OSFC ENRM Troubleshooting 11/19/2020

The ENRM continues to cause faults resulting in DM's for "COM OIS CAB AND MAINT"
and "OIS CAPT+F/O OIS DISPLAY"

This year we have ordered 8 ENRM's with only 1 requiring replacement. All other ENRM
faults were cleared by performing a module test or it reset on its own.

Please ensure TSM A350-A-46-12-02-01001-429A-A is accomplished before ordering an

ENRM. Note this task requires a cabinet reboot after the ENRM module test is c/w and a
second ENRM module test after the reboot.

Airbus issued a TFU addressing the ENRM faults and is working on FSA-NG S6.0
software to correct the faults. The s/w release is scheduled for the 2Q of 2021.
ENRM: High Removal Rate

Reference: 46.12.00.033 Issue date: 16-MAR-2020 Last check date: 29-OCT-2020 Status: Open
A/C type/serie: A350 ATA: 46-12
Engine manufacturer: Supplier: ROCKWELL COLLINS INC
Purpose / Reason for revision: New target date for FSA-NG S6.0
Engineering Support Status: Open

Description Mitigation

The removal rate of the Ethernet Network & Router Module As mentioned in OIT 999.0030/18, apply the AFI fault
(ENRM) is higher than expected. confirmation related the MM to avoid useless removals:
1- 46X1L060 / 46X1L08Y:
Operational Impact
AFI A350-A-46-12-02-01ZZZ-429Z-A
- Single ENRM: DM “COM OIS CAB AND MAINT 2- 46X1L068 / 46X1L096:
REDUNDANCY” raised with no operational impact. OSFC self- AFI A350-A-46-12-02-0FZZZ-429Z-A
reboot may occur in flight. Recommendation to justify the removal (Refer NOTE1 and
- Both ENRM: DM “OIS CAPT+F/O OIS DISPLAY” raised. NOTE2 below).
OSFC not started and maintenance backup menu not available
Root Cause / Investigation Interim Action / Terminating Action

20% of failures confirmed. Others are either NFF (40%) or 1- 46X1L060 / 46X1L08Y:
unjustified (40%) due to lack of engineering data. a- Fixed in FSA-NG S6.0
1- 46X1L060 / 46X1L08Y: 4 potential root causes identified: b- Management of POST issue fixed in FSA-NG S6.0
a- IPSM micro power cut event wrongly managed by the OSFC c- Improvement in FSA-NG S6.0, no ENRM Fault Code
b- Wrong Fault Code raised.
c- Heartbeat loss between both ENRM
triggered if ENRM is not confirmed failed
d- Inconsistent EFB PSK vs OSFC customization load d- Refer to ISI 46.00.00002 - Guidelines and
2- 46X1L068 / 46X1L096: 1 root cause identified: requirements for EFB
ENRM does not send its S/W configuration due to a latency 2- 46X1L068 / 46X1L096: Fixed in FSA-NG S6.0
issue. Expectation: reduction of at least 50% of ENRM faults with
FSA-NG S6.0 (targeted 2Q 2021).
Additional Information

Description / Operational Impact

The removal rate of Ethernet Network & Router Module (ENRM) is higher than expected due to numerous occurrences of Dispatch
Message (DM) “COM OIS CAB AND MAINT REDUNDANCY” associated with the following ENRM Maintenance Messages (MM)
distributed as follows:

1. 46X1L060 / 46X1L08Y: ENRM1/2 HW Failure ─ ~ 80%.

The system latches the ENRM. Particular procedure is requested to confirm the fault: ENRM Module Test + OSFC reset.
LED pattern: ENRM LED steady amber.

2. 46X1L068 / 46X1L096: ENRM1/2 irrelevant SW ─ ~15%.

This failure may be unlatched after OSFC reboot.
LED pattern: ENRM LED amber and green blinking at start-up.

Note: other ENRM failures (46X1L07P / 46X1L0AL, 46X1L08V / 46X1L05X, 46X1L090 / 46X1L062, 46X1L2S9 / 46X1L2SA) are not
considered in this TFU ─ ~5%.

