Airbus A350 Trent XWB Thrust Reverser System: How ETRAS Deploys, Locks and Monitors the Cowls

The thrust reverser on an Airbus A350 looks straightforward from the ramp: the nacelle sleeves move aft, cascade vanes become visible, and the engine produces a strong forward-directed airflow that helps the aircraft decelerate. Under the surface, however, the system is a carefully coordinated network of electrical power, digital commands, electric motors, ball-screw actuators, position feedback and independent mechanical locks.

The key idea is simple: the engine does not run backwards. The A350 thrust reverser redirects part of the Trent XWB’s fan bypass airflow. It does not reverse the core exhaust flow, and it does not change the direction of engine rotation.

This article builds a practical mental model of that process. It explains what moves, what commands the movement, how each cowl is locked, and how the aircraft knows whether the system is stowed, in transit or deployed.

Learning scope: This is a system-familiarization article, not approved maintenance data or an operational procedure. Always use current, applicable Airbus, Rolls-Royce, operator and regulatory documentation for maintenance, troubleshooting or dispatch decisions.

The system in one minute

On each Trent XWB nacelle, the thrust reverser is formed by left- and right-hand cowl structures surrounding the rear fan case and engine core. Each half has a translating cowl. During deployment, the cowl moves rearward and exposes a bank of cascade vanes. At the same time, blocker doors rotate into the fan bypass duct, preventing the bypass stream from continuing directly aft. The airflow is then redirected through the cascades in a forward and outward direction, producing the reverse-thrust effect.

Movement is provided by the Electrical Thrust Reverser Actuation System (ETRAS). Each translating cowl has one electric motor driving three ball-screw actuators through flexible shafts. Two actuators incorporate primary locks; the center actuator is non-locking and includes a Manual Drive Unit (MDU). A separate track lock—also called the tertiary lock—provides another mechanical line of defense against unintended deployment.

An Electronic Thrust Reverser Actuation Controller (ETRAC) manages the motors and primary locks. The independent tertiary-lock path is controlled outside ETRAS by aircraft flight-control and electrical-power functions. Position transmitters, motor feedback and proximity sensors continuously report cowl and lock status to the monitoring architecture.

Key points

Reverse thrust is created by redirecting fan bypass airflow, not core exhaust.
Each engine has two translating cowls, and each cowl has its own motor, three actuators and tertiary lock.
The left and right cowls are mechanically independent; their movement is coordinated electronically.
Two primary locks plus one tertiary track lock provide three mechanical retention points for each translating cowl.
Deployment depends on separate power, command and independent-unlock paths agreeing.
Position, lock state and motor operation are monitored throughout deployment and stow.

From bypass airflow to reverse thrust

The Trent XWB is a high-bypass turbofan. Most of the air accelerated by its fan travels around the engine core through the bypass duct. The thrust reverser works with this bypass stream.

In the stowed configuration, the translating cowl forms a smooth part of the nacelle, the blocker doors lie flush with the inner surface, and fan air continues aft through the normal bypass exit.

In the deployed configuration, three mechanical actions happen together:

The translating cowl moves aft.
The aft movement exposes the cascade boxes.
Drag links pull the blocker doors into the bypass duct.

With the normal aft path blocked, bypass air exits through the cascades. The cascade geometry turns the flow forward and outward, creating aerodynamic braking after landing. The cascades are designed for particular locations and flow directions; they should be understood as engineered airflow components, not as interchangeable grilles.

This airflow view is the best place to begin learning the system. Once the purpose of the translating cowl, blocker doors and cascades is clear, the actuation and locking architecture becomes easier to follow.

ETRAS: the electro-mechanical actuation architecture

ETRAS converts electrical power into coordinated linear movement of the thrust reverser cowls. Although several components move together, the mechanical chain is compact and logical.

For each translating cowl:

One brushless electric motor supplies rotational power.
A flexible shaft carries motor torque to the center actuator.
The center actuator’s splitter gearbox drives its own ball screw and transmits torque to the upper and lower actuators through two additional flexible shafts.
All three ball-screw actuators convert rotary motion into linear translation.
The translating cowl moves along its tracks as the actuator ball screws extend or retract.

The three actuators have different roles:

Component	Main role
Upper actuator	Moves the cowl and incorporates a primary lock
Center non-locking actuator	Receives motor input, distributes torque and provides the MDU interface
Lower actuator	Moves the cowl and incorporates a primary lock

One of the two outer actuators also carries the cowl-position feedback installation. In the supplied training configuration, the feedback is associated with the upper actuator on the left cowl and the lower actuator on the right cowl. Effectivity and current documentation must always be checked before applying this detail to a specific aircraft.

Why flexible shafts matter

The flexible shafts allow one motor to drive three actuators positioned around the cowl. Within one cowl, this creates a linked mechanical drive. Across the nacelle, however, the left and right cowls are not mechanically connected. They have separate motors and actuator trains, and their positions are coordinated through electronic control and monitoring.

