AGL Component Library By Precision AGL Academy

ALCMS Server

The central computing platform of the Airfield Lighting Control and Monitoring System (ALCMS). It aggregates data from field equipment, executes control logic, stores historical logs, manages alarm events, and provides a secure interface for operators to monitor and control all AGL assets from a single, unified dashboard.

ALCMS Server

Image disclaimer: For identification and illustration only. It may show a product by another manufacturer and may not depict the exact item described; it is not a statement of any product’s quality, approval or performance. Third-party image and trademark rights belong to their owners. See full notice.

Overview

What Is It?

The ALCMS Server (Airfield Lighting Control and Monitoring System Server) is the central computing and data management platform for the entire airfield ground lighting system. It is a high‑reliability industrial server that runs specialised software to communicate with field equipment—CCRs, remote I/O, PLCs, and smart fixtures—over various communication protocols (Ethernet, serial, fibre optic). The server provides a centralised point of control, monitoring, and data logging for all AGL assets across the airfield.

Key characteristics of the ALCMS server include:

  • High Reliability: Designed for 24/7/365 operation in critical infrastructure environments, often with redundant power supplies, RAID storage, and hot‑swappable components.
  • Industrial‑Grade Hardware: Built with industrial‑grade motherboards, processors, and memory that are tested for extended temperature ranges, vibration, and electromagnetic interference.
  • Redundancy: Typically deployed in a primary‑backup or active‑active configuration to ensure uninterrupted operation in the event of a hardware failure.
  • Secure Communication: Supports encrypted communication protocols (e.g., TLS, HTTPS) and role‑based access control (RBAC) to ensure that only authorised personnel can control or modify AGL settings.

Core functions of the ALCMS server include:

  • Data Acquisition: Polling field equipment (CCRs, remote I/O, sensors) for status, current readings, alarm states, and fault conditions.
  • Control Execution: Sending command signals to CCRs for brightness step changes, switching circuits on/off, and controlling stop bars and other field equipment.
  • Alarm Management: Processing and prioritising alarms from field equipment, displaying them on operator workstations, and logging them for historical analysis.
  • Logging and Reporting: Storing historical data on circuit status, current readings, alarm events, and operator actions for compliance, reporting, and trend analysis.
  • User Interface: Serving the operator interface (HMI/SCADA) to workstations, presenting a visual representation of the airfield with real‑time status indicators.

The server is typically installed in a secure equipment room or control tower, connected to the airfield network via redundant fibre optic or Ethernet links. It is maintained by the airfield's IT and engineering teams, with regular backups, patches, and performance monitoring.

Purpose

Purpose & Function

The ALCMS server exists as the single source of truth for the entire airfield lighting system's status, because without centralised data acquisition and control execution, every operator workstation, alarm panel, and remote HMI would need its own independent connection to hundreds of field devices — a fragile, inconsistent, and effectively unmanageable architecture. By consolidating polling, control commands, and historical logging into one authoritative platform, the server ensures every part of the AGL system sees the same, current picture of the field.

Its emphasis on redundancy and 24/7/365 reliability reflects what's actually at stake if it fails: since it's the platform that processes alarms, executes control commands, and serves the operator interface, a server outage doesn't just lose data — it can cut operators off from monitoring and controlling live runway and taxiway lighting, which is why hot-swappable components and active-active configurations are standard rather than optional for this role.

Application

Where Is It Used?

The ALCMS server is used in all airfields that have a modern AGL control and monitoring system, including:

  • International Airports: Managing large‑scale AGL systems with multiple runways, taxiways, and approach lighting systems, often with redundant servers and distributed I/O.
  • Regional Airports: Providing centralised control and monitoring for smaller but still critical AGL systems, often with a single server and a limited number of workstations.
  • Military Air Bases: Supporting mission‑critical AGL operations with enhanced security features and redundant configurations.
  • Heliports: Controlling and monitoring heliport lighting systems, often with a smaller‑scale ALCMS server.
  • Airfield Equipment Shelters: The server may be installed in an airfield equipment shelter near the CCR room, or in the control tower, depending on the architecture.

