Modern turbofan engines are controlled by far more than a simple mechanical throttle linkage. Full Authority Digital Engine Control, universally shortened to FADEC, is an electronic control architecture that receives pilot thrust commands, monitors engine and aircraft data, calculates the required engine settings and commands the fuel and variable engine systems needed to achieve them. The FAA describes FADEC as an electronic engine control system that monitors and controls engine operation, while GE Aerospace describes a FADEC system as centred on a digital computer or engine control unit working with sensors, actuators and other engine accessories. [1] [2]
The phrase “full authority” is important. In a full-authority system, the electronic controller is not merely advising a separate mechanical fuel control; it has primary authority over the engine-control functions assigned to it. EASA’s AMC 20-3B treats electronic engine-control systems as safety-critical equipment whose software, hardware, electrical power, environmental protection and failure behaviour must be considered as part of engine certification. That regulatory treatment reflects how deeply FADEC is integrated into modern propulsion systems. [3]
The thrust lever is a demand input, not a direct fuel valve
On a FADEC-controlled engine, moving the thrust lever does not mechanically open a fuel valve in direct proportion to lever angle. The lever position is an input to the electronic control system. The controller interprets that demand together with engine condition and aircraft data, then determines how much fuel and what variable geometry are required to produce the commanded operating state while remaining inside certified limits. The FAA’s FADEC overview specifically describes the system as reducing pilot workload by automatically managing engine parameters rather than requiring continuous manual adjustment. [1]
GE Aerospace describes FADEC functions as including control of fuel flow and variable engine geometries. That distinction matters because thrust depends on more than fuel quantity alone. Modern turbofans can contain variable stator vanes, bleed valves and other controllable features whose positions affect compressor stability, efficiency and operating margin. The controller coordinates those functions as a system rather than treating each as an independent manual control. [2]
Sensors tell the controller what the engine is doing
A digital engine controller cannot regulate an engine unless it knows the engine’s current state. FADEC systems therefore receive inputs from sensors measuring parameters relevant to the particular engine installation. GE Aerospace’s descriptions of digital engine control refer to sensors and accessories working with the control computer, and its Catalyst engine material explains that the control system uses multiple sensed parameters to manage engine operation automatically. The exact sensor set is engine-specific and is defined by the manufacturer. [2] [4]
Typical electronic engine-control architectures use rotational-speed, temperature, pressure and position information, but it would be inaccurate to publish one universal sensor list for every turbofan. EASA’s certification guidance is intentionally broader: it requires the engine-control system and its sensors, wiring, power supplies and interfaces to be evaluated for failures and environmental effects. The certified control law is therefore built around the data set appropriate to that particular engine and aircraft installation. [3]
Fuel scheduling is one of FADEC’s central jobs
Fuel flow has to change rapidly as thrust demand, air density, compressor speed and other conditions change. Too little fuel will not produce the demanded thrust; inappropriate fuel scheduling can also create undesirable engine transients. GE Aerospace says FADEC controls fuel flow as one of its principal functions. The controller uses its programmed laws and sensor inputs to command the metering system rather than relying on the pilot to manually compensate for altitude, temperature or engine acceleration. [2]
The FAA similarly emphasises that FADEC automatically manages engine operation and can provide more precise control than older systems that required greater pilot involvement. This is one reason the flight crew can select a thrust mode and then monitor engine indications rather than continuously manipulating mixture, propeller and fuel controls as would be required on simpler propulsion systems. The exact cockpit interface differs between aircraft, but the underlying principle is electronic closed-loop engine management. [1]
Variable geometry keeps the compressor in a workable operating region
Modern gas turbines operate across a very wide range of rotational speeds and atmospheric conditions. Variable engine geometry allows airflow through the compressor and associated systems to be adapted as the engine accelerates, decelerates or changes altitude. GE Aerospace explicitly identifies variable-geometry control as a FADEC function. By coordinating geometry with fuel scheduling, the controller can help the engine follow the operating schedule intended by its designers. [2]
This does not mean FADEC can make an engine immune to every abnormal condition. EASA certification guidance requires manufacturers to analyse control-system failures and demonstrate acceptable engine behaviour under the relevant failure cases. FADEC provides precise authority, but that authority must itself be designed so that erroneous commands, sensor failures, power interruptions or software faults do not create unacceptable hazards. [3]
