AC 29-2C, Chg 7 2/4/2016 (B) Format. EDS provides the ability to display powerplant information in a variety of formats. For EDS installed to replace analog gauges, the format of the primary powerplant instruments (TQ, N1, TGT) should allow pilots to easily transition from the old analog variant to the digital variant without undue concentration and without training.
(1) Gauge layout and marking should be easy to see and interpret.
(i) If using a similar format such as round-dial representation of a round dial analog gauge, then indices and markings should be similar to the analog gauge the digital display is replacing. This is to ensure there is no negative transfer from reading traditional electromechanical gauges or confusion when reading the digital gauge. There may be improvements made over the existing gauges. For example, an instrument such as a dual tachometer, which provides information on the status of main rotor speed, may also provide information relating to pilot collective input (to correct a deviation in rotor RPM). For example, providing a dual tachometer that places the normal range at the 9:00 position provides the pilot with two types of information. If the rotor RPM is high, the needle is high. It also gives the pilot a cue that to lower the RPM, the pilot should lower the collective to lower the NR (and bring the needle down to the normal range).
(ii) Use of a distinctly different format such as a tape or linear gauge or a distinctly different shaped representation should allow for quick and easy assessment of information. The ease of use should be better or the same upon gauge replacement.
(iii) Needles, pointers, or other indicator means should point at the value, not cross or obscure the value. If using multiple needles or pointers on a display, the parameter that they are indicators for should be clear and easily distinguishable from the others on the display.
(iv) Markings must follow requirements of §§ 29.1543 through
29.1555.
(2) Graphical and numerical-only displays of parameters or information should follow the guidance in section d above. Providing a numerical readout along with graphically presented information provides the pilot with complementary data of a specific value coupled with the awareness of where in the operating range that value resides.
(i) There should be graphical display of powerplant pressures and temperatures, fuel levels and pressures, and speeds.
(ii) There should also be graphical presentation of other parameters with a range of normal if the pilot needs to monitor where a parameter is or is changing relative to a limit.
Page MG 19 -26
(C) Part-time vs. full-time display of information.
(1) Powerplant instruments required by § 29.1305 should be displayed full time (i.e., continuous display). However, due to space limitations or display system design, EDS displays that allow for the de-selection of secondary powerplant instruments (e.g., engine oil temperature and pressure, transmission oil temperature, electrical and hydraulic system information) required by § 29.1305, may be acceptable.
There should be continuous display of primary power information (TQ, MGT, Ng, or their equivalents) and Rotor tachometer (Nr and Np).
(i) In order to allow the de-selection or part-time display of these parameters, compensatory features should be designed and provided to alert pilots to select and monitor § 29.1305 instruments prior to the parameter reaching a cautionary or warning limit.
(A) Algorithms and monitoring software can provide the capability to alert pilots about possible anomalies in a parameter’s behavior. Pilots can then select the appropriate display, monitor the situation, and mitigate the situation as required prior to it becoming an abnormal condition.
(B) The monitoring function should automatically provide the same level of monitoring that would exist if there were continuous display of the individual engine gauges.
(ii) To show compliance using part-time display of § 29.1305 required indicators, the applicant needs to show equivalence. Coordinate with engine and powerplant specialists since they will need to assist in the evaluation of the monitoring algorithm parameters. Depending on the strategy employed, the engine manufacturer may also need to be involved. Additionally, coordinate early with the FAA/AUTHORITY since there will need to be an equivalent level of safety.
(ii) System displays. Display of system information (e.g., hydraulic system information, electrical system information), other than powerplant information, may be combined onto an EICAS or IIDS display or displayed on separate displays.
(A) Crew Alerting System (CAS) and Caution Advisory Warning System (CAWS). EDSs may include CAS message windows or CAS messages may display on a separate display. CAS messages must be easily seen and legible in all lighting conditions. The messages or labels must be easily understandable and use standardized acronyms or labels. Display of CAS messages should be located as close to the pilot’s central line of vision as possible unless there is a Master Caution or Master Warning indicator in the pilot’s primary field of view.
(1) Managing Messages and Prompts. The following general guidance applies to all messages and prompts:
Page MG 19 - 27
AC 29-2C, Chg 7 2/4/2016
(i) There should be an indication when there are additional messages not displaying that are in a message queue.
(ii) Within levels of urgency, messages should display in logical order.
(iii) If the length of the information for the message, prompt, or response options does not display on a single page, there should be an indication that additional message information exists.