The server is the core component of the ALCMS architecture, which typically includes:

  • Field Equipment: CCRs, remote I/O modules, PLCs, smart transformers, and sensors.
  • Communication Network: Fibre optic backbone, Ethernet switches, and communication gateways.
  • Operator Workstations: Desktop PCs or thin clients running the ALCMS operator interface.
  • Peripheral Systems: Printers for alarm logging, external displays for status boards, and integration with other airport systems (e.g., ATC, ground handling).

The server is typically specified with high‑availability features, including dual power supplies, RAID 1 or RAID 10 storage, and redundant network interfaces. The software is designed to be fault‑tolerant, with automatic failover to a backup server in the event of a primary server failure.

Placement

Installation & Location

Servers are rack-mounted in the airport's main equipment room or a dedicated ALCMS server room with controlled access, conditioned power (UPS-backed), and adequate cooling for continuous operation, rather than in the operator-facing control room itself. Where the system is configured with redundant servers, the pair is split across separate racks or rooms on independent power feeds so a single electrical or physical fault cannot take down both; network cabling runs to the site's core switches on structured cabling rather than field cable, keeping the server room's cabling entirely separate from the field-device wiring that terminates at PLCs and Remote I/O out at the substations.

Function

How Does It Work?

The ALCMS server functions as the central brain of the airfield lighting system, orchestrating all control, monitoring, and data management activities:

  • Communication Engine: The server runs a communication engine that polls field equipment at configurable intervals (typically 1‑5 seconds). It uses protocols such as IEC 61850, MODBUS, DNP3, or proprietary protocols to communicate with CCRs, remote I/O, and smart fixtures. The engine handles time‑stamping, retries, and error handling to ensure reliable data exchange.
  • Database Management: The server hosts a real‑time database that maintains the current state of all AGL equipment (on/off status, current level, alarm states). This database is continuously updated and serves as the source of truth for operator displays. Historical data is logged to a separate historian database for analysis and reporting.
  • Alarm Processing: The server analyses incoming data for abnormal conditions, such as circuit faults, overcurrent, undercurrent, or communication loss. Alarms are categorised by severity (critical, major, minor) and displayed on operator workstations with clear visual and audible indicators. The server also logs all alarm events for later review.
  • Command Execution: When an operator initiates a control action (e.g., changing brightness level, turning on a runway), the server validates the command (checking permissions, operational constraints), formats it into the appropriate protocol, and transmits it to the target field device. The server then confirms the successful execution and updates the operator interface.
  • User Interface: The server hosts a web‑based or client‑server graphical user interface that is accessed by operator workstations. The interface provides a dynamic, geospatial representation of the airfield, with colour‑coded icons indicating the status of each circuit and fixture. Operators can click on any element to view detailed status, historical data, or to issue commands.
  • Security Management: The server implements role‑based access control (RBAC), allowing different user levels (operator, supervisor, administrator) with different permissions. All user actions are logged for audit purposes. The server also supports encrypted communication (TLS/SSL) to protect against unauthorised access and eavesdropping.

The server is typically deployed in a client‑server architecture, with multiple workstations connecting to the server over the airfield network. In larger airports, a redundant server configuration is used, with a primary server and a hot‑standby backup server that automatically takes over in the event of a failure. The server also includes comprehensive diagnostics and self‑monitoring capabilities, alerting operators if the server itself experiences any issues.

Architecture

System Architecture & Control Logic

The ALCMS server sits at the centre of the control hierarchy, one level above the field controllers and one level below the operator. Upstream, it exchanges real-time status and receives validated commands from PLCs, Remote I/O units, and CCRs, typically reaching them through an Ethernet switch and, where legacy or serial field devices are involved, a Communication Gateway or SCADA Interface performing protocol translation (Modbus, IEC 61850, OPC UA). Downstream, it serves one or more ALCMS Workstations (and Touchscreen HMIs at local panels), pushing map-based status updates and accepting operator commands after validating them against permissions and interlock conditions. Every status change and command is timestamped and written to the historian database, so the server is also the single point where the full operational picture and audit trail come together.

