European Railway Agency
ETCS Driver's handbook

Introduction (INT)

INT.SCPScope and Purpose (SCP)

This document is the European Train Control System (ETCS) driver’s handbook. The purpose of this document is to provide a harmonised handbook on the use of the ETCS on-board equipment of the European Rail Traffic Management System ERTMS by the driver of a train fitted with this system.

This document includes all the ETCS Driver Machine Interface (DMI) features, options, configuration parameters, expected system reactions, system messages, degraded situations, etc. from the driver’s viewpoint. Information which is not relevant to the driver has been omitted from this document.

The scope of this document is limited to Baseline 3 ETCS on-boards, i.e. B3 Maintenance Release 1 and B3 Release 2, operated in applicable ETCS system versions (i.e. 1.0, 1.1, 2.0 or 2.1). The scope of this document does not include Class B systems when operated through the ETCS DMI. The clauses included in this harmonised handbook are based on the following ETCS specifications:

  1. System Requirements Specification ([2],[3] Subset-026, both v3.4.0 and v3.6.0, see section INT.REF Reference documents (REF)).
  2. ETCS Driver Machine Interface ([4],[5] ERA_ERTMS_015560, both v3.4.0 and v3.6.0, see section INT.REF Reference documents (REF)).
  3. ERTMS Operational Principles and Rules ([6] Appendix A to the TSI OPE, see section INT.REF Reference documents (REF)).

Without excluding other uses, this document is designed to be used as a template to produce model-specific manuals. A model-specific manual will be compiled by the rolling stock supplier or the Railway Undertaking (RU) operating it and will be provided to the drivers for each type of rolling stock. Any model-specific manuals will be adapted to include details of the rolling stock and other specific information (e.g. which SRS version is installed, how to physically isolate ETCS from the rolling stock brake system, DMI failure modes).

Model-specific manuals may also be complemented by the end users even further, by adding information such as conditions to be checked by the driver before performing some action on the DMI. Such information is usually defined by operational or company rules. In addition, the model-specific manuals may be extended by the end users to also cover Class B systems when operated through the ETCS DMI, i.e. by means of a Specific Transmission Module (STM).

This document uses Figures to aid understanding by showing an example of an ETCS DMI screen. The relevant part of each Figure has been highlighted with a red square. It should be noted that other parts of the ETCS DMI screen can change for specific situations. In general, the Figure of the ETCS DMI screen could have several variants. However, for simplicity a single diagram has been used to illustrate the required information.

INT.TERTerms AND Abbreviations (TER)

This section defines the terms and abbreviations used in this document. They have been taken from both Subset-023: Glossary of Terms and Abbreviations. v3.3.0 [1] and appendix A and J of the Operational instructions of the Technical Specification for Interoperability (TSI OPE).

TermDefinition
AcknowledgmentConfirmation by an entity that it has received information.
Application levelThe different ERTMS/ETCS application levels are a way to express the possible operating relationships between track and train. Level definitions are related to the trackside equipment used, to the way the trackside information reaches the on-board units and to which functions are processed in the trackside and in the on-board equipment respectively.
Authorising train movementsThe operation of equipment in signalling centres, electric traction current supply control rooms and traffic control centres that permits train movement. This does not include those staff employed by a railway undertaking who are responsible for management of resources such as train crew or rolling stock.
Driver's acknowledgementConfirmation by the driver that he/she has taken into account information received through the DMI.
BaliseA passive transponder mounted on the track which can communicate with a train passing over it.
Balise groupOne or more balises which are treated as having the same reference location on the track. The telegrams transmitted by all the balises of a group form a track-to-train message.
BaselineA baseline is defined by a stable kernel in terms of system functionality, performance and other non-functional characteristics.
CabThe space in the power unit or driving unit of the train containing the operating controls and providing shelter and seats for the driver or engine crew.
Clear (a signal)To change a signal aspect from its most restrictive aspect to a less restrictive aspect.
ConfigurationThe structuring and interconnecting of the hardware and software of a system for its intended application.
Current positionThe position of a train measured at a certain moment using defined system co-ordinates.
Danger (aspect)An indication given by a signal to stop.
Default valueValue stored in the ERTMS/ETCS on-board equipment and used if there is no other value available.
DeskInside a cab, the set of operating controls, which is dedicated to preferred movements in a given direction (i.e. forward movements, in which visibility from the cab is provided to the driver).