That distinction is important when building a troubleshooting mindset. A fault within one shaft or actuator train can affect one translating cowl without creating an identical mechanical response on the other side. The control system must therefore evaluate each cowl’s position and lock feedback, not assume that both halves have moved together.

ETRAC and the three command paths

The ETRAC is the control center for the electrical actuation hardware. For each engine, it provides power and control to the two thrust-reverser motors and the primary-lock solenoids, communicates with the aircraft data network, monitors the system, and records fault information through built-in test functions.

But the ETRAC is deliberately not the only authority involved. Deployment requires agreement across three distinct paths:

Motor and primary-lock power path. The aircraft electrical distribution system makes the 230 VAC three-phase supply available to ETRAS so the motors can operate and the primary locks can be released.
Deploy/stow command path. The Engine Interface Function sends the ETRAC the requested direction through AFDX, with hardwired discrete backup capability for specified network-loss conditions.
Independent tertiary-lock path. Primary or secondary flight-control computers command a separate 115 VAC supply path to release the tertiary track locks. This path is functionally independent of ETRAS.

This separation is the central safety concept. A thrust-reverser lever selection alone is not enough to move a cowl. The correct aircraft conditions, electrical-power authorization, deploy command and independent lock-release path must all align.

Redundancy also exists inside the aircraft command architecture. The two EIF applications can back each other up for specified functions, and hardwired discretes provide defined fallback paths if AFDX communication is unavailable. The exact dispatch and fault-handling implications are effectivity- and procedure-dependent and belong in current approved data.

What happens during deployment?

The detailed logic runs quickly, but it is easier to learn as a sequence:

Reverse is selected and the aircraft validates the required conditions. The propulsion and aircraft systems evaluate lever position and the conditions that permit ground reverse operation.
The independent track locks are released. The flight-control/electrical path energizes each tertiary-lock solenoid, allowing its hook to move clear of the cowl’s lock fitting.
The primary locks are released. After receiving the deploy command, the ETRAC energizes the primary-lock solenoids in the upper and lower locking actuators.
The motors drive the actuator trains. Each motor turns the center actuator through its flexible shaft; the center actuator then drives the upper and lower actuators.
The cowls translate aft. As each cowl moves, its drag links rotate the blocker doors into the bypass stream and the cascade boxes are exposed.
Feedback confirms the transition. The system compares motor, cowl-position and lock-status information while the cowls travel.
The deployed position is controlled. At the commanded end position, motor power is removed and the system reports the resulting state to the aircraft.

The useful learning point is not simply that “the sleeve moves back.” Deployment is a controlled chain: authorize, unlock, drive, translate, redirect and confirm.

What happens during stow?

Stow reverses the movement but also has a critical mechanical outcome: the cowl must return to a positively locked condition.

The EIF sends a stow command to the ETRAC.
The ETRAC drives both thrust-reverser motors in the stow direction.
The three actuators on each side move the translating cowl forward.
The blocker doors return flush with the bypass-duct surface as the cowl closes over the cascades.
At the fully stowed position, the primary locks and tertiary track lock mechanically re-engage.
Proximity sensors and cowl-position feedback report the final state.
When the expected stowed-and-locked condition is confirmed, actuation power is removed according to the control logic.

The locking devices are designed to re-latch mechanically as the cowl returns to the correct stowed region. That feature is important: retention of the cowl does not depend on continuously energizing a solenoid.

Three mechanical lines of defense

Each translating cowl is retained in the stowed position by two primary locks and one tertiary track lock.

Primary locks

The upper and lower locking actuators each incorporate a primary lock. An electrical solenoid releases the lock when commanded. When the actuator returns to the fully stowed position, the lock can mechanically re-engage without needing the solenoid to remain powered.

Dual proximity-switch channels monitor lock state. The architecture is designed so that the aircraft can distinguish locked, unlocked and fault-related conditions rather than relying on a single binary indication.

Tertiary track lock

The track lock is installed on each thrust-reverser half and acts directly on the translating-cowl retention path. Its primary purpose is to keep the cowl stowed if the primary-lock system does not provide the expected retention.

The track lock includes a hook, an electrically actuated release mechanism, manual-maintenance provisions and two independent proximity sensors. Crucially, its release command comes from an aircraft-side path that is independent of ETRAS. This control segregation makes the track lock more than “a third copy” of the primary locks—it is a separate defensive layer.

When the cowl is deployed, the hook remains in its released position. During stow, the returning cowl fitting drives the hook toward the locked position, after which the lock mechanism secures it and the proximity sensors report locked status.

How the aircraft knows where the system is

A safe actuation system needs more than commands; it needs independent evidence of what the hardware actually did.