Field Layer

CCRs, PLCs & Remote I/O reporting circuit and fixture status

Network & Protocol Layer

Ethernet Switch, Communication Gateway / SCADA Interface (Modbus, OPC UA, IEC 61850)

ALCMS Server

Validates commands, formats field messages, writes historian records

Operator Layer

ALCMS Workstation(s) & Touchscreen HMIs — display, command entry, alarms

Status flows upward from field devices in real time; commands flow downward only after the server validates permissions and interlocks.
Function

Redundancy & Automatic Failover

Primary Server Operating

Polls CCRs, remote I/O, and smart fixtures every 1–5 seconds

Continuous Self-Monitoring

Server diagnostics track its own hardware and communication health

Primary Healthy
Normal Operation Confirmed

Real-time database stays current for all operator displays

Primary Remains Source of Truth

Command execution and alarm processing continue as normal

Failure Detected
Hardware or Communication Fault

Self-monitoring flags the primary as unavailable

Hot-Standby Backup Takes Over

Automatic switchover; operators alerted, control continues uninterrupted

Airfield Lighting Control Cannot Have a Single Point of Failure — Failover Is Automatic, Not Manual
Construction

Physical Construction

The server is built in a standard 19-inch rack-mount chassis, either 2U or 4U depending on storage and expansion needs, with a steel or aluminium enclosure designed for continuous airflow through front-to-rear cooling fans. Dual hot-swappable power supplies sit in the rear, each independently fed from the facility's redundant UPS circuits so either can fail without interrupting operation, and hot-swap drive bays at the front allow RAID array members to be replaced without powering down the server. Internal cabling and expansion cards (network interfaces, serial adapters, fibre SFP modules) are secured to the chassis rail system per rack-mount convention, and the unit is designed to sit in a temperature- and humidity-controlled equipment room or server rack rather than an outdoor cabinet. Front-panel status LEDs and a local console port allow basic diagnostics without needing to log in remotely, and the chassis is typically secured in the rack with a lockable front bezel to prevent unauthorised access to drive bays and power switches.

Specification

Technical Parameters

ParameterTypical Value
Form Factor2U or 4U rack‑mount server (19" rack)
ProcessorIntel Xeon (dual‑socket), AMD EPYC, or industrial‑grade embedded processor
Memory (RAM)16GB to 128GB ECC RAM
StorageRAID 1 (mirrored) or RAID 10 (mirrored + striped) SSDs or HDDs; 2TB to 20TB capacity
Operating SystemWindows Server (with ALCMS software), Linux (Red Hat, Ubuntu), or real‑time OS (VxWorks, QNX)
Communication Ports2 x 1G Ethernet, 2 x 10G Ethernet (optional), RS‑232/422/485 serial ports (optional), fibre optic SFP slots
Protocols SupportedIEC 61850, MODBUS TCP/RTU, DNP3, SNMP, BACnet, OPC UA, proprietary AGL protocols
Power SupplyRedundant, hot‑swappable power supplies (2 x 500W to 1000W, 1+1 redundant)
RedundancyActive‑standby (hot‑standby) or active‑active (load‑balanced) configurations
Data StorageReal‑time database (in‑memory) plus historian database (disk‑based)
Operating Temperature0°C to 45°C (standard), -20°C to 60°C (industrial‑grade)
Humidity10% to 90% non‑condensing
Regulatory ComplianceFCC, CE, RoHS, IEC 61850, FAA AC 150/5345‑56
Power Supply

Electrical Requirements

RequirementTypical Value
Circuit PositionStandalone mains-powered server, control-room equipment; not part of the series lighting loop
Power SupplyRedundant, hot-swappable power supplies (2 x 500W to 1000W, 1+1 redundant)
IsolationPowered independently of the AGL series circuit; communicates with CCRs via control/data interfaces only
EarthingRack/chassis bonded to control-room earth
Backup PowerUPS/generator backup typical for critical ALCMS installations
Fault ProtectionDual power supplies with automatic failover on loss of one input
Compliance

