Glenn’s Computer Museum

The preflight controller lives in the third of the four major bomb segments. On the right is a low-resolution picture (from other sources)of a B61 bomb somewhat disassembled (the nuclear explosive component is not disassembled). The preflight controller is in the middle segment and has its access flap opened in this picture. The controller allows preflight setting of things like fuzing options and functions related to "use control" of the weapon. It interfaces with the aircraft's AMAC (Aircraft Monitoring and Control) system and connects to the bomb's arming and firing mechansisms.

Before I describe the component in more detail, I need to talk about its provenance, or, how do I know it's a preflight controller from a B61 bomb or B61 training device? The person I got this from had mislabeled it as a part from an A-6 Intruder fighter-bomber. And the "demil" label also has "A-6" written on it. But, it is a B61 preflight controller; here's my evidence...

One critical reference that I have is Interim Development Support for the B61-6,8 Bombs, Sandia report SAND88-2986 (redacted). Here are the two (heavily redacted) pages describing the Mod-6,8 preflight controller (MC4136) and one page describing the "command disable" controls on the controller. The controls descibed and shown in SAND88-2986 are very similar to our device (the MC4136 has a "mission" switch which ours doesn't, and ours has a separate "strike enable plug" socket). Furthermore the command disable mechanism (interaction of the three code switches, the option switch to set "DI", and the T pullout handle) is described precisely, and our device behaves exactly the same way. The position of the controls shown. however, is slightly different than ours, but a layout difference is reasonable since there are several versions of the B61, each with slightly different controllers.

Another picture, shown on the right, of a B61 preflight controller case appears in Recovery and Recycling of Aluminum, Copper, and Precious Metals from Dismantled Weapon Components, SAND94-2759. The controls in this picture are positioned exactly the same as in our specimen. A further hazy confirmation is found in this very low resolution picture of a B61 training device. The diagram on the wall shows a control panel with connections to the front of the bomb looking similar to ours. And, of course, the center section of the previously shown disassembled B61 picture looks like our control panel. Another subtle clue is that the only component visible without taking the tightly sealed controller apart is labeled MC2865. The "MC" designation is used by Sandia for weapon components.

Another obvious question is why is there a preflight control panel on the bomb itself, doesn't the aircraft control all these settings? Yes, and no. New aircraft such as the B-2 bomber have an advanced AMAC (Aircraft Monitoring and Control) system (based on MIL-STD_1760) which can control the various bomb options (including setting the PAL unlock code). Older aircraft such as the A-6 Intruder had more primitive AMAC systems that could not control mnay of the bomb options from the aircraft.

So, based on SAND88-2886 and other sources, what does the preflight controller control? The two-digit switches labeled TA and TB specify two "safe separation" times in seconds. This defines the time that must elapse after the bomb is released from the aircraft before detonation can occur. (The actual arming process starts a few seconds before this time, but detonation cannot occur before this time). Our switches are hard-wired to start at 10 seconds. The choice between the two specified separation times is done via aircraft control.

The switch labeled delivery specifies one of two options for the fall of the bomb: FF (freefall) or RE (parahute retarded). (The choice of fuzing--airburst or groundburst--apparently is specified by the AMAC.) Some models of the B61 have an additional delivery option of "laydown". This is like parachute-redarded groundburst except that detonation is delayed for some period of time after contact. This provides time for a low-flying delivery aircraft to avoid being destroyed by the detonation.

The delay switch control the delay between separation and deployment of the parachute (in the case of retarded fall. The options we have are G (0.3 s deployment delay), H (0.6s delay), and J (1.6s delay). In the case of a laydown delivery, this switch also controls the delayed detonation time.

The function of the switch labeled option is redacted from my copy of the B61-7,8 report. A reasonable guess is that the option switch controls the yield; most B61 versions have multiple selectable nuclear yields. The details of variable yield are heavily classified, but reputable sources claim that the four yields options are possible with most verions. Our option switch has 6 settings: A-F.

The MC4142 "strike enable plug" is just that: this plug must be inserted to complete critical circuits in th arming and firing mechanisms. In particular, the plug completes "IUQS" signal and nuclear identification signal from the AMAC connection. (The IUQS is a multi-pulse encoded signal necessary to open a critical switch in the arming and firing system. This involves some very interesting concepts that are publically documented; I recommend further reading.) Our plug has a "tr" on it, perhaps futher indicating that it's from a training device.

The three numeric switches at the bottom, together with the swich right above them and the T-handle are used to initiate "command disable". This option will perform a "non-violent" function within the nuclear explosive component that disables the device from being able to detonate. This disablement can only be undone at the bomb assembly facility. The existance of a command disable function is publically documented, but the details of how it functions are highly classified. An obvious hypothesis is that disablement is caussed by a unreversable switch (possibly an explosive switch) severing the bomb's power input. The mechanism nmust be inside the sealed exclusion region of the bomb or else it could be undone easily.

To initiate the command disable function, the appropriate code is set in the three code wheels. In our device, the code is 1-1-1 (there is an exact sequence that must be followed of resetting the code to 0 and then setting 1-1-1). Then an interlock on the above four-position switch is released and it can be turned from "N" (normal or nuclear, I guess) to "DI" (disable). Then an interlock on the T-handle is released and it can be removed. Removing the T-handle pulls out and releases a plunger which hits the primer of a MC4246A thermal battery. This battery directly provides power to the disablement function. As expected, our device has no battery installed.

Note that there are two more options on the N/DI switch: "CC" and "R". I have no documentation as to what these two other function are but a good guess as to R is "render safe procedure" which returns bomb to a safe (e.g., before pre-arming) condition. CC is likely used for changing the 3-digit code. It can be selected using the same 1-1-1 code, but setting CC appears to lock the code wheels.

Finally, there is the PAL (Permissive Action Link) conector socket as shown on the left (the J1 socket). The PAL mechanism is a coded lock within the nuclear explosive region that prevents unauthorized arming and detonation. The details of how it works are highly classified, but a good general description of the history and the concepts are found here and here. (This is a massively interesting concept; I recommend further reading.) For the B61 family, the PAL unlock code can be entered either from the AMAC system in modern aircraft or via the J1 PAL socket on the preflight controller using an external code-entry device such as the one shown on the right (picture is from SAND88-2986).

In addition to unlocking the weapon, a PAL controller can also change the unlock code as well as setting the device into a maintenace mode. In this mode the sealed "exclusion region" can be opened without triggering the "active protection" mechanism. This is a highly classified mechanism that is present in some nuclear weapons which "senses attempts to gain unauthorized access to critical weapon components, and responds by initiating weapon disablement." (from PAL Control of Theater Nuclear Weapons, SAND82-2436).