In turbine-powered aircraft, the engine does not simply respond proportionally to how far a pilot advances the thrust lever. Instead, a sophisticated fuel metering system translates power demand into precisely scheduled fuel delivery, accounting for a constantly changing set of atmospheric and mechanical variables. Two systems govern this process: the Fuel Control Unit (FCU), the hydromechanical workhorse of earlier turbine designs, and the Full Authority Digital Engine Control (FADEC), the computer-driven standard on virtually every modern transport-category aircraft. Mastery of both systems — how they work, how they differ, and where they can fail — is a core requirement for the ATP certificate and a genuine daily competency for flight crew operating high-altitude jet operations.
The Hydromechanical Fuel Control Unit
The FCU is an analog, hydromechanical device that schedules fuel flow to the combustion chamber by simultaneously sensing several engine and atmospheric parameters and balancing them against the pilot's power demand. Common inputs include power lever angle (PLA), compressor inlet total pressure (P1 or PT2), compressor inlet temperature (T1 or TT2), compressor discharge pressure (P3), and high-pressure rotor speed (N2), though the exact set of parameters sensed varies significantly by engine design — not every FCU senses low-pressure rotor speed (N1). Some units also account for bleed air extraction, which reduces net thrust and must be compensated by slightly enriching the fuel schedule.
Internally, the FCU uses a network of bellows, servovalves, flyweights, and metering valves — all hydraulically actuated by fuel under high pressure — to produce a metered fuel flow that keeps the engine operating within safe temperature and RPM limits. When the pilot advances the thrust lever rapidly, the FCU's acceleration schedule limits how quickly fuel flow increases, preventing a compressor stall or a turbine over-temperature during the transient. Conversely, the deceleration schedule prevents lean blowout if the lever is retarded abruptly. This scheduling is fixed by the mechanical geometry of the unit; it cannot adapt dynamically to conditions outside its original calibration range.
Early jet transport aircraft — and a large number of turboprop and older turbofan designs still in service — rely entirely on hydromechanical FCUs. They are remarkably reliable devices, but their limitations become apparent at extreme altitudes and temperatures where fixed mechanical schedules cannot perfectly optimize the fuel-to-air ratio in real time. The result is a compromise: the FCU is calibrated to be safe across a wide envelope rather than optimal at any given point within it.
Full Authority Digital Engine Control (FADEC)
Architecture and Inputs
FADEC replaces or supersedes the hydromechanical FCU with a dual-channel digital computer, often called an Electronic Engine Controller (EEC) or Engine Control Unit (ECU) depending on the manufacturer. Both channels are fully capable of controlling the engine independently; they cross-monitor each other on every computation cycle, and if one channel detects a fault, control transfers to the healthy channel with no interruption in engine operation. This dual-redundant, fail-operational architecture is applied to meet certification standards and advisory compliance criteria — such as those in AC 33.28 for electrical and electronic engine control systems — during engine and aircraft type certification under 14 CFR Part 33 and Part 25, rather than a specific dual-channel mandate spelled out verbatim in the regulatory text itself.
FADEC sensors feed the computer a much richer data stream than a mechanical FCU can process. Inputs typically include: power lever angle, pressure altitude and Mach number from the air data system, total air temperature (TAT), N1 and N2 speeds from magnetic speed probes, exhaust gas temperature (EGT), fuel flow from a flow meter, oil temperature and pressure, and on some engines, vibration levels and variable stator vane position. The computer samples these inputs many times per second, enabling corrections far faster than any mechanical device could execute.
What FADEC Actually Controls
The word full authority is significant: FADEC does not merely advise the pilot — it has direct, unmediated control of the fuel metering valve, variable stator vanes (VSVs), variable bleed valves (VBVs), and in many cases the turbine active clearance control system. The pilot selects a thrust target by positioning the thrust lever (or via autothrottle), and FADEC computes the precise fuel flow required to achieve and hold that thrust while simultaneously: preventing compressor surge by scheduling VSVs and VBVs; capping EGT below the certified red-line limit; holding N1 or N2 within approved limits; and optimizing specific fuel consumption for the current altitude, Mach, and temperature. The net effect is that the engine always runs as close to its certified optimum as physics and its health status allow.