Exception: some single cab locomotives are fitted with one single desk, allowing normal movements in both directions.
Driving Machine InterfaceThe interface to enable direct communication between the ERTMS/ETCS on-board equipment and the driver.
Driver IDUnique code which identifies a train driver.
End of AuthorityLocation to which the train is permitted to proceed and where target speed is zero.
EngineAssociation of one or two driving cab(s) of a Rolling Stock unit with one single ERTMS/ETCS on-board equipment.
When a driving cab of the engine is used to lead a train/shunting consist, the ERTMS/ETCS on-board equipment supervises the movement of the train/shunting consist the engine belongs to.
Each driving cab of an engine allows the driver communicating with the ERTMS/ETCS on-board equipment through the DMI.
ETCS On-BoardThe part (software and/or hardware) of the on-board equipment, which fulfils the ERTMS/ETCS specification.
EurobaliseBalise compliant with the ERTMS/ETCS specification.
European instructionAn harmonised operational instruction giving a similar content to train drivers across the European Union in order for them to answer in a similar manner to similar situation.
FailureEffect of an error on the intended service.
FaultAn abnormal condition that could lead to an error in a system. A fault can be random or systematic.
Full supervision modeERTMS/ETCS on-board equipment mode giving full protection against overspeed and overrun.
In rear ofA term indicating a point on the approach to a specific location on the track, with respect to a given direction.
Information pointSpecific location on the track where information can be transmitted from ERTMS/ETCS trackside to ERTMS/ETCS on-board equipment (see also SPOT TRANSMISSION).
Intermittent transmissionA term that encompasses “SPOT TRANSMISSION” and “SEMI-CONTINUOUS TRANSMISSION”.
InteroperabilityInteroperability means the ability to allow the safe and uninterrupted movement of trains that accomplish the specified levels of performance.
InterventionWhere ERTMS/ETCS takes control from the driver by cutting traction power or applying the full service brake and cutting traction power or applying the emergency brake and cutting traction power.
Isolation modeWhen the ERTMS/ETCS on-board equipment is disconnected from the vehicle braking system. Isolation is indicated to the driver.
KeyA predefined component or information necessary to be able to encrypt data or interpret encrypted data.
LevelContracted form of APPLICATION LEVEL.
Level 0 A level of ERTMS/ETCS defined to cover instances when the ERTMS/ETCS on-board equipment is operating in an area where the trackside is neither fitted with operational ERTMS/ETCS equipment nor fitted with operational National System.
Level 0 Area Trackside area in which level 0 operation is supported.
Level 1 A level of ERTMS/ETCS overlaid onto conventional line side signalling that uses Eurobalises/Euroloop/Radio Infill to pass movement authorities to the train whilst relying on conventional means to determine train position and integrity.
Level 1 Area Trackside area in which level 1 operation is supported.
Level 2 A level of ERTMS/ETCS that uses radio to pass movement authorities to the train whilst relying on trackside conventional means to determine train position and integrity.
Level 2 AreaTrackside area in which level 2 operation is supported.
Level 2/3 Area Trackside area in which level 2 and/or level 3 operation is supported.
Level 3 A level of ERTMS/ETCS that uses radio to pass movement authorities to the train. Level 3 uses train reported position and integrity to determine if it is safe to issue the movement authority.
Level 3 Area Trackside area in which level 3 operation is supported.
Level NTCA level of ERTMS/ETCS that allows the supervision of the train with an existing National Train Control system.
Level NTC areaTrackside area in which level NTC operation is supported.
Level Transition AnnouncementA Level Transition Announcement means both a level transition ordered for a further location and a level transition ordered at null distance transmitted as in-fill information.
Level Transition borderA location where the list of levels supported by the trackside changes.
Level Transition OrderedA location where the list of levels supported by the trackside changes.
Limited Supervision modeERTMS/ETCS on-board equipment mode giving partial protection against over speed and over run. The driver has to observe and obey to line side signals and operating rules when in limited supervision mode.
LineA continuous section of railway track.
LinkingA functionality to protect against missing data from BALISE GROUPS by announcing them in advance through LINKING INFORMATION and by checking whether they have been read within a certain EXPECTATION WINDOW.
Local timeThe time for ordinary transactions in a locality, which is likely to be shown on station clocks.
MalfunctionA deviation from the specified performance causing the system to work incorrectly. This is normally due to an error or fault in the system.
MandatoryWhen it is compulsory to fulfil and to implement a requirement to realise a technically interoperable standard for the ERTMS/ETCS equipment or system.
MayIs permissible.
Max Safe Front EndThe maximum safe front end position differs from the estimated position by the Under-reading Amount in the distance measured from the LRBG plus the Location Accuracy of the LRBG.
Min Safe Front EndThe minimum safe front end position differs from the estimated position by the Over-reading Amount in the distance measured from the LRBG plus the Location Accuracy of the LRBG.
