10/20/10 Appendix A TC/ST/AT/ASTC, the hardware module arrangement should represent the expected worstcase temperature conditions. Alternately, applicants for the functional TSO or for aircraft/engine certification may perform engineering analysis, using validated models, of the thermal characteristics of the expected cabinet or rack and module configuration variations to determine temperature test parameters that exceed the worst-case expected temperature conditions. These temperature test parameters could be used instead of the standard RTCA/DO-160F, Sections 4 and 5, temperature conditions.
b. EQT for operational shock (RTCA/DO-160F, Section 7) and vibration (RTCA/DO-160F, Section 8). Perform these with all cabinet/rack module positions occupied in the hardware configuration specified for the functional TSO or TC/STC/ATC/ASTC installation. Alternately, you could perform an engineering analysis, using validated models, of the characteristics of the expected cabinet or rack and module configurations to determine vibration and operational shock test parameters that exceed the worst expected conditions. These test parameters could be used instead of the standard RTCA/DO-160F, Sections 7 and 8 conditions.
c. EQT for induced transients (RTCA/DO-160F, Section 19), radio frequency (RF) susceptibility (RTCA/DO-160F, Section 20), RF emissions (RTCA/DO-160F, Section 21), and lightning induced transients (RTCA/DO-160F, Section 22). These are most appropriately performed with the functional hardware and software in the IMA system. This is because the response of the system may be highly dependent on the functional software and hardware.
Therefore, perform these EQTs as part of the functional TSO compliance or as part of the TC/STC/ATC/ASTC environmental qualification.
d. EQT for lightning and HIRF protection. Perform these with the hardware elements and software components loaded in the configuration specified for the applicable aircraft, per the lightning regulations, ACs, and the HIRF policy. The interface wiring and connected equipment should represent the wiring and connected equipment installed in the aircraft.
4. You may use EQT performed for a single functional TSO authorization or aircraft TC/STC/ATC/ASTC to support other applications for functional TSOs or aircraft TC/STC/ATC/ASTCs with similar configurations. A TSO applicant may use similarity assessment and worst-case test conditions to minimize the EQT required for subsequent functional TSO applications or aircraft TC/STC/ATC/ASTC. Your use of the environmental qualification data should be accompanied by a rational engincering analysis of the differences between hardware and software configuration used during the original environmental tests and the proposed new configuration. The engincering analysis may consider worst-case environmental limits developed above.
5. The functional TSO qualification data sheet should state explicitly the RTCA/DO-160F test categories and tests performed in the functional TSO configuration and the test categories and tests performed in the TSO-C153 configuration. Include this information in the installation instructions.
A-3
10/20/10 Appendix A
6. Hardware modules and software components providing a function that lacks an applicable functional TSO must meet the TC/STC/ATC/ASTC environmental requirements. See § 21.31.
7. You must evaluate all hardware elements before installation to ensure that the TC/STC/ATC/ASTC environmental requirements have been satisfied. See § 21.31.
10/20/10 Appendix B Appendix B Sample IMA Component Acceptance Cover Letter.
Use the following as a guide for an IMA Component Acceptance Cover Letter. The format given here does not need to be followed precisely. It is important, however, that all the information be present, in some form, in the letter.
Page 1 of x
COMPANY NAME
COMPANY ADDRESS
COMPANY CONTACT INFORMATION Date of application Unique identifier IMA Component Acceptance Cover Letter General Information IMA component name:
IMA component top level identification: _ (Must uniquely identify the component, including any revision or modification level.)
Name and contact information of company that developed the IMA component (if different than the applicant for the IMA Component Acceptance Letter):
Contact information: (List the names) of engineering and/or managerial staff to which the FAA and other companies involved in the use and possible future reuse of this component may correspond. Include the person's position or title within the company, telephone number and, if possible, a stable e-mail address.)
FAA office to which the application for IMA component acceptance is being made:
Aircraft or engine certification program in which IMA component will be used for initial acceptance, including target certification date:
Name and identification of IMA system in which the IMA component will be used for initial acceptance:
B-1
10/20/10 Appendix B Name and address of IMA system developer/integrator (if different than the IMA component developer making this application):
Information Regarding Initial Use of IMA component Describe the airborne system and environment in which the IMA component will be operating.
also referred to as the "usage domain." This information may vary widely based on the type of component. Information about hardware components, such as their being installed in a rotorcraft or in an unpressurized location of the aircraft structure, will be different than if the component is a software operating system. For hardware components, this description should be adequate to estimate the environmental qualification testing levels for RTCA/DO-160F compliance for the initial installation.
