NPA 2017-08 - Lennuamet - dokumendiregister.ee

Failid

NPA 2017-08.pdf2611 KB

Sisu (failidest)

European Aviation Safety Agency Notice of Proposed Amendment 2017-08 Regular update of CS-ETSO RMT.0457 EXECUTIVE SUMMARY The specific of this NPA is to propose amendments to CS-ETSO taking into account the principles of efficiency and harmonisation. The ultimate goal is to introduce into CS-ETSO the new or updated and improved standards for parts and appliances. This NPA proposes to: — modify a number of ETSOs in order to harmonise them with the corresponding FAA TSOs; — introduce several new ETSOs (Index 1) which are, where possible, technically similar to existing FAA TSOs; and — modify an ETSO (Index 2), which does not yet exist in the FAA TSO series (i.e. ETSO-2C514) The proposed changes are expected to reduce the regulatory burden for the validation of FAA TSO authorisations by EASA and vice versa, to increase cost-effectiveness, and align CS-ETSO with the state of the art. Action area: Regular updates Affected rules: CS-ETSO Rulemaking group: No Affected stakeholders: Manufacturers of parts and appliances Rulemaking Procedure: Standard Driver: Efficiency/Proportionality, level playing field Impact assessment: None 21.8.2015 22.6.2017 2017/Q3 TE.RPRO.00034-006 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 1 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 Table of contents Table of contents 1. About this NPA ..................................................................................................................................... 3 1.1. How this NPA was developed .................................................................................................................. 3 1.2. How to comment on this NPA ................................................................................................................. 3 1.3. The next steps.......................................................................................................................................... 3 2. In summary - why and what.................................................................................................................. 4 2.1. Why we need to change the rules - issue/rationale................................................................................ 4 2.2. What we want to achieve - objectives .................................................................................................... 4 2.3. How we want to achieve it - overview of the proposals ......................................................................... 4 2.4. What are the expected benefits and drawbacks of the proposals ....................................................... 11 3. Proposed amendments....................................................................................................................... 12 3.1. Draft certification specifications (CSs)................................................................................................... 12 4. Impact assessment (IA) ..................................................................................................................... 138 5. Proposed actions to support implementation.................................................................................... 139 6. References ....................................................................................................................................... 140 6.1. Affected regulations ............................................................................................................................ 140 6.2. Affected decisions ............................................................................................................................... 140 6.3. Reference Documents ......................................................................................................................... 140 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 2 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 1. About this NPA 1. About this NPA 1.1. How this NPA was developed The European Aviation Safety Agency (EASA) developed this Notice of Proposed Amendment (NPA) in line with Regulation (EC) No 216/20081 (hereinafter referred to as the ‘Basic Regulation’) and the Rulemaking Procedure2. This rulemaking activity is included in the EASA 5-year Rulemaking Programme under RMT.0457. The text of this NPA has been developed by EASA. It is hereby submitted to all interested parties3 for consultation. This NPA is structured as follows: — Section 1 of this NPA contains the procedural information related to this task. — Section 2 (Explanatory Note) explains the core technical contents. — Section 3 contains the proposed text for the amendment of CS-ETSO. 1.2. How to comment on this NPA Please submit your comments using the automated Comment-Response Tool (CRT) available at http://hub.easa.europa.eu/crt/4. The deadline for the submission of comments is 31 August 2017. 1.3. The next steps Following the closing of the NPA public consultation period, EASA will review all comments. The outcome of this consultation will be reflected in a comment-response document (CRD). EASA will publish the CRD concurrently with the related Decision, which will contain the CS amendment with the updated ETSOs. The CRD will be available on EASA’s website and in the CRT. 1 Regulation (EC) No 216/2008 of the European Parliament and the Council of 20 February 2008 on common rules in the field of civil aviation and establishing a European Aviation Safety Agency, and repealing Council Directive 91/670/EEC, Regulation (EC) No 1592/2002 and Directive 2004/36/EC (OJ L 79, 19.3.2008, p. 1). 2 EASA is bound to follow a structured rulemaking process as required by Article 52(1) of the Basic Regulation. Such process has been adopted by the EASA Management Board (MB) and is referred to as the ‘Rulemaking Procedure’. See EASA Management Board (MB) Decision No 18-2015 of 15 December 2015 replacing Decision 01/2012 concerning the procedure to be applied by the Agency for the issuing of opinions, certification specifications and guidance material (‘Rulemaking Procedure’). 3 In accordance with Article 52 of the Basic Regulation and Articles 5(3) and 6 of the Rulemaking Procedure. 4 In case of technical problems, please contact the CRT webmaster ([email protected]). TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 3 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what 2. In summary — why and what 2.1. Why we need to change the rules — issue/rationale The purpose of this NPA is toin mend Decision 2003/010/RM of the Executive Director of the Agency of 24 October 2003 on certification specifications, including airworthiness codes and acceptable means of compliance, for European technical standard orders (ETSOs)5. ETSOs are defined by Article 1.2(g) of Regulation (EU) No 748/2012 as detailed airworthiness specifications, issued by EASA to ensure compliance with the requirements of ‘Part-21’ as minimum performance standards for specified articles (i.e. parts, appliances and equipment, as defined by Article 3(d) of the Basic Regulation. Article 5.6(b) of the Basic Regulation requires the periodical update of EASA’s rules by taking into account worldwide aircraft experience in service, and scientific and technical progress. This also applies to CS-ETSO for parts and appliances, which needs to be regularly updated. 2.2. What we want to achieve — objectives The overall objectives of the EASA system are defined in Article 2 of the Basic Regulation. This proposal will contribute to the achievement of the overall objectives by addressing the issues outlined in Chapter 2.3 of this NPA. This NPA proposes to: — modify a number of ETSOs in order to harmonise them with the corresponding FAA TSOs; — introduce several new ETSOs (Index 1) which are, where possible, technically similar to existing FAA TSOs6; and — modify an ETSO (Index 2), which does not yet exist in the FAA TSO series (i.e. ETSO-2C514). The scope of this rulemaking activity is outlined in the terms of reference (ToR) for rulemaking task RMT.0457 ‘Regular update of CS-ETSO’. 2.3. How we want to achieve it — overview of the proposals The basis for the introduction and/or revision of each ETSO and the main differences from the current ETSOs are specified below. Table 1 and Table 2 at the end of this section summarise the proposed changes. The changes introduced by this NPA are listed hereafter: CS-ETSO Subpart B Index 1 ETSO-C1e: Cargo Compartment Fire Detection Instruments This update of ETSO-C1c is based on FAA TSO-C1e, issued on 19.8.2014. 5 Decision as last amended by Decision 2016/029/R of 16 December 2016. 6 FAA TSOs are available at http://www.airweb.faa.gov TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 4 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what According to this revision proposal, newly designed cargo compartment fire detection instruments should meet the minimum performance standard (MPS) qualification and documentation requirements in SAE, Inc., Aerospace Standard (AS) Document No. AS8036 ‘Cargo Compartment Fire Detection Instruments,’ Revision A, dated December 17, 2013, except for paragraphs 4.9, 4.10 and 4.11. ETSO-C16b: Electrically Heated Pitot and Pitot-Static Tubes This update of ETSO-C16a is based on FAA TSO-C16b, issued on 27.1.2017. According to this revision proposal, newly designed electrically heated pitot and pitot-static tubes should meet the qualification and documentation requirements set forth in SAE International (SAE) Aerospace Standard AS8006, Revision A, Minimum Performance Standard for Pitot and Pitot Static Probes, and SAE AS5562, Ice and Rain Minimum Qualification Standards for Pitot and Pitot-Static Probes. In line with the FAA TSO, some modifications to the referenced standards are introduced into the ETSO in Appendices 1 and 2. ETSO-C23f: Personnel Parachute Assemblies and Components This update of ETSO-C23d is based on FAA TSO-C23f, issued on 21.9.2012. According to this revision proposal, newly designed personnel parachute assemblies should meet the MPS qualification and documentation requirements in Parachute Industry Association (PIA) Technical Standard 135 (TS-135), Revision 1.4, issued April 22, 2010, ‘Performance Standards for Personnel Parachute Assemblies and Components’ as modified by Appendix 1 of this ETSO. ETSO-C30d: Aircraft Position Lights According to this revision proposal, newly designed aircraft position lights should meet the requirements of the latest version of SAE Aerospace Standard AS8037C, ‘Minimum Performance Standard for Aircraft Position Lights’, dated 9 July, 2013. Currently the FAA TSO corresponding to ETSO-C30d is at revision c. This update introduces more adequate requirements for LED technology but does not introduce significant different requirements. ETSO-C59b: Airborne Selective Calling Equipment This update of ETSO-C59 is based on FAA TSO-C59b, issued on 27.6.2016. According to this revision proposal, newly designed SELCAL (selective calling) equipment must meet the MPS qualification and documentation requirements in RTCA, Inc. document RTCA/DO-93A, Minimum Operational Performance Standards (MOPS) for Airborne Selective Calling (SELCAL) Equipment, dated March 17, 2016. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 5 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what ETSO-C63e: Airborne Weather Radar Equipment This update of ETSO-2C63c is based on FAA TSO-C63e, issued on 1.10.2016. According to this revision proposal, newly designed airborne weather radar equipment should meet the standards set forth in RTCA DO-220A, Minimum Operational Performance Standards for Airborne Weather Radar Systems, dated 17.3.2016. The harmonisation with the latest FAA standard includes the classification of failure conditions. This revised ETSO is now technically harmonised with the corresponding FAA TSO and therefore it is moved from Index 2 to Index 1. For consistency with the FAA TSO, EASA decided to skip revision d and publish directly the revision e. ETSO-C78a: Crewmember Demand Oxygen Mask This update of ETSO-2C78 is based on FAA TSO-C78a, issued on 27.5.2008. According to this revision proposal, newly designed crewmember demand oxygen masks should meet the MPS qualification and documentation requirements in SAE International (SAE) Aerospace Standard (AS) 8026A, Crewmember Demand Oxygen Mask for Transport Category Aircraft, dated October 2001, as modified by Appendix 1 of this ETSO. Additionally this ETSO introduces four types of crewmember oxygen masks. This revised ETSO is now technically harmonised with the corresponding FAA TSO and therefore it is moved from Index 2 to Index 1. ETSO-C96b: Anticollision Light Systems According to this revision proposal, newly designed aircraft anticollision light systems should meet the requirements of the latest version of SAE Aerospace Standard AS8037C, ‘Minimum Performance Standard for Aircraft Position Lights’, dated July, 2013. Currently there FAA TSO corresponding to ETSO-C96b is at revision a. This update introduces more adequate requirements for LED technology but does not introduce significant different requirements. ETSO-C115d: Required Navigation Performance (RNP) Equipment using Multi-Sensor Inputs This update of ETSO-C115c is based on FAA TSO-C115d, issued on 7.3.2016. According to this revision proposal, newly designed required navigation performance equipment using multi-sensor inputs should meet the standards set forth in RTCA DO-283B, Minimum Operational Performance Standards for Required Navigation Performance for Area Navigation, dated December 15, 2015, Section 2, as modified by Appendix 1 of this ETSO. ETSO-C118a: Traffic Alert and Collision Avoidance System I (TCAS I) This update of ETSO-C118 is based on FAA TSO-C118a, issued on 27.10.2014. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 6 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what According to this revision proposal, newly designed TCAS I equipment should meet the MPS qualification and documentation requirements in Sections 2.1 and 2.2 of RTCA Document No. RTCA/DO-197A, Minimum Operational Performance Standards for An Active Traffic Alert and Collision Avoidance System I (ACTIVE TCAS 1), dated September 12, 1994, Section Two (2), as modified by Change 1 dated July 29, 1997. ETSO-C123c: Cockpit Voice Recorder Systems This update of ETSO-C123b is based on FAA TSO-C123c, issued on 19.12.2013. According to this revision proposal, newly designed cockpit voice recorder (CVR) systems should meet the standards set forth in the updated EUROCAE document ED-112A, MOPS for Crash Protected Airborne Recorder Systems, dated September 2013, that pertain to the CVR type. An obsolete requirement on optional marking has been removed. ETSO-C124c: Flight Data Recorder Systems This update of ETSO-C124b is based on FAA TSO-C124c, issued on 19.12.2013. According to this revision proposal, newly designed flight data recorder (FDR) systems should meet the standards set forth in the updated EUROCAE document ED-112A, MOPS for Crash Protected Airborne Recorder Systems, dated September 2013, that pertain to the FDR type. An obsolete requirement on optional marking has been removed. ETSO-C145e: Airborne Navigation Sensors Using the Global Positioning System Augmented by the Satellite-Based Augmentation System According to this revision proposal, newly designed airborne navigation sensors using the Global Positioning System augmented by the Satellite-Based Augmentation System should meet the standard set forth in RTCA document DO-229E, Minimum Operational Performance Standards for Global Positioning System/Satellite-Based Augmentation System Airborne Equipment, dated December 15, 2016, as modified by Appendix 2 and 4 of this ETSO. EASA considers the implementation of these new standards as essential to support the latest development of Satellite-Based Augmentation Systems (SBASs) augmenting GPS L1C/A. This update of ETSO-C145c is partially aligned with FAA TSO-C145e, issued on 5.5.2017. The main difference is that the concept introduced by TSO-C145d is not introduced in the ETSO-C145e. ETSO-C146e: Stand-Alone Airborne Navigation Equipment Using the Global Positioning System Augmented by the Satellite-Based Augmentation System According to this revision proposal, newly designed stand-alone airborne navigation equipment using the Global Positioning System augmented by the Satellite-Based Augmentation System should meet the standard set forth in RTCA document DO-229E, Minimum Operational Performance Standards for Global Positioning System/Satellite-Based Augmentation System Airborne Equipment, dated December 15, 2016, as modified by Appendix 2 and 4 of this ETSO. