Degraded situations (DEG)
European Railway Agency
ETCS Driver's handbook

Degraded situations (DEG)

DEG.UNSManaging route unsuitability (UNS)

DEG.UNS-[L12].1Route suitability data defines which values concerning loading gauge, traction system and axle load category a train must meet to be allowed to enter the route.

The driver is always informed about any route unsuitability.

If at least one unsuitability exits, the closest location corresponding to the unsuitability(ies) is considered as both the EOA and SvL, with no Release Speed.

If the train overpasses the location of a route suitability where incompatibility occurs the train is tripped (see section TR - Trip / Post Trip (TR)).

DEG.UNS-[L12.N].1The driver is informed that a route unsuitability has been detected when any of the following message is displayed in area E:

“Route unsuitable - loading gauge”
“Route unsuitable - traction system”
“Route unsuitable – axle load category”

In this situation, the driver shall stop the train using service brake and inform the signaller and follow any instructions given.

DEG.TRKManaging a trackside malfunction (TRK)

DEG.TRK-[L12].1The driver shall inform the signaller about the situation when the following text message is displayed in area E: “Trackside malfunction”.

DEG.TRK.1The infrastructure manager shall determine whether the failure of trackside equipment (including catenary) affects the safe and/or effective operation of trains.

DEG.VERManaging incompatibility system version (VER)

DEG.VER-[L12.N].1When the following text message is displayed in area E: “Trackside not compatible”, the train cannot continue in ETCS. The driver shall inform the signaller about the situation, and follow the steps in TR.MSR - Immediate measures (MSR).

DEG.BLSManaging a balise read error (BLS)

DEG.BLS-[L12].1If a Balise read error leads to a train trip or a service brake application, the following text message is displayed in area E: “Balise read error”.

  1. If the train is tripped as a result of the balise read error, the driver shall follow the Trip procedure described in section TR - Trip / Post Trip (TR)).
  2. If the brakes are trigged by the ETCS on-board (the train is not tripped) as a result of the data consistency problem with the expected balise group, the driver shall inform the signaller about the situation.

In the case that no new MA is received, when the train has come to a standstill, the driver cannot pass the EOA until the signaller authorises it, see section OVR - Authorising the passing of an EOA (OVR).

DEG.BLS-[L12.N].1If the message “Balise read error” is repeated and the service brake is applied, the driver and the signaller shall apply non-harmonised rules.

DEG.BLS-[L12].2Several events can lead to a trigger of a Balise read error, such as:

  1. A balise is missed inside the group.
  2. A balise is detected, but no telegram is decoded (e.g. wrong CRC).
  3. Message counters do not match.

DEG.BLS-[L12].3Events related to inconsistency of balise telegrams that NEVER trigger a Balise read error can be (list not exhaustive)

  1. the balise missed, or not decoded, is duplicated within the balise group, the duplicating one is correctly read and contains:
    • directional information while the orientation of the balise group can still be evaluated, or
    • only information valid for both directions, or
    • neither directional information nor information valid for both directions, or
    • only data to be used by applications outside ERTMS/ETCS, or
    • only data to be used by applications outside ERTMS/ETCS together with other information valid for both directions.
  2. the telegram is correctly read from another balise of the group contains the information "Inhibition of balise group message consistency reaction"
  3. the trackside has announced in previous linking information that there should be no reaction in case of message inconsistency

DEG.BMMManaging a balise transmission malfunction (BMM)

DEG.BMM-[V].1The driver may hear an alarm reporting a malfunction for the ETCS on-board balise transmission function when there is a big metal object in the track exceeding the limits for big metal masses. If the alarm persists, a safety reaction from the ETCS on-board is triggered.

Train specific clauses indicating how to notify if there is a big metal object in the track exceeding the limits for big metal masses and what is the ETCS on-board reaction.

DEG.SMAManaging MA shortening (SMA)

DEG.SMA.1The MA can be shortened for different reasons, e.g. for exceeding the time marked by a timer or receiving emergency messages.

The driver is always informed about the MA shortening through the DMI. The driver must always observe the information displayed on the DMI and react as required by the operating rules.