(2) The CAS display should be large enough to generate a display of all possible warnings that are in a worst-case scenario. The design should provide for the sufficient space to display all possible warnings on the screen at once. To decrease the amount of cascading warnings, use algorithms to suppress subsequent cascading warnings that would appear because of an event. For example, loss of an engine could lead to cascading messages of warning-level conditions that resulted from the engine loss. Unless the pilot has to perform separate procedures to correct subsequent warnings from the procedures needed to handle the engine loss, there is no need to present them to the pilot.
(3) CAS message priority.
(i) If displaying CAS messages in a window within an EDS display, prioritize how they will appear. Normally, the presentation of warning messages takes precedence over caution and advisory messages. There can be prioritization of new warnings by importance, recency, or other prioritization scheme.
(ii) Caution message priority should be defined and easily understood by the pilot. Scrolling and paging-over to read overflow Caution messages is allowed. The scrolling function and control must be easily identified and used without undue concentration.
(7) Mission or ancillary displays.
(i) Displays added to the cockpit for specialized uses by a mission crewmember and not the pilot, such as FLIR displays, should be located outside of the pilot’s secondary field of view, if possible, so as not to distract the pilot from flying the rotorcraft.
(ii) Displays of non-required information not integrated into an EDS but intended to be used by the pilot should have all of the attributes and characteristics of an EDS. These displays can be located within the pilot’s secondary field of view but not in the primary field of view and should not displace the display of required information.
Page MG 19 -28
(A) Display of non-required information should be assessed to ensure it does not provide misleading information to the pilot or information contrary to that provided by a required source. For example, an enhanced vision display should not display cues regarding rotorcraft position relative to hazards or navigation waypoints that are contrary to other information provided on the EDS.
(B) The intended function of a non-required information display should be specific and defined. For example, “Increase pilot situation awareness” is not an acceptable statement of intended function. A better statement of intended function is “Increase pilot awareness of hazard location relative to the rotorcraft.”
(8) Reversionary Modes.
(i) General. Because EDS displays can integrate numerous required flight, powerplant, and system information into single displays, there is a greater opportunity for a fault to lead to the loss of the display of multiple parameters. To mitigate this, the use of reversionary modes and displays can ensure the continued display of required parameters. Reversionary modes are sometimes referred to as “compressed displays” or “composite displays.”
(ii) Methodology.
(A) IFR. Refer to 14 CFR Appendix B to part 29 and Appendix B of this AC for information on the IFR requirements. Per Appendix B to part 29, the display of information essential for continued safe flight (i.e. attitude, altitude, airspeed, and heading) must be immediately available to the pilot flying without crewmember action after any single or combination of failures not shown to be extremely improbable. In IFR designs, it is expected that the first display failure should have no impact on the ability of the pilot to continue safe IFR flight to the planned destination.
(1) Unlike normal category rotorcraft (certificated under 14 CFR part
27), transport category rotorcraft with a certificated dual pilot installation, the design should not rely on the pilot’s use of the copilot’s instruments as a standby source of primary information. If there is other information on EDS displays that the pilots access looking at the cross-cockpit display, specific issues should be addressed. Some of the issues are:
(i) Pilots should easily see and interpret the displays from their normal seated position with minimal head movement.
(A) The copilot’s systems should be within the pilot’s secondary field of view.
(B) The display characteristics should support off-angle viewing in all lighting conditions.
Page MG 19 - 29
AC 29-2C, Chg 7 2/4/2016
(ii) If required, pilots should easily manipulate the displays with one hand from their normally seated position. Pilot access of the displays and controls must meet the requirements of § 29.777 when used by the pilot-flying as primary flight information.
(2) Automatic reversion is one means to meet the requirement on § 29.1333(b) that allows required information to remain visible to the pilot flying without crewmember action. The format and arrangement of the reversionary mode is discussed below.
(i) Automatic reversion should provide the required information within one second of the detected failure of a display or the display’s inability to provide the information.
(ii) For undetectable loss of the display resulting from a backlight failure or a broken display screen, then a single button push by the pilot is acceptable.
The pilot should be able to recover the lost display of information within one second.
However, the design of the display should be such that these failures are extremely improbable.
(iii) Arrangement. Arrangement of information in a compressed or composite mode must follow the requirements of § 29.1321.
(A) Presentation of primary flight information should remain the same.
(B) Presentation of navigation information should provide for required information in as similar a location as possible as a normal display.
(C) Powerplant and required system information should be arranged in a manner that is easily accessed and readable.
(D) CAS messaging should be displayed with the ability to display all possible warnings without overflow.
(iv) Reversionary mode display format.
(A) Format of the primary flight information should not change.
(B) HSI presentation in a reversionary mode should provide the same usability and function as the non-reversionary mode. Navigation information should still be available and as close to the same format as possible.
