How pilots handle an in-flight engine shutdown
This post contains references to products from one or more of our advertisers. We may receive compensation when you click on links to those products. Terms apply to the offers listed on this page. For an explanation of our Advertising Policy, visit this page.
For most passengers, the idea of losing an engine mid-flight — as happened today on United flight 328 just minutes into its flight from Denver (DEN) to Honolulu (HNL) when the Number 2 engine, located on the starboard side of the aircraft, appeared to have caught fire — is as bad as it gets.
You’re 43,000 feet in the air and you’re miles from the nearest airport. For some, they may imagine the pilots fighting with the controls as they struggle to keep the aircraft airborne. However, the reality is quite different.
Previously, I wrote about why, in my opinion, two engines are better than four. New generation aircraft such as the Airbus A350 and the Boeing 787 Dreamliner, which I fly, are safer and more reliable than ever. They are more fuel-efficient than their four-engine counterparts, so produce fewer carbon emissions. They are also much quieter, reducing the impact felt by those who live close to airports.
However, as reliable as these aircraft are, our role as your pilots is to ensure that, should something untoward happen, we are fully prepared to deal with it. This is especially true when it comes to engine failures.
A highly unlikely event
First, let me make it clear that in nearly 15 years of flying, I have never experienced an engine failure. Most pilots, even over a 40-year career, will never experience one. So, all that I talk about in this article is based purely on theory and practice in the simulator — of which I’ve had plenty.
Statistically speaking, takeoff and landing are the times when an unplanned situation is most likely to occur. Having sat quiet for the last few hours, the engines are wound up to nearly their maximum operating speed in a matter of seconds. Like an athlete who doesn’t warm up properly, they are more prone to injuring themselves. This is why most airliner engines require a five-minute ‘warm up’ period between starting and setting takeoff power.
Every six months, all pilots must undergo two days of checking and training in a flight simulator. This is to make sure that should a technical problem occur, we are able to deal with it in a safe and timely manner. Part of this is practicing how to deal with engine problems in various stages of flight.
The most critical time for an engine to fail is just as we lift into the air. Therefore, as part of revalidating our Pilot’s License, we must prove that we can handle this situation safely. An inability to demonstrate this means that we can not fly passengers until such time that this deficiency has been rectified.
Once up in the air and in the cruise, statistically, you are less likely to encounter an engine problem. However, this doesn’t mean that we don’t expect them. Fail to prepare, prepare to fail.
Engine failure in the cruise
It’s the middle of the night and you’re flying back to London from New York. It’s been a good trip, a successful business meeting and you’ve managed to catch up with some friends. You had dinner in the lounge at the airport and now you’re snuggled under your duvet in your lie-flat bed, dreaming of seeing your kids when you get home.
In the flight deck of the 787 Dreamliner, all is calm. Your two pilots are monitoring the instruments as they sip coffee, chatting about a new sports bar they found in Manhattan, which shows the football and the cricket. A rare find in New York. The Canadian coastline is a few hundred miles behind the aircraft, the distance between Keflavik in Iceland and Gander in Canada is now almost the same.
Out of the window, the stars are spectacular. With clear skies and no light pollution, the human eye can see far more stars than you can ever imagine. Then it starts.
First, it’s a rumble. Both pilots’ eyes immediately dart to the engine instruments. Another rumble. The engine oil pressure seems to be falling on the right-hand engine. The coffee mugs are placed in their holders and the adrenaline starts to course into both pilots’ systems.
Then a loud bang which shakes the whole aircraft. It’s game time.
As if the bang and shaking of the aircraft weren’t enough to get their attention, the quadruple “whop-whop whop-whop” of the Master Caution System alerts the pilots to a problem. The EICAS (Engine Indicating and Crew Alerting System) display is showing that the right engine has failed.
“I have control”, declares the pilot allocated to the flying duties for that flight, the Pilot Flying (PF). The other pilot is the Pilot Monitoring, or PM. The definition of roles is key to a successful outcome when dealing with a non-normal scenario.
