Engine Anti-Ice

Engine anti-ice (EAI, or nacelle anti-ice) is hot-air ice protection like its wing sibling — and opposite to it in almost every reflex. The wing draws from the aircraft's shared bleed network; each engine heats its own intake with its own air. The wing's valves fail closed; the engine's fail open. One button runs four wing valves; here it is one engine, one valve, one button. None of this is coincidence — the differences all trace back to what each system is protecting. This article covers the machine; the ground ice-shedding regime that EAI cannot replace is article 09, the when-to-use logic is article 10, the failures are in article 12 and dispatch in article 13.

1. Independent air: the engine defends itself

Per FCOM DSC-30-30-10:

An independent air bleed from the high pressure compressor protects each engine nacelle from ice.

The AMM spells out how independent, on the Trent 700 installation. Per AMM 30-21-00:

The system is in two parts: - On the core engine: A duct goes from the engine off-take (the 3rd stage of the HP compressor) to the intake cowl interface. - In the intake cowl, from the interface to a distribution ring in the space behind the lip skin

[!warning]- This HP is not that HP The ATA-36 bleed system taps the intermediate- and high-pressure compressor ports to feed the aircraft's shared manifold (stage selection). Engine anti-ice taps a different port — the third stage of the HP compressor — through its own duct that never touches the precooler, the pressure-regulating valve or the manifold. The practical payoff: a bleed-system failure that closes an engine's ATA-36 valves does not take engine anti-ice with it. In the dual-bleed-failure paperwork, the item declared unavailable is wing anti-ice — engine anti-ice never appears on the confiscation list. Memory hook: the wing drinks from district heating; each engine carries its own boiler.

The "no engine, no air" case is handled automatically — per FCOM DSC-30-30-10, The valve closes automatically if air is not available (engine not running).

2. The valve: energise to close, de-energise to regulate

The anti-ice valve is a two-position butterfly with a pneumatic regulator and an electrical solenoid. Its whole personality fits in three sentences. Per AMM 30-21-00:

When the system is pressurized and the electrical power is removed from the electrical solenoid, the valve controls the pressure to 62 PSIg (427KPa). If the system stays pressurized, and the electrical solenoid is energized, the valve will close. With no upstream air pressure the valve stays open if the electrical solenoid is energized or has its electrical power removed.

Lay it out as a truth table and let it teach itself:

[!warning]- Pushbutton ON means solenoid OFF The electrical sense is inverted from intuition: selecting ON removes power from the solenoid and lets the valve regulate; selecting OFF applies power to hold it closed. The consequence is the FCOM's one-liner — If electric power fails, the valves open — the exact mirror of the wing valve. The design logic follows the two fears from article 01: the wing fears uncontrolled heat, so it fails closed; the engine fears uncontrolled ice — intake ice that sheds goes straight through the fan as foreign-object debris — so it fails to the protecting position, at the price of some wasted air. In the electrical-emergency configuration this design shows its bill: per the FCOM electrical abnormals, Engine anti-ice is ON, regardless of the pushbutton's position, so fuel consumption increases by approximately 1.5 % — and the QRH's systems-remaining table shows ENG A.ICE as Open across all four degraded-power columns.

Two pressure switches watch the downstream duct, with a neat division of labour (AMM): the low-pressure switch signals when the valve has opened and there is pressure in the duct downstream of the valve — the healthy-delivery indication — while the high-pressure switch reports overpressure with a failed regulating function. Between them they generate the VALVE CLOSED / VALVE OPEN alert pair of article 12. And like the wing valve, this one has a dispatch back door: with no upstream pressure it can be turned with a hand wrench and pinned — per AMM 30-21-00, If the valve is put in the fully open position, the locking pin can be installed in the lock hole (fully closed likewise). Locked closed versus locked open lead to very different MEL lives (article 13).

3. Two venturis: the leak insurance

Per AMM 30-21-00:

The first venturi assembly (which is under the left fan cowl) limits the quantity of airflow through the ducts. This makes sure that the engine keeps the necessary performance if the system gets a leak downstream of the first venturi. The first venturi does not affect the satisfactory operation of the system.