Applicable Standards

IEC 61850

Communication networks and systems for power utility automation (used for AGL control and monitoring)

FAA AC 150/5345‑56

Specification for L-890 Airport Lighting Control and Monitoring System (ALCMS)

ICAO Annex 14

Requirements for control and monitoring of AGL systems

NIST SP 800‑53

Security and privacy controls for information systems (cybersecurity for critical infrastructure)

Prerequisites

Installation Requirements

Server Room Environment
Civil

Confirm the server room or dedicated ALCMS space has conditioned power, adequate cooling, and controlled access before racks are installed, since continuous operation depends on a stable environment.

Rack Mounting & Redundant Placement
Mechanical

Mount servers in their racks and, where redundant, split the pair across separate racks or rooms on independent power feeds so a single physical fault cannot take down both.

UPS-Backed Power Feed
Electrical

Connect each server to its UPS-backed supply and confirm changeover to battery holds the unit up through a mains interruption before going live.

Structured Network Cabling
Electrical

Run structured cabling from the server to the site's core switches, kept entirely separate from the field-device wiring terminating at PLCs and Remote I/O out at the substations.

Redundancy & Failover Configuration
Documentation

Configure and record the failover behaviour between redundant servers so a documented, tested procedure exists before the system is relied on operationally.

Pre-Commissioning Sign-off
Documentation

Record rack position, power feed, and network cabling as-built, confirming the server room configuration matches the design before commissioning testing begins.

Verification

Testing & Commissioning

Hardware Burn-In & Health Check
Pre-Commissioning

Run an extended hardware diagnostic and burn-in cycle before the server is accepted into service, catching early component failures.

Failover / Redundancy Test
Commissioning

Simulate a primary server failure and confirm automatic failover to the redundant unit with no loss of control.

Field Device Communication Test
Commissioning

Confirm the server establishes and holds communication with every CCR, PLC, and remote I/O point on the network.

UPS & Power Failure Simulation
Commissioning

Simulate a mains power loss and confirm the server rides through on UPS power without data loss.

Database & Data Logging Verification
Commissioning

Confirm event and status data is correctly logged and retrievable from the moment of first power-up.

Time Synchronisation Verification
Commissioning

Confirm the server's clock source (NTP/GPS) is correctly synchronised before go-live.

Operator Workstation & Access Control Test
Final Acceptance

Confirm every operator workstation can log in, view, and control the system per its assigned permission level.

Documentation & As-Built Sign-off
Final Acceptance

Record configuration, IP addressing, and test results in the commissioning dossier for handover.

Upkeep

Inspection & Maintenance

Hardware Health Check
Monthly

Review power supply, disk, memory, and fan diagnostics through server management tools, replacing degraded components before they trigger a failover event.

Failover / Redundancy Test
Quarterly

Manually trigger an active-standby (or active-active) switchover to confirm the backup server takes control cleanly and without data loss.

Database Backup & Integrity Check
Weekly

Verify real-time and historian database backups complete successfully and run integrity checks to catch corruption before it affects historical records.

Security Patch & Antivirus Update
Monthly

Apply vetted OS and application security patches, update antivirus definitions, and review access logs for unauthorised login attempts.

Time Synchronisation Verification
Quarterly

Confirm the server's NTP source and offset remain within tolerance so alarm and event timestamps stay consistent across all field devices.

UPS & Cooling Inspection
Semi-annual

Test UPS battery runtime and load transfer, and check equipment room cooling and airflow to prevent thermal shutdowns.

Software & Firmware Review
Quarterly

Check for ALCMS software and server firmware updates, testing on a staging system before rollout and maintaining a rollback snapshot.

Log & Storage Capacity Review
Monthly

Audit event and historian log growth against available disk capacity, archiving or purging aged data to prevent storage exhaustion.

