If the autoland cannot be continued after a failure it is a “fail passive” system; if the autoland can be continued it is “fail active” or “fail operational”.