Division 17 · ALC · Control / Monitoring Chain

ALCMS & Control System Maintenance

The dedicated maintenance framework for the Airfield Lighting Control and Monitoring System (ALCMS) and its associated control, monitoring, communication and interface equipment. Division 17 maintains the complete control chain — from the operator's command, through the PLC, interface and CCR, out to the field, and back through feedback, alarm and event recording.

Objective: confirming that the ALCMS screen is operational is not sufficient. The complete chain of command, execution, feedback, alarm and event recording must be verified on every applicable task in this division.

Core rule: a control command is not considered verified until command, equipment response, feedback and event/alarm behaviour have all been confirmed.

39
Topics in Division
03
Maintenance Groups (A–C)
05
Core Functions Verified
08
Step Fault-Trace Method

Control-Chain Architecture

Every ALCMS maintenance task — preventive, corrective or functional — is judged against the same end-to-end control chain, not against the HMI screen alone.

Operator / HMI
ALCMS
PLC / Control Logic
Interface
CCR
AGL Series Circuit
Field Equipment
Feedback
ALCMS

ALCMS Maintenance Philosophy

Five fundamental functions underpin every verification in this division.

01
Control

Can the operator issue the required command?

02
Execution

Does the command reach the intended equipment?

03
Feedback

Does the ALCMS correctly indicate equipment status?

04
Alarm

Does the system identify abnormal conditions?

05
Record

Does the system correctly record the event and system response?

Preventive Maintenance Corrective Maintenance Functional Maintenance Backup & Configuration Management

ALCMS Fault-Trace Method

When an ALCMS command does not produce the expected response, the fault is traced through the same eight-point chain regardless of which topic in this division is being worked.

1
Operator / HMI

Is the command being generated?

2
Communication

Is the command leaving the HMI/ALCMS?

3
PLC

Is the PLC receiving/processing the command?

4
Interface

Is the interface transmitting the command?

5
CCR

Is the CCR in remote mode and receiving the command?

6
Field System

Is the AGL equipment responding?

7
Feedback

Is the actual condition returning to the ALCMS?

8
Display

Is the HMI displaying the correct condition?

Pre-Maintenance Requirements

Before any Division 17 task begins, four requirement groups must be closed out.

Work Planning

  • Identify system/asset — ALCMS ID, workstation, PLC, network element
  • Review previous maintenance history, alarms, and defects
  • Confirm task, tools, spares, and approved test methods
  • Confirm authorized personnel for any PLC/configuration change

Operational Coordination

  • Obtain required work authorization
  • Coordinate with ATC / airport operations before any live command test
  • Confirm alarm test method will not create an unintended operational condition
  • Establish communication arrangements with the control room

Safety & Access

  • Identify electrical and control-system hazards
  • Apply isolation / LOTO requirements where required
  • Follow approved cybersecurity and access-control procedures
  • Verify user access changes are authorized before applying them

Documentation

  • Date, work-order number, technician, supervisor
  • System/workstation/PLC identification
  • Initial condition and any active alarms
  • Configuration/backup reference in use

The 39 Topics

Grouped by maintenance category — click any topic to expand its verification activities and acceptance condition.

A

Preventive Maintenance

20 topics
MNT-ALC-001ALCMS Workstation Cleaning
Prevent
  • Dust accumulation
  • Ventilation obstruction
  • Keyboard/mouse contamination
  • Display contamination
Acceptance / Record

Check: cleaning does not disturb connections or equipment ventilation.

MNT-ALC-002HMI Inspection
Inspect For
  • Physical condition
  • Display condition
  • Touchscreen/controls where applicable
  • Navigation
  • Abnormal indications
  • System status
Acceptance / Record

Check: for unexpected error messages or abnormal system behaviour.

MNT-ALC-003HMI Functional Verification
Verify Operator Can
  • Log in where applicable
  • Navigate the system
  • Select required equipment
  • Issue authorized commands
  • View equipment status
  • View alarms
  • Access relevant system information
MNT-ALC-004Display Verification
Displayed Information Must Be
  • Visible
  • Correct
  • Legible
  • Consistent with system status
MNT-ALC-005Control-Command Verification
Confirm
  • Command issued
  • Command received
  • Equipment responds
Acceptance / Record

Any discrepancy between command, receipt, and equipment response should be investigated.