(C) Presentation of primary powerplant information the pilot uses to set and monitor power should be prominent and graphically displayed.
Page MG 19 -30
(D) Presentation of powerplant information pilots use to assess the health and ability of the powerplant to develop power can revert to numerical displays if needed. Display of these parameters numerically should include secondary cueing for the pilot in the event a parameter exceeds a cautionary or limit value. For example, the numerical digit or field should provide a visual cue regarding its status as it would in a normal display (see § 29.1322).
e. System Requirements.
(1) All parameters in EDS displays are to be designed in accordance with the relevant TSOs. TSOA does not mean that the function or hardware meets the certification requirements for the rotorcraft in which it is to be installed.
(2) A safety assessment should be provided as part of finding compliance with § 29.1309. The following sections of this AC contains guidance on safety assessments:
Section 29.1309, paragraphs c. (Failure Analysis), d. (Safety Assessment),
f. (Software), and g. (Airborne Electronic Hardware).
MG 21 (FHA)
(3) Special Considerations when determining failure condition classifications.
Consideration should be given to the type of operation that the system is intended to support. For example, failure condition classifications for IFR installations are generally higher than VFR. Information contained on a PFD is usually more critical, in most cases, than information on a MFD.
(i) VFR.
(A) In a VFR-only certificated rotorcraft misleading information will typically have a higher hazard categorization than loss of information. The design should provide mitigation to both as much as feasible, particularly for transport category rotorcraft, since night VFR can be flown in areas that do not provide pilots with good visual cues regarding the horizon or ground features.
(B) PFD. Display of any non-required information such as synthetic vision should not display misleading information. Loss of non-required information should not lead to confusion or affect the ability of the pilot to access or assess required flight information.
(C) Display of powerplant information. 14 CFR 29.1305 contains the required powerplant instrument data to be displayed. Although each item is required, care should be taken with the loss of the following, as applicable: low fuel warning, oil pressure warning for each gearbox, tachometer, and OEI power levels.
(ii) IFR. Regulations for rotorcraft certificated for IFR operations are found in Appendix B to part 29.
Page MG 19 - 31
AC 29-2C, Chg 7 2/4/2016
(iii) Field-Loadable Software (FLS) as part of the TC, STC, ASC, and ASTC installation. FLS is software that can be loaded without removal of the equipment from the rotorcraft installation. FLS can refer to either executable code or data. FLS might also include software loaded into a line replaceable unit (LRU) or hardware element at a repair station or shop. When obtaining certification approval for utilization of the FLS capability, refer to the guidance in FAA Order 8110.49.
(iv) Navigation Database Qualification. For area navigation equipment, the navigation database is an essential component of the ability of the equipment to perform its intended function. RTCA Document DO -200A, Standards for Processing Aeronautical Data, contains guidelines pertaining to the navigation database. .
Consider obtaining a Type 2 Letter of Authorization for databases used for Localizer Performance with Vertical Guidance in addition to the required documentation. See AC 20-153A for additional information. See AC 20-153A for additional information.
(4) Environmental qualification. EDS displays should meet the appropriate RTCA Document DO-160G environmental qualifications for rotorcraft. Rotorcraft environments can be more hostile than fixed-wing environments. Give special attention to the temperature and vibration qualifications. See section 29.1309 of this AC for more guidance.
(i) Cooling.
(A) Perform cooling evaluations for the installed components.
(B) Temperature Survey to Determine Proper Cooling of EDS Components.
(1) Equipment Requiring Cooling Test. As with any avionics equipment, good engineering judgment may deem that all components of the EDS should have an in-flight temperature survey performed to ascertain that the thermal environmental tolerance of the system components is not exceeded. Usually, the following general guidelines may be used to aid in determining when an in-flight temperature survey is warranted.
(i) Equipment specified by the manufacturer to require forced air cooling (by an airframe-mounted system) usually requires a temperature survey.
(ii) Equipment that is not specified as requiring forced air-cooling may usually have its critical thermal environment substantiated by laboratory testing.
(2) Temperature Survey Testing. The temperature tests for the EDS units should consist of a short-term test of approximately 30 minutes, which accounts for a rotorcraft that has heat-soaked on the ramp. A factor of 25° F should be added to the maximum corrected temperature to account for “greenhouse effect.” A long-term Page MG 19 -32
test should be accomplished at various altitudes and limiting (low and high) airspeeds.