MessageThe combination of application data and protocol data that is transmitted by balise group, loop or radio to a train or from the train to trackside by radio.
MissionAn objective description of the fundamental task to be performed by a system.
ModeAn operating state of the ERTMS/ETCS on-board equipment with a specified split of operational responsibilities between the ERTMS/ETCS system and the driver.
National System ModeERTMS/ETCS on-board equipment mode in which the supervision of the train is ensured by a National System.
National Train Control SystemA previously installed train control system defined as Class B system in CCS TSI.
National ValuesValues that are transmitted to a train when entering the infrastructure of an administration related to rules and regulations of that administration. National values may be changed within an administrations area.
No Power ModeERTMS/ETCS on-board equipment mode in which the on-board equipment is not powered and the emergency brake is commanded.
Non-Leading ModeERTMS/ETCS on-board equipment mode when it is connected to an active cab which is not in the leading engine of the train.
OccupiedA track section having any part of a train present upon it.
On sight modeERTMS/ETCS on-board equipment mode that gives the driver partial responsibility for the safe control of his train. In this mode the train possesses a movement authority but the track ahead might be occupied by another train.
Operated System VersionFor both trackside and on-board, to operate a system version means to comply with the requirements from all TSI annex A documents, which are applicable to this system version and to the concerned subsystem.
The operated system version is ordered by trackside; however, to operate a system version number X within a delimited trackside area only means that an on-board equipment running on this area shall behave according to the set of requirements applicable to the system version number X.Y where X is the one ordered by trackside and Y is the system version number Y (which may be different from the one ordered by trackside) operated by the on-board within this version X.
Operational instructionFormal information exchanged between signaller and train driver so as to ensure/continue railway operation in specific situations. The operational instruction exists at both national and European levels.
PantographDevice for transmitting power from the overhead catenary to the train.
Permitted SpeedThe speed limit at which a train is allowed to proceed without ERTMS/ETCS warning and / or intervention.
PointA section of track equipped so that train routes may converge or diverge.
Post Trip ModeERTMS/ETCS on-board equipment mode that is entered after a train trip when the train has been brought to a stand and the driver has acknowledged the situation.
Proceed AspectAny signal aspect which permits the driver to pass the signal.
Radio HoleA known area where it is not possible to establish or maintain a reliable radio connection.
RBC (Radio Block Centre)A centralised safety unit that receives train position information via radio and sends movement authorities via radio to trains.
Reference LocationA location on the track (e.g. balise group reference location) used as a reference for the information sent from trackside or for the train position.
Release speedA speed value to allow a train to approach the EOA. Needed for intermittent transmission to enable the train to approach a signal that has cleared in order to reach the information point at the signal.
Reversing ModeERTMS/ETCS on-board equipment mode that allows the driver to change the direction of movement of the train whilst controlling the train from the same cab.
Reverse MovementA train movement in which the driver is situated in the leading engine but the train is moved in the opposite direction to the train orientation.
Roll AwayAn unintended and non-powered movement of the train in a direction, which conflicts with the current position of the direction controller in the active desk.
RouteThe particular section or sections of track, from a starting point to a point of destination, prepared for train operation.
Route suitability DataData transmitted to the ERTMS/ETCS on-board equipment to allow it to check its ability to run on the track as indicated by the movement authority. It includes data related to loading gauge, traction system and axle load category.
SafetyFreedom from an unacceptable risk of harm.
SectionA part of the movement authority.
Section TimerThe timer associated with a section as part of the movement authority. When the timer reaches a value defined by the trackside equipment the section is no longer available and the movement authority for the train is reduced accordingly.
Communication SessionThe process of initiating and terminating an applicative dialogue between trackside and on-board via radio.
Set SpeedThis is an input received from a function external to ETCS for display to the driver. It represents the speed value to which the train speed is regulated by an external device (e.g. by a cruise control system).
ShallIs mandatory.
ShouldIs recommended.
Shunting ModeERTMS/ETCS on-board equipment operating mode which allows the train to move in shunting, without available train data.
Shunting MovementThe movement of trains or vehicles other than normal passage along running lines. When vehicles are moved without train data available.
SignalA visual display device that conveys instructions or provides advance warning of instructions regarding the driver’s authority to proceed.