DEG.SMA-[B3M1.L23].1The message “Emergency stop” is displayed in area E, when an emergency stop(s) have been accepted and is not yet revoked.

DEG.SMA-[L12.N].1When non-harmonised rules stipulate that a train has to be at a standstill to change existing arrangements, the signaller shall order the driver to remain at a standstill by means of European Instruction 3. The European Instruction 3 or other available means and to delete any MA remaining on-board if required.

To restart the trains the signaller shall:

  1. issue an authorisation for ERTMS train movement,
  2. revoke European Instruction 3 if one has been issued.

DEG.TRTransition to Trip mode (TR)

DEG.TR.1When a transition to Trip (TR) mode is triggered, a message with the TR condition is displayed. The driver shall follow the steps explained in the section TR - Trip / Post Trip (TR).

  1. The text message “Balise read error” is displayed when the train Trip is triggered because the expected balise is not read.
  2. The text message “Communication error” is displayed when the train Trip is triggered because no safe radio message has been received in due time.
  3. The text message “SH refused” is displayed when the train Trip is triggered due to the driver’s selection of Shunting mode when there is an ongoing National Trip procedure reported by the STM.
  4. The text message “Trackside not compatible” is displayed when the train Trip is triggered due to incompatibility with the system version.
  5. The text message “Unauthorized passing of EOA/LOA” is displayed when the train Trip is triggered because the train overpasses the EOA/LOA or receives a trip order and the override is not active.
  6. The text message “No MA received at level transition” is displayed when the train Trip is triggered due to ETCS level transition to ETCS level 1 or 2 but no MA is accepted.
  7. The text message “SR distance exceeded” is displayed when the train Trip is triggered because the SR distance is overpassed.
  8. The text message “SH stop order” is displayed when the train Trip is triggered due to the reception of Stop if in Shunting information from the trackside and the override is not active.
  9. The text message “SR stop order” is displayed when the train Trip is triggered due to the reception of Stop if in SR information from the trackside and the override is not active.
  10. The text message “Emergency stop” is displayed when the train Trip is triggered due to emergency stop message received from the trackside.
  11. The text message “No track description” is displayed when the train Trip is triggered due to lack of speed restrictions and gradients stored on-board.
  12. The text message “[name of NTC] brake demand” is displayed when the train Trip is triggered due to change of level from NTC when there is an ongoing National Trip procedure reported by the STM.

DEG.TR.2To restart the trains, the signaller shall:

  1. decide if it is possible to authorise train movement,
  2. decide if instructions and / or restrictions for train movement are necessary,
  3. revoke the emergency stop order if one has been issued,
  4. revoke European Instruction 3 if one has been issued
  5. give authorisation to the drivers to restart.

DEG.LTRManaging a failed level transition (LRT)

DEG.LTR-[L12.N].1The driver may be informed about a level transition point with the trackside marker board indicated in the Figure DEG.LTR-[L12.N].F1.

Figure DEG.LTR-[L12.N].F1: Trackside marker of level transition point

DEG.LTR-[L12.N].2If a level transition has failed and the train has been tripped, the driver and the signaller shall take measures in response of a trip explained in the section TR - Trip / Post Trip (TR).

After selecting the Start button in the Main window of the DMI and before restarting the train, the driver shall:

  1. Check the correct ETCS level to be selected,
  2. Change the ETCS level if necessary (See section LTR.TRS.DRV Level transition initiated by driver (DRV)).

In case the ETCS level to be selected is not available, the driver and the signaller shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE).

DEG.LTR-[L12.N].3If a level transition has failed and the mode is SR, before restarting the train, the driver shall:

  1. Stop the train,
  2. Inform the signaller about the situation,
  3. When at a standstill, check the correct ETCS level to be selected,
  4. Change the ETCS level (See section LTR.TRS.DRV Level transition initiated by driver (DRV)).

In case the ETCS level to be selected is not available on-board, the driver and signaller shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE).

DEG.LTR-[L12.N].4In all other cases when a level transition fails, before restarting the train the driver shall:

  1. Inform the signaller about the situation,
  2. When at a standstill, check the correct ETCS level to be selected,
  3. Change the ETCS level (See section LTR.TRS.DRV Level transition initiated by driver (DRV)) and then restart the train.