All avionic equipment should be turned on during the long-term tests, and the cockpit panel lights should be operated at full intensity. The environmental control unit or air-conditioning system should not be operated during the short-term and long-term tests; however, any windows or vents, which are part of the basic TC of the rotorcraft, may be utilized to ventilate the pilot’s stations during the long-term test. Both of these tests should be corrected to the maximum temperature for which the rotorcraft is certificated (maximum outside air temperature) and a standard lapse rate for altitude
(i.e., 3.6° F/1,000 feet), as specified in this guidance (refer to section 27.1309 of this AC). This lapse rate should be applied regardless of the hot day sea level temperature the applicant chooses to certificate for operation. If an airframe cooling s ystem is necessary to keep the display units within acceptable temperature limits, then the pilot(s) must be made aware of a failure or malfunction of this required cooling system.
Some type of cockpit visual annunciation with the capability to perform a preflight test is usually utilized to fulfill this requirement.
(ii) HIRF. Perform HIRF testing in accordance with § 29.1317 and the guidance in section 29.1317 of this AC.
(5) Night vision imaging system (NVIS) lighting. If the EDS is designed with night vision goggle (NVG) compatibility for installation in a NVIS lighting modified cockpit, refer to MG-16 of this AC and RTCA Document DO-275 for lighting performance guidance. Modifications to EDS displays should preserve color uniformity across the cockpit. Most EDSs incorporate color, as a result, in order to preserve the EDS colors close to the rotorcrafts designed colors, the NVIS lighting system should be modified to be compatible with Class B NVGs. Lighting compatible with Class A NVGs may not provide the correct color hues (e.g., red colors tend to look orange or amber, yellow colors tend to have a green tint in daylight, etc.).
Page MG 19 - 33
This is new AC 29-2C guidance material.
CHAPTER 3
AIRWORTHINESS STANDARDS
TRANSPORT CATEGORY ROTORCRAFT
MISCELLANEOUS GUIDANCE (MG) AC 29 MG 20. HUMAN FACTORS (HF)
a. Background. The purpose of this miscellaneous guidance section is to provide applicants with general guidelines on how to approach compliance with 14 CFR part 29 sections that have provision relating to human factors (HF) or human performance. The intent of this guidance is to assist in understanding the HF implications of the more frequently referenced regulations. This guidance also provides examples of how to address HF implications when demonstrating compliance with these regulations. This information should help determine whether HF-related requirements have been adequately addressed.
(1) Developments in technology and the affordability of advanced avionics provide for the installation of sophisticated systems into rotorcraft. As a result, the level and characteristics of pilots’ interactions with cockpit and avionics systems is changing, particularly for rotorcraft that are not capable of operating under instrument flight rules (IFR). Additionally, integrating new technologies, such as a satellite-based augmentation system (SBAS) or wide area augmentation system (WAAS) increases the rotorcraft’s avionics system capabilities to perform functions and operations it was not previously capable of performing. These new capabilities create HF issues related to pilot workload that should be evaluated along with the systems integration. Poor system integration often results in applicants relying on the pilot to work around a design issue. This approach, coupled with complex pilot interfaces, can lead to pilot error and may inhibit the pilot’s ability to recover from errors without undue concentration or fatigue. Some HF implications are straightforward and easily complied with, while others may be more complex. A partial list of rules that have HF implications, particularly those that relate to pilot workload, is included in paragraph
b.(2) below. The HF guidance contained in this MG is consistent with the goals identified in the FAA Industry Guide to Product Certification (Jan 99) and the FAA Industry Guide to Avionics Approvals (Apr 01).
(2) The requirements of part 29 Subparts A through G applies to both VFR and IFR rotorcraft approvals. Rotorcraft approved for IFR operations must also meet the additional requirements of Appendix B to part 29. (Airworthiness Criteria for Helicopter Instrument Flight). Additionally, Appendix D to part 25 contains information regarding criteria for minimum crew determination for airplanes operating under IFR conditions, which may be beneficial for determinations in rotorcraft.
Page MG 20 - 1
AC 29-2C, Chg 7 2/4/2016
(3) As a normal part of the certification project, the applicant and the FAA/AUTHORITY usually establish an early and formal written certification plan on the certification basis, the methods of compliance, and the schedules for completing the certification project. Both parties should ensure coverage of the HF aspects of the rules in the plan. If the applicant chooses, it can submit a separate human factors certification plan. These early discussions can reduce the applicant’s time and cost to obtain certification.
(4) The flight test team usually performs the HF evaluations. However, HF engineers and test pilots should be involved early in the design, during cockpit integration tests, and early in the human-machine interface evaluations. Identify and develop pilot-system interfaces and interactions in the basic design to reduce the risk of having an interface issue identified after the system design is “frozen” and mature.
b. Related Regulations and Documents.