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 7 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what EASA considers the implementation of these new standards as essential to support the latest development of Satellite-Based Augmentation Systems (SBASs) augmenting GPS L1C/A. This update of ETSO-C146c is partially aligned with FAA TSO-C146e, issued on 5.5.2017. The main difference is that the concept introduced by TSO-C146d is not introduced in the ETSO-C146e. ETSO-C155b: Recorder Independent Power Supply This update of ETSO-C155a is based on FAA TSO-C155b, issued on 21.4.2015. According to this revision proposal, newly designed recorder independent power supplies (RIPSs) should meet the standards set forth in the updated EUROCAE document ED-112A, MOPS for Crash Protected Airborne Recorder Systems, dated September 2013, that pertain to RIPS. ETSO-C159c: Next Generation Satellite Systems (NGSS) Equipment This update of ETSO-C159b is based on FAA TSO-C159c, issued on 9.9.2016. Although there are no changes in the MPS to be met by the NGSS, this revision proposal introduces an important note regarding failure condition classification. According to this proposed note, the use of NGSS equipment for primary voice or data communication may trigger the allocation of a higher design assurance level than the minimum one specified in paragraph 3.2.1 ‘Failure condition classification’. ETSO-166b A3: Extended Squitter Automatic Dependent Surveillance-Broadcast (ADS-B) and Traffic Information Services-Broadcast (TIS-B) Equipment Operating on the Radio Frequency of 1090 Megahertz (MHZ) This update of ETSO-C166 A2 is intended to correct a typo in the failure classification guidance in paragraph 3.2.1 of the ETSO. The existing revision letter is, however, kept to ensure synchronisation with the revision letter of the FAA TSO. This is possible since there are no changes in the technical content. An amendment number is added to highlight the change. ETSO-C176a: Aircraft Cockpit Image Recorder Systems This update of ETSO-C176 is based on FAA TSO-C176a, issued on 19.12.2013. According to this revision proposal, newly designed cockpit image recorders (CIRs) should meet the standards set forth in the updated EUROCAE document ED-112A, MOPS for Crash Protected Airborne Recorder Systems, dated September 2013, that pertain to CIRs. An obsolete requirement on optional marking has been removed. ETSO-199: Traffic Awareness Beacon System (TABS) This new ETSO is based on FAA TSO-C199, issued on 10.10.2014. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 8 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what This ETSO provides the requirements for the applicable equipment class defined by this ETSO which traffic awareness beacon systems (TABSs) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. According to this proposal, newly designed TABSs should meet the MPS qualification and documentation requirements for the applicable equipment class defined by this ETSO. ETSO-C203 A1: Fire Containment Cover (FCC) This update of ETSO-C203 is intended to correct editorial typos in Appendix 1. The existing revision letter is, however, kept to ensure synchronisation with the revision letter of the FAA TSO. This is possible since there are no changes in the technical content. An amendment number is added to highlight the change. ETSO-C209: Electronic Flight Instrument System (EFIS) Display This new ETSO is based on FAA TSO-C209, issued on 29.9.2016. According to this proposal, each newly designed EFIS should meet the standards set forth in SAE AS6296, Electronic Flight Instrument System (EFIS) Displays, dated March 2016, and AS8034B, Minimum Performance Standard for Airborne Multipurpose Electronic Displays, dated 27 June, 2011. ETSO-C210: Airborne Head Up Display This new ETSO gives the requirements that airborne head up displays designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. According to this proposal, newly designed airborne head up displays must meet the standards set forth in SAE AS8055A, Minimum Performance Standards for Airborne Head Up Display (HUD), dated 28 July 2015. This ETSO standard does not address sensor imaging systems, displays worn by the pilot (goggles, helmet-mounted displays) or specific symbology to be displayed. Currently there is no FAA TSO corresponding to ETSO-C210, however, the numbering has been defined in coordination with FAA in order to allow possible future harmonisation. Changes to Index 1 of CS-ETSO Corresponding FAA New ETSO ref ETSO title TSO TSO-C1e ETSO-C1e Cargo Compartment Fire Detection Instruments (from 19.8.2014) TSO-C16b ETSO-C16b Electrically Heated Pitot and Pitot-Static Tubes (from 27.1.2017) TSO-C23f ETSO-C23f Personnel Parachute Assemblies and Components (from 21.9.2012) No FAA corresponding ETSO-C30d Aircraft Position Lights TSO revision TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 9 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what Changes to Index 1 of CS-ETSO Corresponding FAA New ETSO ref ETSO title TSO TSO-C59b ETSO-C59b Airborne Selective Calling Equipment (from 27.6.2016) TSO-C63e ETSO-C63e Airborne Weather Radar Equipment (from 1.10.2016) TSO-C78a ETSO-C78a Crewmember Demand Oxygen Mask (from 27.5.2008) No corresponding FAA ETSO-C96b Anticollision Light System TSO revision Required Navigation Performance (RNP) TSO-C115d ETSO-C115d Equipment using Multi-Sensor Inputs (from 7.3.2016) Traffic Alert and Collision Avoidance System I TSO-C118a ETSO-C118a (TCAS I) (from 27.10.2014) TSO-C123c ETSO-C123c Cockpit Voice Recorder Systems (from 19.12.2013) TSO-C124c ETSO-C124c Flight Data Recorder Systems (from 19.12.2013) Airborne Navigation Sensors Using the Global TSO-C145e ETSO-C145e Positioning System Augmented by the (from 5.5.2017) Satellite-Based Augmentation System Stand-Alone Airborne Navigation Equipment Using TSO-C146e ETSO-C146e the Global Positioning System Augmented by the (from 5.5.2017) Satellite-Based Augmentation System TSO-C155b ETSO-C155b Recorder Independent Power Supply (from 21.4.2015) Next Generation Satellite Systems (NGSS) TSO-C159c ETSO-C159c Equipment (from 9.9.2016) Extended Squitter Automatic Dependent Surveillance-Broadcast (ADS-B) and Traffic TSO-C166b ETSO-C166b A3 Information Services-Broadcast (TIS-B) Equipment (2.12.2009) Operating on the Radio Frequency of 1090 Megahertz (MHZ) TSO-C176a ETSO-C176a Aircraft Cockpit Image Recorder Systems (from 19.12.2013) TSO-C199 ETSO-C199 Traffic Awareness Beacon System (TABS) (10.10.2014) TSO-C203 ETSO-C203 A1 Fire containment cover (FCC) (1.7.2014) TSO-C209 ETSO-C209 Electronic Flight Instrument System (EFIS) Display (29.9.2016) No corresponding FAA ETSO-C210 Airborne Head Up Display TSO Table 1 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 10 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 2. In summary – why and what Index 2 ETSO-2C514a: Airborne Systems For Non-Required Telecommunication Services (In Non-Aeronautical Frequency Bands) (ASNRC) This update of ETSO-2C514 is intended to impose improved standards for equipment providing non-required telecommunication services. According to this revision proposal, newly designed ASNRC manufacturers should consider aircraft information security risk mitigation strategies in their equipment design, particularly when the equipment is responsible for an interface between the aircraft and aircraft-external systems. Additionally, if the ASNRC equipment contains a memory retention device which is a rechargeable lithium battery, the flammability risk must be addressed. Changes to Index 2 of CS-ETSO New ETSO ref ETSO title Airborne Systems For Non-Required Telecommunication Services ETSO-2C514a (In Non-Aeronautical Frequency Bands) (ASNRC) Table 2 2.4. What are the expected benefits and drawbacks of the proposals Technology and its related requirements are continuously changing, and thus new standards have been developed or existing standards (on which the already published ETSOs had been based) have been updated and improved. As a result of this continuing update, new ETSOs and revised ETSOs need to be introduced. This will contribute to ensure that parts and appliances to be used on aircraft correspond to the latest (and safer) standards and technological solutions. This practice is expected to bring benefits to the industry, and no specific drawbacks are identified. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 11 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments 3. Proposed amendments The text of the amendment is arranged to show deleted text, new or amended text as shown below: — deleted text is marked with strike through; — new or amended text is highlighted in grey; an ellipsis (…) indicates that the remaining text is unchanged in front of or following the reflected amendment. 3.1. Draft certification specifications (CSs) Amend CS-ETSO, as follows: SUBPART B – LIST OF ETSOs (INDEX 1 AND INDEX 2) Index 1 EASA ETSO Ref Title Last amended by ETSO-C1ce Cargo Compartment Fire Detection Instruments CS-ETSO/Initial Issue13 ETSO-C2d Airspeed Instruments CS-ETSO/Initial Issue ETSO-C3e Turn and Slip Instruments CS-ETSO/11 ETSO-C4c Bank and Pitch Instruments CS-ETSO/Initial Issue ETSO-C5f Direction Instrument, Non-Magnetic (Gyroscopically Stabilized) CS-ETSO/11 ETSO-C6e Direction Instrument, Magnetic (Gyroscopically Stabilized) CS-ETSO/6 ETSO-C7d Direction Instrument, Magnetic Non-Stabilized Type (Magnetic CS-ETSO/Initial Issue Compass) ETSO-C8e Vertical Velocity Instrument (Rate-of-Climb) CS-ETSO/6 ETSO-C10b Aircraft Altimeter, Pressure Actuated, Sensitive Type CS-ETSO/Initial Issue ETSO-C13f Life preservers CS-ETSO/1 ETSO-C14b Aircraft Fabric, Intermediate Grade; External Covering Material CS-ETSO/Initial Issue ETSO-C15d Aircraft Fabric, Grade A; External Covering Material CS-ETSO/Initial Issue ETSO-C16ab Electrically Heated Pitot and Pitot-Static Tubes CS-ETSO/413 ETSO-C20 Combustion Heaters CS-ETSO/Initial Issue ETSO-C21b Aircraft Turnbuckle Assemblies and/or Turnbuckle Safetying CS-ETSO/Initial Issue Devices ETSO-C22g Safety Belts CS-ETSO/Initial Issue ETSO-C23df Personal Parachute Assemblies and Components CS-ETSO/Initial Issue13 ETSO-C25a Aircraft Seats and Berths (Type I Transport 6g Forward Load) CS-ETSO/Initial Issue ETSO-C26d Aircraft Wheels and Wheel-Brake Assemblies (CS-23, 27 and 29 CS-ETSO/12 aircraft) TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 12 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments EASA ETSO Ref Title Last amended by ETSO-C27 Twin Seaplane Floats CS-ETSO/Initial Issue ETSO-C28 Aircraft Skis CS-ETSO/Initial Issue ETSO-C30cd Aircraft Position Lights CS-ETSO/Initial Issue13 ETSO-C39c Aircraft Seats and Berths Certified by Static Testing only CS-ETSO/6 ETSO-C42 Propeller Feathering Hose Assemblies CS-ETSO/Initial Issue ETSO-C43c Temperature Instruments CS-ETSO/Initial Issue ETS0-C44c A1 Fuel Flowmeters CS-ETSO/8 ETS0-C45b A1 Manifold Pressure Instruments CS-ETSO/8 ETSO-C46a Maximum Allowable Airspeed Indicator System CS-ETSO/Initial Issue ETS0-C47a A1 Pressure Instruments — Fuel, Oil, and Hydraulic (Reciprocating CS-ETSO/8 Engine-Powered Aircraft) ETSO-C49b Electric Tachometer: Magnetic Drag (Indicator and Generator) CS-ETSO/Initial Issue ETSO-C53a Fuel and Engine Oil System Hose Assemblies CS-ETSO/Initial Issue ETSO-C54 Stall Warning Instruments CS-ETSO/Initial Issue ETSO-C55a Fuel and Oil Quantity Instruments CS-ETSO/7 ETS0-C56b A1 Engine-Driven Direct Current Generators/Starter Generators CS-ETSO/8 ETSO-C59b Airborne Selective Calling Equipment CS-ETSO/Initial Issue13 ETSO-C62e Aircraft Tyres CS-ETSO/7 ETSO-C63e Airborne Weather Radar Equipment CS-ETSO/13 ETSO-C64b Oxygen Mask Assembly, Continuous Flow, Passenger CS-ETSO/12 Emergency Evacuation Slides, Ramps and Slide/Rafts CS-ETSO/Initial Issue ETSO-C69c Combinations ETSO-C70b Life Rafts CS-ETSO/11 Airborne Static (‘DC to DC’) Electrical Power Converter (for Air CS-ETSO/Initial Issue ETSO-C71 Carrier Aircraft) ETSO-C72c Individual Flotation Devices CS-ETSO/Initial Issue ETSO-C73 Static Electrical Power Inverter CS-ETSO/Initial Issue ETSO-C76b Fuel Drain Valves CS-ETSO/11 ETSO-C78a Crewmember Demand Oxygen Mask CS-ETSO/13 ETSO-C79 Fire Detectors (Radiation Sensing Types) CS-ETSO/Initial Issue ETSO-C80 Flexible Fuel and Oil Cell Material CS-ETSO/Initial Issue ETSO-C85b Survivor Locator Lights CS-ETSO/12 ETSO-C87a Airborne Low-Range Radio Altimeter CS-ETSO/8 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 13 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments EASA ETSO Ref Title Last amended by Automatic Pressure Altitude Reporting Code Generating CS-ETSO/11 ETSO-C88b Equipment ETSO-C89a Crew Member Oxygen Regulators, Demand CS-ETSO/11 ETSO-C90d A1 Cargo Pallets, Nets and Containers CS-ETSO/11 Ground Proximity Warning, Glide Slope Deviation Alerting CS-ETSO/Initial Issue ETSO-C92c Equipment ETSO-C95a Mach Meters CS-ETSO/7 ETSO-C96ab Anticollision Light Systems CS-ETSO/Initial Issue13 ETSO-C97 Lithium Sulphur Dioxide Batteries CS-ETSO/Initial Issue Flight Deck (Sedentary) Crew Member Protective Breathing CS-ETSO/11 ETSO-C99a Equipment ETSO-C100c Aviation Child Safety Device (ACDS) CS-ETSO/11 ETSO-C101 Overspeed Warning Instruments CS-ETSO/Initial Issue ETSO-C102 Airborne Radar Approach and Beacon Systems for Helicopters CS-ETSO/Initial Issue Continuous Flow Oxygen Mask Assembly (for Non-Transport CS-ETSO/Initial Issue ETSO-C103 Category Aircraft) Optional Display Equipment for Weather and Ground Mapping CS-ETSO/Initial Issue ETSO-C105 Radar Indicators ETSO-C106 A1 Air Data Computer CS-ETSO/8 ETSO-C109 Airborne Navigation Data Storage System CS-ETSO/Initial Issue ETSO-C110a Airborne Passive Thunderstorm Detection Systems CS-ETSO/Initial Issue ETSO-C112e Secondary Surveillance Radar Mode S Transponder CS-ETSO/11 ETSO-C113a Airborne Multi-purpose Electronic Displays CS-ETSO/11 ETSO-C114 A1 Torso Restraint Systems CS-ETSO/8 Required Navigation Performance (RNP) Equipment Flight CS-ETSO/813 ETSO-C115cd Management Systems (FMS) using Multi-Sensor Inputs ETSO-C116a Crew Member Portable Protective Breathing Equipment CS-ETSO/11 Airborne Wind Shear Warning and Escape Guidance Systems CS-ETSO/Initial Issue ETSO-C117a (Reactive Type) for Transport Aeroplanes ETSO-C118a Traffic Alert and Collision Avoidance System I (TCAS I) CS-ETSO/Initial Issue13 Airborne Collision Avoidance System II (ACAS II) Version 7.1 with CS-ETSO/11 ETSO-C119d Hybrid Surveillance ETSO-C121b Underwater Locating Device CS-ETSO/8 ETSO-C123bc Cockpit Voice Recorder Systems CS-ETSO/613 ETSO-C124bc Flight Data Recorder Systems CS-ETSO/613 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 14 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments EASA ETSO Ref Title Last amended by ETSO-C126b 406 and 121.5 MHz Emergency Locator Transmitter CS-ETSO/11 Rotorcraft, Transport Aeroplane, and Small Aeroplane Seating CS-ETSO/11 ETSO-C127b Systems Geosynchronous Orbit Aeronautical Mobile Satellite Services CS-ETSO/12 ETSO-C132a Aircraft Earth Station Equipment ETSO-C135a Large Aeroplane Wheels, and Wheels and Brake Assemblies CS-ETSO/6 ETSO-C139a Aircraft Audio Systems and Equipment CS-ETSO/11 ETSO-C141 Aircraft Fluorescent Lighting Ballast/Fixture Equipment CS-ETSO/Initial Issue ETSO-C142a Non-Rechargeable Lithium Cells and Batteries CS-ETSO/3 Passive Airborne Global Navigation Satellite System (GNSS) CS-ETSO/6 ETSO-C144a Antenna Airborne Navigation Sensors Using the Global Positioning System CS-ETSO/613 ETSO-C145ce Augmented by the Satellite-Based