Sorry to hear of your mishap Finn, glad your Ok.
Much appreciate your reflection and to revaluate my own risk
I agonised over the electrical risk / failure modes. Opting to ‘kiss' and not seek full redundancy. Your experience brings a sober reconsideration of my assumptions and decisions which I’m trying to recollect and would value others critique.
My system: # Single automotive Alternator - Fused B-lead - NO Over-voltage Crowbar circuit # Twin 25Ah batteries connected via dual battery isolator switch Off / A / B / BOTH. # Engine Power through Primary SPST switch with backup SPST upstream of current shunt # Primary and Backup Fuel Pumps with automatic backup activation on low fuel pressure # Engine Fuel pumps fed from Header/ReserveTank. Header fed via single wing tank via Primary and Backup transfer pumps # EC2 redundant ECU's # Armoured CAS wiring # ‘Audible' EFIS Alarms for Volts, Amps, Fuel Pressure, Transfer Fuel Flow, Fuel Level, Gear etc.
Pre Flight Testing Before Engine Start # Measure individual battery volts while 2 x main 25Ah batteries disconnected (Isolator switch in Off position) via EFIS on its own battery backup delta V < 0.3v if OK then switch isolator to Both After Engine Start # Check Alternator Charging Both A, B and back to Both batteries. # Test Both Primary and Backup Engine Power Switches # Test Engine Fuel Pumps - Switch Off Main Pump to test auto activation of backup, reset/arm # Test Fuel Transfer Pumps - Switch Off Main Transfer Pump to test auto activation of backup, reset/arm # Test ECU B and Coils After Engine shut down # Turn battery Isolator Switch to Off position and note Battery delta V before turning Off EFIS
My Key Failure mode consideration / assumptions Alternator - Short Circuit (Low risk but catastrophic) must be protected against via fuse Over Voltage (Low risk) - EFIS Alarm - On reflection perhaps I ought include a Crow Bar but it does introduce complexity/danger Batteries - Open Circuit (Significant risk) - Solution - two batteries tied together reducing chances of failure and protects should failure occur Shorted Cell (Low risk) - Outcome ???? Battery fire - Halon extinguisher Testing before and after flight picks up failure and lowers risk Keep Batteries away fro heat and vibration Second battery provides more air time in case of Alternator failure though introduces significant weight Crank Angle Sensor - Failure is catastrophic so armour and attention added Power Switching - Failure (High risk) therefore backup required No Relays as they introduce complexity
Key Questions Crow Bar on Alternator? Should I have gone with AeroElectriic circuit with Backup Buss etc. ?
Appreciate peoples thoughts.
Steve Izett - Perth Western Australia Glasair Super II RG Renesis 4 port EC2 EM3 RD1C Prop MTV 7 Elec
Steve Izett.
On 1 Jan 2025, at 3:55 am, Finn Lassen finn.lassen@verizon.net <flyrotary@lancaironline.net> wrote:
|