Field Notes

Common Field Issues

Hardware Failure

Like all servers, the ALCMS server is subject to hardware failures—power supply failure, hard disk failure, or motherboard issues. Always deploy a redundant server configuration (active‑standby) and keep spare parts on hand. Implement regular hardware health checks and monitoring.

Network Connectivity Issues

If the server loses network connectivity to field equipment, it cannot control or monitor the AGL system. Use redundant network paths (dual‑homed servers) and monitor network health. Implement automatic failover to backup network interfaces.

Software Bugs and Updates

ALCMS software can contain bugs that affect performance or reliability. Ensure that the software is properly tested before deployment, and apply patches and updates in a controlled manner. Maintain a fallback version (snapshot or backup) to roll back if needed.

Database Corruption

The real‑time and historian databases can become corrupted due to power loss or software errors. Use a robust database management system (DBMS) with transaction logging, and perform regular backups. Consider using a database replication feature to maintain a copy on the backup server.

Cybersecurity Threats

The ALCMS server is a potential target for cyberattacks. Implement strong access controls, use encrypted communication, regularly update antivirus and security patches, and monitor for unusual activity. Conduct regular security audits and penetration tests.

Time Synchronisation Issues

If the server's clock is not synchronised with field equipment, time‑stamped events (alarms, logs) will be inconsistent. Use a Network Time Protocol (NTP) server to synchronise the system clock across all devices.

Inadequate Cooling and Power

Servers generate significant heat and require clean, stable power. Install the server in a temperature‑controlled equipment room with adequate ventilation and cooling. Use a UPS to protect against power surges and provide backup power during short outages.

Diagnostics

Troubleshooting Guide

Active Server Fails Over to Standby Unexpectedly
Likely Cause
A hardware fault (power supply, disk, or motherboard) on the active server triggered the redundant active-standby configuration to fail over, or the failover was triggered by a network connectivity loss rather than a genuine hardware fault.
Diagnostic Steps
Check the failed-over server's hardware health logs for the fault that triggered failover; verify network connectivity to field equipment was intact at the time of the event to rule out a network-triggered failover.
Corrective Action
Replace the faulted hardware component using spares on hand; once repaired, restore it as standby rather than immediately failing back, to confirm stability first.
Server Cannot Control or Monitor Field Equipment
Likely Cause
Loss of network connectivity between the server and field equipment, either on the primary network path or, if redundant dual-homed paths are fitted, a failure of automatic failover to the backup interface.
Diagnostic Steps
Check network health monitoring for the affected path; confirm whether the automatic failover to the backup network interface actually engaged; test connectivity on both primary and backup paths independently.
Corrective Action
Restore the failed network path; repair the automatic failover mechanism if it did not engage as designed, and re-test failover behaviour before considering the fault closed.
System Behaves Unexpectedly After a Recent Software Update
Likely Cause
A bug introduced in the recent patch or update, applied without adequate pre-deployment testing.
Diagnostic Steps
Correlate the onset of the unexpected behaviour with the update timeline; check release notes for known issues in the applied version.
Corrective Action
Roll back to the maintained fallback version (snapshot or backup) if the bug is confirmed; escalate to the software vendor and re-test thoroughly before reapplying the update in a controlled window.
Historical Data Missing, Corrupted, or Inconsistent
Likely Cause
Real-time or historian database corruption caused by an unexpected power loss or a software error during a write operation.
Diagnostic Steps
Check database transaction logs for errors around the time the corruption is first noticed; confirm whether a power event coincided with the issue; check the status of database replication to the backup server.
Corrective Action
Restore from the most recent verified backup or replicated copy on the backup server; investigate and correct the underlying cause (power protection, software fix) to prevent recurrence.
Alarm and Log Timestamps Don't Match Across Devices
Likely Cause
The server's clock has drifted out of synchronisation with field equipment, most likely due to an NTP server fault or a device that has stopped syncing to it.
Diagnostic Steps
Check NTP server status and reachability from the ALCMS server and affected field devices; compare current system clock against a reliable time source to quantify the drift.
Corrective Action
Restore NTP synchronisation for the affected device(s); if the NTP server itself has failed, repair or replace it and re-verify synchronisation across all connected devices.
Server Performance Degrading or Unexpected Shutdowns
Likely Cause
Inadequate cooling or ventilation in the equipment room causing thermal throttling or protective shutdown, or an unstable power supply triggering resets.
Diagnostic Steps
Check equipment room temperature against the server's rated operating range; review UPS logs for power events coinciding with the performance issue or shutdowns.
Corrective Action
Restore proper ventilation/cooling in the equipment room; repair or upsize the UPS if power instability is confirmed as the trigger.
Reliability