Consequence

For the Fault Codes linked to ENRM, the consequence is similar:

• Single ENRM: DM “COM OIS CAB AND MAINT REDUNDANCY”: No operational impact.

In case of heartbeat loss between both ENRM (mainly encountered in flight), OSFC self-reboot is performed. During this reboot, the
message “OIS NOT AVAIL” is displayed on both outer display units. Then after 2 minutes, EFB applications can be displayed by
pushing down and releasing the OIS Switch (AVNCS/EFB Toggle Switch).
 • Both ENRM: DM “OIS CAPT+F/O OIS DISPLAY” is raised.
OSFC cannot start and maintenance backup menu is not available.

In FSA-NG S6.0, it will not be possible to have OSFC start up issue due to double ENRM latched. Indeed, it will not be possible to
latch the second ENRM if failed when the OSFC is already in ENRM standalone mode. In this case OSFC remains in ENRM standalone
mode.

Investigation Status

Only 20% of ENRM failures are confirmed by the supplier. The others are classified by the supplier either NFF (40%) or unjustified
(40%) due to lack of engineering data (e.g. IMOLOG, A/C PFR).

1. 46X1L060 / 46X1L08Y: 4 potential root causes identified:

a. IPSM voltage event (micro power cut) wrongly managed by the platform raising an incorrect ENRM HW failure.
This issue happens at OSFC / ENRM start up.

b. Wrong Fault Code raised in case of module error reported before Power On Self Test (POST): ENRM Fault Code does not
reflect the correct ENRM failure.
This issue happens at OSFC / ENRM start up.

c. Heartbeat loss between both ENRM. When crosslink heartbeat is lost between ENRM slave and ENRM master, OSFC is automatically
reconfigured to elect the slave ENRM as standalone. After this reconfiguration, the previous ENRM Master is latched as ENRM HW
failure.
This issue happens when OSFC / ENRM are running.

d. Inconsistent EFB PSK vs OSFC customization load (FINSW 2TCSW3) leads to trigger ENRM HW Failure fault code. The PSK
inconsistency can lead also to trigger an ENRM watchdog failure (fault code 46X1L2S9 / 46X1L2SA).
This issue happens when OSFC / ENRM are running.

2. 46X1L068 / 46X1L096: 1 root cause identified:

ENRM does not answer to the function requesting its S/W configuration due a latency issue.
This issue happens at OSFC / ENRM start up.
Mitigation

As mentioned in OIT 999.0030/18, apply the AFI fault confirmation related the MM to avoid useless removals:
1. 46X1L060 / 46X1L08Y: AFI A350-A-46-12-02-01ZZZ-429Z-A.
2. 46X1L068 / 46X1L096: AFI A350-A-46-12-02-0FZZZ-429Z-A.

ENRM spares and repairs: evaluate your local obligations for encryption technology import and re-export due to the export
reclassification of ENRM on Nov 2018 (Ref. letter RFC/ERM/181114 or contact Collins France for further information).

NOTE1:
Even if the MM 46X1L060 / 46X1L08Y (ENRM1/2 HW Failure) or MM 46X1L068 / 46X1L096 (ENRM1/2 irrelevant SW) is regularly
triggered but never confirmed following the appropriate AFI, the replacement of the impacted ENRM will not improve the issue.
Indeed, in both cases, the issue is a software issue and not a hardware issue.
However please refer to NOTE2 should you decide to remove the ENRM anyway, due to too many ENRM faults.