In case the ETCS level to be selected is not available on-board, the driver and signaller shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE).

DEG.MDTManaging an absence of mode transition (MDT)

DEG.MDT-[N].1Network specific clauses indicating how to manage an absence of the mode transition.

DEG.RBCManaging absence of RBC information (RBC)

DEG.RBC-[L2.N].1When there is no RBC information received in an area not identified as a radio hole for a time greater than the one set by national value, one of the following reactions is applied:

  1. Train Trip
  2. Service brake application
  3. No reaction.

When the train is tripped or the service brake is applied for this reason, the text message “Communication error” is displayed.

  1. If the train is tripped, the driver shall follow the steps explained in the section TR - Trip / Post Trip (TR).
  2. If the brakes are triggered by the ETCS on-board (the train is not tripped) and the following text message is displayed: “Communication error”, the driver shall inform the signaller about the situation when at a standstill.

    The brake command is released at standstill or if a new consistent message has been received from the RBC.
    If no new MA is received when the train has come to a standstill, a MA shortening to the current train position is applied. The driver cannot pass the EOA until authorised to do so by the signaller (see section OVR.RUL Rules to pass an EOA (RUL)).

DEG.COMManaging a radio communication failure (COM)

DEG.COM.1The driver is always informed about the status of the radio connection; no connection, connection lost/set-up failed and connection up, with the following symbols on the DMI:

  1. Connection lost/Set-Up failed (ST04, located in area E1).

    ST04: Safe radio connection Connection Lost/Set-Up failed

  2. Connection up (ST03, located in area E1).

    ST03: Safe radio connection Connection up

  3. No connection.

    The No connection status has no associated symbol. The driver is informed that there is not connection when there is no symbol displayed.

DEG.COM.2When a radio communication failure occurs and the symbol ST04 is displayed, the driver shall check the ETCS level, the radio network identification, the RBC identification / phone number, and correct them if necessary.

If the radio communication with the RBC still cannot be established, the driver shall inform the signaller.

DEG.COM-[L2.N].1If in ETCS level 2 preparing a movement, the train unit has to move in SH and a radio communication failure occurs, the driver and the signaller shall apply non-harmonised rules.

DEG.COM-[L2.N].2If in ETCS level 2 preparing a tandem movement when a radio communication failure occurs, the driver of the Non-Leading engine shall inform the driver of the leading engine about the radio communication failure. Both drivers shall apply internal RU rules.

DEG.COM.3In all other cases the signaller shall authorise the driver to pass the EOA following the procedure explained in the section OVR.RUL Rules to pass an EOA (RUL).

DEG.TSTManaging a failure of self test (TST)

DEG.TST-[N].1When there is a failure of self test and the information about the failure is shown to the driver, the driver shall switch off the ETCS on-board equipment (see section OFF.PWR Power off the ETCS on-board (PWR)) and then switch it on again (see section NP.ON Power on the ETCS on-board (ON). This will trigger a new self test.

If a failure of self test is shown again, the driver shall inform the signaller about the situation.

The driver shall request a change of traction unit.

The driver and the signaller shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE) in the case that the traction unit must be moved.

DEG.RADManaging a failure affecting the on-board radio equipment (RAD)

DEG.RAD.1When a failure of the on-board radio equipment is detected, the driver shall inform the signaller about the situation.

DEG.RAD-[L2.N].1If this occurs in ETCS level 2 during the preparation of the traction unit, the driver shall request a change of traction unit.

In the case that the traction unit must be moved, the driver shall inform the signaller, apply RU rules and any instruction given by the signaller.

In the case that the traction unit need not be moved, the driver shall switch off the ETCS on-board equipment (see section OFF.PWR Power off the ETCS on-board (PWR)).

DEG.RAD-[L12.N].1If the failure occurs while the train is running in ETCS level 1 with infill function by radio or ETCS level 2, the driver and the signaller shall shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE) unless another DMI as available on the dest.

DEG.DMIManaging a DMI with blank screen (DMI)

DEG.DMI-[N].1 Every time that the DMI fails and shows a blank screen, the driver and the signaller shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE).