Augmentation System Stand-Alone Airborne Navigation Equipment Using the Global CS-ETSO/613 ETSO-C146ce Positioning System Augmented by the Satellite-Based Augmentation System ETSO-C147a Traffic Advisory System (TAS) Airborne Equipment CS-ETSO/12 ETSO-C151c Terrain Awareness and Warning System (TAWS) CS-ETSO/11 Universal Access Transceiver (UAT) Automatic Dependent CS-ETSO/7 ETSO-C154c Surveillance-Broadcast (ADS-B) Equipment ETSO-C155ab Recorder Independent Power Supply CS-ETSO/813 ETSO-C157b Flight Information Services-Broadcast (FIS-B) Equipment CS-ETSO/12 Aeronautical Mobile High Frequency Data Link (HFDL) CS-ETSO/7 ETSO-C158 Equipment ETSO-C159bc Next Generation Satellite Systems (NGSS) Equipment CS-ETSO/1113 ETSO-C160a VDL Mode 2 Communications Equipment CS-ETSO/8 ETS0-C161a Ground-Based Augmentation System Positioning and Navigation CS-ETSO/7 Equipment ETSO-C162a Ground-Based Augmentation System Very High Frequency Data CS-ETSO/7 Broadcast Equipment ETSO-C164 Night-Vision Goggles (NVG) CS-ETSO/8 ETSO-C165a Electronic Map Systems for Graphical Depiction of Aircraft CS-ETSO/9 Position Extended Squitter Automatic Dependent Surveillance-Broadcast CS-ETSO/1113 (ADS-B) and Traffic Information Service-Broadcast (TIS-B) ETS0-C166b A23 Equipment Operating on the Radio Frequency of 1090 Megahertz (MHz) TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 15 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments EASA ETSO Ref Title Last amended by ETSO-C170 High-Frequency (HF) Radio Communication Transceiver CS-ETSO/7 Equipment Operating Within the Radio Frequency 1.5 to 30 Megahertz ETSO-C172a Cargo Restraint Strap Assemblies CS-ETSO/12 ETSO-C173a Nickel-Cadmium, Nickel Metal-Hydride, and Lead-Acid Batteries CS-ETSO/11 ETS0-C174 A1 Battery-Based Emergency Power Unit (BEPU) CS-ETSO/8 ETSO-C175 Galley Cart, Containers and Associated Components CS-ETSO/3 ETSO-C176a Aircraft Cockpit Image Recorder Systems CS-ETSO/613 ETSO-C177a Data Link Recorder Equipment CS-ETSO/12 ETSO-C178 Single Phase 115 VAC, 400 Hz Arc Fault Circuit Breakers CS-ETSO/8 ETSO-C179a Rechargeable Lithium Cells and Lithium Batteries CS-ETSO/7 ETSO-C184 Galley Equipment CS-ETSO/7 Active Airborne Global Navigation Satellite System (GNSS) CS-ETSO/6 ETSO-C190 Antenna ETSO-C194 Helicopter Terrain Awareness and Warning System (HTAWS) CS-ETSO/7 Avionics Supporting Automatic Dependent Surveillance- CS-ETSO/12 ETSO-C195b Broadcast (ADS-B) Aircraft Surveillance Airborne Supplemental Navigation Sensors for Global Positioning CS-ETSO/7 ETSO-C196a System Equipment Using Aircraft-Based Augmentation Automatic Flight Guidance and Control System (AFGCS) CS-ETSO/8 ETSO-C198 Equipment ETSO-C199 Traffic Awareness Beacon System (TABS) CS-ETSO/13 ETSO-C200a Low-Frequency Underwater Locating Device (ULD) CS-ETSO/12 ETSO-C201 Attitude and Heading Reference Systems (AHRS) CS-ETSO/11 ETSO-C202 Cargo Stopper Devices CS-ETSO/11 ETSO-C203 A1 Fire containment covers (FCC) CS-ETSO/1213 Aeronautical Mobile Airport Communication System CS-ETSO/12 ETSO-C207 (AeroMACS) ETSO-C209 Electronic Flight Instrument System (EFIS) Display CS-ETSO/13 ETSO-C210 Airborne Head Up Display CS-ETSO/13 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 16 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments Index 2 EASA ETSO Ref Title Last amended by Power Plant Fire Detection Instruments (Thermal and Flame CS-ETSO/Initial Issue ETSO-2C11e Contact Types) ETSO-2C19c Portable Water-Solution Type Hand Fire Extinguishers CS-ETSO/12 ILS Glide Slope Receiving Equipment Operating within the Radio CS-ETSO/Initial Issue ETSO-2C34f Frequency Range of 328.6–335.4 Megahertz (MHz) ETSO-2C35d Radar Marker Receiving Equipment CS-ETSO/Initial Issue Airborne ILS Localizer Receiving Equipment Operating within the CS-ETSO/Initial Issue ETSO-2C36f Radio Frequency Range 108–112 Megahertz VOR Receiving Equipment Operating within the Radio Frequency CS-ETSO/Initial Issue ETSO-2C40c Range of 108–117.95 Megahertz ETSO-2C41d Airborne Automatic Direction Finding (ADF) Equipment CS-ETSO/Initial Issue ETSO-2C48a Carbon Monoxide Detector Instruments CS-ETSO/6 ETSO-2C63c Airborne Weather and Ground Mapping Pulsed Radars CS-ETSO/Initial Issue Distance Measuring Equipment (DME) Operating within the Radio CS-ETSO/Initial Issue ETSO-2C66b Frequency Range 960–1215 Megahertz ETSO-2C75 Hydraulic Hose Assembly CS-ETSO/Initial Issue ETSO-2C78 Crew Member Oxygen Mask CS-ETSO/3 Airborne Interim Standard Microwave Landing System Converter CS-ETSO/Initial Issue ETSO-2C93b Equipment ETSO-2C104a Microwave Landing System (MLS) Airborne Receiving Equipment CS-ETSO/Initial Issue Devices That Prevent Blocked Channels Used in Two-Way Radio CS-ETSO/Initial Issue ETSO-2C122 Communications Due to Simultaneous Transmissions Devices That Prevent Blocked Channels Used in Two-Way Radio CS-ETSO/Initial Issue ETSO-2C128 Communications Due to Unintentional Transmissions ETSO-2C153 Integrated Modular Avionics (IMA) Platform and Modules CS-ETSO/10 VHF Radio Communications Transceiver Equipment Operating CS-ETSO/6 ETSO-2C169a within the Radio Frequency Range 117.975 to 137 Megahertz ETSO-2C197 Information Collection and Monitoring Systems CS-ETSO/7 ETSO-2C500a Combined ILS/MLS Airborne Receiving Equipment CS-ETSO/Initial Issue ETSO-2C501 Mode S Aircraft Data Link Processor CS-ETSO/Initial Issue ETSO-2C502 Helicopter Crew and Passenger Integrated Immersion Suits CS-ETSO/1 Helicopter Crew and Passenger Immersion Suits for Operations to CS-ETSO/1 ETSO-2C503 or from Helidecks Located in a Hostile Sea Area Helicopter Constant-Wear Life Jackets for Operations to or from CS-ETSO/1 ETSO-2C504 Helidecks Located in a Hostile Sea Area TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 17 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments EASA ETSO Ref Title Last amended by Helicopter Life Rafts for Operations to or from Helidecks Located CS-ETSO/1 ETSO-2C505 in a Hostile Sea Area ETSO-2C509 Light Aviation Secondary Surveillance Transponders (LAST) CS-ETSO/2 ETSO-2C512 Portable Gaseous Oxygen Supply (PGOS) CS-ETSO/3 ETSO-2C513 Tow Release CS-ETSO/3 Airborne Systems for Non-Required Telecommunication Services CS-ETSO/313 ETSO-2C514a (in Non-Aeronautical Frequency Bands) (ASNRT) ETSO-2C515 Aircraft Halocarbon Clean Agent - Hand Held Fire Extinguishers CS-ETSO/11 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 18 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C1ce Date: 14.10.2009 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject : CARGO COMPARTMENT FIRE DETECTION INSTRUMENTS 1- Applicability This ETSO gives provides the requirements which cargo compartment fire detection instruments that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the SAE Aerospace Standard (AS) 8036 ‘Cargo Compartment Fire Detection Instruments’, Revision A, dated December 17, 2013, except for paragraphs 4.9, 4.10 and 4.11.SAE Aerospace Standard (AS) 8036 „Cargo Compartment Fire Detection Instruments“, dated April 1, 1985. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific Demonstrate the required functional performance under the test conditions specified in Section 4 of AS8036, Revision A. Demonstrate the required performance under the test conditions specified in Section 5 of AS8036, Revision A, using standard environmental conditions in accordance with 3.1.2. None TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 19 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C1ce Date: 14.10.2009 xx.xx.2017 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. 4- Marking 4.1- General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None. 5- Availability of Referenced Document See CS-ETSO Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 20 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: Electrically Heated Pitot And Pitot -Static Tubes 1- Applicability This ETSO gives provides the requirements which electrically heated pitot and pitot-static tubes, heated by aircraft electrical power, that are designed and manufactured on or after the date of this ETSO, must meet in order to be identified with the applicable ETSO marking. The standards apply to the following basic types: • Type I - Pitot pressure, straight and L-shaped, electrically heated. • Type II - Pitot and static pressures, straight and L-shaped, electrically heated. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO Subpart A. 2.2 - Specific 2.2.1 - Test Report The test report identified in Section 2.4.2 and data identified in Chapter 4 of EUROCAE ED-225, Ice and Rain Minimum Qualification Standards for Pitot and Pitot-Static Probes, shall be provided to the installer to support installation approval. 2.2.2 - Rated Performance Documentation The rated performance to be declared in the declaration of design and performance (DDP) shall at least contain: — the probe type and class; — the passed test conditions; — the concentration factors used for icing tests; and — the probe test voltage None 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in SAE International’s Aerospace Standard AS8006 rev A, Minimum Performance TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 21 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 Standard for Pitot and Pitot-Static Tubes, dated revised April 28, 1988 August 2015, Sections 1, 2, 3, 4, and 5, as amended modified in by Aappendix 1 of this ETSO, and EUROCAE ED-225, Ice and Rain Minimum Qualification Standards for Pitot and Pitot-Static Probes, issued February 2016, as modified in Appendix 2 of this ETSO. Note: The electric heater function is defined as starting with the aircraft interface (connector). The pneumatic pressure function is defined as starting with the pressure transducer interface if it is integrated with the probe or starting with the aircraft interface if the pressure transducer is separated from the probe. 3.1.2 - Environmental Standard EUROCAE ED-14G / RTCA DO-160G, Environmental Conditions and Test Procedures for Airborne Equipment, or later revision as permitted by See CS-ETSO, Subpart A, paragraph 2.1 and complemented by the minimum performance standards specified in Section 3.1.1 of this ETSO. Replace all references of RTCA/DO-160B in AS8006 with the standard revision as provided in CS-ETSO Subpart A paragraph 2.1. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific None 3.2.1 — Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. 4- Marking 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific In addition, the following identification information must be permanently and legibly marked: (1) The TYPE and CLASS designation in accordance with EUROCAE ED-225, paragraph 1) (2) All the information identification information required in SAE AS8006 rev A, paragraphs 3.5.4 and 3.6. “Type I” or “Type II” of the pitot and pitot-static tube, mark the following elements with at least the name of the manufacturer, manufacturer’s sub- assembly part number, and the ETSO number: (1) Each component that is easily removable (without hand tools) (2) Each interchangeable element, and (3) Each separate sub-assembly of the article that the manufacturer determines may be interchangeable. 5- Availability of Referenced Document TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 22 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 See CS-ETSO, Subpart A, paragraph 3. In addition, you can order British Standards Institution (BSI) documents from the British Standards Institution, 389 Chiswick High Road, London, United Kingdom W4 4AL. Telephone +44-208-9967555, or fax +44 208-9967001. You can also contact BSI online and order documents at www.bsonline.bsi-global.com. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 23 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 APPENDIX 1 MINIMUM PERFORMANCE STANDARDS FOR ELECTRICALLY HEATED PITOT AND PITOT-STATIC TUBES This ETSO modifies SAE AS8006 rev A, section 3, 4 and 5 as follows: AS8006 EASA Modification Section 3.3 Replace “Materials shall be corrosion–resistant and suitably treated to resist corrosion due to atmospheric conditions and salt spray. Non-magnetic materials shall be used for all parts except where magnetic materials are essential. Non-ferrous materials shall be used for all parts except where ferrous materials are essential.” Substitute: “Materials must be shown by experience or tests to be suitable and dependable. Materials must be corrosion–resistant and suitably treated to resist corrosion due to atmospheric conditions and salt spray.” Section 3.4.2 Delete “The minimum drain hole size is 0.029 in (0.74mm).” Section 3.4.5 Delete Section 3.4.5 of AS8006, and renumber the remaining paragraphs in section 3 of AS8006 accordingly. Section 3.4.9 Delete Section 3.4.9 of AS8006, and renumber the remaining paragraphs in section 3 of AS8006 accordingly. Section 3.4.10 Delete “The heater shall be regulated automatically in such a manner that the power dissipation through the heater will be an inverse function of the heating element temperature.” Section 3.5.7 Delete “Initial power surge shall not exceed four times the rated power under deicing conditions.” Section 3.5.7 Add at the end of Section 3.5.7 of AS8006: “Provide instructions for installation limitations in component maintenance manual (CMM). Require the use of properly rated circuit breaker for the sensor installation.” Section 3.7 Replace “Pitot and static pressure tube lines shall be identified by the letters “P” and “S”, respectively, which shall be stamped, edged, or engraved on the fittings or couplings.” Substitute: “Identify pitot pressure and static pressure tube lines by the letters “P” and “S” respectively. Stamp, edge or engrave the letters on the lines or fittings.” Section 4.5 Replace “After the 5 min period, the power shall be measured and shall not exceed 60 % of rated power for operation under deicing conditions specified in 5.4.” Substitute: “After the 5-minute period, measure the power. The heater will operate according to the conditions specified on the probe’s specification control drawing.” Section 5 Replace “Representative samples shall be subjected to whatever tests the manufacturer deems necessary to demonstrating compliance with the requirements of this specification, but as a minimum must include the following tests on at least one sample.” Substitute: “Manufacturers must subject representative samples to whatever tests they deem necessary to demonstrate compliance with this TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 24 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 specification. As a minimum they must include the following tests.” Section 5.4 Replace “At the conclusion of the tests, any moisture accumulating in the pitot connection line shall be removed and measured and shall not exceed 1 gram.” Substitute: “Any moisture accumulating inside the probe must not freeze or affect the pressure measurements.” Section 5.4 Use the following for the de-icing and anti-icing tests in place of the temperature and liquid water content requirements of Section 5.4 of SAE AS8006: “Use test conditions defined in CS-25, Appendix C, Part I,(b) Intermittent maximum icing, for the icing test conditions. Specifically, three conditions should be accomplished at a drop diameter of 20 micron: a liquid water content of 2.2 grams per cubic meter at an ambient temperature of -10 degrees C or colder, a liquid water content of 1.7 grams per cubic meter at an ambient temperature of -20 degrees C or colder, and a liquid water content of 1.0 grams per cubic meter at an ambient temperature of -30 degrees C or colder. Accomplish the icing test at a voltage 10 % below the nominal rated voltage. In addition, use the liquid water content tests of the supercooled liquid water test No.1 of paragraph 8.7.2(1), and test No.2 of paragraph 8.7.2(2) of the British Standards Institution (BSI) 2G 135, Electrically-Heated Pitot and Pitot-Static Pressure Heads, dated 1 January 1967, Section 8.7, and Amendment 1, dated 31 July 1973 (R 1998). Accomplish this icing test at a voltage 10 % below the nominal rated voltage.” Section 5.5 Delete “Initial power surge shall not exceed four times the deicing rated power.” Section 5.11 Add: “Section 5.11 Magnetic Effect: Determine the magnetic effect of the tube in terms of the deflection of a free magnet approximately 1-1/2 inches long in a magnetic field with a horizontal intensity of 0.18 ± 0.01 gauss, when the tube is held in various positions and with rated voltage applied on an east-west line with its nearest part 12 inches from the centre of the magnet. (An aircraft compass with the compensating magnets removed may be used as the free magnet for this test.) The maximum deflection for the free magnet must not exceed 5 degrees from any indication or reference position.” AS8006 rev A EASA Modification Section 2.1 Page 1, Replace Subsection 2.1, with the following text: 2.1 Applicable Documents The following publications form a part of this document to the extent specified herein. The applicable issue of cited publications shall be the issue in effect on the date of the publication of this document, unless otherwise specified. In the event of conflict TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 25 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 AS8006 rev A EASA Modification Section between the text of this document and the references cited herein, the text of this document takes precedence. Nothing in this document, however, supersedes applicable laws and regulations unless a specific deviation or exemption has been obtained. 