Failure Modes & Root Causes

Redundant Server Failover
High Severity
Root Cause
A hardware fault (power supply, disk, or motherboard) on the active server, or a network connectivity loss misinterpreted as a hardware fault, triggers failover.
Effect
Standby server takes over control unexpectedly, and the faulted server remains out of service until repaired.
Detection Method
Hardware health log review on the failed-over server, and verification of network connectivity status at the time of the event.
Field Network Path Failure
High Severity
Root Cause
Loss of network connectivity between the server and field equipment on the primary path, or a failure of automatic failover to a redundant backup interface.
Effect
Server loses the ability to control or monitor field equipment, potentially across a wide area of the airfield.
Detection Method
Network health monitoring review for the affected path, and independent connectivity testing on both primary and backup paths.
Software Update Regression
Medium Severity
Root Cause
A bug introduced in a recent patch or update applied without adequate pre-deployment testing.
Effect
System behaves unexpectedly following the update, potentially affecting control accuracy or system stability.
Detection Method
Correlation of the unexpected behaviour's onset with the update timeline, and review of release notes for known issues.
Database Corruption
High Severity
Root Cause
Real-time or historian database corruption caused by unexpected power loss or a software error during a write operation.
Effect
Historical data goes missing, corrupted, or inconsistent, undermining trend analysis and compliance records.
Detection Method
Database transaction log review for errors, correlation with power events, and a check of replication status to the backup server.
Clock Synchronisation Fault
Low Severity
Root Cause
Server clock drifting out of synchronisation with field equipment due to an NTP server fault or a device that has stopped syncing.
Effect
Alarm and log timestamps no longer match across devices, complicating incident investigation and correlation.
Detection Method
NTP server status and reachability check, and comparison of the current system clock against a reliable time source.
Environmental / Power Instability
Medium Severity
Root Cause
Inadequate cooling or ventilation in the equipment room causing thermal throttling, or an unstable power supply triggering resets.
Effect
Server performance degrades or the server shuts down unexpectedly, risking a loss of ALCMS functionality.
Detection Method
Equipment room temperature check against the server's rated operating range, and UPS log review for coinciding power events.
Precautions

Safety & Operational Notes

Isolate Both Redundant Power Supplies
Electrical Safety

The server's redundant, hot-swappable power supplies are designed to keep it running through a single-input failure; before internal work, isolate and lock out both inputs independently and verify zero energy, since disconnecting only one leaves the unit live.

UPS-Backed Output May Stay Live
Electrical Safety

Where the server's supply is UPS-backed, isolating the mains feed to the UPS does not necessarily de-energise the server; confirm the UPS output itself is isolated or the server is cleanly shut down before disconnecting power cabling.

ESD-Sensitive Electronics
Operational

Use anti-static precautions when handling internal boards, drives, or memory modules.

Data Integrity Before Shutdown
Operational

Perform an orderly shutdown of the ALCMS software and confirm any active database transactions or logs are safely committed before removing power, to avoid corrupting the airfield's historical lighting/fault records.

Access Control for Configuration Changes
Compliance

Make configuration or software changes only under an authorised change-control process, since the server is the central point of control for CCRs, remote I/O, and smart fixtures across the airfield.

Restore to Compliant State
Compliance

Confirm the server re-establishes communication with all connected field devices and that alarm/logging functions are operating correctly before closing out the work.

