Steering Gear FAT:
Beyond the Hard-Over Test

Steering gear is among the most critical safety systems on board a merchant vessel. Satisfactory rudder movement under normal conditions does not necessarily demonstrate that the arrangement will behave correctly following equipment failure, loss of hydraulic oil, control malfunction or electrical power interruption.

During a conventional Factory Acceptance Test (FAT), considerable attention is often given to the ability of hydraulic power units to move the rudder from one side to the other, the time required to complete the movement and the stability of hydraulic pressure.

These are important parameters. However, from an owner's perspective, the most important question is not simply: Can the steering gear move the rudder?

Can the system maintain or recover steering capability when a critical component fails — and will the crew receive the correct information to respond?

That distinction should shape the FAT programme.

1. Redundancy Must Be Demonstrated, Not Assumed

Modern electrohydraulic steering gears may incorporate several hydraulic pumps, power units, actuators and control circuits. Redundancy may be clearly represented on diagrams, yet its operational value depends on how the components interact.

A robust FAT should investigate:

• Which pump combinations are permitted during normal operation.
• Which combinations remain available following a single failure.
• Whether automatic standby-pump starting performs as intended.
• Whether a defective hydraulic circuit can be isolated without compromising the healthy circuit.
• Whether the control logic prevents incompatible hydraulic configurations.
• Whether the indicated operating mode corresponds to the actual hydraulic arrangement.

For a four-pump configuration, an owner may request representative operating-pair tests, including combinations across different power groups, where permitted by the approved design.

The objective is not to operate every conceivable combination indiscriminately. It is to verify the approved operating matrix, understand any prohibited combinations and establish the engineering reasons behind those limitations.

2. Hydraulic Locking — A Critical Failure Scenario

Hydraulic locking deserves particular attention during FAT. In certain steering gear arrangements, conflicting hydraulic commands or abnormal valve behaviour may cause hydraulic systems to oppose each other, potentially preventing the rudder from responding correctly.

The consequences may include:

• Failure of the rudder to follow the demanded steering angle.
• Abnormal hydraulic pressure development.
• Unexpected loading of hydraulic components.
• Loss or degradation of steering capability.
• Difficulty identifying the faulty hydraulic system.

A meaningful acceptance test should establish whether the relevant failure can be detected and whether the required alarm and protective response operate correctly. The test philosophy should address the initiating failure, hydraulic and control-system behaviour, alarm identification, isolation or recovery action, and restoration of steering.

Where a hydraulic-locking scenario cannot safely be reproduced physically during FAT, the agreed alternative simulation should be documented, together with its limitations.

An alarm simulation alone does not necessarily prove that the underlying failure-detection logic works correctly.

3. Low and Low-Low Hydraulic Oil Level — More Than an Alarm Lamp

Hydraulic reservoir level monitoring is another area where an apparently straightforward alarm test can overlook important system behaviour.

Low-level and low-low-level signals may initiate different responses depending on the approved steering gear design. These may include warnings, standby arrangements, isolation of the affected hydraulic circuit or other protective actions.

The owner should verify the actual cause-and-effect sequence. Particular attention is required where one hydraulic power unit is operating normally while another unit is stopped: an abnormal condition detected in a non-operating circuit should not unnecessarily interfere with an independent healthy circuit.

Each relevant test should verify:

• The initiating sensor or simulated condition.
• Alarm activation, location and correct identification.
• Indication at applicable bridge and machinery interfaces.
• Pump start, stop or transfer sequence, where specified.
• Actual positions of relevant isolation valves.
• Continued steering availability where required by the design.
• Recovery and reset conditions.

For systems incorporating both LOW and LOW-LOW functions, these should be tested separately rather than as one generic alarm.

4. Isolation Valves — HMI Indication Versus Physical Position

Modern steering gear control systems often provide graphical valve indications on local panels or machinery monitoring systems. Yet displaying an isolation valve as open or closed does not automatically establish that the valve has physically reached that position.

During FAT, the relationship between the control command, actuator response, limit-switch feedback and displayed valve status should be verified.

This becomes particularly important when hydraulic isolation is a prerequisite for maintaining steering availability after a circuit failure. Owner-side verification should establish whether:

• Valve movement occurs in the correct sequence.
• Position feedback is derived from an appropriate source.
• The indicated position agrees with the actual valve condition.
• Incomplete movement produces the required alarm or response.
• Interlocks prevent unsafe or conflicting commands.
• Valve behaviour remains correct following loss and restoration of control power.

A correct HMI display is not, by itself, proof of correct hydraulic isolation.