This section informs the FAA, as well as any potential future re-users of the accepted component, how the IMA component is being used for its initial acceptance and what might need to be reexamined during any future reuse.
Information may be at a high level, with more detailed information contained in the IMA Component Acceptance Letter data sheet.
Information Regarding Partitions (if any) and Assurance Levels within the IMA Component Describe all the various software partitions (if any) within the IMA component. Identify the software assurance level for each software partitions. Justify at a high level why that assurance level is appropriate. With hardware components for which you are seeking acceptance for compliance to RTCA/DO-254, identify and describe each component along with the design assurance level (DAL) of each component and a justification of why this DAL is appropriate. If there are multiple DALs on a single CEH/SEH device, then address each of those DALS. Include information regarding the separation of the multiple DALs on a single device.
This section informs the FAA, as well as any potential future re-users of the accepted component, of the various assurance levels (both hardware and software) within the IMA component and what might need to be re-examined during any future reuse.
Information may be at a high level, with more detailed information contained in the IMA Component Acceptance Letter data sheet.
Statement of Full or Partial Compliance to Industry Standards State for which industry standards RTCA/DO-178B for airborne software, RTCA/DO-254 for CEH, RTCA/DO-160F for EQT) acceptance is being sought with this IMA component. State whether you seek full or partial compliance to these standards. Your IMA Component Acceptance Cover Letter does not need to explain, in detail. any partial compliance to these standards--include that detailed information in the IMA component acceptance data sheet. The statement of full or partial compliance in the IMA Component Acceptance Cover Letter is only B-2
10/20/10 Appendix B an indicator to the FAA and any future re-user of this component that additional activity is needed to show full compliance at the time of installation approval of the IMA system.
If you seek any compliance for SEH for the IMA component acceptance, this section should document that fact. Include the compliance data or references to where the compliance data may be found in the IMA component acceptance data sheet.
If you seek compliance to any other technical discipline, besides those listed above with this IMA component acceptance, document it here. Include a high-level discussion of the requirements for which you seek compliance, and where the detailed requirements are documented. Include more detailed information about the compliance data in the IMA Component Acceptance Letter data sheet.
Configuration Information of IMA component Include enough information to specify exactly the baseline configuration of the IMA component being accepted, including the development and verification environment. Include only a list of the documents names, numbers and revision levels. All other information concerning the configuration identification may be included in the IMA Component Acceptance Letter data sheet.
This section makes clear the configuration of the IMA component being accepted. If any of the documents identified in this section are revised, then write a new IMA component acceptance letter.
Statement of compliance to the applicable requirements State in the IMA Component Acceptance Letter that the signatories attest that the IMA component meets all the applicable requirements defined in the IMA Component Acceptance Letter. A sample statement is shown below:
We, the undersigned, attest that we, to the best of our ability, have found this IMA component to be compliant with the applicable requirements as documented within this IMA Component Acceptance Letter.
Signatures - Applicant for the IMA Component Acceptance Letter This section should show the signatures of specific company individuals, per paragraph 4-3 of this AC. There should also be a printed version of the signing individual's name and title. Each signature should include the date on which they signed the IMA Component Acceptance Cover Letter, as well as an indication of which technical discipline to which that signature applies. The IMA component acceptance letter should be signed by the appropriate persons before submitting the original, along with the IMA Component Acceptance Letter data sheet, to the FAA.
B-3
10/20/10 Appendix C Appendix C Sample Acceptance Letter.
Issuing FAA office Issuing FAA office address Issuing FAA office address U.S. Department of Transportation Federal Aviation Administration In Reply Refer To: (FAA correspondence number) (Date of Letter) (Name and address of recipient) Subject: Integrated Modular Avionics (IMA) Component Acceptance Letter (unique identifier from company's application for an IMA Component Acceptance Cover Letter) The FAA has determined that (company name) complies with AC 20-170 and RTCA/DO-297, Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations, with regards to (IMA component name), (IMA component top level identification, including revision level), for the purposes of IMA component acceptance.
The following terms and conditions are applicable to this IMA Component Acceptance Letter:
1. This acceptance is based on the usage domain, restrictions, partial compliance, assurance levels and other such information as documented in the attached IMA Component Acceptance Cover Letter and its IMA Component Acceptance Letter data sheet.