Field Insight

Engineering & Expert Notes

Test Failover on a Schedule, Not Just at Commissioning
Reliability

A hot-standby server pair that failed over perfectly at commissioning can silently lose that capability months later if the standby's software drifts out of sync with the primary through unmirrored patches or config changes. Run a real, scheduled failover test rather than trusting a "standby healthy" status light, since the status check itself may not exercise the actual cutover logic.

Verify Backups Restore, Not Just Complete
Data Integrity

A backup job that reports success only confirms the write completed, not that the resulting file is a usable database. Periodically perform an actual restore-and-verify onto a test instance; a corrupted backup that's gone unnoticed for months is far worse than no backup, because it creates false confidence.

Time Sync Faults Look Like Data Faults
Troubleshooting

When the server's time reference drifts, alarm sequences and event logs can appear to arrive out of order or duplicate, which technicians often misdiagnose as a field-device or database problem. Check NTP/time-sync health early in any troubleshooting sequence involving odd event ordering, before chasing the field layer.

Patch Management Needs a Rollback Plan, Not Just a Schedule
Cybersecurity

Applying security patches to a live ALCMS server without a tested rollback path risks trading a theoretical vulnerability for an actual outage if a patch conflicts with the control software. Always validate patches on a non-production instance first and keep a known-good snapshot ready before touching the production server.

Watch Log Growth as a Leading Indicator
Capacity Planning

Steadily rising event-log or database growth often signals a chattering field device (a fixture or CCR flapping between states) well before that device causes a visible operational problem. Trend storage consumption over time and investigate the source of any unexplained increase rather than simply expanding storage capacity.

Dual-Homed Doesn't Mean Automatically Redundant
Networking

A server with two network interfaces only gains real redundancy if both paths actually terminate on physically independent switches and, ideally, separate power feeds; two NICs cabled into the same switch just moves the single point of failure one hop downstream. Verify the physical diversity of both paths during design review, not just the server's NIC count.

Quick Answers

Frequently Asked Questions

Short answers about the ALCMS Server: what it is, how it works, typical specifications, standards, maintenance and common faults.

Q1What is an ALCMS Server?

The ALCMS Server (Airfield Lighting Control and Monitoring System Server) is the central computing and data management platform for the entire airfield ground lighting system. It is a high‑reliability industrial server that runs specialised software to communicate with field equipment—CCRs, remote I/O, PLCs, and smart fixtures—over various communication protocols (Ethernet, serial, fibre optic). The server provides a centralised point of control, monitoring, and data logging for all AGL assets across the airfield.

Q2What is the purpose of an ALCMS Server?

The ALCMS server exists as the single source of truth for the entire airfield lighting system's status, because without centralised data acquisition and control execution, every operator workstation, alarm panel, and remote HMI would need its own independent connection to hundreds of field devices — a fragile, inconsistent, and effectively unmanageable architecture. By consolidating polling, control commands, and historical logging into one authoritative platform, the server ensures every part of the AGL system sees the same, current picture of the field.

Q3Where is an ALCMS Server used and installed?

The ALCMS server is used in all airfields that have a modern AGL control and monitoring system, including: International Airports: Managing large‑scale AGL systems with multiple runways, taxiways, and approach lighting systems, often with redundant servers and distributed I/O. Regional Airports: Providing centralised control and monitoring for smaller but still critical AGL systems, often with a single server and a limited number of workstations. Military Air Bases: Supporting mission‑critical AGL operations with enhanced security features and redundant configurations.

Q4How does an ALCMS Server work?

The ALCMS server functions as the central brain of the airfield lighting system, orchestrating all control, monitoring, and data management activities: Communication Engine: The server runs a communication engine that polls field equipment at configurable intervals (typically 1‑5 seconds). It uses protocols such as IEC 61850, MODBUS, DNP3, or proprietary protocols to communicate with CCRs, remote I/O, and smart fixtures. The engine handles time‑stamping, retries, and error handling to ensure reliable data exchange.

Q5What are the typical technical parameters of an ALCMS Server?