5. Emergency Power and Recovery of Steering

Emergency steering capability involves more than confirming that a selected pump motor can be powered from an emergency electrical source. The complete arrangement should be reviewed, including power supply, control circuits, permitted pump configuration and rudder-angle indication.

Relevant FAT and subsequent onboard tests should establish:

• The intended emergency-power supply arrangement.
• Which steering gear power units are available under emergency supply.
• Automatic or manual changeover requirements.
• Electrical and hydraulic interlocks.
• Steering control availability after power interruption.
• Appropriate indications and alarms.
• Recovery following loss and restoration of supply.

Where testing depends on the ship's emergency switchboard, power distribution or bridge interfaces, the final integrated demonstration must be completed onboard. A successful factory test of one power unit does not replace verification of the vessel's complete emergency steering arrangement.

6. The Importance of Fault-Injection Testing

Normal-operation tests establish that equipment can perform its intended function. Fault-injection tests investigate how the system behaves when that function is challenged.

Carefully designed steering gear FAT scenarios may include:

• Loss of one hydraulic pump.
• Failure of a control circuit or selected feedback signal.
• Simulated abnormal reservoir level.
• Failure of an isolation-valve position signal.
• Hydraulic-locking detection scenarios.
• Loss of electrical power to a selected control or power unit.
• Failure of an automatic standby-start sequence.

Each scenario should have a documented expected response before the test begins. The acceptance record should distinguish between an actual functional test, software or electrical simulation, and a test deferred to onboard commissioning.

Fault-injection activities must be performed under an approved, controlled test procedure, with the manufacturer and relevant witnessing parties agreeing on safe methods and acceptance criteria.

7. Hydraulic Oil Cleanliness and System Integrity

Hydraulic reliability also depends on cleanliness, filtration and the condition of the working fluid. The FAT review should address flushing documentation, filtration arrangements, oil sampling, leakage checks and specified cleanliness acceptance criteria.

Results should be assessed against the applicable manufacturer and project requirements, including the agreed ISO 4406 cleanliness code where specified.

Oil condition is particularly relevant to proportional valves, servo components and other contamination-sensitive elements. Where practical, the owner should also review initial filling, oil transfer, top-up filtration and future maintenance arrangements.

A satisfactory factory cleanliness result can be undermined by contamination introduced during installation or subsequent servicing.

8. FAT Corrections Must Be Retested

If a FAT reveals a deficiency requiring changes to PLC logic, alarm handling, input/output configuration or interlock sequences, the original test result may no longer be sufficient.

The extent of retesting should follow a documented change-impact assessment. All affected functions should be retested, including related interfaces and failure scenarios where the modification could introduce unintended consequences.

Changes should be traceable through revised software versions, cause-and-effect documentation, test records and outstanding-item registers.

Correcting an identified problem is not the same as demonstrating that the corrected system performs safely.

9. FAT Is Not the Final Acceptance Point

A factory environment cannot fully reproduce all vessel-specific conditions. The steering gear must ultimately operate as part of an integrated shipboard arrangement involving:

• Main and emergency electrical distribution.
• Bridge steering controls and selectors.
• Local and emergency steering stations.
• Alarm and monitoring systems.
• Rudder-angle indication.
• Installed hydraulic piping and actuators.
• Ship-specific control and communication interfaces.

The FAT programme should therefore identify which functions have been fully demonstrated and which require repetition during Harbour Acceptance Testing (HAT), commissioning or sea trials.

Tests involving actual shipboard power changeover, integrated alarms, steering-station transfer and rudder movement under relevant operational conditions deserve particular attention.

The regulatory steering-performance demonstration should not be confused with a no-load or simulated factory movement test.

10. What the Owner Should Take Away

A meaningful steering gear FAT is not defined by the number of individual tests completed. It is defined by how convincingly those tests establish system response to normal commands, abnormal conditions and foreseeable failures.

For owner-side acceptance, particular value comes from understanding:

• Whether the intended redundancy is genuinely available.
• Whether a single failure can compromise healthy steering functions.
• Whether hydraulic locking is adequately detected and addressed.
• Whether alarms identify the relevant abnormal condition.
• Whether protective actions correspond to approved design logic.
• Whether emergency steering is supported by the system architecture.
• Whether FAT findings have been corrected and verified.
• Whether outstanding risks are transferred into onboard commissioning.

The Owners Edge Perspective

Steering gear acceptance should demonstrate more than movement. It should demonstrate controlled failure response, meaningful redundancy and the ability to maintain or recover steering capability.

The owner's objective is not merely to witness a successful factory test. It is to establish confidence that the steering gear will behave predictably when the vessel needs it most.

EVIDENCE → FINDING → CONSEQUENCE → RISK → RECOMMENDATION