Why software becomes part of engine airworthiness
Mechanical engine controls can be inspected as physical mechanisms. A digital controller adds software and complex electronic hardware to that airworthiness problem. EASA’s AMC 20-3B therefore requires the development assurance of software and airborne electronic hardware to be addressed using recognised processes appropriate to their safety significance. The purpose is to control systematic design errors as well as random hardware failures. [3]
EASA also requires consideration of the interfaces between the engine-control system and the aircraft. A turbofan FADEC may receive aircraft data and send engine information back to cockpit, maintenance and aircraft-management systems. Those interfaces have to be defined and protected because a digital engine controller is not an isolated box; it is part of a larger propulsion and aircraft system. [3]
Electrical power is a certification issue
A mechanical fuel control can continue operating without digital electrical power, but FADEC requires electrical energy. EASA’s guidance specifically addresses the engine-control system’s electrical power supply and requires the design to consider failures of aircraft-supplied power and dedicated engine-generated power where used. The intended result is an engine-control architecture whose continued safe operation does not depend on one unprotected electrical path. [3]
The exact redundancy differs between engines. Many transport-engine FADECs use more than one electronic channel, and some installations include dedicated engine-driven electrical sources, but those details must be taken from the relevant engine and aircraft documentation rather than assumed generically. EASA’s certification framework focuses on the required safety outcome: the engine-control system must tolerate credible electrical and internal failures without producing an unacceptable engine effect. [3]
Starting can also be managed electronically
FADEC can automate engine-start sequencing on installations designed for it. The controller can monitor relevant parameters and schedule fuel and ignition in accordance with the engine’s programmed start logic. The FAA describes FADEC generally as reducing pilot workload by automatically controlling engine operation, while GE’s modern digital-control descriptions show how engine functions that once required more direct crew management can be integrated into the control system. [1] [4]
The details of start protection, ignition logic and automatic shutdown criteria are manufacturer-specific, so a generic article should not claim one sequence for every turbofan. The defensible point is that digital engine controls can supervise start parameters and command fuel and other functions according to certified logic rather than leaving every step to independent manual pilot action. [1] [3]
FADEC protects limits by controlling the engine, not by changing physics
The FAA notes that FADEC can help prevent the engine from being operated beyond defined limits by managing the control inputs automatically. In practical terms, the controller knows the scheduled limits and operating relationships programmed for the engine and can regulate fuel and geometry accordingly. This reduces the chance that a normal pilot thrust command will directly over-command the engine in the way a simpler manual fuel control might allow. [1]
That should not be misrepresented as a guarantee that an engine can never exceed a parameter. Sensor faults, system failures and external conditions still have to be addressed by the design and by operating procedures. EASA’s failure-analysis requirements exist precisely because electronic controls are safety-critical systems that can fail and must be shown to fail in acceptable ways. [3]
Why the system improves consistency
A digital controller applies the same programmed logic every time it receives the same valid inputs. The FAA identifies more precise engine control and reduced pilot workload as benefits of FADEC. In airline operation, that consistency means thrust can be managed through defined ratings and modes while the electronic control system performs the continuous fine adjustment of fuel and associated variables. [1]
GE Aerospace also emphasises digital control as part of integrated propulsion-system management. Because the control computer can coordinate fuel flow with variable engine geometry and other accessories, the engine can be managed as a coupled thermodynamic system rather than as several independent pilot-controlled mechanisms. [2]
Maintenance benefits come from recorded information as well as control
Digital engine-control systems can support fault monitoring and maintenance diagnostics because the controller already receives and processes engine data. Honeywell and GE FADEC products are designed to exchange information with aircraft systems, and EASA requires electronic engine controls to be considered in the continuing safety and interface architecture. The exact fault codes and maintenance functions vary by engine and aircraft, so they should always be taken from approved maintenance data. [2] [3]
The broader engineering advantage is that the same digital architecture used to control the engine can also identify when sensed or commanded behaviour differs from what the control system expects. That does not remove the need for physical inspection, borescope inspection, oil analysis or other maintenance processes; it adds another source of structured diagnostic information. [4]
Why FADEC uses redundancy