DEG.NTCManaging a NTC failure (NTC)

DEG.NTC-[V].1When the following text message is displayed: “[name of NTC] failed” in the DMI, the driver shall:

  1. Acknowledge the message AND,
  2. Apply non-harmonised rules.

DEG.NTC-[L0N1.T.V].1To acknowledge the text message, the driver shall press the text message itself as indicated in the Figure DEG.NTC-[L0N1.T.V].F1. It is shown with a flashing frame.

Figure DEG.NTC-[L0N1.T.V].F1: Acknowledgement of the “[name of NTC] failed” system status message (touch screen technology)

DEG.NTC-[L2.T.V].1To acknowledge the text message, the driver shall press the text message itself as indicated in the Figure DEG.NTC-[L2.T.V].F1. It is shown with a flashing frame.

Figure DEG.NTC-[L2.T.V].F1: Acknowledgement of the “[name of NTC] failed” system status message (touch screen technology)

DEG.NTC-[L0N1.S.V].1To acknowledge the text message, the driver shall press the button associated to the text message as indicated in the Figure DEG.NTC-[L0N1.S.V].F1. This Ack button is shown with a flashing frame.

Figure DEG.NTC-[L0N1.S.V].F1: Acknowledgement of the “[name of NTC] failed” system status message (soft key technology)

DEG.NTC-[L2.S.V].1To acknowledge the text message, the driver shall press the button associated to the text message as indicated in the Figure DEG.NTC-[L2.S.V].F1. This Ack button is shown with a flashing frame.

Figure DEG.NTC-[L2.S.V].F1: Acknowledgement of the “[name of NTC] failed” system status message (soft key technology)

DEG.ATOManaging a failure of ATO (ATO)

DEG.ATO-[2230].1The ATO-OB shall enter the FA (Failure) State in case of a fault which does not allow performing ATO functions (e.g. failure of ATO self-tests, communication timeout between the ATO-OB and the ETCS-OB, ...). The DMI shall display the "ATO Failure" indication and no other ATO-related indication.

ATO05: ATO status “ATO Failure”

If possible, the ATO-OB should try to request the ETCS-OB to produce a warning sound for a duration of 5 seconds.

Transitions to FA State shall be reported by the ATO-OB to the ATO-TS and the driver (if it is still possible) and recorded on-board.

DEG.ATO-[2230].2In FA State, the driver has the responsibility to execute the operational procedures defined by supplier and Railway Undertakings.

DEG.ATO-[2230].3If the train is in AD mode when the ETCS-OB considers the connection with the ATO-OB as “not active”, it will change from AD Mode to the applicable ETCS Mode.

DEG.ATO-[2230].4Specific ATO Data can be or become invalid, for example because the ATO-OB detects that the validity of the Specific ATO Data may have been affected. The conditions to detect that the validity of the Specific ATO Data may have been affected are supplier specific, e.g. the ETCS Train Data has changed from sources different from the driver and this change impacts the validity status of the Specific ATO Data.

DEG.ATO-[2230].5The driver is informed of the invalidity of ATO specific data when the DMI displays the text message “ATO needs data” in area E while the train is in FS, AD, LS, SR, OS, UN, TR, PT or SN mode. The driver may re-enter ATO Specific data by initiating the Train Data Entry procedure as indicated in OTH.DAT.MAN Manual change of train data (MAN).

DEG.LIGManaging a failure of lights (LIG)

DEG.LIG.1If the driver is not able to display any front end light during good visibility:

The driver shall inform the signaller about the failure. The train shall proceed at the maximum permitted speed to the nearest location where the front end light may be repaired/replaced or the affected vehicle replaced. When proceeding, the driver shall use the train audible warning device as necessary or as instructed by the signaller.

DEG.LIG.2If the driver is not able to display any front end light during darkness or poor visibility:

The driver shall inform the signaller about the failure. As long as a portable front end light displaying a white light is fitted on the front of the train, the train shall proceed at the maximum allowable speed for that failure to the nearest location where the front end light may be repaired/replaced or the affected vehicle replaced.