At any stage of flight, the number one priority throughout is to make sure that one person is always flying the aircraft, hence the definition of roles. This may sound obvious but it can be all too easy for both (or all if there are more than two) pilots to get sucked into dealing with the problem. Ever found yourself driving a car on the motorway and your passenger can’t work the radio? Did you try and get involved and sort it yourself? There you go.
Whenever something out of the ordinary happens, a good crew will first go to the mnemonic ‘FNC’. Fly. Navigate. Communicate.
With one engine now providing all the power, the aircraft will continue to fly safely but will be unable to maintain its altitude and speed. The autopilot will prioritize maintaining the assigned altitude, to the detriment of the airspeed. As the airspeed starts to slowly reduce, the PF must take action to stop it from becoming too slow. With the remaining engine already generating maximum power, the only way to keep the speed up is to descend.
At this stage, the Flight Management Computer will have detected the engine failure scenario and will display the altitude at which the aircraft will be able to keep its airspeed at a safe value. On a heavy aircraft, this could be as low as 18,000 feet.
The PF selects this value in the autopilot control panel and tells the aircraft to start descending to this altitude. Normally this will be done at as slow a speed as possible — the aircraft is in effect gliding down to this safe altitude. This doesn’t need to be done in a hurry, as it could take a minute or two for the speed to decay back to the minimum speed. It does, however, need to be done correctly. More haste, less speed.
As soon as the slower target speed has been reached, only then will the aircraft start to descend. Once the aircraft is flying safely, the next job is to navigate.
Mid-Atlantic in the middle of the night is a far busier place than you may expect. Each night, hundreds of flights make the eastbound crossing from North America to Europe. To ensure a safe and efficient flow of flights across the Pond, aircraft fly a series of tracks called the North Atlantic Track system. For more on this, check out my previous article, Hopping across the pond: How pilots find their way to the USA.
For this system to work, pilots must fly on their track at their designated altitude and speed. However, we’ve already learned that in the case of an engine failure, aircraft are unable to maintain either of these. With a number of aircraft using the same track, there’s a chance that there could be another aircraft directly below — not ideal if the upper one needs to descend in a hurry.
In order to avoid this conflict, before the aircraft starts to descend the pilots must turn the aircraft off their assigned track. As mentioned before, it can take a minute or two for the aircraft to start descending, so pilots have some time to make this turn.
When leaving the track system, aircraft must fly 5 nautical miles either left or right of track. This is at the pilot’s discretion. By the time the aircraft is flying the five nautical miles offset, it will be starting to descend.
Once these two important actions are complete, the final task is to communicate.
With the change of plan, there are a number of people who must be informed. Firstly, the surrounding aircraft need to know. By broadcasting their actions on the emergency frequency (monitored at all times by all aircraft), pilots nearby know that there is an aircraft descending through the track system. Next, ATC has to be informed.
As there is no direct radio link to ATC whilst over the Atlantic, a type of text message must be sent to inform them. CPDLC (Controller Pilot Data Link Communications) is a service that allows ATC and pilots to exchange messages. In an emergency situation, pilots are able to send a quick message to the relevant ATC unit, informing them of their actions.
As part of the task sharing, all communications are performed by the PM, allowing the PF to focus solely on the task of flying the aircraft.
Dealing with the problem
You may have noticed that so far, we have done nothing to actually tend to the failed engine. Flying the aircraft is the priority and it’s not until the FNC has been completed that the pilots will look at what’s actually going on.
The EICAS is a great system that identifies the problem and suggests the relevant checklist to the pilots. That said, it is up to the pilots to action whichever checklist they deem most appropriate at the time. When there has been a series of loud bangs and vibrations, the chances are that there has been serious damage to the engine and the chances of starting it up again are slim. Therefore, the Severe Damage actions may be more appropriate than the Engine Fail checklist.