2.2.6 FAA modification not retained 2.2.7 FAA modification not retained 3.4.2 Page 3, replace Subsection 3.4.2 with the following text: 3.4.2 Particle Separation Features The probe shall be designed with baffling or a pitot settling chamber, or both, to minimise the entry of liquid or solid particles into the tubing connecting the probe to the aircraft instruments. There shall be at least one drain hole to discharge or scavenge entrained liquid, such as rain or melted ice water. The probe design shall consider the effects of ingested solid particles such as ice, sand and dust. 3.4.3 Page 3, replace Subsection 3.4.3 with the following text: 3.4.3 Mis-installation The probe shall incorporate design features to minimise the potential for mis- installation on the aircraft. For example, in the case where the probe contains multiple pneumatic or electrical connections these features may include the incorporation of different pneumatic fitting sizes or types, or different electrical connector keying. 3.4.4 FAA modification not retained. 3.4.11 Page 4, amend 3.4.11 as follows: Protective coatings and finishes utilised in the construction of the probe shall not crack, chip, or scale to the extent that the probe no longer meets the aerodynamic accuracy requirements when exposed to the qualification test requirements of this standard. Other FAA modification not retained. 4.6 Page 7, amend 4.6 as follows: Other means can be used to demonstrate compliance with this requirement provided there is evidence they are equivalent or better than the specified test. Such alternate means is considered a deviation. 5.2.6 Page 12, replace Subsection 5.26 with the following text: 5.26 Fire, flammability Non-metallic probes shall be tested for compliance with the fire and flammability test standards specified in EUROCAE ED-14G / RTCA DO-160G, Section 26, Category C. If ignition occurs inside or outside of the equipment, the probe shall not propagate the flame. Tests are not required for metallic probes. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 26 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C16ab Date: 14.10.2009 xx.xx.2017 APPENDIX 2 ICE AND RAIN MINIMUM QUALIFICATION STANDARDS FOR PITOT AND PITOT-STATIC PROBES ED-225 introduces the possibility to use alternate methods. EASA considers the following alternate means as deviations from this ETSO: ED-225 section Alternate method 1.2 Modified test conditions 2.2 Modified test conditions 2.3 Scaling method not listed in section 2.3 Table 5 MMD value outside the specified range Table 6 MVD value outside the specified range In addition, this ETSO modifies EUROCAE ED-225, as follows: ED-225 Section EASA Modification 1.2 Page 1: Replace the first ‘NOTE’ with the following: NOTE: Class 2 is divided into two subgroups identified as either Class 2a or Class 2b. Class 2a probe applications typically include aircraft that operate within the mid to lower end of the Class 2 altitude range and that only use probe outputs to display basic airspeed and/or altitude. As such, Class 2a probes do not have to be tested against ice crystals at an altitude-capable icing tunnel. Class 2b applications are for probe installations intended to serve a critical function and shall be tested at an altitude-capable icing tunnel. Probes qualified to Class 2 of this standard shall be identified as either Class 2a or Class 2b. 1.2 Replace the second ‘NOTE’ with the following: NOTE: This specification, when used in conjunction with AS8006 rev A, provides a comprehensive design and test standard for the devices that fall within the scope of this document. 1.6 Page 3: Add subsection 1.6 1.6 General Definitions SHALL: The word ‘shall’ is used in this document to express an essential requirement where compliance is mandatory. MUST: The word ‘must’ is used in this document to express an essential requirement where compliance is mandatory. 3.5 Page 8, Paragraph 3.5 add the following note: NOTE: The probe test voltage reported to the installer shall not include any voltage adjustments made per paragraph 3.9 to simulate worst-case heater performance. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 27 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C23df Date: 24.10.2003 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: PERSONNEL PARACHUTE ASSEMBLIES AND COMPONENTS 1- Applicability This ETSO provides the requirements which emergency parachutes that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth for emergency parachutes in the Society of Automotive Engineers, Inc., (SAE) Aerospace Standard (AS) Document : AS 8015B „Parachute Assemblies and Components, Personnel“, dated July 7, 1992 Parachute Industry Association (PIA) Technical Standard 135 (TS-135) Revision 1.4, issued April 22, 2010, ‘Performance Standards for Personnel Parachute Assemblies and Components ’, as modified by Appendix 1 of this ETSO. 3.1.2 - Environmental Standard As set forth in Parachute Industry Association (PIA) Technical Standard 135 (TS-135) Revision 1.4, issued April 22, 2010, ‘Performance Standards for Personnel Parachute Assemblies and Components’. None 3.1.3 - Software See CS-ETSO, Subpart A, paragraph 2.2. None 3.1.4 - Airborne Electronic Hardware TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 28 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C23df Date: 24.10.2003 xx.xx.2017 See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification Equipment suitability for supporting the function defined in paragraph 3.1.1 of this ETSO is established by performing the tests as prescribed in Parachute Industry Association (PIA) Technical Standard 135 (TS-135) Revision 1.4, issued April 22, 2010, ‘Performance Standards for Personnel Parachute Assemblies and Components’, as modified by Appendix 1 of this ETSO, with no further analysis required. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific Also, mark the following permanently and legibly, with at least the manufacturer’s name, subassembly part number, and the ETSO number: (1) Each component that is easily removable (without hand tools), and (2) Each subassembly of the article that you determined may be interchangeable. None 5- Availability of Referenced Document You can download a free copy of PIA TS-135 Revision 1.4 issued April 22, 2010, Performance Standards for Personnel Parachute Assemblies and Components, at: http://www.pia.com/piapubs/TSDocuments/TS-135v1.4.pdf See CS-ETSO, Subpart A, paragraph 3 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 29 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C23df Date: 24.10.2003 xx.xx.2017 APPENDIX 1. MINIMUM PERFORMANCE STANDARD FOR PERSONNEL PARACHUTE ASSEMBLIES AND COMPONENTS This Appendix prescribes the MPS for a personnel parachute assembly and its components. The applicable standard is PIA TS-135 Revision 1.4, issued April 22, 2010, Performance Standards for Personnel Parachute Assemblies and Components, as modified for this ETSO: 1. Page 2, replace Para, 2.1.i. to read as follows: ‘Cognisant Agency’ — The European Aviation Safety Agency (EASA). 2. Page 2, replace Para, 2.1.a. to read as follows: ‘Administrator’ — EASA. 3. Page 5, Para. 4.1.2. delete: ‘generally’. Stitching should not ravel when broken. ‘Generally’ reduces the requirement for stitch choice, and adversely impacts the current standard. 4. Page 5, Para. 4.1.3.delete: ‘Ref: Table 2’. Table 2 is not relevant to this requirement. Testing of a packed assembly will show if the main parachute will interfere with the proper function of the reserve parachute. 5. Page 8, Para. 4.3.5.3 replace ‘a 200 lbf (889.6 N)’ with ‘the greater of (200 lbf (889.6 N)) and the (maximum operating weight times 0.84)’. To ensure that the compression load is at least the compression load of the body without legs and feet. 6. Page 9, Para. 4.3.7. in first sentence delete: ‘a weight not more than’. The worst case is the maximum operating weight. 7. Page 11, Para 4.3.11. in the first sentence delete ‘not more than’. The worst case is the maximum operating weight. 8. Page 11, disregard paragraph 4.3.9.1., Rate of Descent Tests (Method 2). 9. Page 14, Table 1, under Marking Data Requirements, replace: Statement of Authorisation under TS0-C-23e and/or (J) TSO-C-23e if applicable. with: Statement of Authorisation under ETSO-C23f. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 30 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C30cd Date: 24.10.2003 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: AIRCRAFT POSITION LIGHTS 1- Applicability This ETSO provides gives the requirements which new models of aircraft position lights that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the Society of Automotive Engineers, Inc., (SAE) Aerospace Standard (AS) Document AS8037C, ”’Minimum Performance Standard for Aircraft Position Lights’“, dated January 1986 July 2013. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 – Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification None. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 31 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C30cd Date: 24.10.2003 xx.xx.2017 See CS-ETSO, Subpart A, paragraph 2.4. 4- Marking 4.1 - General In lieu of the marking detailed in CS-ETSO, Subpart A, paragraph 1.2, the minimum lamp candle power or lamp part number shall be shown. 4.2 - Specific NONE 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 32 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C59b Date: 24.10.2003 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: AIRBORNE SELECTIVE CALLING EQUIPMENT 1- Applicability This ETSO provides gives the requirements which airborne selective calling equipment that are designed and is manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in RTCA document RTCA/DO-93A, Minimum Operational Performance Standards (MOPS) for Airborne Selective Calling (SELCAL) Equipment, dated March 17, 2016 DO-93 „Minimum Performance Standards – Airborne Selective Calling Equipment“ dated February 10, 1959. Demonstrate the required functional performance under the test conditions specified in RTCA/DO-93A, Minimum Operational Performance Standards for Airborne Selective Calling (SELCAL) Equipment, Section 2.4, dated March 17, 2016. Demonstrate the required performance under the test conditions specified in RTCA/DO -93A, Section 2.3, using environmental conditions identified in paragraph 3.1.2 of this ETSO and test procedures appropriate for airborne equipment. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Software TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 33 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C59b Date: 24.10.2003 xx.xx.2017 See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition. Loss of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition. None 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 34 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C63ce Date: 24.10.2003 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: Airborne Weather And Ground Mapping P ulsed Radars Equipment 1- Applicability This ETSO gives provides the requirements which that airborne weather radar equipment and ground mapping pulsed radars that is designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. This ETSO standard addresses weather detection and ground mapping, forward-looking wind shear detection, forward-looking turbulence detection, and atmospheric threat awareness capability. It does not include flight guidance system functionality in support of an approved wind shear detection and avoidance system. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standard set forth in EUROCAE document ED-38. In addition to requirements of EUROCAE document ED-38, all materials used except small parts (such as knobs, fasteners, seals, grommets and small electrical parts) that would not contribute significantly to the propagation of a fire, must be self- extinguishing when tested in accordance with applicable requirements of CS 25 Appendix F. Standards set forth in RTCA Document DO-220A, Minimum Operational Performance Standards (MOPS) for Airborne Weather Radar Systems, dated March 17, 2016, for the equipment classes defined in Table 1. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 35 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C63ce Date: 24.10.2003 xx.xx.2017 Equipment Equipment Type Minimum Performance Standards Class The following sections of RTCA DO-220A: Section 2.2, with the following exclusions: paragraphs Forward-Looking 2.2.1.3.6, 2.2.1.3.7, 2.2.2, 2.2.4, and 2.2.5., and A Wind shear Detection Capability Sections 2.3 (performance under environmental conditions) and 2.4 (test requirements) as applicable to the class The following sections of RTCA DO-220A: Section 2.2, with the following exclusions: paragraphs Forward-Looking 2.2.1.3.5, 2.2.1.3.7, 2.2.2, 2.2.3, and 2.2.5., and B Turbulence Detection Capability Sections 2.3 (performance under environmental conditions) and 2.4 (test requirements) as applicable to the class The following sections of RTCA DO-220A: Section 2.2, with the following exclusions: paragraphs Airborne Weather and 2.2.1.3.5, 2.2.1.3.6, 2.2.1.3.7, 2.2.3, 2.2.4, and 2.2.5., and C Ground Mapping Pulsed Radar Sections 2.3 (performance under environmental conditions) and 2.4 (test requirements) as applicable to the class The following sections of RTCA DO-220A: Section 2.2, with the following exclusions: paragraphs Atmospheric Threat 2.2.1.3.5, 2.2.1.3.6, 2.2.2, 2.2.3, and 2.2.4. D Awareness Capability Sections 2.3 (performance under environmental conditions) and 2.4 (test requirements) as applicable to the class Table 1 - Airborne Weather Radar Equipment Classes and Applicable MPS Any of these classes may be implemented individually or in combination. Therefore, a piece of equipment may be eligible for one or more classes. Functionality This ETSO standard applies to equipment intended to: (1) Provide airborne wind shear detection (equipment Class A). Equipment Class A provides forward-looking wind shear detection functionality. However, this ETSO does not include flight guidance system functionality in support of an approved wind shear detection and avoidance system; TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 36 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C63ce Date: 24.10.2003 xx.xx.2017 (2) Provide advanced and advisory indication of potentially hazardous turbulence conditions detectable by weather radar, together with other flight information, to assist pilots with turbulence avoidance decisions (Equipment Class B); (3) Detect and display echoes from precipitation to assist in flight crew analysis of weather. Maintain contact with geographic features such as international shoreline boundaries as a supplement to navigational orientation (Equipment Class C); and (4) Provide timely and advisory information to pilots to enhance their situational awareness of atmospheric activity and assist with atmospheric threat avoidance decisions (Equipment Class D). 