(Rewrites throughout to add comments by Boeing, Southwest Airlines, U.S. Transportation secretary, FAA)
By Eric M. Johnson and David Shepardson
SEATTLE/WASHINGTON, March 27 (Reuters) - Boeing Co on Wednesday took its most aggressive moves yet to defend its core 737 airliner franchise, saying it had developed software fixes to prevent failures of an automated flight control system that is being scrutinized after two deadly crashes in the past five months.
Boeing, in the midst of one its worst crises in years, is under pressure from crash victims' families, airlines, lawmakers in Washington and regulators around the world to prove that the automated flight control systems aboard its 737 MAX aircraft are safe, and that pilots have the training required to override the system in an emergency.
A Boeing official in Seattle said on Wednesday the timing of the software upgrade was "100 percent independent of the timing of the Ethiopian accident," and the company was taking steps to make the anti-stall system "more robust." There was no need to overhaul Boeing's regulatory relationship with the U.S. Federal Aviation Administration (FAA) now, the company said.
"We are going to do everything that we can do to ensure that accidents like these never happen again," Mike Sinnett, Vice President for Product Strategy and Future Airplane Development told reporters.
U.S. Transportation Secretary Elaine Chao and some lawmakers on Wednesday questioned why Boeing did not require safety features on its top-selling plane that might have prevented the crashes.
"It is very questionable if these were safety-oriented additions, why they were not part of the required template of measures that should go into an airplane," she said, adding she was not ready to require that all safety options be retrofitted on existing airplane.
A spokesman for the FAA said the agency had not reviewed or certified the software upgrade yet.
Southwest Airlines Co, which on Wednesday became the first major airline to formally cut its financial outlook for the year after being forced to pull its MAX fleet of 34 jets out of service, supported Boeing's decision.
"Boeing's software update appears to add yet another layer of safety to the operation of the MAX aircraft," Southwest's certificate chief pilot Bob Waltz said. The carrier would fully comply with final guidance from the FAA, he said.
Allied Pilots Association, which represents American Airlines Group Inc pilots, said they were pleased with Boeing's progress on the software but warned that the certification process should not be rushed. The fix should be fully vetted and take into account any further information from an investigation into an Ethiopian Airlines crash on March 10, the association said in a statement.
Airline stocks turned positive after Boeing unveiled its 737 MAX software fix.
The world's largest planemaker said the anti-stall system, which is believed to have repeatedly forced the nose lower in at least one of the accidents, in Indonesia last October, would only do so one time after sensing a problem, giving pilots more control.
It will also be disabled if two airflow sensors that measure the "angle of attack," or angle of the wing to the airflow, a fundamental parameter of flight, offer widely different readings, Boeing said. Reuters reported those details earlier this week.
The anti-stall system - known as MCAS, or Maneuvering Characteristics Augmentation System - has been pinpointed by investigators as a possible cause in a fatal Lion Air crash in Indonesia and the one in Ethiopia.
Existing 737 pilots will also have extra computer-based training following criticism that MCAS was not described in the aircraft manual.
Boeing has previously said existing cockpit procedures would cover any example of runaway controls caused by MCAS.
The changes were drawn up in response to the Lion Air crash but are seen as crucial to regaining the trust of pilots, passengers and regulators after the Ethiopia crash prompted a worldwide grounding of Boeing 737 MAX planes.
Ethiopian officials and some analysts have said the Ethiopian Airlines jet behaved in a similar pattern before crashing shortly after take-off from Addis Ababa, but that investigation is still at an early stage.
Boeing's Sinnett said the software had been through extensive testing, including flights with the FAA. However, he said he could provide no timeframe for when the 737 MAX jets would return to service.
Boeing said it would change the design of the system so that it no longer relied on a single sensor. The changes also would make standard visual warnings to the pilots if the system had stopped working. Previously, those warning messages and displays had been optional.
Reuters reported in November after the Lion Air disaster that some aviation experts believed the optional alert could have alerted engineers about mechanical faults, leading to an industry debate over whether the system should be mandatory.
Current 737 MAX pilots have criticized Boeing for not disclosing more details about MCAS initially. Sinnett said the company has added details on MCAS to its flight crew operations manual. All pilots will need to complete this training before returning to the skies, he said.
John Hamilton, chief engineer for 737 Max flight displays, said in a statement that "all primary flight information required to safely and efficiently operate the 737 MAX" was already included without the features that would now be offered.
Reporting by Eric M. Johnson in Seattle, David Shepardson in Washington, Tim Hepher in Paris, Tracy Rucinski in Chicago and Allison Lampert in New York; writing by Ben Klayman; editing by Grant McCool