering also the requirements of § 25.951 (c).
Fine mesh screen should not normally be used in this application.
Fuel and Vent System Low Points ($ 25.975). Avoid creating low points in routing fuel and vent lines. This condition is usually a problem where long fuselage runs of flexible fuel lines/shrouds are installed. It is particularly important to eliminate low spots in vent and drain lines, where water may collect and freeze, blocking the lines. Unavoidable shallow low areas may be acceptable without drains if fluid can not collect to any appreciable degree.
Where traps in the vent system are unavoidable, drains should be installed.
Depending on the particular design, these drains may allow the fluid to flow.
back to the tank. Auxiliary tank vent systems should ensure that fuel sloshing in the main tank vent line does not enter the auxiliary vent system in unacceptable quantities. Where possible, drain lines should be routed to provide continuous down slope to the drain exit so that complete drainage is accomplished with the airplane in the normal ground attitude. If not possible, consider adding sump type drain valves at the applicable low points. Where drain valves are required use the criteria discussed in the previous sections.
6. IGNITION SOURCE ISOLATION EVALUATION.
System Electrical Bonding (8 25.863, MIL-B-508/B). All auxiliary fuel system conductive components such as electrical equipment, fuel tanks, lines, etc., should be electrically bonded to airplane structure. If two or more components are grounded in series, both ends of the ground circuit should be grounded to ensure that the loss of an intermediate ground connection will not leave any component isolated from ground. The bonding jumper should be as short as practicable and installed in such a manner that the resistance of each connection does not exceed .003 ohm. Special emphasis should be placed on ponding when addressing nonmetallic or composite auxiliary tuel tank/systems.
The applicable auxiliary fuel system installation drawings should identify the discrete attachment points requiring bonding. The surface treatment (s) required should also be specified by an applicant's specification(s) which should be submitted to the cognizant certification office during certitication.
Verification of adequate bonding should be accomplished during installation and when maintenance is performed on the auxiliary fuel system in the airplane.
(1) Wiring Isolation in Fuel or Fuel Vapor Environment.
(i) Electrical power wiring in fuel or fuel vapor environment should be adequately protected to prevent damaged wire(s) from igniting Chap 2 Par 5 17
fuel/fuel vapor. Installation of the electrical power wiring in a metallic conduit is an acceptable method to meet this criteria. Electrical power wiring is the wiring that is connected to a power source.
(ii) Flexible conduit conforming to Specification MIL-C-6136, Installation, Types i or il, or equivalent, may be used where it is impractica Installation, lypes to use rigid conduit, such as, areas that have motion between conduit ends or where complex bends are necessary.
(iii) Conduit installation considerations include the following:
(A) Metallic conduit should have a low-resistance bond of less than .003 ohm to airplane structure.
(B) To prevent wire chafing at the conduit ends, suitable end fittings should be installed so that a smooth surface comes in contact with the wire(s) inside. When fittings are not used, flare the end of the conduit to prevent wire insulation damage.
(C) The conduit should be supported by clamps along the conduit run to prevent chafing against structure and to avoid stressing the end fittings.
Lightning Vulnerability ($ 25.954). The auxiliary fuel system installation should be evaluated from the standpoint of lightning vulnerability. Some items and areas that may be susceptible to fuel ignition or indirect effects of lightning include, but are not limited to, the following:
(1) Vent outlets, metal fittings and mechanical fasteners inside fuel anks, tuel tiller caps and access doors, drain plugs, tank skins, tue transfer lines inside and outside of ine tanks, and electrical and electroni fuel system components and wiring.
(2) Advisory Circular 20-53A, Protection of Aircraft Fuel Systems Against Fuel Vapor Ignition Due to Lightning, addresses the subject in more detail.
(3) The primary areas of concern for auxiliary systems are all fuselage penetrations, such as protruding masts, access provisions, vents and drains which can be susceptible to a direct strike or corona effects.
ot all attachments, fittings, etc., must be reviewed to ensure there will be no arcing or sparking and that adequate electrical bonding has been provided.
Composites in the basic airplane in areas that involve a portion of the auxiliary fuel system installation should also be evaluated for indirect effects.
Indirect effects are induced electromagnetic effects which occur from a lightning strike (such as induced sparking in fuel system components or wiring).
Chap 2 18 Par 6