CS 25.783 Fuselage Doors

ED Decision 2016/010/R

(See AMC 25.783)

(a)     General. This paragraph applies to fuselage doors, which includes all doors, hatches, openable windows, access panels, covers, etc., on the exterior of the fuselage that do not require the use of tools to open or close.  This also applies to each door or hatch through a pressure bulkhead, including any bulkhead that is specifically designed to function as a secondary bulkhead under the prescribed failure conditions of CS-25.  These doors must meet the requirements of this paragraph, taking into account both pressurised and unpressurised flight, and must be designed as follows:

(1)     Each door must have means to safeguard against opening in flight as a result of mechanical failure, or failure of any single structural element.

(2)     Each door that could be a hazard if it unlatches must be designed so that unlatching during pressurised and unpressurised flight from the fully closed, latched, and locked condition is extremely improbable. This must be shown by safety analysis.

(3)     Each element of each door operating system must be designed or, where impracticable, distinctively and permanently marked, to minimise the probability of incorrect assembly and adjustment that could result in a malfunction.

(4)     All sources of power that could initiate unlocking or unlatching of any door must be automatically isolated from the latching and locking systems prior to flight and it must not be possible to restore power to the door during flight.

(5)     Each removable bolt, screw, nut, pin, or other removable fastener must meet the locking requirements of CS 25.607.

(6)     Certain doors, as specified by CS 25.807(h), must also meet the applicable requirements of CS 25.809 through CS 25.812 for emergency exits.

(b)     Opening by persons.  There must be a means to safeguard each door against opening during flight due to inadvertent action by persons.  In addition, for each door that could be a hazard, design precautions must be taken to minimise the possibility for a person to open the door intentionally during flight.  If these precautions include the use of auxiliary devices, those devices and their controlling systems must be designed so that:

(1)     no single failure will prevent more than one exit from being opened, and

(2)     failures that would prevent opening of any exit after landing must not be more probable than remote.

(c)      Pressurisation prevention means.  There must be a provision to prevent pressurisation of the aeroplane to an unsafe level if any door subject to pressurisation is not fully closed, latched, and locked.

(1)     The provision must be designed to function after any single failure, or after any combination of failures not shown to be extremely improbable. 

(2)     Doors that meet the conditions described in sub-paragraph (h) of this paragraph are not required to have a dedicated pressurisation prevention means if, from every possible position of the door, it will remain open to the extent that it prevents pressurisation or safely close and latch as pressurisation takes place.  This must also be shown with any single failure and malfunction except that:

(i)       with failures or malfunctions in the latching mechanism, it need not latch after closing, and

(ii)      with jamming as a result of mechanical failure or blocking debris, the door need not close and latch if it can be shown that the pressurisation loads on the jammed door or mechanism would not result in an unsafe condition.

(d)     Latching and locking.  The latching and locking mechanisms must be designed as follows:

(1)     There must be a provision to latch each door.

(2)     The latches and their operating mechanism must be designed so that, under all aeroplane flight and ground loading conditions, with the door latched, there is no force or torque tending to unlatch the latches.  In addition, the latching system must include a means to secure the latches in the latched position.  This means must be independent of the locking system.

(3)     Each door subject to pressurisation, and for which the initial opening movement is not inward, must:

(i)      have an individual lock for each latch;

(ii)     have the lock located as close as practicable to the latch; and

(iii)     be designed so that, during pressurised flight, no single failure in the locking system would prevent the locks from restraining the latches necessary to secure the door.

(4)     Each door for which the initial opening movement is inward, and unlatching of the door could result in a hazard, must have a locking means to prevent the latches from becoming disengaged.  The locking means must ensure sufficient latching to prevent opening of the door even with a single failure of the latching mechanism.

(5)     It must not be possible to position the lock in the locked position if the latch and the latching mechanism are not in the latched position.

(6)     It must not be possible to unlatch the latches with the locks in the locked position.  Locks must be designed to withstand the limit loads resulting from:

(i)      the maximum operator effort  when the latches are operated manually;

(ii)     the powered latch actuators, if installed; and

(iii)     the relative motion between the latch and the structural counterpart.

(7)     Each door for which unlatching would not result in a hazard is not required to have a locking mechanism meeting the requirements of sub-paragraphs (d)(3) through (d)(6) of this paragraph.

(8)     A door that could result in a hazard if not closed, must have means to prevent the latches from being moved to the latched position unless it can be shown that a door that is not closed would be clearly evident before flight.

(e)     Warning, caution, and advisory indications. Doors must be provided with the following indications:

(1)     There must be a positive means to indicate at the door operator’s station that all required operations to close, latch, and lock the door(s) have been completed.

(2)     There must be a positive means, clearly visible from each operator station for each door that could be a hazard if unlatched, to indicate if the door is not fully closed, latched, and locked.

(3)     There must be a visual means on the flight deck to signal the pilots if any door is not fully closed, latched, and locked.  The means must be designed such that any failure or combination of failures that would result in an erroneous closed, latched, and locked indication is remote for:

(i)      each door that is subject to pressurisation and for which the initial opening movement is not inward; or

(ii)     each door that could be a hazard if unlatched.

(4)     There must be an aural warning to the pilots prior to or during the initial portion of take-off roll if any door is not fully closed, latched, and locked, and its opening would prevent a safe take-off and return to landing.

(f)      Visual inspection provision. Each door for which unlatching could be a hazard must have a provision for direct visual inspection to determine, without ambiguity, if the door is fully closed, latched, and locked. The provision must be permanent and discernible under operational lighting conditions, or by means of a flashlight or equivalent light source.

(g)     Certain maintenance doors, removable emergency exits, and access panels.  Some doors not normally opened except for maintenance purposes or emergency evacuation and some access panels need not comply with certain sub-paragraphs of this paragraph as follows:

(1)     Access panels that are not subject to cabin pressurisation and would not be a hazard if open during flight need not comply with sub-paragraphs (a) through (f) of this paragraph, but must have a means to prevent inadvertent opening during flight.

(2)     Inward-opening removable emergency exits that are not normally removed, except for maintenance purposes or emergency evacuation, and flight deck‑openable windows need not comply with sub-paragraphs (c) and (f) of this paragraph.

(3)     Maintenance doors that meet the conditions of sub-paragraph (h) of this paragraph, and for which a placard is provided limiting use to maintenance access, need not comply with sub-paragraphs (c) and (f) of this paragraph.

(h)     Doors that are not a hazard.  For the purposes of this paragraph, a door is considered not to be a hazard in the unlatched condition during flight, provided it can be shown to meet all of the following conditions:

(1)     Doors in pressurised compartments would remain in the fully closed position if not restrained by the latches when subject to a pressure greater than 3.447 kPa (0.5 psi). Opening by persons, either inadvertently or intentionally, need not be considered in making this determination.

(2)     The door would remain inside the aeroplane or remain attached to the aeroplane if it opens either in pressurised or unpressurised portions of the flight. This determination must include the consideration of inadvertent and intentional opening by persons during either pressurised or unpressurised portions of the flight.

(3)     The disengagement of the latches during flight would not allow depressurisation of the cabin to an unsafe level.  This safety assessment must include the physiological effects on the occupants.

(4)     The open door during flight would not create aerodynamic interference that could preclude safe flight and landing.

(5)     The aeroplane would meet the structural design requirements with the door open.  This assessment must include the aeroelastic stability requirements of CS 25.629, as well as the strength requirements of Subpart C.

(6)     The unlatching or opening of the door must not preclude safe flight and landing as a result of interaction with other systems or structures.

[Amdt 25/4]

[Amdt 25/18]