MNT-ALC-006Alarm-System Verification
Verify Applicable Alarms Are
  • Generated
  • Displayed
  • Identified correctly
  • Acknowledged where applicable
  • Recorded
Acceptance / Record

Use: an approved test method that does not create an unintended operational condition.

MNT-ALC-007Event-Log Verification
Review
  • Command events
  • Alarm events
  • Status changes
  • System faults
  • Operator actions where applicable
Acceptance / Record

Check: timestamps and event descriptions are meaningful.

MNT-ALC-008Communication-Link Verification
Verify Communication Between
  • HMI
  • PLC
  • Interface equipment
  • CCR
  • Network equipment
  • Monitoring devices
MNT-ALC-009PLC Inspection
Inspect
  • Physical condition
  • Status indicators
  • Power status
  • Communication status
  • Fault indications
  • Module condition
Acceptance / Record

Do not modify PLC logic during routine inspection unless specifically authorized.

MNT-ALC-010Interface-Module Inspection
Inspect For
  • Physical damage
  • Status indication
  • Loose connections
  • Abnormal indications
  • Communication condition
Acceptance / Record

Note: interface failures can create discrepancies between the ALCMS command and field equipment response.

MNT-ALC-011Network-Equipment Inspection
Inspect
  • Physical condition
  • Power status
  • Link status
  • Fault indication
  • Ventilation
  • Connection condition
Acceptance / Record

Where managed: review available diagnostic information.

MNT-ALC-012Control-Panel Inspection
Inspect
  • Physical condition
  • Labels
  • Wiring
  • Terminals
  • Indicators
  • Protective devices
  • Earth/bonding connections
MNT-ALC-013Control-Wiring Inspection
Inspect For
  • Loose terminals
  • Damaged insulation
  • Incorrect routing
  • Mechanical damage
  • Identification
  • Connection integrity
MNT-ALC-014Power-Supply Inspection
Inspect
  • Input condition
  • Output indication
  • Alarm indication
  • Connections
  • Physical condition
Acceptance / Record

Investigate: any abnormal power condition — control-system instability may originate from the power supply.

MNT-ALC-015UPS Condition Inspection Where Applicable
Inspect
  • UPS status
  • Battery condition/status
  • Alarm indication
  • Input/output status
  • Bypass condition where applicable
Acceptance / Record

Follow: the UPS manufacturer's maintenance requirements for detailed battery testing.

MNT-ALC-016Cabinet Cooling/Ventilation Inspection
Inspect For
  • Blocked ventilation
  • Dust accumulation
  • Fan condition
  • Excessive temperature indication where monitored
  • Airflow restriction
Acceptance / Record

Note: poor cooling can contribute to premature electronic-component failure.

MNT-ALC-017System Time/Date Verification
Important For
  • Event logs
  • Alarm records
  • Maintenance investigation
  • Failure analysis
Acceptance / Record

Where external time source used: verify synchronization status where applicable.

MNT-ALC-018Data-Backup Verification
Check
  • Backup status
  • Backup date
  • Backup availability
  • Backup integrity where verification is supported
MNT-ALC-019Configuration Backup
Maintain Backups Of
  • ALCMS configuration
  • HMI configuration
  • PLC program/configuration where authorized
  • Interface configuration
  • Network configuration where applicable
Acceptance / Record

Configuration backups should be controlled and traceable.

MNT-ALC-020User-Access Review
Check
  • Active users
  • User roles
  • Authorization levels
  • Unnecessary accounts
  • Access changes
Acceptance / Record

Follow: the airport's approved cybersecurity and access-control procedures.

B

Corrective Maintenance

11 topics
MNT-ALC-021HMI Fault Correction
Sequence
  • Identify the fault
  • Determine local or system-wide
  • Check power
  • Check communication
  • Check HMI hardware/software condition
  • Restore operation
  • Perform functional verification
MNT-ALC-022Display Fault Correction
Covers
  • Blank screen
  • Incorrect status
  • Frozen display
  • Abnormal graphical indication
  • Display hardware failure
Acceptance / Record

After correction, verify: Display → Status → Command → Feedback.