SignallerPerformer in charge of the route setting of trains / shunting movements and of issuing instructions to drivers.
Slave EngineAny engine that is not the leading Rolling Stock unit of a train or shunting consist. The ERTMS/ETCS on-board equipment of the slave engine runs in one of the modes in which it is not controlling the movement of the train/shunting consist (Non-Leading mode, sleeping mode, passive shunting mode).
Sleeping ModeERTMS/ETCS on-board equipment mode that is used for the on-board equipment in slave engines controlled by a leading engine.
Spot TransmissionTransmission between trackside and on-board that takes place at discrete locations.
StaffEmployees working for a railway undertaking or an infrastructure manager, or their contractors, undertaking tasks as specified in this Regulation.
Staff Responsible ModeERTMS/ETCS on-board equipment mode that allows a driver to take full responsibility for the movement of a train in an equipped area. The ERTMS/ETCS on-board equipment will impose a speed limit in this mode.
SystemA composite of equipment, skills, and techniques capable of performing or supporting an operational role, or both. A complete system includes all equipment, related facilities, material, software, services and personnel required for its operation and support to the degree that it can be considered a self-sufficient unit in its intended operational environment.
System Failure ModeERTMS/ETCS on-board equipment mode entered when a fatal failure which could affect safety is found.
System VersionThe system version defines the ERTMS/ETCS mandatory functions that ensure technical interoperability between ERTMS/ETCS on-board equipment and trackside.
TandemTwo or more traction units mechanically but not electrically coupled together, used in the same train. Each traction unit requires a separate driver. Only one unit is designated as leading, the other units are therefore classed as Non-Leading.
TargetLocation where the train speed should be below the given target speed.
Track ConditionInformation transmitted to the ERTMS/ETCS on-board equipment to inform the driver and/or the train of conditions ahead. This information is dedicated to other functions than the speed and distance monitoring.
Track DescriptionInformation complementing the Movement Authority and providing as a minimum the, static speed profile and gradient profile. Optionally, it can contain axle load profile, track conditions, route suitability data, areas where shunting is permitted, etc.
Trackside EquipmentThe equipment with the aim of exchanging information with the vehicle for safely supervising train circulation. The information exchanged between track and trains can be either continuous or intermittent according to the ERTMS/ETCS level of application and to the nature of the information itself.
Traction UnitA powered vehicle able to move itself and other vehicles to which it may be coupled.
TrainOne or more railway vehicles hauled by one or more traction units, or one traction unit travelling alone, running under a given operational number from an initial fixed point to a terminal fixed point.
Train DataDefined set of data which gives information about the train. Data that characterises a train and which is acquired by ERTMS/ETCS in order to perform a mission.
Train driverPerson capable and authorised to drive trains, including locomotives, shunting locomotives, work trains, maintenance railway vehicles or trains for the carriage of passengers or goods by rail in an autonomous, responsible and safe manner.
Train IntegrityThe level of belief in the train being complete and not having left coaches or wagons behind.
Train MovementWhen vehicles are moved with train data available, as a rule from station to station, and as a rule under the authority of proceed aspects from main signals, or similar procedures.
Train OrientationIf there is an active cab, this one defines the orientation of the train, i.e. the side of the active cab is considered as the front of the train. If no cab is active, the train orientation is as when a cab was last active.
Train preparationEnsuring that a train is in a fit condition to enter service, that the train equipment is correctly deployed and the train composition matches the train’s designated route(s). Train preparation also includes technical inspections carried out prior to the train entering service.
Train Running NumberA number under which the train is operated.
Train TripInitiated when a train passes an EOA/LOA, excluding any occasion when a suppress facility is used, and causes an immediate application of the emergency brake.
TransitionsThe controlled changes between operating modes and / or levels.
Trip ModeERTMS/ETCS on-board equipment mode (e.g. entered when passing an EOA), resulting in an application of the emergency brake that can only be revoked at standstill and with additional precautions.
Unfitted AreaA line without operational trackside Automatic Train Protection system.
Unfitted ModeERTMS/ETCS on-board equipment mode allowing a fitted train to run in an unfitted area.
ValidationConfirmation by examination and provision of objective evidence that the particular requirements for a specific intended use have been fulfilled.
Virtual Balise CoverA specific marker in balise telegrams, that allows substituting the physical cover plates in lines under construction.
WarningAudible and/or visual indication to alert the driver to a condition which requires a positive action by the driver.

