Engine Fire Protection Systems

Overview

This chapter covers the principles, components, maintenance, and troubleshooting of aircraft engine fire detection and extinguishing systems. These systems are critical safety installations designed to detect fires or overheat conditions in engine compartments and to suppress them automatically or manually. The material addresses the construction and operation of detection systems, the types and characteristics of extinguishing agents, and the maintenance practices, inspection criteria, and regulatory requirements governing these systems. A thorough understanding of these systems is essential for the AME to ensure the airworthiness and safety of the aircraft.

Key Concepts

Fire Detection Systems

Fire detection systems are designed to alert the flight crew to the presence of a fire or an overheat condition in a designated area, such as an engine nacelle, APU compartment, or cargo hold. They must be reliable, provide a rapid response, and be free from false alarms. The primary types of detection systems used on aircraft are thermal switches, thermocouples, and continuous-loop detectors.

Thermal Switch Systems

Thermal switch systems use a series of switches that are sensitive to a specific temperature. These switches are normally open and close when the ambient temperature reaches their rated set point.

Operation: The switches are wired in parallel with each other and in series with the warning light and control unit. When any single switch closes due to heat, it completes the circuit, providing a ground path that energizes the warning light and alarm horn.
Testing: A test switch is provided to simulate a closed switch, verifying the integrity of the entire circuit, including the wiring, control unit, and warning devices.
Troubleshooting: A common failure mode is a short to ground in the wiring, which can cause a false alarm. Conversely, an open circuit in the wiring will prevent the system from alarming, even if a switch closes. When troubleshooting, verifying continuity alone is insufficient; the circuit must be checked for unintended grounds.

Continuous-Loop Detectors

Continuous-loop detectors are the most common type used on turbine engines. They consist of a continuous length of sensing element that is routed through the protected area. The element is sensitive to heat along its entire length.

Construction and Operation: The sensing element is a small-diameter tube containing a core of a temperature-sensitive material, such as a ceramic or a eutectic salt, which is surrounded by a conductive wire. The core material's electrical resistance changes with temperature. The control unit monitors this resistance. A fire or overheat condition causes the resistance to change dramatically, triggering the alarm.
Types: The two main types are:
Pneumatic (Gas-Filled): These use a gas-filled tube. When heated, the gas pressure increases, closing a diaphragm switch at the control unit.
Electrical (Resistance-Sensing): These use a wire-wrapped core whose resistance changes with temperature. The control unit detects this change.
Failure Modes: The sensing element is susceptible to mechanical damage.
Chafing: Rubbing against a bracket or structure can wear through the outer sheath, causing a short to ground or an intermittent false alarm.
Crushing/Kinking: A sharp bend or a crush can alter the internal core material, changing its resistance and causing the control unit to interpret the condition as an overheat, leading to a continuous false alarm.
Contamination: Paint, oil, or other contaminants on the element can insulate it, delaying its response to heat or preventing it from sensing a fire altogether.
Installation: Proper routing is critical. The element must be clamped securely to prevent chafing and vibration. It must be routed with a minimum bend radius as specified by the manufacturer to prevent kinking. It must also be kept at a specified minimum clearance from hot engine components, such as exhaust ducts, to prevent nuisance alarms from ambient heat.

Dual-Loop Systems

Large transport aircraft often use dual-loop systems for redundancy. Two independent loops are routed through the protected area.

Operation: The system is designed to alarm if either loop detects a fire. This provides continued protection if one loop fails. In some systems, a single loop can be selected for testing or if the other loop has failed.
Troubleshooting: Each loop is independently testable. If one loop fails its test but the other works, the fault is isolated to the failed loop's sensing element or its associated wiring. A faulty control unit would typically affect both loops.

Fire Extinguishing Systems

Fire extinguishing systems are designed to discharge an extinguishing agent into the protected compartment to suppress a fire. The main components are the agent container (bottle), the discharge head, the thermal discharge indicator, the discharge lines, and the control mechanism.

Agent Containers (Bottles)

The agent is stored under high pressure in a metal container.

Pressure Indication: The container is equipped with a pressure gauge that indicates the charge status. The gauge has a green arc indicating the normal operating pressure range and a red arc indicating a low-pressure (discharged) condition.
Hydrostatic Testing: Fire extinguisher containers are life-limited and require periodic hydrostatic testing to verify their structural integrity. The test interval is specified by the manufacturer and is often 5 or 12 years. The test date is marked on the container. Installing a container with an expired hydrostatic test date is a violation of airworthiness standards.
Physical Damage: The container is a pressure vessel. Any dent, corrosion, or other physical damage can weaken the structure and compromise its ability to hold pressure. A dented container must be replaced, not repaired.

Discharge Head and Cartridge

The discharge head is the valve assembly that releases the agent from the container.

Shear Pin: The discharge head is often secured with a shear pin. The firing mechanism, when actuated, shears this pin to open the valve. Using an incorrect fastener, such as a cotter pin, in place of the specified shear pin is a critical safety issue, as it would prevent the discharge head from functioning correctly.
Squib (Cartridge): The discharge head may contain an electrically fired cartridge (squib) that, when energized, produces gas pressure to open the valve. The squib has a limited service life and must be replaced at specified intervals.

Thermal Discharge Indicator

The thermal discharge indicator is a red disc or button on the outside of the container or discharge head that provides a visual indication that the extinguisher has discharged.