NOTE2:
Many ENRM are found NFF and are considered unjustified following NFF policy. In order to avoid quotation in case of NFF, we
recommend providing the following information:
 In case the fault is not cleared following the fault confirmation procedure, then export and send the IMO logs through Techrequest
following MP TASK A350-A-46-12-35-A6002-520A-A.
 In case the fault is cleared following the fault confirmation procedure but already reoccurred 3 times, then specify in the field of the
Repair Order:
“Same fault code 46X1Lxxx (to be completed by the A/L) occurred three times (dates to be added by the A/L if available) and
troubleshooting done as per AFI A350-A-46-12-02-xxxxx-xxxx-A (to be completed by the A/L). Removal done in accordance with
AFI A350-A-00-61-02-11001-018A-D – Introduction - Intermittent fault” in “REMOVAL REASON” field.
Please note that in the “REMOVAL REASON” field, the Fault Code 4612H010 “COM OIS CAB & MAINT REDUNDANCY” is not
sufficient to justify ENRM removal. In addition, provide A/C PFR (not Avionics PFR) to confirm recurrent ENRM failures.

Interim Plan / Permanent Solution

1. 46X1L060 / 46X1L08Y:
 a. Fixed in S6.0
b. Management of POST issue fixed in S6.0: real ENRM fault code will be raised to support further investigation.
c. Improvement in FSA-NG S6.0, ENRM Fault Code will be only triggered if ENRM is confirmed failed after OSFC self
reboot.
d. To avoid this issue, we would recommend refering to ISI 46.00.00002 - Guidelines and requirements for EFB, Chapter
2.8.2.1.1 Aircraft platform authentication, Requirement - REQ-A350XWB- 8 / C-PED pre-shared key configuration.

2. 46X1L068 / 46X1L096: Fixed in S6.0

As per supplier computation, a reduction of at least 50% of ENRM faults is expected with FSA-NG S6.0.

FSA-NG S6.0 is targeted for 2Q 2021.

Survey for the Engineering Support section

 Delta Air Lines Trouble Shooting Manual (TSM)
PRINTED: 19-NOV-2020; 03:29PM.
REV: 47.00 RELEASE DATE: 05-NOV-2020

TASK A350-A-46-12-02-01001-429A-A
OSF (Open-World Server Function) - Fault confirmation

ON A/C ALL

References
Table 1 References

Data Module/Technical Publication Title

ON A/C ALL
MP - Reset of the Cabin and Maintenance

A350-A-46-12-02-00ZZZ-132Z-A Onboard Information System (OIS) through the

RESET/OIS CAB & MAIN

ON A/C ALL

MP - BITE Test of the Open world Server

A350-A-46-12-02-05ZZZ-343Z-A Function (OSF) (Module Test: Ethernet Network

Router Module (ENRM))

1. Job Set-Up Information

A. Required Conditions

Table 2 Required Conditions

Title/Condition Data Module/Technical Publication

None

B. Support Equipment

Table 3 Support Equipment

Name Identification/Reference Quantity Remarks

None

C. Consumables, Materials and Expendables

Table 4 Consumables, Materials and Expendables

Name Identification/Reference Quantity Remarks

None

D. Spares

Table 5 Spares

Name Identification/Reference Quantity Remarks

None

Filtering is on: ALL A350-A-46-12-02-01001-429A-A Page 1

 Delta Air Lines Trouble Shooting Manual (TSM)
PRINTED: 19-NOV-2020; 03:29PM.
REV: 47.00 RELEASE DATE: 05-NOV-2020

E. Safety Conditions

Table 6 Safety Conditions

Name Safety Requirement

None

2. Fault Isolation
ON A/C ALL

A. Do the BITE test of the OSF (module test) for the ENRM related to the fault message
Ref. MP A350-A-46-12-02-05ZZZ-343Z-A.
Do a reset of the cabin and maintenance OIS through the RESET/OIS CAB & MAINT switch
Ref. MP A350-A-46-12-02-00ZZZ-132Z-A.

Do the BITE test of the OSF (module test) for the ENRM related to the fault message
Ref. MP A350-A-46-12-02-05ZZZ-343Z-A.

Choice: Go to Step: B.

ON A/C ALL
B. Go to the Fault Isolation.

Go to Requirements after Job Completion.

3. Required Conditions

Table 7 Required Conditions

Title/Condition Data Module/Technical Publication

None

Filtering is on: ALL A350-A-46-12-02-01001-429A-A Page 2