The A350 thrust-reverser architecture uses several types of feedback:

Motor resolver feedback supports closed-loop control of motor commutation, speed and calculated position.
Translating-cowl position feedback provides an independent indication of cowl travel to the engine-control and actuation architecture.
Primary-lock proximity sensors report the status of the two primary locking devices on each cowl.
Track-lock proximity sensors provide redundant lock-state information for the tertiary lock.
Motor temperature monitoring helps identify abnormal motor thermal conditions.
ETRAC built-in test and fault reporting provides status and fault information through the aircraft network.

The Engine Electronic Controller (EEC), EIF, ETRAC and aircraft display/maintenance functions use this information for control, indication, warning and fault recording. For a learner, the useful distinction is:

A command says what the system was asked to do.
Position feedback says where the cowl is.
Lock feedback says whether the retention devices are in the expected state.
Motor feedback says how the drive system is behaving.

Good troubleshooting begins by keeping those four questions separate.

A maintenance engineer’s mental model

The system can be understood through five checkpoints:

Permission: Were the aircraft conditions and electrical-power paths valid for the requested action?
Unlocking: Did the primary and tertiary lock indications change as expected?
Drive: Did each motor and its flexible-shaft/actuator train respond?
Movement: Did each translating cowl reach the commanded position without a disagreement?
Confirmation: Do position, lock, motor and BITE data agree with the final commanded state?

This model is intentionally diagnostic, not procedural. It helps a learner interpret a schematic or training animation, but it does not authorize component operation, manual deployment, lock inhibition, fault isolation or aircraft dispatch.

Manual-maintenance provisions

The center non-locking actuator includes a Manual Drive Unit, and the primary and tertiary locks include controlled manual-release or inhibition provisions. These features allow defined maintenance actions when aircraft power is unavailable or when the system must be secured.

They also expose personnel to high-energy mechanical components and configuration risks. Before any real task, maintenance personnel must establish the applicable aircraft effectivity, safety precautions, deactivation state, tooling, pin configuration and restoration checks from current approved documentation. A training illustration should never be treated as a substitute for those instructions.

Common points learners often confuse

Does the Trent XWB rotate backwards in reverse thrust?

No. Engine rotation remains in the normal direction. The thrust reverser changes the direction of a portion of the fan bypass airflow.

Does the thrust reverser redirect the core exhaust?

No. The translating-cowl and blocker-door arrangement acts on the bypass stream. The engine core flow continues through the core exhaust path.

Are the left and right translating cowls mechanically linked?

No. Each cowl has its own motor and actuator train. Their motion is coordinated and monitored electronically.

Is the tertiary lock controlled by the ETRAC?

Its release belongs to an independent aircraft-side control and power path. That segregation is one of the system’s major protections against unintended deployment.

Is a visible closed cowl enough to prove the system is locked?

No. The system uses cowl-position and lock-proximity feedback to establish the reported condition. In maintenance, the required confirmation is defined by approved instructions—not by appearance alone.

Frequently asked questions

What does ETRAS stand for on the Airbus A350?

ETRAS means Electrical Thrust Reverser Actuation System. It includes the electric drive, actuators, flexible shafts, locks, sensors and associated control interfaces that deploy and stow the translating cowls.

What does ETRAC do?

The Electronic Thrust Reverser Actuation Controller controls the two thrust-reverser motors and four primary-lock solenoids for an engine, monitors the system, communicates over the aircraft network and provides built-in test and fault information.

How many actuators move each A350 thrust-reverser cowl?

Each translating cowl is moved by three ball-screw actuators: upper and lower locking actuators plus a center non-locking actuator that includes the manual-drive interface.

How many thrust-reverser locks are fitted?

Each translating cowl has two primary locking devices and one independent tertiary track lock. With two translating cowls per nacelle, the architecture provides the same three-lock concept on both halves.

Which Trent XWB variants power the A350?

Airbus identifies the Trent XWB-84 for the A350-900 and the Trent XWB-97 for the A350-1000. Configuration and effectivity details must still be checked for the individual aircraft.

Can this article be used for maintenance or dispatch?

No. It is a supplementary learning resource. Maintenance, testing, deactivation, troubleshooting and dispatch decisions require current, applicable approved data and appropriately authorized personnel.

Final takeaway

The A350 Trent XWB thrust reverser is best understood as three coordinated systems working at once:

an airflow system that blocks and redirects fan bypass air;
an electro-mechanical system that moves two independent translating cowls;
a control, locking and monitoring system that requires multiple conditions to agree and continuously checks the result.

Once those layers are separated, the architecture becomes much easier to read. Follow the command, identify the lock-release path, trace motor torque through the flexible shafts, watch the cowl position, and then confirm that the final lock and position feedback agree.

That is the learning approach AvioScope is built around: see the system, follow the sequence, and understand the aircraft.

Suggested next lesson

Explore an interactive ETRAS deployment sequence: move from stowed to unlocked, in transit, fully deployed and fully stowed while comparing command, motor, cowl-position and lock feedback.