MNT-ALC-023Communication Fault Correction
Investigate Systematically
  • HMI → Network → Interface → PLC → CCR/field interface
MNT-ALC-024PLC Fault Correction
Sequence
  • Identify PLC status
  • Identify fault indication
  • Check power
  • Check modules
  • Check communication
  • Review diagnostic information
  • Restore per approved procedure
  • Verify system operation
Acceptance / Record

PLC program/configuration changes should only be performed by authorized personnel under appropriate change control.

MNT-ALC-025Interface-Module Replacement
After Replacement, Verify
  • Wiring
  • Configuration
  • Communication
  • Command
  • Feedback
  • Alarms
Acceptance / Record

Use: approved compatible components only.

MNT-ALC-026Network-Equipment Replacement
After Replacement, Verify
  • Hardware
  • Connections
  • Restore approved configuration
  • Communication
  • Redundancy where applicable
  • Functional testing
MNT-ALC-027Power-Supply Replacement
After Replacement, Verify
  • Input
  • Output
  • Protection
  • System startup
  • Communication
  • Control functions
MNT-ALC-028Control-Wiring Repair
After Repair, Verify
  • Termination
  • Identification
  • Continuity where applicable
  • Control operation
  • Feedback
MNT-ALC-029Alarm Fault Correction
Covers Alarms That
  • Fail to appear
  • Appear incorrectly
  • Cannot be acknowledged
  • Do not correspond to actual equipment condition
  • Are not recorded correctly
Acceptance / Record

After correction: perform controlled alarm verification.

MNT-ALC-030Remote-Control Fault Correction
Sequence — Remote CCR Control Unavailable
  • Verify ALCMS command
  • Verify communication
  • Verify interface
  • Confirm CCR local/remote selector is in remote
  • Verify CCR control input
  • Verify CCR response
  • Verify feedback
  • Restore remote control
  • Perform functional test
MNT-ALC-031Data/Configuration Restoration
Sequence — Config/Data Lost or Corrupted
  • Identify affected system
  • Identify approved backup
  • Confirm backup version
  • Restore per authorized procedure
  • Verify configuration, communication, control, feedback, alarms
  • Record restoration
C

Functional Maintenance

8 topics
MNT-ALC-032CCR Remote-Control Verification
Verify Complete Chain
  • Operator command → ALCMS
  • Communication/interface → CCR
  • CCR responds
  • ALCMS receives feedback
Acceptance / Record

The complete chain should be verified — not just that the ALCMS accepted the command.

MNT-ALC-033Intensity-Step Command Verification
Confirm
  • Correct command
  • Correct CCR response
  • Correct displayed status
  • Correct feedback
Acceptance / Record

Note: the number and definition of intensity steps follows the installed system configuration and applicable operational requirements.

MNT-ALC-034Feedback Verification
Example
  • ALCMS indicates CCR operating → CCR actually operating
Acceptance / Record

Any mismatch should be treated as a control/monitoring defect.

MNT-ALC-035Alarm Verification
Verify Abnormal Condition Produces
  • Alarm
  • Indication
  • Event
  • Equipment status
Acceptance / Record

Control: alarm testing so that it does not compromise live airfield operations.

MNT-ALC-036Equipment-Status Verification
Check Displayed vs Actual
  • ON/OFF
  • Available/fault
  • Communication status
  • Alarm status
  • CCR status
  • Relevant field equipment status
MNT-ALC-037Event-Logging Verification
Check
  • Timestamp
  • Event description
  • Equipment identification
  • Operator/action information where applicable
  • Alarm/event classification
MNT-ALC-038Communication Redundancy Verification Where Applicable
Verify
  • Primary path
  • Redundant path
  • Automatic/manual changeover as designed
  • Restoration of primary path
  • Alarm/indication
MNT-ALC-039Post-Maintenance ALCMS Functional Test
Minimum Logic — Complete Control Chain
  • Power → Communication → HMI
  • Command → CCR/interface → Field response
  • Feedback → Alarm → Event log
  • System restoration
Acceptance / Record

This is the final gate: the complete control chain must be verified before the system is returned to service.