(1) (1) HF related regulations. Not all of the regulations listed require specific HF means of compliance. Some are self-explanatory and straightforward, while compliance with others is determined during flight test as part of their normal course of testing and evaluation. However, each regulation should be noted in the certification plan.
(2) Many of the regulations with HF implication are also within the purview of other engineering disciplines; therefore, demonstration of compliance with 14 CFR part 29 may include more than one engineering discipline. For regulations with HF implications, consider identifying which discipline or individual will be responsible for demonstrating compliance with these regulations. The following contains a partial list of part 29 regulations related to human factors and performance.
14 CFR Section Title
29.2 Special retroactive requirements.
29.33(b)(3), (c)(2), (e) Main rotor speed and pitch limits.
29.45(a), (f) General.
29.51(a) Takeoff
29.75(a), (b) Landing
29.141(b) General.
29.143(a), (d), (e) Controllability and maneuverability.
29.151(a), (b) Flight controls.
29.161(b) Trim control.
29.171 Stability: general.
29.177 Static directional stability.
29.239 Spray characteristics.
29.251 Vibration.
29.561(a), (b) General.
Page MG 20 -2
14 CFR Section Title
29.611 Inspection provisions.
29.672(a), (b), (c)(1)(2)(3) Stability augmentation, automatic, and power-operated systems.
29.679(a), (b) Control system locks.
29.685(d)(10) Control system details.
29.771 (a), (b), (c) Pilot compartment.
29.773(a), (b) Pilot compartment view.
29.777 (a), (b) Cockpit controls.
29.779 (a), (b) Motion and effect of cockpit controls.
29.783(b) Doors.
29.785 Seats, berths, litters, safety belts, and harnesses.
29.801(a), (b), (d) Ditching.
29.805 (b) Flight crew emergency exits.
29.807(a), (b), (d) Emergency exits.
29.859(e)(3) Combustion heater fire protection.
29.863(c) Flammable fluid fire protection.
29.865(b)(1)(2), (c)(3)(5) External loads.
29.901(b)(2)(5) Installation.
29.921 Rotor brake.
29.955(c) Fuel flow.
29.999(b)(2)(3)(i) Fuel system drains
29.1141(a)(b)(d)(f)(2) Powerplant controls: general.
29.1143(b), (c), (e) Engine controls.
29.1145 (a) (b), (c) Ignition switches.
29.1147 Mixture controls.
29.1151 Rotor brake controls.
29.1189(e), (f) Shutoff means.
29.1301(a), (b) Function and installation.
29.1303 Flight and navigation instruments.
29.1305 Powerplant instruments.
29.1309(a), (b), (c)(4) Equipment, systems, and installations.
29.1321 Arrangement and visibility.
29.1322 Warning, caution, and advisory lights.
29.1329 Automatic pilot system.
29.1333(b) Instrument systems.
29.1335 Flight director systems.
29.1337(b), (e)(2) Powerplant instruments.
Page MG 20 - 3
AC 29-2C, Chg 7 2/4/2016 14 CFR Section Title
29.1351(b)(5), (6) General.
29.1357(d) Circuit protective devices.
29.1381(a), (b) Instrument lights.
29.1383(b), (c) Landing lights.
29.1401(a)(1) Anticollision light system.
29.1411(a), (b) (1) General.
29.1415(b), (d) Ditching equipment.
29.1501(b) General.
29.1523 Minimum flight crew.
29.1525 Kinds of operations.
29.1541(b)(1) General.
29.1543(b) Instrument markings: general.
29.1545 Airspeed indicator.
29.1549 Powerplant instruments
29.1555 Control markings.
29.1559 Limitations placard.
29.1561 Safety equipment.
29.1583 Operating limitations.
Appendix B to Part 29, IV Static longitudinal stability.
Appendix B to Part 29, VI Dynamic stability.
Appendix B to Part 29, VII Stability augmentation system (SAS).
Appendix B to Part 29, VIII Equipment, systems, and installation.
(3) Advisory Circulars (AC) and Related Documents (refer to the current version).
Note: ACs, Orders, and policy statement memoranda are available on the FAA website: www.faa.gov.
(i) ACs AC Title 20-175 Controls for Flight Deck Systems 21-40 Guide for Obtaining a Supplemental Type Certificate 27-1 Certification of Normal Category Rotorcraft (Sections related to Appendix B and the requirements within Appendix B identified in the certification plan with HF/HP issues) 29-2 Certification of Transport Category Rotorcraft (Sections related to Appendix B and the requirements within Appendix B identified in the certification plan with HF/HP issues) Page MG 20 -4