HP3 air is the compressor's blood. If the duct ruptured and flowed unrestricted, the engine would bleed itself into surge margin and thrust loss — so a venturi throat physically caps the maximum flow: a burst duct can only ever steal its ration. A second converging venturi is built into the inter-bulkhead attachment as the system's normal flow restrictor. Compare the wing's in-line restrictor: same tool, different fear — the wing's bounds a stuck-open valve to protect the slat; the engine's bounds a burst duct to protect the engine. Note also what EAI does not have: no eutectic leak-detection loop along these ducts (that instrumentation belongs to the ATA-36 network). Its leak protection is this purely mechanical throat.

4. Into the lip and overboard

Per AMM 30-21-00:

The air in the distribution ring flows out through small supply holes and into the space between the lip skin and the front bulkhead. The hot air increases the temperature of the lip skin and gives ice protection to the air intake. Used anti-ice air flows to the anti-ice outlet-grille through the outer duct of the inter-bulkhead assembly

Structurally this is the wing's piccolo idea bent into a circle: a perforated distribution ring lives permanently behind the lip skin and sprays hot air around the annulus; the spent air returns through the outer duct and leaves via the anti-ice outlet grille — the small vent visible on the nacelle side. The duct connections are built to slide as they grow hot, and an insulation blanket shields the intake's inner barrel from the outer duct's heat. On a wet winter walkaround, a clean streak near that grille is a plausible tell-tale that EAI has been running — treat it as an observation cue, not a certification.

5. The thrust bill — and the descent rule that isn't really about ice

Per FCOM DSC-30-30-10:

When an engine anti-ice valve is open, the N1 or EPR limit for that engine is automatically reduced, and the idle N1 or EPR is automatically increased.

Almost the same sentence as the wing's — but mind the phrase for that engine. Wing anti-ice moves both engines' numbers together; engine anti-ice moves them per engine, so a single open valve leaves the two sides with different limits — the background to the "abnormal engine anti-ice" branch of the takeoff thrust-disagree alert (article 12).

The raised idle graduates into a hard rule for descent. Per the FCOM descent-preparation SOP:

Engine anti-ice must be set to ON before and during descent, even if the SAT is below -40 °C (-40 °F). With ENG ANTI ICE pb-sw ON, the FADEC automatically selects a higher idle thrust, which gives better protection against engine flame-out.

[!warning]- Below −40 °C you may switch it off in climb and cruise — but not in descent Below −40 °C SAT, supercooled droplets barely exist (the water is already ice crystals), so classic icing conditions cannot form and the climb/cruise exemption applies (article 10). Descent revokes the exemption for two stacked reasons: you are about to descend back into warmer, wetter air — and, more subtly, the procedure wants the FADEC's higher idle. At descent idle the compressor sits low on its operating line with thin surge margin; the raised idle buys flame-out protection through the cloud layers. The anti-ice pushbutton is moonlighting as a flame-out-protection button. The cost — a shallower idle descent path needing speed or half speedbrake to hold the profile — is priced in article 10.

6. The ignition understudy

Buried in the pushbutton description is a half-sentence with a large blast radius. Per FCOM DSC-30-30-20:

Continuous ignition is automatically activated if EIU is inoperative.

The Engine Interface Unit is the messenger that carries the airframe's selections — anti-ice among them — to the FADEC. With the messenger dead, the FADEC can no longer see whether anti-ice is commanded, so the system defaults to insurance: igniters run continuously, and any combustion wobble from ingested ice slush is instantly re-lit. The same philosophy appears at crew level in the SEVERE ICE DETECTED procedure, whose ignition line displays only if continuous IGNITION is not automatically selected (article 12).

7. Pushbutton and displays

Pushbutton states (FCOM DSC-30-30-20): OFF — light out, valve closed. FAULT (amber, with an ECAM caution) — valve position disagrees with the pushbutton selection; and it too has a scripted transient:

Note: The amber FAULT light comes on briefly, while the valve transits.

Compare the wing: the wing's brief FAULT waits on pressure build-up (a switch at 14 psi); the engine's waits on valve travel (a position-agreement check). Same reassurance, different sensor. ON — blue light, valve opens, and the memo line carries a detail that closes the fail-open story:

ENG A.ICE : This memo appears in green if one ENG ANTI ICE pb-sw is ON, or if the nacelle anti-ice valve's electrical power is lost.

Read the second half twice: a memo you never selected means a valve that opened itself on electrical loss — the memo doubles as the failure indication for the fail-open design. The no-ice advisory uses the same clock as the wing's:

ICE NOT DET : This memo appears in green if ice is not detected for 130 s after the flight crew has set the ENG ANTI ICE pb-sw to ON.