2. This IMA Component Acceptance Letter is only applicable to (IMA component name and top level identification, including revision level). This Acceptance Letter is not transferable to an updated version of (IMA component name). A new FAA IMA Component Acceptance Letter should be requested for the updated component, if one is desired.
3. (Company name) should report to the (FAA office issuing this IMA Component Acceptance Letter) any failure, malfunction, defect of the component or finding of any non-compliance or deviation from the compliance statements made in the attached IMA component acceptance letter. The FAA may choose to cancel this IMA Component Acceptance Letter if warranted, which will have the effect of requiring (company name) to update (IMA component name) to address the shortcoming before a new IMA Component Acceptance Letter can be issued.
C-1
10/20/10 Appendix C
4. (Company name) should coordinate with and supply any required data to any future or concurrent user of the accepted IMA component, such that the user is able to show full compliance to AC 20-170 and RTCA/DO-297 for that future or concurrent use.
The holder of a valid FAA IMA Component Acceptance Letter may use it as proof of acceptance by the FAA, as defined in the IMA Component Acceptance Letter including the IMA component acceptance data sheet, for the purpose of future or concurrent use of the accepted IMA component. The actual compliance data used in obtaining the IMA Component Acceptance Letter does not need to be re-submitted to the FAA, unless the FAA has concerns that cannot be answered by any other means except by re-examining the original IMA component acceptance data.
(signature) (printed FAA signatory) ce: (as appropriate) Attachment: (Copy of the IMA Component Acceptance Cover Letter. Do not include the IMA Component Acceptance Letter data sheet.)
C-2
11/21/2013 Appendix D Appendix D Related Documents And How To Get Them.
1. Copies of 14 CFR parts are available from the Superintendent of Documents, Government Printing Office, P.O. Box 979050, St. Louis MO 63197. Telephone (202) 512-1800, fax (202) 512-2250. You can also order copics online at www.access.gpo.gov. Select "Online Bookstore." Then select "Code of Federal Regulations."
2. The following ACs are available from the FAA website at http://www.faa.gov/regulations_policies/advisory_circulars/.
1) AC 20-88, Guidelines on the Marking of Aircraft Powerplant Instruments (Displays).
2) AC 20-115, RTCA. Inc. Document RTCA/DO-178B.
3) AC 20-136А, Protection of Aircraft Electrical/Electronic Systems Against the Indirect Effects of Lightning.
4) AC 20-148, Reusable Software Components.
5) AC 20-152, RTCA. Inc. Document RTCA/DO-254. Design Assurance Guidance for Airborne Electronic Hardware.
6) AC 20-156, Aviation Databus Assurance.
7) AC 20-158, The Certification of Aircraft Electrical and Electronic Systems for Operation in the High-Intensity Radiated Fields (IRF) Environment.
8) AC 20-174. Development of Civil Aircraft and Systems.
9) AC 21-16. RTCA. Inc. Document RTCA/DO-160F.
10) AC 23.1309-1, System Safery Analysis and Assessment for Part 23 Airplanes.
11) AC 23.1311-1B, Installation of Electronic Displays in Part 23 Airplanes.
12) AC 25-11A. Electronic Flight Deck Displays.
13) AC 25.1309-1. System Design and Analysis.
15) AC 25.1701-1, Certification of Electrical Wiring Interconnection Systems on Transport Category Airplanes.
15) AC 27-1, Certification of Normal Category Rotorcrafi.
16) AC 29-2. Certification of Transport Category Rotorcraft.
D-1
11/21/2013 Appendix D
17) AC 33.28-1, Compliance Criteria For 14 C'FR § 33.28, Aircraft Engines, Electrical And Electronic Engine Control Systems.
18) AC 33.28-2, Guidance Material For 14 CFR § 33.28. Reciprocating Engines, Electrical and Electronic Engine Control Systems.
19) AC 33.75-1, Guidance Material for 14 CFR 33.75, Safety Analysis.
20) AC 120-64. Operational Use and Modification of Electronic Checklists.
21) AC 120-76A, Guidelines for the Certification, Airworthiness, and Operational Approval of Electronic Flight Bag Computing Devices.
3. The following FAA policy statements are available from the FAA website at http://www.faa.gov/regulations_policies.
1) FAA Policy Memo ANM-01-03. Factors to Consider When Reviewing an Applicant's Proposed Human Factors Methods of Compliance for Flight Deck Certification.