If a portable front end light is not available, the train shall not proceed, unless formal instructions are given by the signaller to continue to the nearest suitable location to where the line may be cleared.

When proceeding, the driver shall use the train audible warning device as necessary or as instructed by the signaller.

DEG.LIG.3If the signaller becomes aware of the complete failure of the train rear end signal, the signaller shall make arrangements to stop the train in an appropriate location and inform the driver.

The driver shall then check the completeness of the train and if necessary, repair/replace the train rear end signal.

The driver shall report to the signaller that the train is ready to proceed. Otherwise, if the repair is not possible, the train may not proceed, unless special arrangements are made between signaller and driver.

DEG.AUDManaging a failure of the audible warning device (AUD)

DEG.AUD.1If the audible warning device fails, the driver shall inform the signaller about the failure. The train shall not exceed the permitted speed in the event of the failure of an audible warning device, and shall proceed to the nearest location where the audible warning device may be repaired or the affected vehicle replaced. The driver shall be prepared to stop before passing over any level crossing where the audible warning device is required to be sounded and then proceed over the level crossing only when it is safe to do so. If a multi-tone audible warning device is defective but at least one tone is functioning, the train may proceed normally.

DEG.LXManaging a failure of the level crossing (LX)

DEG.LX.1When a technical failure affecting safety of running trains over a level crossing has been detected and as long as the safe operation has not been restored, the normal passing of trains over the level crossing shall be prevented.

DEG.LX.2Where the nature of the failure permits train movements to continue, the driver of each train shall be authorised to continue and to pass over the level crossing.

After being instructed to pass over the level crossing with a failure, the driver shall pass the level crossing as instructed. If the level crossing becomes obstructed the driver shall take all possible measures necessary to stop.

When approaching the level crossing, the driver shall use the audible warning device when necessary or when formal instructions have been given by the signaller. If the level crossing is clear, the driver shall proceed and accelerate the train as soon as the front of the train has passed clear the level crossing.

DEG.VOIManaging a failure of the voice radio communication (VOI)

DEG.VOI.1In case of on board radio failure a train shall not be permitted to start a service on lines where a radio is required.

DEG.VOI.2If the driver becomes aware that the primary voice radio communication is failed, the driver shall inform the signaller as soon as practicable using any available means.

The driver shall then apply the instructions by the signaller concerning the further movement of the train.

A train with a failed voice radio communication may:

  1. continue its service if another means of communication is provided between the train driver and the signaller; or
  2. proceed to the nearest location where the radio may be repaired or the affected vehicle replaced if another means of voice communication is not provided between the driver and the signaller.

DEG.AFTManaging an assistance to a failed train (AFT)

DEG.AFT.1If the driver becomes aware that the primary voice radio communication is failed, the driver shall inform the signaller as soon as practicable using any available means.

The driver shall then apply the instructions by the signaller concerning the further movement of the train.

A train with a failed voice radio communication may:

  1. continue its service if another means of communication is provided between the train driver and the signaller; or
  2. proceed to the nearest location where the radio may be repaired or the affected vehicle replaced if another means of voice communication is not provided between the driver and the signaller.

DEG.SIGManaging anomalies in lineside signalling (SIG)

DEG.SIG.1When receiving an emergency call the driver shall assume that there is a dangerous situation and perform all actions necessary in order to avoid or reduce the effect of this situation.

In addition, the driver shall:

  1. immediately reduce the speed of the train to the appropriate speed for running on sight; and
  2. run on sight unless otherwise instructed by the signaller; and
  3. obey the instructions given by the signaller.

Drivers that have been ordered to stop shall not restart without authorisation from the signaller. Other drivers shall continue running on sight until the signaller informs them that running on sight is no longer necessary.

Anyone who receives an emergency call shall listen, not intervene in the communication that is in progress except to provide elements relevant to the context.

DEG.EMRManaging the reception of an emergency call (EMR)

DEG.EMR.1When receiving an emergency call the driver shall assume that there is a dangerous situation and perform all actions necessary in order to avoid or reduce the effect of this situation.