Operation: A thermal discharge bulb or a frangible disc is part of the over-temperature protection system. If the container is exposed to excessive heat (e.g., during a fire), the bulb bursts or the disc ruptures, releasing the agent. The red indicator is blown out or shows red, providing a visual indication of discharge.
Maintenance Significance: A blown thermal discharge indicator means the agent has been released, regardless of the pressure gauge reading. The container must be removed from service, recharged, and the indicator reset or replaced per the manufacturer's instructions. Returning the aircraft to service with a blown indicator is unsafe, as the system has no extinguishing capability.

Discharge Lines and Nozzles

The discharge lines route the agent from the container to the protected compartment. The nozzles distribute the agent over the fire zone.

Securing: Discharge lines must be properly secured with clamps at specified intervals to prevent chafing and accidental disconnection. Safety wire is not a substitute for proper clamping.
Nozzle Condition: The nozzles must be clear of debris. A clogged nozzle compromises the system's ability to extinguish a fire. Cleaning a nozzle with a wire brush may not restore its proper flow characteristics and could damage it. The correct action is to replace a clogged nozzle with an approved part.

Extinguishing Agents

The most common agent for engine fire extinguishing systems is Halon (e.g., Halon 1301), though carbon dioxide (CO2) is also used in some systems.

Halon: A clean agent that extinguishes fire by chemically interrupting the combustion chain reaction. It is stored as a liquid under pressure and discharged as a gas.
Carbon Dioxide (CO2): Extinguishes fire by displacing oxygen and cooling the fire. It is stored as a liquid under high pressure. A low-pressure gauge reading on a CO2 system should be verified by weighing the bottle, as the gauge can be inaccurate.

Important Procedures and Regulations

Inspection and Maintenance Practices

Visual Inspection: A visual inspection of the fire detection system should focus on the physical condition of the detector element, including cracks, chafing, loose connections, and proper routing and clamping. The sensing element must be free of paint, oil, grease, and other contaminants.
Functional Testing: The system must be functionally tested to ensure it alarms correctly when the test switch is actuated. This verifies the integrity of the entire circuit.
Troubleshooting: Troubleshooting must be systematic. The first step is to verify the most basic and common failure points, such as the test switch, before replacing components. A visual inspection is the first, least invasive step when dealing with intermittent false alarms, as chafing or mechanical damage is a common cause. When a system fails after a sensor replacement, check wiring integrity, connector security, and grounding before condemning other components.
Repairs: Repairs must be made using approved methods and practices.
Wiring: Chafed or damaged wiring must be replaced, not taped. Proper routing and clamping must be restored to prevent future damage. Wires must be protected from sharp edges with grommets.
Detector Elements: A crushed, kinked, or chafed continuous-loop element must be replaced. Attempts to repair the element are not acceptable.
Extinguisher Components: A clogged nozzle must be replaced. A dented container must be replaced. A difficult-to-move discharge switch must be replaced. A painted-over thermal discharge bulb must be cleaned or replaced, as paint insulates the bulb and delays its response.
14 CFR 43.13(a): This regulation requires that all maintenance be performed using methods and practices acceptable to the Administrator, and that all parts and materials be airworthy and of a type and design approved for their intended use. This is the overarching standard for all maintenance actions.
14 CFR 43.9 and 43.11: These regulations require a logbook entry for all maintenance, including a description of the work performed, the date, and the mechanic's signature and certificate number. An FAA Form 337 is only required for major repairs or alterations.
14 CFR 91.7: This regulation states that no person may operate a civil aircraft unless it is in an airworthy condition. An inoperative fire protection system renders the aircraft unairworthy.

Service Bulletins vs. Airworthiness Directives

Airworthiness Directives (ADs): ADs are mandatory regulations issued by the FAA to correct an unsafe condition. Compliance with ADs is required by 14 CFR 39.
Service Bulletins (SBs): Service bulletins are manufacturer recommendations for improvements or inspections. They are not mandatory unless they are incorporated into an AD or required by an operator's approved maintenance program. An AME must comply with ADs, but SBs are recommendations that should be documented and brought to the operator's attention.

Common Relationships and Troubleshooting Logic

Low Pressure Gauge: A low-pressure reading on a fire extinguisher bottle indicates a potential leak or discharge. The correct action is to recharge the container and perform a leak check. For CO2 systems, the gauge reading should be verified by weighing the bottle, as the gauge itself can be inaccurate.

Blown Thermal Discharge Indicator: This always indicates that the agent has been released, regardless of the pressure gauge. The bottle must be serviced or replaced.
False Alarms (Continuous-Loop): Intermittent false alarms are most often caused by chafing of the sensing element against a bracket, causing a short to ground. A continuous false alarm can be caused by a sharp bend or kink that crushes the internal core, altering its resistance.
System Fails Test: If the test switch is confirmed good and power is available, the next step is to verify the integrity of the detector loop circuit, including all connectors and wiring. An open circuit in a dual-loop system will cause that loop to fail its test.
Warning Light Fails: If power is present at the control unit but the warning light does not illuminate when the test switch is pressed, the most likely cause is a lack of a ground path. An open ground prevents current flow.
Warning Light Works, Horn Does Not: If the test light illuminates, the detection loop and control unit are functioning. The horn not sounding indicates a failure in the horn circuit itself, likely an open or inoperative horn.

Summary

The maintenance of engine fire protection systems requires a thorough understanding of their design, operation, and failure modes. The AME must be proficient in visual inspection, functional testing, and systematic troubleshooting. All repairs must be performed in accordance with the manufacturer's instructions and 14 CFR Part 43, using only approved parts and methods. The airworthiness of the aircraft depends on the integrity of these critical safety systems, and any defect must be corrected before the aircraft is returned to service.

Chapter 5: Engine Fire Protection Systems