Table INT.TER.T1: Terms

AbbreviationsDefinition
ACKAcknowledgement
CSGCircular Speed Gauge
DCDirect Current
DMIDriver Machine Interface
EIRENEEuropean Integrated Radio Enhanced Network
EOAEnd of Authority
ERAEuropean Railway Agency
ERTMSEuropean Rail Traffic Management System
ERTMS/ETCSThe ETCS part of ERTMS
ETCSEuropean Train Control System
FSFull Supervision mode
ISIsolation mode
LOALimit of Authority
LSLimited Supervision mode
LSSMALowest Supervised Speed within the Movement Authority
LXLevel crossing
MAMovement Authority
MRSPMost Restrictive Speed Profile
NLNon-Leading mode
NPNo Power mode
NTCNational Train Control
OBUOn-Board Unit
OLOverlap
OPEOperation and Traffic Management
OSOn Sight mode
PSPassive Shunting mode
PTPost Trip mode
RAPRoll Away Protection
RBCRadio Block Centre
RIURadio In-fill Unit
RMPReverse Movement Protection
RVReversing mode
SBStand By mode
SBIService Brake Intervention supervision limit
SFSystem Failure mode
SHShunting mode
SLSleeping mode
SNNational System mode
SoMStart of Mission
SRStaff Responsible mode
SRSSystem Requirements Specification
SSPStatic Speed Profile
STMSpecific Transmission Module
SvLSupervised Location
TAFTrack Ahead Free
TRTrip mode
TRKTrackside
TSITechnical Specification for Interoperability
TSMTarget Speed Monitoring
TTITime to Indication
UNUnfitted mode
VBCVirtual Balise Cover

Table INT.TER.T2: Abbreviations

INT.CODCodification and Symbols (COD)

This document has a modular structure to allow model-specific manuals to reflect the actual ETCS on-board configuration and available options. Each chapter of this document have been codified by 2 or 3 letters taken from the chapter header (e.g. SB for the Stand-By chapter). All the clauses included in the handbook are characterised by the following attributes;

  1. Baseline,
  2. ETCS system version,
  3. ETCS level,
  4. DMI screen technology,
  5. Type of requirement.

This characterisation information is useful to produce model-specific manuals but is not relevant information for drivers. The important and safety related clauses for drivers have been marked by warning icons as indicated in Table INT.COD.T1.

Warning iconMeaning
Attention icon. This icon highlights clauses that provide relevant information for drivers who must pay special attention to these clauses.
Safety icon. This icon alerts the driver of a critical situation that can lead to hazardous situation.

Table INT.COD.T1: Warning icon

Note: Only the Attention icon has been included in this harmonised handbook. The Safety icon should be added in model-specific manuals to highlight those clauses related to safety according to specific safety evaluation.

INT.REFReference documents (REF)

[1]
Subset-023: Glossary of Terms and Abbreviations. v3.3.0.
[2]
Subset-026: System Requirements Specification, version 3.4.0.
[3]
Subset-026: System Requirements Specification, version 3.6.0.
[4]
ERA_ERTMS_015560: ETCS Driver Machine Interface, version 3.6.0.
[5]
ERA_ERTMS_015560: ETCS Driver Machine Interface, version 3.4.0.
[6]
ERA_ERTMS_OPE_AppA_5. Technical Specification for Interoperability relating to the ‘operation and traffic management’ subsystem. Appendix A: ERTMS/ETCS operational principles and rules, version 5.0
[7]
Technical Specification for Interoperability relating to the ‘operation and traffic management’ subsystem. Appendix C2: Operational instructions. Commission implementing regulation (EU) 2019/773 of 16 May 2019.