Because a full-authority controller can command fuel and other critical engine functions, a single internal failure cannot simply be allowed to produce any output. EASA’s AMC 20-3B requires the effects of control-system failures to be analysed and requires the architecture, power supplies and interfaces to meet the safety objectives associated with the engine installation. Redundant channels, monitoring and fault accommodation are therefore common design strategies, though their exact implementation is engine-specific. [3]
The word “redundant” should not be interpreted as meaning every component is duplicated identically. Designers may use channel separation, independent inputs, separate power paths, internal monitoring and other techniques in combinations appropriate to the safety analysis. The certification requirement is concerned with the resulting failure behaviour rather than prescribing one universal hardware layout for every FADEC. [3]
FADEC changes the pilot’s job
With a modern FADEC, pilots command thrust and monitor the engine rather than continuously scheduling the underlying fuel and geometry themselves. The FAA explicitly cites reduced pilot workload as a benefit of the technology. On transport aircraft, the flight crew still remains responsible for operating the engine in accordance with the aircraft’s procedures and responding to abnormal indications, but routine fine control is performed electronically. [1]
This division of labour is characteristic of modern aircraft automation. The crew specifies the operational objective—such as a take-off, climb or cruise thrust requirement—and the control system manages the propulsion hardware needed to meet it within the designed limits. FADEC therefore reduces the number of separate engine variables that the pilot must manipulate directly while increasing the sophistication of the control logic behind the thrust lever. [1] [2]
The controller is tailored to the engine
There is no generic FADEC program that can simply be transferred unchanged from one turbofan to another. Compressor maps, fuel nozzles, turbine temperature limits, actuator characteristics, variable geometry and installation interfaces differ between engine models. EASA consequently treats the electronic engine control as part of the certified engine and aircraft installation, with defined software and hardware configuration. [3]
GE Aerospace’s FADEC business likewise supplies digital controls specifically matched to engine programmes. The control law is therefore an engineered representation of how that particular engine is intended to respond throughout its operating envelope. Calling all FADECs “the same computer” would miss the most important point: the architecture is a concept, while the actual control schedule is engine-specific. [2]
What FADEC cannot do
FADEC cannot create thrust beyond the physical capability of the engine, remove the effect of damaged hardware or make incorrect sensor information harmless by definition. It can only act through the inputs and actuators available to it and within the logic approved for the engine. That is why EASA certification guidance devotes so much attention to sensor failures, power supplies, environmental effects, software assurance and control-system fault behaviour. [3]
The system’s strength is disciplined, rapid and repeatable control. It continuously monitors valid inputs, calculates commands and coordinates propulsion variables at a speed and precision that would be impractical through direct manual control. The technology therefore improves manageability and consistency while remaining subject to the same fundamental thermodynamic and structural limits as the engine it controls. [1] [2]
Why FADEC is now fundamental to modern propulsion
The increasing complexity of high-bypass turbofans makes integrated digital control especially valuable. Fuel scheduling, variable geometry, starting, thrust management, limit protection, diagnostics and aircraft interfaces can be coordinated through one certified electronic architecture rather than through a collection of largely independent mechanical controls. GE Aerospace describes precisely that integrated role for FADEC systems, while the FAA highlights the resulting reduction in pilot workload. [2] [1]
The most accurate way to think about FADEC is as the engine’s digital control authority. It does not replace the engine’s mechanical hardware; it commands and coordinates that hardware using sensor data and certified control laws. Its value lies in making a complex gas turbine behave predictably for the crew while continuously managing the underlying details of fuel, geometry, starting and protection. [3] [2]
Verified Sources / References
- FAA — Full Authority Digital Engine Control (FADEC)
- GE Aerospace / FADEC International — Digital Engine Control Overview
- EASA — AMC 20-3B, Certification of Engines Equipped with Electronic Engine Control Systems
- GE Aerospace — Digital Engine Control Integration
Editorial Notice: This article was prepared using information considered reliable and publicly available at the time of publication. Every reasonable effort has been made to ensure accuracy; however, aviation information can develop or be revised, and subsequent information may alter the facts or context reported. If you believe any material is inaccurate, misleading, improperly attributed or should be reviewed for amendment or removal, please contact us with the article title, the specific passage concerned and supporting evidence. We will assess legitimate requests promptly and, where appropriate, correct, clarify, update or remove the material.