Joint study of the engine instruments will not only confirm the damage but also give a second diagnosis of which engine has suffered the damage. Shutting down the wrong engine is not something that you want to do.
Whilst both pilots will take time to properly diagnose the problem, once again it is the PM who carries out the checklists. Remember, the aircraft is still descending in an area of busy traffic, so the PF must be focused on flying the aircraft at all times.
When the relevant checklists have been completed there’s a little time to relax and review what’s happened before starting the diversion.
At all stages of flight, a good crew will have a plan up their sleeve should something untoward happen. This will also include the airport to which they’d divert to at the time. As a result, by the time the descent and checklists have been completed, they should already know which airport they want to divert to, what the weather is like and if the runway is long enough to land.
Once all this has been completed and the diversion is underway, it’s time for a review. A good decision-making process should close the loop by returning to the top and reviewing what has happened and what has been done. Are those decisions still valid? Did we do the correct checklists? Have we missed anything?
A good way of doing this is to do another FNC. Is the aircraft flying the way in which we want it to be flying? Are we navigating towards where we want to go? Have we communicated our plan to everyone who needs to know?
Not quite. The passengers.
You may have been reading all the above wondering at what point we’d let you, the passengers, know what’s going on. There’s no straight-forward answer to this but I would say that, depending on the severity of the situation, it’s one of the lowest priorities for the pilots. Don’t get me wrong, if half the aircraft were woken up by the bangs and vibrations, we may try and make a quick announcement earlier on to calm their fears. Once the diversion has been initiated, then we’d get back on the PA with some more information.
The main point being that flying the aircraft is the most important priority at all times. So if you’re ever on an aircraft where you can tell something isn’t quite right, please don’t be perturbed that your pilots haven’t spoken to you. They will most likely be dealing with the problem and formulating a plan. Once the situation is under control, they will of course then inform you what’s going on.
An engine failure at any stage of flight is incredibly unlikely. That said, pilots always expect the unexpected. Losing an engine over the Atlantic adds some complexities but the procedures are well-practiced and rehearsed before every crossing. At all stages of the flight, the pilots will know which is the closest usable airfield so should the need arise, an expeditious diversion can be initiated.
Featured photo by CHRISTOPHE ARCHAMBAULT/AFP/Getty Images.
Welcome to The Points Guy!
WELCOME OFFER: 80,000 Points
TPG'S BONUS VALUATION*: $1,650
CARD HIGHLIGHTS: 2X points on all travel and dining, points transferrable to over a dozen travel partners
*Bonus value is an estimated value calculated by TPG and not the card issuer. View our latest valuations here.
- Earn 80,000 bonus points after you spend $4,000 on purchases in the first 3 months from account opening. That's $1,000 when you redeem through Chase Ultimate Rewards®. Plus earn up to $50 in statement credits towards grocery store purchases within your first year of account opening.
- Earn 2X points on dining including eligible delivery services, takeout and dining out and travel. Plus, earn 1 point per dollar spent on all other purchases.
- Get 25% more value when you redeem for airfare, hotels, car rentals and cruises through Chase Ultimate Rewards®. For example, 80,000 points are worth $1,000 toward travel.
- With Pay Yourself Back℠, your points are worth 25% more during the current offer when you redeem them for statement credits against existing purchases in select, rotating categories.
- Get unlimited deliveries with a $0 delivery fee and reduced service fees on eligible orders over $12 for a minimum of one year with DashPass, DoorDash's subscription service. Activate by 12/31/21.
- Count on Trip Cancellation/Interruption Insurance, Auto Rental Collision Damage Waiver, Lost Luggage Insurance and more.
- Get up to $60 back on an eligible Peloton Digital or All-Access Membership through 12/31/2021, and get full access to their workout library through the Peloton app, including cardio, running, strength, yoga, and more. Take classes using a phone, tablet, or TV. No fitness equipment is required.