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2 3.1.4 - Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3 3.2 - Specific None 3.2.1 - Failure Condition Classification Failure of the function defined in paragraphs 3.1.1(2) or 3.1.1(4) resulting in unannunciated malfunction of the function is a minor failure condition. Failure of the function defined in paragraph 3.1.1(1) or 3.1.1(3) resulting in unannunciated malfunction of the function or missed detection is a major failure condition. Loss of the functions defined in paragraph 3.1.1 is a minor failure condition. 3.2.2 - Installation Manual The applicant should provide a manual(s) containing the following items: (1) Operating instructions and equipment limitations sufficient to describe the equipment’s operational capability; (2) For Equipment Class B, identify the installation instructions for the identified aircraft class selected from RTCA/DO-220A, paragraph 2.2.4.1, Table 2-4; (3) Expected radome performance for the electromagnetic signals passing through it (paragraph 2.2 of RTCA DO-213A, Minimum Operational Performance Standards for Nose-Mounted Radomes, dated March 17, 2016); (4) Weather performance index (range) in accordance with the requirements of RTCA DO-220A; and (5) Wind shear detection range in accordance with the requirements of RTCA DO-220A. 4- Marking TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 37 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C63ce Date: 24.10.2003 xx.xx.2017 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None. The marking must also include the equipment class, as defined in Table 1. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 38 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) Subject: CREWMEMBER DEMAND OXYGEN MASK 1- Applicability This ETSO provides gives the requirements which the crewmember constant flow mask or crewmember demand oxygen masks that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Both crewmember constant flow mask and c Crewmember demand oxygen masks must meet the standards set forth in SAE International (SAE) Aerospace Standard (AS) 8026A, Crewmember Demand Oxygen Mask for Transport Category Aircraft, dated October 2001, as modified by Appendix 1 of this ETSO. Crewmember oxygen masks are separated into four types; — Type I: Quick donning mask with integral breathing valve(s); — Type II: Quick donning mask without integral breathing valve(s); — Type III: Non-quick donning mask with integral breathing valve(s); and — Type IV: Non-quick donning mask without integral breathing valve(s)the attached Appendix 1: “Standard for Crewmember Demand Oxygen Masks” and, when applicable, additional specific requirements as described here after in paragraph 3.2 – Specific. This ETSO standard applies to crewmember demand oxygen masks to be used with straight-demand, diluter-demand and pressure-demand oxygen systems on transport category aircraft. The oxygen mask design should be either oronasal, covering the mouth and nose, or full face, covering the mouth, nose and eyes. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 39 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 3.1.2 - Environmental Standard None. Refer to CS-ETSO, Subpart A, as well as SAE AS8026A, paragraph 4.5. 3.1.3 - Computer Software None. See CS-ETSO Subpart A paragraph 2.2 3.1.4 - Electronic Hardware See CS-ETSO Subpart A paragraph 2.3 3.2 - Specific If a breathing bag is installed it shall meet the requirements of the Society of Automotive Engineers Inc (SAE) Aerospace Standard (AS) N° AS 8025, “Passenger Oxygen Mask”, Rev. A, dated January 1999, paragraphs 4.3 (volume) and 5.5.1 (strength). If an oxygen flow indicator is installed it shall meet the requirements of the Society of Automotive Engineers Inc (SAE) Aerospace Standard (AS) N° AS 916, “Oxygen Flow Indicators”, Rev. B, dated July 1996, paragraph 3.2 (Low pressure continuous flow type). 3.2.1 - Flammability For flammability, the applicable paragraphs of CS-25, Appendix F, shall apply. 4- Marking 4.1. - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2. - Specific 4.2.1 — Each constant flow mask shall be marked with: (i) the term “Constant Flow Mask”; (ii) the maximum environmental (cabin) altitude the mask is qualified for. 4.2.1 - Each demand flow mask shall be marked to indicate: (a) (i) whether it is a “’non-pressure-demand’” or a “’pressure-demand’” mask; (b) (ii) the maximum environmental (cabin) altitude for which it is qualified; (c) its type in accordance with paragraph 3.1.1; and (d) its size (if more than one size is manufactured). 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 40 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 APPENDIX 1 MPS FOR CREWMEMBER DEMAND OXYGEN MASKS STANDARD FOR CREWMEMBER DEMAND OXYGEN MASKS1.0 Purpose. This Standard contains minimum performance standards for the manufacture of demand type oxygen masks for use with non-pressure demand (straight-demand and diluter-demand) and pressure- demand oxygen systems. It is based on the equivalent FAA standard for crewmember demand oxygen masks and the Agency has added values that are in imperial units also in SI units 2.0 Design and Construction of Mask. To be eligible for approval under a European Technical Standard Order Authorisation, the oxygen mask must possess the following design and construction characteristics. 2.1 Masks designed for use with a remotely located oxygen flow regulator must include a flexible oxygen supply tube fixed or detachable at the mask or at the regulator or at both. Oxygen supply tubes used in conjunction with mask-mounted oxygen flow regulators are not subject to this paragraph. 2.2 The mask must be designed for respiration through the nose and mouth (oronasal). The mask may also include integral goggles designed to protect the eyes from smoke and harmful gases (fullface). 2.3 The mask must be constructed of materials that – (a) do not contaminate air or oxygen: (b) are not adversely affected by continuous contact with oxygen; and (c) are at least flame resistant. 2.4 The mask must be designed to prevent the accumulation of hazardous quantities of expiratory gases within the facepiece chamber. 2.5 The mask must be designed to prevent the formation of accumulation of frost which would interfere with the function of the exhalation valve, unless it can be shown that the frost can be removed by external manipulation without removing the mask from the face of the user. 2.6 The full-face mask must be designed to include means for the prevention or the removal of condensation from the inside surfaces of the goggle lenses. 2.7 Masks equipped with oxygen supply tubes designed for quick disconnection at the mask or at the regulator must incorporate means to alert the user when his oxygen supply tube has become disconnected. Such means must not restrict the flow of ambient air through the oxygen supply tube by an amount exceeding 25 percent. This section does not apply if the quick disconnect device incorporates means to prevent inadvertent separation. 3.0 Performance. Five masks of each kind for which approval is sought must be shown to comply with the minimum performance standards set forth in paragraphs 3.1 through 3.12, except that only one mask of each kind is required to comply with the provisions of paragraphs 3.6, 3.8, 3.9, and 3.11. Tests must be conducted at ambient atmospheric conditions of approximately 102 KPa (30" hg.) and 21 °C (70°F.), except as otherwise specified. Gas flow rates and pressures must be corrected to STPD. 3.1 Quick-disconnect Coupling. The force required to separate quick disconnect couplings not designed to prevent inadvertent separation must not be less than 45 N (10 pounds) exerted along the TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 41 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 axis of symmetry of the oxygen supply tube. 3.2 Strength. (a) The mask must be capable of sustaining a pull force on the suspension device attachment fittings of not less than 156N (35 pounds) in any direction for a period of not less than 3 seconds. (b) The oxygen supply tube assembly must be capable of sustaining a pull force of not less than 134 N (30 pounds) exerted along the axis of symmetry of the tube for a period of not less than 3 seconds. (c) The oxygen supply tube assembly must be capable of sustaining an internal pressure of 10 KPa (1.5 p.s.i.g) 3.3 Leakage. (a) The total inward leakage rate, with the complete mask positioned on the face or on a suitable test stand in a manner which simulates normal use, must not exceed 0.10 LPM STPD at any negative differential pressure within the range of from zero to 1.5 KPa (6.0 inches of water). (b) Inhalation valves installed in pressure-demand masks must not back leak more than 0.015 LPM, STPD, when subjected to a suction pressure differential of 0.03 KPa (0.1" H2O) and not more than 0.15 LPM, STPD, when subjected to a suction pressure differential of 3 KPa(12.0" H2O). (c) The oxygen supply tube assembly must not leak when subjected to an internal pressure of 10 KPa (1.5 p.s.i.g) 3.4 Flow Resistance. (a) The inspiratory resistance of the mask and oxygen supply tube including the oxygen supply connector when inserted in an appropriate mating fitting must not exceed the following negative differential pressures at the corresponding oxygen flow rates: Differential Pressure Flow Rate KPa (inches H2O) (LPM) 0.15 (0.6) 20 0.37 (1.5) 70 0.62 (2.5) 100 (b) The expiratory resistance of the mask must not exceed the following positive differential pressures at the corresponding oxygen flow rates: Differential Pressure Flow Rate KPa (inches H2O) (LPM) 0.25 (1.0) 20 0.50 (2.0) 70 0.75 (3.0) 100 3.5 Pressure-Demand. Exhalation Valve Performance. The exhalation valve installed in a pressure demand mask must open when the pressure within the facepiece is 2.7 KPa (20 mm Hg) and the pressure in the supply tube is 2.0 KPa (15 mm Hg) to 2.7 KPa (19.9 mm Hg). TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 42 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 3.6 Vibration. The flow of gases during the respiratory process must not cause vibration, flutter, or chatter which would interfere with the satisfactory operation of the mask. 3.7 Acceleration Load. The exhalation valve must not inadvertently operate under a 3g load applied in any direction. 3.8 Extreme Temperature. The mask must comply with paragraphs 3.3 through 3.5 in an ambient temperature of 21°C (70°F.) within 15 minutes after being stored at a temperature of 71°C (160°F.) for 12 hours, and within 15 minutes after being stored at -18°C (0°F.) for 2 hours. The relative humidity during storage must vary from 5 to 95 percent. The mask facepiece must not be gummy or sticky and must provide a normal seal after the high temperature exposure. 3.9 Low Temperature Test Delay. (a) The mask must function properly, without apparent delay, at a temperature of 21°C (70°F.) after being stored at a temperature of -7°C (20°F.) for not less than 2 hours. (b) The mask must function properly, without apparent delay, and continue for a period of not less than 15 minutes when tested at a temperature of -7°C (20°F) after being stored at a temperature of 21°C (70° F.) for not less than 12 hours. 3.10 Decompression. (a) A mask not equipped with a pressure relief valve must not suffer damage and must comply with paragraphs 3.3 through 3.5 after being subjected to a decrease in ambient pressure from 83 KPa (12 p.s.i.a.) to not less than 19 KPa (2.7 p.s.i.a.) for a straight or diluter-demand kind, or to not less than 14 KPa (2.1 p.s.i.a.) for a pressure demand kind, within a period of not more than 1 second. This decompression test must simulate the condition that could be imposed on a mask being worn by a crewmember during the specified decompression. (b) A mask equipped with a pressure relief value must be subjected to the decompression specified in subparagraph (a) of this section during which the pressure relief valve must open at a differential pressure of 4.2 KPa (17" H2O) and must relieve the differential pressure to a value not exceeding 4 KPa (l6" H2O) within 5 seconds. During the 5 second interval, the pressure differential must not exceed a value of 5 KPa (20" H2O). The pressure relief valve must close at a differential pressure of 3.5 KPa (14" H2O). 3.11 Cycling. The mask must comply with paragraphs 3.3 through 3.5 after being subjected to the following simulated breathing schedule for a total of 50,000 cycles: Respiratory Minute Flow Rate Volume, Tidal Cycles LPM, STPD Liters 20,000 20 1.0 25,000 30 1.5 5,000 70 2.0 A constant time interval must be maintained between respiratory cycles. 3.12 Microphone. If the mask is designed to include a microphone, the installation of the microphone must not interfere with the operation of the mask. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 43 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 4.0 Quality Control. 4.1 Production Tests. Each mask must be shown to comply with the provisions of paragraph 3.3(a), total leakage. 4.2 Random Tests. One mask must be selected at random from each lot and must be shown to comply with paragraph 3.1 through 3.12. The lot size must be selected by the applicant, subject to the approval of the Agency, on the basis of evaluation of the applicant’s quality control systems (see 21A.139b). 5.0 Maximum Environmental (cabin) Altitude. The minimum pressure to which the mask has been shown to decompress satisfactorily in accordance with paragraphs 3.10(a) or (b) of this standard determines the maximum environmental altitude of the mask, except that it shall not exceed the value shown in the following table: Maximum Environmental Kind of Mask (Cabin) Altitude 40,000 feet Straight or Diluted-Demand 45,000 feet Pressure-Demand 6.0 Abbreviations and Definitions. LPM Liters per minute. STPD Standard temperature and pressure, dry (0°C. 760 mm.Hg.) p.s.i.g. Pounds per square inch, gage. p.s.i.a. Pounds per square inch, absolute. g Acceleration or gravity, 9.81 m/second2 (32.2 feet/ second2). Tidal volume Volume of air inspired per breath. This Appendix prescribes the MPS for crewmember demand oxygen masks. The applicable standard is SAE AS8026A, Crewmember Demand Oxygen Mask for Transport Category Aircraft, dated October 2001. It is modified as follows. SAE AS8026A: Modification: Section 1, SCOPE To be disregarded. Paragraph 3.1.1 To be revised: ‘General: Materials of a type, grade and quality that experience and/or tests have shown suitable for the purpose shall be used. Materials that contaminate oxygen or are adversely affected by continuous service with oxygen shall not be used. The following test methods shall be used to verify compliance with material requirements established in a design specification.’ Paragraph 3.1.1 a. Resistance to Flammability To be revised: ‘Except for small parts like knobs, triggers, fasteners, seals, and electrical parts that don’t contribute significantly to fire propagation, materials including packaging shall comply with CS 25.853(a) and Appendix F, Part I(a)(1)(iv)’ Paragraph 3.1.3 To be revised: ‘Cleaning and Sterilizing: The oxygen mask shall be made of materials that permit cleaning and sterilising without TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 44 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C78a Date: 20.11.2008 xx.xx.2017 adverse effects, and without major disassembly. The cleaning method shall be either manufacturer recommended, or according to SAE ARP1176, Oxygen System Component Cleaning and Packaging. Cleaning and sterilising procedures shall be included in the Component Maintenance Manual (CMM).’ Paragraph 3.1.4 To be revised: ‘Elastomeric Components: A tag or leaflet describing service life limits of elastomeric components and a suggested method to inspect for deterioration in these components shall be attached to the mask. If not attached, the tag shall be included with the packaged mask as delivered to the user. Silicone rubber parts, having unlimited shelf life, are exempt from this requirement. Life limits and inspection procedures shall be included in the CMM.’ Paragraph 3.3 To be disregarded. Marking is specified in paragraph 4 of this ETSO. Paragraph 3.5 To be revised: ‘The oxygen mask face-piece of Type I and Type II masks shall be stored in a container, mounted (panel or sidewall) or attached to a suspension device. The mask assembly must be donned using only one hand and operating in 5 seconds or less, without disturbing eyeglasses. After donning, the mask must not prevent immediate communication between crewmembers of the airplane intercommunications system.’ Type III and Type IV oxygen masks may be similarly installed, and may be designed to require use of two hands and/or take more than 5 seconds to don. Paragraph 3.12 To be revised: ‘Oxygen mask design shall permit the installation of a microphone and connecting communications cable. When microphones are furnished with the masks, these must conform to ETSO-C139a.’ Paragraph 5.1.4 To be disregarded. Paragraph 5.1.5 To be disregarded. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 45 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C96ab Date: 24.10.2003 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: ANTICOLLISION LIGHT SYSTEMS 1- Applicability This ETSO provides gives the requirements which new models of anticollision lights systems that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 — Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the Society of Automotive Engineers, Inc., (SAE) Aerospace Standard (AS) Document AS8037C “’Minimum Performance Standard for Aircraft Position Lights’“, dated January1986 July 2013. In addition to Chapter 3 General Standard of AS-8017A, all materials used except small parts (such as knobs, fasteners, seals, grommets and small electrical parts) that would not contribute significantly to the propagation of a fire, must be self-extinguishing when tested in accordance with applicable requirements of CS 25.869(a)(4) and Appx F at Change 14. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 46 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C96ab Date: 24.10.2003 xx.xx.2017 None. See CS-ETSO, Subpart A, paragraph 2.4. 4- Marking 4.1 - General Marking is detailed in CS-ETSO Subpart A paragraph 1.2. 4.2 - Specific None. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 47 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) Subject: REQUIRED NAVIGATION PERFORMANCE (RNP) EQUIPMENT AIRBORNE AREA NAVIGATION EQUIPMENT FLIGHT MANAGEM ENT SYSTEMS (FMS) USING MULTI-SENSOR INPUTS 1- Applicability This ETSO gives provides the requirements which required navigation performance (RNP) equipment using multi-sensor inputs Airborne Area Navigation Equipment Flight Management Systems (FMS) using Multi-Sensor Inputs that are is designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. This ETSO supports performance-based operations using RNP values from RNP 0.3 through RNP 4.0 and advanced RNP functions. This ETSO does not address RNP operations with authorisation required (RNP AR), localizer performance without vertical guidance/localizer performance with vertical guidance (LP/LPV), ground- based augmentation system landing system (GLS) approach operations or the positioning requirements to support ADS-B out capability. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in RTCA DO-283AB, Minimum Operational Performance Standards for Required Navigation Performance for Area Navigation, dated 28/10/2003 December 15, 2015, section 2, as modified by Appendix 1 of this ETSO. Section 1.8 of this standard defines 2 classes, A and B, of equipment. Requirements applicable to Class A and Class B equipment are specified in RTCA DO-283B, Table 2-13. The applicant shall state the minimum RNP supported by the equipment, as well as the equipment class, in the DDP. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 48 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific Add the following system performance requirement, consistent with the desired RNP capability, to DO-283A, paragraph 2.2.5.2: When using GNSS, the aircraft navigation system shall provide an alert when the probability of signal- in-space errors causing a lateral position error greater than two times the desired RNP (2 × RNP) exceeds 1 × 10-7 per hour. Note: This exception supports international harmonisation of requirements for RNAV and RNP. The exception is comparable to the ETSO-C115b exception that invoked ETSO-C129a system performance requirements when integrating GNSS as part of a multi-sensor navigation solution. Define the data quality requirements (DQR) for database that are not included in the ETSO article configuration. DQR shall be in a form available to the user. 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Design the system to the appropriate failure condition classification(s) as detailed in further the guidance material dedicated to for the different types of navigation specification (for instance RNP1, Advanced RNP, RNP-APCH LPV, RNP AR…). 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 49 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 Appendix 1- MODIFICATIONS TO RTCA DO-283B REQUIREMENTS Scope This Appendix describes modifications and additions to the requirements found in RTCA DO-283B that the RNP equipment shall meet for compliance with this ETSO. EASA expects the RNP equipment to execute published instrument procedures designed to provide maximum efficiency, flexibility, and aircraft eligibility. These instrument procedure designs may include RNAV components and/or leg types associated with conventional procedures. The modifications and additions below are necessary to ensure RNP equipment can properly execute current and future instrument procedure designs. The modifications below refer to or add chapters in reference to RTCA DO-283B. 2.2.1.2.1 Leg Types Add the following required leg types to Table 2-1: FM Fix to Manual Termination VA Heading to Altitude Leg VI Heading to Intercept VM Heading to Manual Termination CA Course to Altitude Leg Add the following requirement and note after the sentence ‘Refer to Appendix D for additional details for each of the leg types’: The equipment shall have the ability to use an IF that is a fly-by waypoint, fly-over waypoint, or the initial fix defining an RF leg segment. Additionally, the equipment shall have the ability to proceed ‘direct to’ an IF. Note: This requirement is needed to support RNP departure procedures, particularly those with an RF leg as the first leg segment, where the IF defines the beginning of the RF leg. With LNAV available immediately after take-off, the equipment should provide guidance direct to the IF and sequence the next leg; particularly when the IF is the initial fix of an RF leg). 2.2.1.2.2 Flight Planning Insert a new paragraph and note between the last paragraph and next to last paragraph as follows: The equipment shall have the ability to use a single waypoint supporting multiple RNP terminal procedures (SID, DP, STAR) and multiple approach procedures using different tracks. When a single waypoint supports an arrival and an RNP instrument approach using different tracks, the equipment shall continue following the arrival procedure to the procedure’s termination fix and shall not automatically sequence onto the RNP approach procedure using that same waypoint. Note: Some waypoints may serve as: a transition fix for an instrument approach; an initial approach fix (IAF) for an instrument approach; the first fix in a terminal arrival procedure; and an intermediate waypoint on a terminal RNP procedure (SID, DP or STAR) (see Figure 1 below). This requirement ensures the equipment completes RNP procedures as assigned by ATC, and loaded by the flight crew into the active flight plan from the on-board navigation database. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 50 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 Figure 1- Single Waypoint Serving Multiple RNP Procedures Add the following requirement and note after the last paragraph in the section 2.2.1.2.2: The equipment shall not permit the flight crew to select a procedure or route, either manually or automatically, that is not supported by the equipment. For example, a procedure is not supported if it incorporates advanced RNP functions and the equipment does not provide those advanced RNP functions. Note: Procedures (approaches, arrivals, departures, routes) are defined by a series of waypoints and leg types. 2.2.1.2.9 Transitions Between Legs Change the first paragraph and note 1 as follows: The navigation system shall provide a means to automatically transition from one leg to another. Three categories of transition between fixed path segments can be defined: — Fly-by transitions; — Fly-over transitions; and — Fixed radius transitions. The navigation system shall be capable of accomplishing all three transitions. Fly-by transitions shall be the default transition when the transition type is not specified. Note 1: For fly-by and fly-over transitions, no predictable and repeatable path is specified because the optimum path varies with airspeed and bank angle. Fly-by and flyover transitions use a transition area. The aircraft should remain within the transition area for fly-by transitions. 2.2.1.2.9.1.1 Fly-Over Transitions Insert a new section 2.2.1.2.9.1.1 after section 2.2.1.2.9.1 Fly-By Transitions as follows: The navigation system shall define a path to accomplish fly-over transitions that passes through the transition waypoint. There are no requirements that apply to the transition area, as the equipment TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 51 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 provides guidance relative to the two straight segments to and from the transition waypoint (see figure 2-4.1). Figure 2-4.1: Fly-Over Theoretical Transition Area 2.2.1.4. Displays and System Alerting Add the following second sentence to the paragraph and note 2: If the equipment incorporates an electronic map display to provide a graphical depiction of navigation information, it shall meet the requirements of RTCA/DO-257A ‘Minimum Operational Performance Standards for the Depiction of Navigational Information on Electronic Maps’. Note 2: Manufacturers should use RTCA/DO-257A with RTCA/DO-283A, Appendix K until RTCA/DO-257B is published. 2.2.2.2.6.1 Descent Path Construction Add the following requirement and notes to the list of general requirements: 6. The RNP equipment shall always use the procedure-defined flight path angle to define the final approach segment of an RNP instrument approach procedure offering vertical guidance (RNP procedures offering LNAV/VNAV minima). Note 1: Some RNP instrument approach procedures define the final approach fix with an ‘AT’ altitude constraint (‘hard altitude’) and the intent of this requirement is to use the published FPA, the designated end of the runway (DER) and the threshold crossing height for vertical path construction. The equipment should not generate a geometric, point-to-point vertical path between two ‘AT’ constraints on a final approach segment. Note 2: This requirement is not intended to prohibit the optional use of baro-VNAV temperature compensation as described in RTCA/DO-283B Appendix H. 2.4.3.1 Test Scenario(s) Add the following leg types to the list in paragraph (a): FM, VA, VI, VM, CA. Appendix D Add the following leg type definitions to Appendix D: TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 52 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 D.10 Fix to Manual Termination (FM) An FM leg defines a specified track over the ground from a database fix until a manual termination of the leg. Figure D-6: Fix to Manual Termination (FM) Leg D.11 Heading to Altitude (VA) A VA leg defines a specified heading to a specific altitude termination at an unspecified position. No correction is made for wind. Figure D-7: Heading to Altitude (VA) Leg D.12 Heading to Intercept (VI) A VI leg defines a specified heading to intercept a subsequent leg at an unspecified position. No correction is made for wind. Figure D-8: Heading to Intercept (VI) Leg D.13 Heading to Manual Termination (VM) A VM leg defines a specified heading until a manual termination of the leg. No correction is made for wind. Figure D-9: Heading to Manual Termination (VM) Leg TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 53 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C115cd Date: 12.07.2013 xx.xx.2017 D.14 Course to Altitude (CA) A CA leg defines a specified course to a specific altitude at an unspecified position. The course is flown making adjustment for wind. Figure D-10: Course to Altitude (CA) Leg TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 54 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C118a Date: 24.10.2003 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: TRAFFIC ALERT AND COLLISION AVOIDANCE SYSTEM (TCAS) AIRBORNE EQUIPMENT, TCAS I. 1- Applicability This ETSO gives provides the requirements which new models of active traffic alert and collision avoidance system airborne equipment that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - General 3.1.1 - Minimum Performance Standard Standards set forth in Radio Technical Commission for Aeronautics (RTCA) Document DO-197A, Minimum Operational Performance Standards for An Active Traffic Alert and Collision Avoidance System I (Active TCAS 1) Section 2.1 and 2.2, dated September 12, 1994March 20, 1987, as modified by Change 1 dated July 29, 1997.amended and supplemented by this ETSO. Equipment test procedures set forth in Radio Technical Commission for Aeronautics (RTCA) Document DO-197A, Minimum Operational Performance Standards for An Active Traffic Alert and Collision Avoidance System I (Active TCAS 1) Section 2.4, dated September 12, 1994, as modified by Change 1 dated July 29, 1997. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2 3.1.4 - Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 55 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C118a Date: 24.10.2003 xx.xx.2017 None 3.2.1 Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 is a major failure condition for malfunctions causing the display or annunciation of hazardously misleading information in airborne aircraft.  Loss of the function defined in paragraph 3.1.1 is a minor failure condition. 4- Marking 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 56 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C123bc Date: 21.12.2010 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) Subject: Cockpit Voice Recorder Systems 1– Applicability This ETSO gives provides the requirements that new models of cockpit voice recorder (CVR) systems that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the applicable sections of EUROCAE document ED-112A, MOPS for Crash Protected Airborne Recorder Systems, dated September 2013,dated March 2003 that pertain to the CVR type, as modified by Appendix 1 of this ETSO, except Chapters I-1 and I-6, and Sections 2-1.1 , 2- 1.5 , 2-1.6 , 2-1.11 , 2-1.12 , 2-3.1 , 2-5 , 3-1.1, 3-1.2, 3-1.3, 3-1.4, 3-1.5 , 3-1.7, Annex I-A, Annex I-C, and a) Recorder start and stop times, Section 2-1.5: Start and stop times must comply with applicable operational regulations. b) Recorder location, Section 2-5.4.1: Recorder location must comply with applicable EASA Certification Specifications. c) Equipment Installation and Installed Performance (Deployable recorders) Section 3-4. d) Equipment Installation and Installed Performance, Part I-6. e) Oother ED-112A requirements related to for installation, flight testing, aircraft maintenance, and others that do not pertain to MPS specific criteria. The first two exceptions above to ED-112 are related to compliance with the operational regulations and certification specifications. The last three items are exceptions to requirements for installation, flight testing, aircraft maintenance, and others that do not pertain to MPS criteria specific to the ETSO equipment. Table 1 below lists CVR recorder types and the ED-112A section and part containing the MPS for each type: TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 57 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C123bc Date: 21.12.2010 xx.xx.2017 Table 1. CVRRecorder MPS Requirements RecorderCVR Type ED-112A Reference Single function CVR Section 2 and Part I CVR function in a deployable recorder Section 2, Section 3 and Part I CVR function in a combined recorder Section 2, Section 4, and Part I Note: a CVR article may cover multiple types. A CVR may be a combined CVR and may also be deployable, in which case the applicable MOPS are Sections 2, 3, 4 and Part I, following the table above. See Appendix 1 for size, shape, and identification standards for crash protected enclosures. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2 3.1.4 - Airborne Electronic Hardware Qualification See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification Failure of the function defined in paragraph 3.1.1 of this ETSO has been determined to be is a minor failure condition. Loss of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition. The applicant must develop the system to at least the development design assurance level commensurate with this these failure conditions. Note: The failure classification requirement is driven by the use of CVRs in accident investigations need. 4- Marking 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2 4.2 - Specific 4.2.1 - Lettering identification The equipment shall comply with the identification requirement in EUROCAE ED-112A, Section 2-1, paragraph 2-1.16.3 requires the lettering on the recorder to be at least 25 mm in height. Where it is considered impractical to incorporate lettering of this height due to the size of the recorder case, the applicant may propose an alternative height provided that the size is adequate in relation to the size of the unit and allows easy readability. 4.2.2 - Marking recommendation Marking in French: “ENREGISTREUR DE VOL NE PAS OUVRIR” is optional. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 58 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C123bc Date: 21.12.2010 xx.xx.2017 APPENDIX 1 STANDARDS FOR CRASH PROTECTED ENCLOSURE 1 - Physical Size. As technology allows for increased miniaturisation, manufacturers continue to shrink the crash enclosure. Now, the enclosure can be very difficult to find in wreckage. The sum of the height (a), width (b), and depth (c) of the crash enclosure must be 23 cm (9 inches) or greater. Each of these major dimensions must be 5 cm (2 inches) or greater. Here are five examples of a crash enclosure and the minimum required dimensions: NOTE: The dimensions of the crash protected enclosure shall not include the underwater locator beacon (ULB) or its attachment hardware. 2 - Identification. Paint the crash enclosure according to CS 23.1457(g), 25.1457(g), 27.1457(g), or 29.1457(g) and mark in accordance with paragraph 4 of this ETSO. a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 1. Crash enclosure shaped like a rectangular prism. -------------------------------- Apply minimum dimensions to the major axis (a), minor axis (b), and length (c) of the enclosure. a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 2. Crash enclosure shaped like an elliptical cylinder. -------------------------------- TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 59 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C123bc Date: 21.12.2010 xx.xx.2017 Height, width, and depth are all equal to the diameter of the sphere which must be equal to or greater than 7.7 cm (3.0 inches) because of the, a + b + c >= 23 cm (9 inches), requirement. di >= 7.7 cm (3 inches) d1+d2+d3>= 23 cm (9 inches) Figure 3. Crash enclosure shaped like a sphere. -------------------------------- Dimensions a, b, and c are not necessarily equal a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 4. Crash enclosure shaped like an ellipsoid hemisphere. -------------------------------- TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 60 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C123bc Date: 21.12.2010 xx.xx.2017 Width (a) is the largest width of the enclosure, depth (b) is the largest depth of the enclosure and height (c) is the largest height of the enclosure. Take each of these major dimensions from the outer surface of the enclosure. Do not include any protrusions such as mounting flanges or plates. a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 5. Crash enclosure is generically shaped. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 61 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C124bc Date: 21.12.2010 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) Subject: Flight Data Recorder Systems 1- Applicability This ETSO gives provides the requirements that new models of flight data recorder (FDR) systems that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1. - General Applicable procedures are detailed in CS-ETSO Subpart A. 2.2 - Specific None 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the applicable sections of EUROCAE document ED-112A, dated March MOPS for Crash Protected Airborne Recorder Systems, dated September 2013, that pertain to the FDR type, as modified by Appendix 1 of this ETSO, except chapters II-1 and II-6, and Sections 2-1.1 , 2-1.5 , 2-1.6 , 2- 1.11 , 2-1.12 , 2-3.1 , 2-5 , 3-1.1, 3-1.2, 3-1.3, 3-1.4, 3-1.5 , 3-1.7, Annex II-A, Annex II-B, The ED-112 exceptions below are due to conflicts with operational regulations and EASA Certification specifications. The following are exceptions to the ED-112 part and to the sections in table 1 below. As part of this ETSO, compliance is not required for: a) Recorder start and stop times, Section 2-1.5. Start and stop times must comply with applicable operational regulations. b) Recorder location, Section 2-5.4.1. Recorder location must comply with applicable EASA Certification Specifications. c) Recorder parameters, Annex II-A. Recorder parameters must comply with applicable operational regulations. d) All and other ED-112A requirements related to for aircraft-level equipment installation, test, and maintenance. Table 1 below lists recorder FDR types and the ED-112A section and part containing the MPS for each type: Table 1. Recorder MPS Requirements TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 62 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C124bc Date: 21.12.2010 xx.xx.2017 Recorder Type ED-112A Reference Single function FDR Section 2 and Part II FDR function in a deployable recorder Section 2, Section 3 and Part II FDR function in a combined recorder Section 2, Section 4, and Part II Note: an FDR article may cover multiple types. An FDR may be a combined FDR and may also be deployable, in which case the applicable MOPS are Sections 2, 3, 4 and Part I, following the table above. See Appendix 1 for size, shape, and identification standards for crash protected enclosures. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2 3.1.4 Airborne Electronic Hardware Qualification See CS-ETSO, Subpart A, paragraph 2.3 3.2 - Specific 3.2.1 Failure Condition Classification Failure of the function defined in paragraph 3.1.1 of this ETSO has been determined to be is a minor failure condition. Loss of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition. The applicant must develop the system to at least the development design assurance level commensurate with this failure condition. Note: The failure classification requirement is driven by the use of FDRs in accident investigations need. 4- Marking 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2 4.2 - Specific 4.2.1 - Lettering Identification The equipment shall comply with the identification requirement in EUROCAE ED-112A, section 2-1, paragraph 2-1.16.3. EUROCAE ED112-Section 2-1 paragraph 2-1.16.3 requires the lettering on the recorder to be at least 25 mm in height. Where it is considered impractical to incorporate lettering of this height due to the size of the recorder case, the applicant may propose an alternative height provided that the size is adequate in relation to the size of the unit and allows easy readability. 4.2.2 - Marking recommendation Marking in French: “ENREGISTREUR DE VOL NE PAS OUVRIR” is optional. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 63 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C124bc Date: 21.12.2010 xx.xx.2017 APPENDIX 1 STANDARDS FOR CRASH PROTECTED ENCLOSURE 1 - Physical Size. As technology allows for increased miniaturisation, manufacturers continue to shrink the crash enclosure. Now, the enclosure can be very difficult to find in wreckage. The sum of the height (a), width (b), and depth (c) of the crash enclosure must be 23 cm (9 inches) or larger. Each of these major dimensions must be 5 cm (2 inches) or larger. Here are five examples of a crash enclosure and the minimum required dimensions: NOTE: The dimensions of the crash protected enclosure shall not include the underwater locator beacon (ULB) or its attachment hardware. 2 - Identification. Paint the crash enclosure according to CS 23.1459(g), 25.1459(g), 27.1459(g), or 29.1459(g) and mark in accordance with paragraph 4 of this ETSO. a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 1. Crash enclosure shaped like a rectangular prism. -------------------------------- Apply minimum dimensions to the major axis (a), minor axis (b), and length (c) of the enclosure. a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 2. Crash enclosure shaped like an elliptical cylinder. -------------------------------- TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 64 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C124bc Date: 21.12.2010 xx.xx.2017 Height, width, and depth are all equal to the diameter of the sphere which must be equal to or larger than 7.7 cm (3.0 inches) because of the, a + b + c >= 23 cm (9 inches), requirement. di >= 7.7 cm (3 inches) d1+d2+d3>= 23 cm (9 inches) Figure 3. Crash enclosure shaped like a sphere. -------------------------------- Dimensions a, b, and c are not necessarily equal a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 4. Crash enclosure shaped like an ellipsoid hemisphere. -------------------------------- TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 65 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C124bc Date: 21.12.2010 xx.xx.2017 Width (a) is the largest width of the enclosure, depth (b) is the largest depth of the enclosure and height (c) is the largest height of the enclosure. Take each of these major dimensions from the outer surface of the enclosure. Do not include any protrusions such as mounting flanges or plates. a, b, c >= 5 cm (2 inches) a+b+c>= 23 cm (9 inches) Figure 5. Crash enclosure is generically shaped. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 66 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C145ce Date: 21.12.2010 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: AIRBORNE NAVIGATION SENSORS USING THE GLOBAL POSITIONING SYSTEM AUGMENTED BY THE SATELLITE BASED AUGMENTATION SYSTEM 1- Applicability This ETSO provides gives the requirements which new models of airborne navigation sensors using the Global Positioning System (GPS) augmented by the Satellite-Based Augmentation System (SBAS) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. The standards of this ETSO apply to equipment intended to provide position information to a navigation management unit that outputs deviation commands referenced to a desired flight path. Pilots or autopilots will use these deviations to guide the aircraft. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical conditions 3.1 - Basic 3.1.1 - Minimum performance standard Standards set forth for functional equipment Class Beta in RTCA document DO -229D229E, Minimum Operational Performance Standards for Global Positioning System/ Satellite-Based Augmentation System Airborne Equipment, dated December 15, 13, 20062016, Section 2, except as modified in Appendix 1 of this ETSO as modified by Appendix 2 and 4 of this ETSO. Class Beta equipment is defined in DO-229D229E, Section 1.4. The standards in this ETSO apply to equipment intended to provide position, velocity, and time information for a navigation management unit application that outputs deviation commands keyed to a desired flight path, or a non-navigation application such as an automatic dependent surveillance-broadcast (ADS-B) or terrain awareness and warning system (TAWS). In navigation applications, pilots or autopilots will use the deviations output by the navigation management unit to guide the aircraft. In non-navigation applications, the position, velocity, and time outputs will provide the necessary inputs for the end-use equipment. These ETSO standards do not TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 67 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C145ce Date: 21.12.2010 xx.xx.2017 address integration issues with other avionics. 3.1.2 - Environmental standard See CS-ETSO, Subpart A, paragraph 2.1. The required performance under test conditions is defined in RTCA document DO -229E, Minimum Operational Performance Standards for Global Positioning System/Satellite-Based Augmentation System Airborne Equipment, dated December 15, 2016, section 2.4. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne electronic hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure condition classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 of this ETSO is a: — Major failure condition for loss of function and malfunction of en route, terminal, approach lateral navigation (LNAV), and approach LNAV/vertical navigation (VNAV) position data, — Major failure condition for loss of function of approach localiser performance without vertical guidance (LP), and approach localiser performance with vertical guidance (LPV) position data, and — Hazardous failure condition for malfunction of approach (LP and LPV) position data resulting in misleading information. 3.2.2 – Additional Specific If the equipment can satisfy the requirements of RTCA/DO-229E only when used with a particular antenna, the use of that antenna (by part number) should be a requirement on the installation. This requirement should be included in the installation manual (IM) as a limitation. The applicant shall provide all the data necessary to evaluate the geo stationary (GEO) satellite bias as defined in RTCA/DO-229E, Section 2.1.4.1.5 to EASA. If the equipment uses barometric-aiding to enhance FDE availability, then the equipment must meet the requirements in RTCA/DO-229E, Appendix G. 3.3. - Functional qualifications. None. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific At least one major component must be permanently and legibly marked with the operational equipment class as defined in Section 1.4.2 of RTCA document DO-229D229E (e.g., Class 2). A marking of Class 4 indicates compliance to Delta-4 requirements. The functional equipment class defined in Section 1.4.1 of RTCA document DO-229D229E (e.g. Gamma, Delta) is not required to be marked. It is sufficient to declare the proper functional equipment class in the DDP (declaration of design TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 68 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C145ce Date: 21.12.2010 xx.xx.2017 and performance). 