Typical values are — Form Factor: 2U or 4U rack‑mount server (19" rack); Processor: Intel Xeon (dual‑socket), AMD EPYC, or industrial‑grade embedded processor; Memory (RAM): 16GB to 128GB ECC RAM; Storage: RAID 1 (mirrored) or RAID 10 (mirrored + striped) SSDs or HDDs; 2TB to 20TB capacity; Operating System: Windows Server (with ALCMS software), Linux (Red Hat, Ubuntu), or real‑time OS (VxWorks, QNX); Communication Ports: 2 x 1G Ethernet, 2 x 10G Ethernet (optional), RS‑232/422/485 serial ports (optional), fibre optic SFP slots; Protocols Supported: IEC 61850, MODBUS TCP/RTU, DNP3, SNMP, BACnet, OPC UA, proprietary AGL protocols.

Q6What are the electrical requirements for an ALCMS Server?

Typical requirements are — Circuit Position: Standalone mains-powered server, control-room equipment; not part of the series lighting loop; Power Supply: Redundant, hot-swappable power supplies (2 x 500W to 1000W, 1+1 redundant); Isolation: Powered independently of the AGL series circuit; communicates with CCRs via control/data interfaces only; Earthing: Rack/chassis bonded to control-room earth; Backup Power: UPS/generator backup typical for critical ALCMS installations; Fault Protection: Dual power supplies with automatic failover on loss of one input.

Q7Which standards apply to an ALCMS Server?

The main references are IEC 61850 — Communication networks and systems for power utility automation (used for AGL control and monitoring); FAA AC 150/5345‑56 — Specification for L-890 Airport Lighting Control and Monitoring System (ALCMS); ICAO Annex 14 — Requirements for control and monitoring of AGL systems; NIST SP 800‑53 — Security and privacy controls for information systems (cybersecurity for critical infrastructure). Always verify the current edition and your aerodrome's approved requirements.

Q8How often should an ALCMS Server be inspected and maintained?

Typical maintenance tasks and intervals are: Hardware Health Check (monthly); Failover / Redundancy Test (quarterly); Database Backup & Integrity Check (weekly); Security Patch & Antivirus Update (monthly); Time Synchronisation Verification (quarterly); UPS & Cooling Inspection (semi-annual); Software & Firmware Review (quarterly); Log & Storage Capacity Review (monthly). Your airport's approved maintenance programme takes precedence.

Q9How do I troubleshoot common ALCMS Server faults?

Common symptoms covered are: Active Server Fails Over to Standby Unexpectedly; Server Cannot Control or Monitor Field Equipment; System Behaves Unexpectedly After a Recent Software Update; Historical Data Missing, Corrupted, or Inconsistent; Alarm and Log Timestamps Don't Match Across Devices; Server Performance Degrading or Unexpected Shutdowns. For example, for "Active Server Fails Over to Standby Unexpectedly": Likely Cause: A hardware fault (power supply, disk, or motherboard) on the active server triggered the redundant active-standby configuration to fail over, or the failover was triggered by a network connectivity loss rather than a genuine hardware fault. Diagnostic Steps: Check the failed-over server's hardware health logs for the fault that triggered failover; verify network connectivity to field equipment was intact at the time of the event to rule out a network-triggered failover. Corrective Action: Replace the faulted hardware component using spares on hand; once repaired, restore it as standby rather than immediately failing back, to confirm stability first.

Go Further

Go Beyond the Component. Understand the Complete AGL System.

You have explored the component. Now understand how it works within the complete Airfield Ground Lighting system.

Learn AGL from fundamentals to design, installation, testing, photometry, commissioning, maintenance and troubleshooting through structured technical training at Precision AGL Academy.

Build practical knowledge. Understand the circuit. Read the standards. Troubleshoot with confidence.

Your next step in AGL starts here.

The Learning Pathway
Learn Understand Design Test Maintain Document Apply Certify

Need expert guidance on ALCMS server selection, configuration, or redundancy planning for your airfield?

Precision AGL Academy provides advice on server sizing, redundancy architectures, cybersecurity, and integration with existing AGL systems.