In addition, the driver shall:

  1. immediately reduce the speed of the train to the appropriate speed for running on sight; and
  2. run on sight unless otherwise instructed by the signaller; and
  3. obey the instructions given by the signaller.

Drivers that have been ordered to stop shall not restart without authorisation from the signaller. Other drivers shall continue running on sight until the signaller informs them that running on sight is no longer necessary.

Anyone who receives an emergency call shall listen, not intervene in the communication that is in progress except to provide elements relevant to the context.

DEG.DANManaging a situation of danger to trains (DAN)

DEG.DAN.1Any railway undertaking/infrastructure manager staff who becomes aware of a danger to trains shall take immediate action to stop any trains which may be affected, alert the signaller and take any other action as necessary to avoid harm or loss, and in particular:

  1. Any driver made aware of a danger to their train shall stop as soon as it is safe to do so and alert the signaller immediately to the danger using the emergency call.
  2. Any signaller made aware of a danger shall alert all drivers as appropriate through an emergency call or using any other available means.

DEG.OBEManaging the failure of an onboard equipment (OBE)

DEG.OBE.1In the case of on-board failures that affect the running of the train, the railway undertaking gives the necessary information to the driver and/or train crew of what action to take

If the driver becomes aware of a failure of any on-board equipment that affects the running of the train, the driver must:

  1. inform the signaller of the situation, the location and the restrictions on the train should the train be allowed to continue its mission,
  2. not commence or recommence the mission until permission to do so has been granted by the signaller.

If the signaller gives permission for the train to start or continue its mission, then the driver proceeds in accordance with the restrictions placed upon the train.

If the signaller does not give permission for the train to commence or recommence its mission, then the driver shall follow the instructions given by the signaller.

DEG.UTSManaging the unintentional train separation (UTS)

DEG.UTS.1In case of unintentional train separation in movement, the two parts of the train are immediately brought to a standstill.

DEG.ALMManaging anomalies in the passenger alarm (ALM)

DEG.ALM.1Units shall be fitted with a device which allows authorised staff to isolate the passenger alarm system.

If the passenger alarm system is not functioning, either after intentional isolation by staff, due to a technical failure, or by coupling the unit with a non-compatible unit, this is permanently indicated to the driver in the active driver's cab, and application of the passenger alarm then results in a direct application of brakes.

DEG.TIMManaging a failure of the Train Integrity Monitoring System (TIM)

DEG.TIM-[L2.V].1When the train preparer or driver of a train scheduled to run or running in an ETCS level 2 area where train integrity has to be confirmed becomes aware that the TIMS has failed, train preparer or driver shall apply shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE).

DEG.ODOManaging the failure of the odometry equipment (ODO)

DEG.ODO-[B41].1The on-board systems perform checks at fixed distance intervals to evaluate if any of the accumulated underestimation/overestimation in measuring the movements over the defined total distance travelled exceeds the predefined impairment threshold. If that is the case, the ERTMS/ETCS on-board equipment shall consider the odometer performance impaired and as long as the odometer performance is considered as impaired, the following text message is displayed in area E: "Odometer impaired".

DEG.ODO.1In case of failure of the odometry system, the driver shall follow the steps in DEG.OBE Managing the failure of an onboard equipment (OBE).

DEG.ODO-[B41].2Once the odometer performance is impaired, the ERTMS/ETCS on-board equipment shall continue to consider the odometer performance as impaired until the train has travelled the defined total distance with both the accumulated underestimation and overestimation in measuring the movements being continuously below the "accuracy of distances measured on-board".

DEG.ODO-[B41].3When performing the check at fixed distance intervals, if any of the accumulated underestimation/overestimation in measuring the movements over the defined total distance travelled exceeds the predefined safety threshold, the ERTMS/ETCS on-board equipment shall switch to mode System Failure, see section SF - System Failure (SF).

DEG.OCCManaging an unplanned entry into an occupied track section (OCC)

DEG.OCC.1In case of an unplanned entry into an occupied track section, the signaller shall, before authorising the entry to the occupied track section, ensure that the involved drivers are informed of the circumstances. The signaller shall, before authorising the entry to the occupied track section, obtain confirmation that the occupying train or vehicles will not move towards the train entering the occupied track section.