ALCMS Condition Classification

Every finding in this division is classified against the same five-tier scale, driving the appropriate action.

ConditionDescriptionAction
GoodFully functional and stableRoutine PM
AcceptableMinor non-critical deteriorationMonitor
DeterioratingDeveloping hardware/software/communication issuePlanned maintenance
DefectiveControl/monitoring function compromisedCorrective maintenance
CriticalLoss of essential control/monitoring functionPriority/emergency response

Core Principle

The strongest principle for Division 17 governs every one of its 39 topics, whether preventive, corrective, or functional.

Do not verify only the screen — verify the complete control loop. Operator → HMI → ALCMS → PLC/Control Logic → Interface → CCR → AGL Field System → Feedback → Alarm/Event Log → HMI Status. This makes Division 17 the control, monitoring and information-integrity backbone of the AGL Maintenance Handbook.

Frequently Asked Questions

Quick answers about alcms & control system maintenance, based on the topics in this division.

8 QUESTIONS
Q1What is ALCMS and control system maintenance?

It is the dedicated framework for the Airfield Lighting Control and Monitoring System and its associated control, monitoring, communication and interface equipment.

Q2What does Division 17 of the AGL Maintenance Handbook cover?

Division 17 (ALCMS & Control System Maintenance) contains 39 topics in three groups: Group A Preventive Maintenance (20 topics), Group B Corrective Maintenance (11 topics) and Group C Functional Maintenance (8 topics).

Q3Is it enough to confirm that the ALCMS screen is operational?

No. The complete chain of command, execution, feedback, alarm and event recording must be verified. A control command is not considered verified until the command, equipment response, feedback and event or alarm behaviour have all been confirmed.

Q4What five core functions are verified?

Control (can the operator issue the command), Execution (does it reach the intended equipment), Feedback (does ALCMS correctly indicate equipment status), Alarm (does the system identify abnormal conditions) and Record (does it correctly record the event and system response).

Q5What is the control-chain architecture?

Operator/HMI, ALCMS, PLC/control logic, interface, CCR, AGL series circuit, field equipment, then feedback returning to ALCMS. Every task is judged against this end-to-end chain, not the HMI screen alone.

Q6How do you trace an ALCMS fault?

When a command does not produce the expected response, trace an eight-point chain: is the command generated at the HMI, leaving the HMI/ALCMS, received and processed by the PLC, transmitted by the interface, received by a CCR in remote mode, and acted on by the field system, and is the actual condition then returned as feedback and shown correctly on the display.

Q7What must be closed out before ALCMS maintenance begins?

Four requirement groups. Work planning covers identifying the system, reviewing history and alarms, and confirming authorized personnel for any PLC or configuration change. Operational coordination covers work authorization and coordinating with ATC or airport operations before any live command test. Safety and access covers isolation or LOTO where required and approved cybersecurity and access-control procedures. Documentation covers the work order, system identification, initial condition and the backup or configuration reference in use.

Q8How are ALCMS conditions classified?

Good (fully functional and stable, routine PM), Acceptable (minor non-critical deterioration, monitor), Deteriorating (developing hardware, software or communication issue, planned maintenance), Defective (control or monitoring function compromised, corrective maintenance) and Critical (loss of an essential control or monitoring function).

Go Further

Don't Just Reboot the ALCMS. Understand the Control Logic.

ALCMS maintenance is more than restarting a frozen workstation.

Build the technical knowledge to understand control architecture, command/feedback pathways, database integrity, and how a control-system fault propagates to every circuit it manages.

Maintain the system. Understand the logic. Protect the control chain.

Build Practical AGL ALCMS Maintenance Capability
AGL Fundamentals Components Electrical Systems Preventive Maintenance Inspection Testing Photometry Troubleshooting Commissioning

Talk to Precision AGL Academy

Follow the Academy