Engine Starting Under FADEC
One of the most operationally important aspects of FADEC — and a consistent knowledge-test focus area — is its role in engine starting. On a FADEC-equipped engine, the pilot typically positions the start switch and advances the fuel lever or engine master switch; from that point, FADEC controls ignition timing, fuel introduction rate, and fuel flow scheduling throughout the start sequence. The computer monitors N2 acceleration and EGT rise rate in real time. If it detects a hung start (N2 acceleration stalls before reaching self-sustaining speed) or a hot start (EGT approaching the start limit before N2 reaches idle), FADEC will curtail or cut off fuel flow to protect the engine.
However — and this is a critical test point — FADEC does not eliminate the pilot's monitoring responsibility. The crew must observe EGT rise, N1 and N2 acceleration trends, oil pressure rise, and fuel flow indications throughout every start. If FADEC fails to abort an anomalous start, the pilot must do so manually. ATP Airmen Certification Standards (ACS) expect candidates to articulate both the automatic protections FADEC provides and the residual pilot tasks that remain regardless of automation level.
Thrust Ratings and FADEC: Derate vs. Assumed Temperature
FADEC also manages reduced-thrust takeoff operations, a standard practice in airline operations that extends engine life by limiting thermal and mechanical stress. Two methods are in common use, and they work through fundamentally different logic paths within FADEC:
- Derated thrust selects a lower certified takeoff thrust rating — typically designated something like TO-1 or TO-2 in the AFM — that is approved as a separate, fixed takeoff limit distinct from climb thrust ratings. The engine is certified to that lower rating, and FADEC simply limits fuel scheduling to achieve it. It is not merely a reduction from full rated thrust; it is a separate, certificated thrust level under Part 33.
- Assumed temperature (flexible) thrust reduction involves entering into the flight management system or engine control panel a temperature higher than actual ambient. FADEC computes the fuel schedule it would use on a hot day to produce full rated thrust, and since that schedule produces less thrust at actual (cooler) conditions, thrust is reduced. This is not a certified lower rating — it is a reduction from the rated level using the temperature modeling built into FADEC's thrust computation algorithm. Pilots must understand that assumed temperature reductions cannot exceed the maximum assumed temperature values published in the Airplane Flight Manual, and the resulting thrust must still satisfy all performance and obstacle clearance requirements.
High-Altitude Operational Considerations
At cruise altitudes above FL300, air density is roughly one-quarter of sea-level density. A fixed mechanical schedule would deliver far too much or too little fuel relative to available air mass. FADEC continuously adjusts the fuel-to-air ratio as altitude, temperature, and Mach change throughout the climb and cruise phase, maintaining combustion stability and preventing a lean flameout. It also manages engine relight capability — most FADEC systems maintain continuous ignition under certain conditions (icing, turbulence, approach to stall) automatically, without pilot input, as specified in the aircraft's AFM. Understanding altitude relight envelopes remains a pilot responsibility because FADEC cannot restart an engine outside the approved windmill or assisted-start envelope.
Key Numbers and Rules
- FADEC dual-channel redundancy is applied to satisfy certification standards and compliance criteria (such as AC 33.28) for full-authority systems on transport-category aircraft under Part 33 and Part 25.
- The acceleration and deceleration schedules in both FCU and FADEC exist to prevent compressor stall on acceleration and lean blowout on deceleration.
- Assumed temperature reductions are limited — the assumed temperature used may not exceed the maximum assumed temperature published in the AFM, and the resulting thrust must still satisfy all field performance requirements from the current AFM data.
- On most modern turbofans, FADEC governs N1 as the primary thrust parameter, though EPR (engine pressure ratio) is still used on some engine families.
Common Test Traps
- FADEC is fail-operational, not fail-passive. Because it holds full authority, loss of both channels without a reversion mode would leave the engine uncontrolled. Certification standards and compliance criteria call for the dual-channel design and defined reversion modes precisely to prevent this.
- The FCU does not schedule fuel on throttle position alone. Many test questions use this simplification as a distractor. The FCU integrates compressor inlet conditions, discharge pressure, and rotor speed among other parameters, though the exact combination varies by design.
- FADEC automates starts but does not eliminate monitoring. Treating a FADEC start as entirely hands-off is a common misconception. EGT limits, N2 acceleration, and abort criteria remain pilot responsibilities.
- Derated and assumed-temperature reductions are legally and technically distinct. Derated thrust is a separate certified takeoff rating; assumed temperature is a reduction calculation within the rated level. Mixing them up is a frequent knowledge-test error.
- FADEC does not extend the relight envelope. Altitude and airspeed limits for engine relight are aerodynamic and thermodynamic constraints that no fuel control system can override.