The full advisory loop — including the pulsing memo when icing ends — is article 06's story.

8. Operating skeleton and the failure map

Normal use in one line each (the full flight-phase rhythm is article 10): on the ground, icing conditions existing or anticipated mean ENG ANTI-ICE ON for all ground operations, and the SOP's standing caution applies — turn it on, and should not wait until seeing ice building up. In climb/cruise the −40 °C exemption may apply; descent must have it on (§5). After landing it stays as required — with the reminder that the raised ground idle makes taxi speed control on slippery surfaces a deliberate act. Off at parking.

Failures preview (article 12): VALVE CLOSED — a two-position valve has no "try more pressure" recovery, so the procedure is a single line, avoid icing conditions. VALVE OPEN — crew awareness, plus a pre-armed trap: if it happens before takeoff, it may cause an ENG THRUST LOSS caution during takeoff power application, because the FADEC's thrust datum assumes anti-ice off while the valve quietly spends HP3 air; the dispatch procedure defuses it by selecting that engine's pushbutton ON so command matches reality. Beyond ATA-30, the engine-stall drill uses EAI+WAI as a surge-margin tool (more bleed demand lowers compressor exit pressure), and the high-vibration drill runs EAI with thrust cycling as a fan de-icer — both in article 12. And remember the boundary that article 09 is built on: EAI heats the lip only — fan blades, spinner and core stators are unheated, which is why a ground ice-shedding run-up regime and the ENG RISK OF STATOR ICING alert exist at all.

Self-test

[!note]- Q1. Where does EAI take its air, and what happens to it when the aircraft's bleed system fails?

From the third stage of the HP compressor, through its own duct to a distribution ring behind the intake lip — fully independent of the ATA-36 manifold. Aircraft bleed failures therefore never confiscate EAI; dual bleed failure costs you wing anti-ice only.

[!note]- Q2. Reproduce the valve truth table. Which solenoid state corresponds to pushbutton ON?

Air + solenoid de-energised → open, regulating 62 psig. Air + energised → closed. No air → open regardless. Pushbutton ON de-energises the solenoid — which is why electrical failure leaves the valves open.

[!note]- Q3. What does the first venturi protect, and against what?

The engine itself, against a downstream duct rupture: the venturi throat caps the maximum extractable flow so a burst duct can only steal its ration — surge margin and thrust survive. Normal operation is unaffected. (EAI has no leak-detection loop; this mechanical cap is its leak protection.)

[!note]- Q4. Why must engine anti-ice be ON for descent even below −40 °C SAT?

Partly because the aircraft is about to re-enter warmer moist air — but chiefly because ON commands the FADEC's higher idle thrust, protecting against flame-out at descent idle where surge margin is thin. The button is moonlighting as flame-out insurance.

[!note]- Q5. The ENG A.ICE memo is showing and nobody selected it. What happened?

The memo also appears if the nacelle anti-ice valve's electrical power is lost — the valve has failed open. Check which engine, and remember its thrust limit and idle have already shifted.

[!note]- Q6. What does the EIU have to do with ignition?

The EIU carries the anti-ice selection to the FADEC. If the EIU is inoperative, continuous ignition is automatically activated — with the messenger dead, the system keeps the spark on as insurance against ice-induced flame-out.

Key takeaways

References

Independent HP bleed, automatic closure without air, per-engine thrust-limit and idle changes and fail-open behaviour per FCOM DSC-30-30-10; pushbutton states, valve-transit FAULT note, EIU continuous-ignition line and both memo definitions per FCOM DSC-30-30-20. Two-part duct arrangement from the third-stage HP off-take, valve regulation at 62 psig with the solenoid logic, pressure-switch roles, first-venturi leak protection, distribution ring, outlet grille and manual locking pin per AMM 30-21-00 (Description and Operation, Trent 700 installation). Descent rule and FADEC higher idle per the FCOM descent-preparation SOP; emergency-configuration fuel note per the FCOM electrical abnormal procedures; thrust-loss trap and dispatch reference per the FCOM anti-ice abnormal procedures. The truth-table presentation, the "own boiler" contrast, the walkaround grille cue (observation only) and the "moonlighting button" reading of the descent rule are integrative syntheses of the referenced material.

Independent study material, not an Airbus publication and not endorsed by the manufacturer. Always defer to the current operator FCOM, FCTM, and QRH for operational use.