2) FAA Policy Memo ANM-99-2, Guidance for Reviewing Certification Plans to Address Human Factors for Certification of Transport Airplane Flight Decks.
3) FAA Policy Memo PS-ACE100-2001-004, Guidance for Reviewing Certification Plans to Address Human Factors for Certification of Part 23 Airplanes.
4. Order RTCA documents from RTCA. Inc., 1150 18th Street NW, Suite 910, Washington, D.C. 20036. You can also order copies online at www.rtca.org. We referenced the following RICA documents:
1) RTCA/DO-160F. Environmental Conditions and Test Procedures for Airborne Equipment.
2) RTCA/DO-178B, Software Considerations in Airborne Systems and Equipment Certification.
3) RTCA/DO-254. Design Assurance Guidance for Airborne Electronic Hardware.
4) RTCA/DO-257A, Minimum Performance Standards for the Depiction of Navigational Information on Electronic Maps.
5) RTCA/DO-297. Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations.
D-2
11/21/2013 Appendix D
5. Order SAE documents from SAE International, 400 Commonwcalth Drive, Warrendale, PA 15096-0001. You can also order copies on-line at www.sae.org. We referenced the following SAE documents:
1) ARP4754 Rev A. Guidelines for Development of Civil Aircraft and Systems.
2) ARP4761, Guidelines and Methods for Conducting the Safety Assessment Process on Civil Airborne Systems and Equipment.
D-3
10/20/10 Appendix E Appendix E Glossary Acceptance FAA acknowledgement that the module, application, or system meets defined requirements.
Aircraft function Capability of the aircraft provided by the hardware and software of the systems on the aircraft.
Airworthiness Condition of an item (aircraft, aircraft system, or part) in which that item operates in a safe manner to accomplish its intended function.
Applicant Person or organization seeking approval from the FAA.
Application Software and/or application-specific hardware with a defined set of interfaces that, when integrated with a platform(s), performs a function.
Application-specific Hardware dedicated to one application.
hardware Approval Act or instance of giving formal or official acknowledgement of compliance with regulations.
Assumptions Statements, principles, and/or premises offered without proof.
Assurance Planned and systematic actions necessary to provide adequate confidence and evidence that a product or process satisfies given requirements.
Authority Organization or person responsible within the state (country) concerned with applicable requirements. Aircraft, engine, or propeller type certification or equipment approval is normally handled by the certification authority. Matters concerning continuing airworthiness might be handled by (what's referred to as) the airworthiness authority.
Baseline Approved, recorded configuration of one or more configuration items, that serves as the basis for further development. Baseline is changed only through change control procedures.
E-1
10/20/10 Appendix E Cabinet Physical package containing one or more IMA components or modules.
Provides partial protection from environmental effects (shielding).
May enable installation and removal of those component(s) or module(s) from the aircraft without physically altering other aircraft systems or equipment.
Certification Legal recognition by the FAA that a product, service, organization, or person complies with the requirements. Certification comprises the activity of technically checking the product, service, organization, or person and the formal recognition of compliance with the applicable requirements by issuing a certificate, license, approval, or other documents as required by national laws and procedures. In particular, product certification involves: (a) assessing the product design to ensure that it complies with standards applying to that type of product to demonstrate an acceptable level of safety, (b) assessing an individual product to ensure that it conforms with the certified type design, and (c) issuing a certificate required by national laws to declare that compliance or conformity was found with standards according to items
(a) or (b) above.
Certification credit Acceptance by the FAA that a process, product, or demonstration satisfies a certification requirement.
Closed architecture System whose technical specifications are not made public. Such systems restrict third parties from building products that interface with or add enhancements to them.
Complexity Attribute of systems or items that makes their design and/or operation difficult to comprehend.
Complex electronic A subset of a complex hardware item; a custom micro-coded hardware component that is not considered to be simple. (See "simple electronic hardware.") Complex hardware Any hardware item not considered to be simple. (See "simple item hardware item.") Compliance Successful performance of all mandatory activities; agreement between the expected or specified result, and the actual result.
Component Self-contained hardware or software part, database, or combination thereof that is configuration controlled.
Computer Device or group of devices that performs a data processing function.
Configuration control See "change control."
Configuration Process of designating the configuration items in a system and identification recording their characteristics.
E-2