5- Availability of referenced document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 69 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C145ce Date: 21.12.2010 xx.xx.2017 APPENDIX 1 Reserved (to be aligned with FAA). MPS for airborne navigation sensors using GPS augmented by SBAS 1. This appendix prescribes EASA modifications to the MPS for functional equipment Class Beta in RTCA document DO-229D, Section 2. Operational Class 3 equipment already complies with the MPS changes below. These MPS changes apply for operational Class 1 or Class 2 equipment only. a Section 2.5 Section 2.5.6.1, Scenario #1, Step 3) Change step 3) to read: “Broadband external interference noise (IExt, Test) of spectral density equal to - 170.5 dBm/Hz at the antenna port.” Section 2.5.6.1, Scenario #2, Step 4) Change step 4) to read: “Broadband external interference noise (IExt, Test) of spectral density equal to - 170.5 dBm/Hz at the antenna port.” Section 2.5.8.2, Requirement 1), Item a) Change item a) to read: “The broadband external interference noise (IExt, Test) of spectral density equal to -170.5 dBm/Hz at the antenna port.” b Appendix C, Figure C-2, In-Band and Near-Band Interference Environments Replace Figure C-2 with the following: c Appendix C, Section C.2.2 Change the first paragraph to read: The baseline in-band and near-band interference environments apply to steady-state operation. For initial acquisition of the GPS and SBAS signals prior to steady-state navigation, the in-band and near-band interference levels are 6 dB less than those for steady-state operation. The interference bandwidth is the 3 dB bandwidth. Delete the last paragraph in the section (as shown below). The in-band and near-band interference levels for the LNAV approach steady-state navigation operations are 3 dB less than those for LNAV/VNAV, LP, and LPV approach steady-state navigation operations. For terminal area and en route steady-state navigation operations, and for initial acquisition of the GPS and WAAS signals prior to steady-state navigation for all flight phase operations, the in-band and near-band interference levels are 6 dB less than those for LNAV, LNAV/VNAV, and LPV approach steady-state navigation operations. APPENDIX 2. ADDITION TO RTCA/DO-229E SECTION 1. This Appendix adds a new Section 1.8.3, on cybersecurity and GPS spoofing mitigation to RTCA/DO-229E. The new section provides information for cybersecurity and spoofing mitigation to make RTCA/DO-229E consistent with the new RTCA MOPS template and RTCA/DO-253D, Minimum Operational Performance Standards for GPS Local Area Augmentation System Airborne Equipment. 1.8.3 Cybersecurity and Spoofing Mitigation. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 70 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C145ce Date: 21.12.2010 xx.xx.2017 This section contains information to address intentional interference with the GPS. Spoofing is caused by RF waveforms that mimic true signals in some ways, but deny, degrade, disrupt, or deceive a receiver’s operation when they are processed. Spoofing may be unintentional, such as effects from the signals of a GPS repeater, or may be intentional and even malicious. There are two classes of spoofing. Measurement spoofing introduces RF waveforms that cause the target receiver to produce incorrect measurements of time of arrival or frequency of arrival or their rates of change. Data spoofing introduces incorrect digital data to the target receiver for its use in processing of signals and the calculation of PNT. Either class of spoofing can cause a range of effects, from incorrect outputs of PNT to receiver malfunction. The onset of effects can be instantaneous or delayed, and the effects can continue even after the spoofing has ended. Improperly used or installed GNSS re-radiators act like spoofers. Re-radiators replay and GNSS emulator devices can present misleading information to GNSS equipment and/or could cause lasting effects. Equipment manufacturers should implement measures to mitigate processing of erroneous data. Cross-checks of GNSS sensor data against independent position sources and/or other detection monitors using GNSS signal metrics or data checks can be implemented in the antenna, receiver, and/or through integration with other systems at the aircraft level. Data validity checks to recognize and reject measurement and data spoofing should be implemented in the receiver. Additional guidance and best practices related to GPS equipment can be found in the U.S. Department of Homeland Security document ‘Improving the Operation and Development of Global Positioning System (GPS) Equipment Used by Critical Infrastructure’7 and GLOBAL POSITIONING SYSTEMS DIRECTORATE SYSTEMS ENGINEERING & INTEGRATION: INTERFACE SPECIFICATION, IS-GPS-200, Navstar GPS Space Segment/Navigation User Interfaces, Revision H, IRN-IS-200H-003, 28 July 2016. Aircraft equipment information vulnerabilities (such as cybersecurity risks) have been present for digital systems since the development of the personal computer (PC) in the late 70’s and even longer for RF systems, and the advent of internet connectivity has substantially increased those risks. Typically, access to navigation receivers has been controlled such that they are considered vulnerable only through RF signals and OEM and/or aircraft operator controlled processes for maintenance and update. In some cases, aircraft GNSS receivers may be field-loadable by approved personnel, requiring physical access and physical interface to the ground receivers. However, it is expected that not all aircraft in the future will rely on such physical isolation for the security of avionics. Internet and Wi-Fi connectivity have become popular as a means for aircraft or equipment manufacturers to update installed avionics software, to update databases, or provide an alternate means of communicating with the flight crew or cabin (e.g., in-flight entertainment, weather, etc.). In most countries, the State provides oversight of safety-of-flight systems (sometimes referred to as ‘authorised services’) which provide information to aircraft, such as ILS, VOR, GNSS, and DME, to name a few. However, the State typically does not provide oversight on ‘non-trusted’ connectivity such as the internet, Wi- Fi, or manufacturer-supplied equipment interfaces which permit input of externally-supplied data into aircraft systems. A manufacturer may expose aircraft information vulnerability through equipment design, or become vulnerable as a result of being connected to a common interface. Therefore, it is important that manufacturers consider aircraft information security risk mitigation strategies in their equipment design, particularly when the equipment is responsible for an interface between the aircraft and aircraft-external systems. Apart from any specific aircraft-information-security-related performance requirements that are contained in the MOPS, it is recommended that manufacturers look at a layered approach to aircraft information security 7 https://ics-cert.us- cert.gov/sites/default/files/documents/Improving_the_Operation_and_Development_of_Global_Positioning_System_(G PS)_Equipment_Used_by_Critical_Infrastructure_S508C.pdf . TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 71 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C145ce Date: 21.12.2010 xx.xx.2017 risk mitigation that includes both technical (e.g., software, signal filtering) and physical strategies. From a technical perspective, for example, this could include signal spoofing detection capabilities or more stringent, multi-factored authentication techniques such as passwords, PINs, and digital certificates. From a physical perspective, a manufacturer could consider connectors that require special tools to remove them to prevent passenger tampering; although navigation avionics are typically located in an avionics bay inaccessible to passengers. And finally, but just as important, manufacturers should consider supply chain risk management; for example, if a manufacturer is outsourcing software code development, are the contractor and its staff properly vetted? Civil Aviation Authorities (CAAs) have a regulatory interest when an applicant’s design makes use of a non-trusted connectivity where the installation can potentially introduce aircraft information security vulnerability. This requires the applicant to address not only the information security vulnerabilities and mitigation techniques for the new installation, but to also consider how vulnerability could propagate to existing downstream systems. Therefore, it is recommended that manufacturers reference their equipment aircraft information security review and mitigation strategies in the equipment’s installation manual so that the applicant can consider them in meeting the installation regulatory requirements. APPENDIX 3 Reserved (to be aligned with FAA TSO). APPENDIX 4 This Appendix prescribes EASA modifications to RTCA document DO-229E, Section 2. In Section 2.1.1.2, after the first sentence add: ‘The demodulation of data from the GPS signals shall be restricted to the necessary subset of the data defined in Appendix II of IS-GPS-200D, “Navstar GPS Space Segment / Navigation User Interfaces”, December 2004, provided on RF link L1. The pseudo-ranging shall be performed on RF link L1 utilizing the coarse/acquisition (C/A) code.’ This is to ensure that only the L1 NAV data, for which the SBAS provides corrections and integrity, is used, and that no CNAV data, which is defined in Appendix III of IS-GPS-200D, is used, for which the SBAS does not provide integrity. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 72 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: STAND-ALONE AIRBORNE NAVIGATION EQUIPMENT USING THE GLOBAL POSITIONING SYSTEM AUGMENTED BY THE SATELLITE BASED AUGMENTATION SYSTEM 1- Applicability This ETSO provides gives the requirements which new models of stand-alone airborne navigation equipment using the Global Positioning System (GPS) augmented by the Satellite-Based Augmentation System that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth for functional equipment Class Gamma or Delta in RTCA document DO-229D229E, Minimum Operational Performance Standards for Global Positioning System/Satellite-Based Augmentation System Airborne Equipment, dated December 13 2006,15 2016, Section 2, except as modified by Appendix 1 2 and 4 of this ETSO. Classes Gamma and Delta of equipment are defined in DO-229D229E, Section 1.4. The standards in this ETSO apply to equipment intended to accept a desired flight path and provide deviation commands keyed to that path. Pilots and autopilots will use these deviations to guide the aircraft. Except for automatic dependent surveillance with Class Gamma, these TSO standards do not address integration issues with other avionics. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. The required performance under test conditions is defined in RTCA document DO-229E, Minimum Operational Performance Standards for Global Positioning System/Satellite-Based Augmentation System Airborne Equipment, dated December 15, 2016, section 2.4. 3.1.3 - Computer Software TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 73 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 of this ETSO is a: — Major failure condition for loss of function and malfunction of en-route, terminal, approach lateral navigation (LNAV), and approach LNAV/vertical navigation (VNAV) position data, — Major failure condition for loss of function of approach localiser performance without vertical guidance (LP), and approach localiser performance with vertical guidance (LPV) position data, and — Hazardous failure condition for malfunction of approach (LP and LPV) position data resulting in misleading information. 3.2.2 - Additional Specific If the equipment can satisfy the requirements of RTCA/DO-229E only when used with a particular antenna, the use of that antenna (by part number) shall be a requirement on the installation. This requirement shall be included in the installation manual (IM) as a limitation. Applicants shall provide all the data necessary to evaluate the geo stationary (GEO) satellite bias as defined in RTCA/DO-229E, Section 2.1.4.1.5 to EASA. If the equipment uses barometric-aiding to enhance FDE availability, then the equipment must meet the requirements in RTCA/DO-229E, Appendix G. 3.3. - Functional Qualifications. None 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific At least one major component must be permanently and legibly marked with the operational equipment class as defined in Section 1.4.2 of RTCA document DO-229D229E (e.g., Class 2). A marking of Class 4 indicates compliance to with Delta-4 requirements. The functional equipment class defined in Section 1.4.1 of RTCA document DO-229D229E (e.g. Gamma, Delta) is not required to be marked. It is sufficient to declare the proper functional equipment class in the DDP (declaration of design and performance). 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 74 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 APPENDIX 1 Reserved (to be aligned with the FAA). MPS for stand-alone airborne navigation equipment using GPS augmented by SBAS 1. This appendix prescribes modifications to the MPS for functional equipment class Gamma found in RTCA document DO-229D, Section 2. Gamma operational Class 3 and Delta operational Class 4 equipment already complies with the MPS changes below. These MPS changes apply for operational Class 1 or Class 2 equipment only. a Section 2.5 Section 2.5.6.1, Scenario #1, Step 3) Change step 3) to read: “Broadband external interference noise (IExt, Test) of spectral density equal to - 170.5 dBm/Hz at the antenna port.” Section 2.5.6.1, Scenario #2, Step 4) Change step 4) to read: “Broadband external interference noise (IExt, Test) of spectral density equal to - 170.5 dBm/Hz at the antenna port.” Section 2.5.8.2, Requirement 1), Item a) Change item a) to read: “The broadband external interference noise (IExt, Test) of spectral density equal to -170.5 dBm/Hz at the antenna port.” b Appendix C, Figure C-2, In-Band and Near-Band Interference Environments Replace Figure C-2 with the following: c Appendix C, Section C.2.2 Change the first paragraph to read: The baseline in-band and near-band interference environments apply to steady-state operation. For initial acquisition of the GPS and SBAS signals prior to steady-state navigation, the in-band and near-band TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 75 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 interference levels are 6 dB less than those for steady-state operation. The interference bandwidth is the 3 dB bandwidth. Delete the last paragraph in the section (as shown below). The in-band and near-band interference levels for the LNAV approach steady-state navigation operations are 3 dB less than those for LNAV/VNAV, LP, and LPV approach steady-state navigation operations. For terminal area and en route steady-state navigation operations, and for initial acquisition of the GPS and WAAS signals prior to steady-state navigation for all flight phase operations, the in-band and near-band interference levels are 6 dB less than those for LNAV, LNAV/VNAV, and LPV approach steady-state navigation operations. APPENDIX 2. MPS for stand-alone airborne navigation equipment using GPS augmented by SBAS This Appendix describes required modifications and additions to RTCA/DO-229E for compliance with this ETSO. This Appendix adds a new Section 1.8.3 on cybersecurity and GPS spoofing mitigation and additional required leg types in Section 2.2.1.3 to RTCA/DO-229E. The new Section, 1.8.3, contains no new requirements but provides information for cybersecurity and spoofing mitigation to make RTCA/DO-229E consistent with the new RTCA MOPS template and RTCA/DO-253D, Minimum Operational Performance Standards for GPS Local Area Augmentation System Airborne Equipment. The new 2.2.1.3 leg type requirements are applicable to Class Gamma equipment only and are necessary to properly execute published instrument procedures designed to provide maximum efficiency, flexibility, and aircraft eligibility. These instrument procedure designs may include RNAV components and/or leg types associated with conventional procedures. The modifications and additions to Section 2.2.1.3 are necessary to ensure Class Gamma equipment can properly execute current and future instrument procedure designs. 1.8.3 Cybersecurity and Spoofing Mitigation. This section contains information to address intentional interference with the GPS. Spoofing is caused by RF waveforms that mimic true signals in some ways, but deny, degrade, disrupt, or deceive a receiver’s operation when they are processed. Spoofing may be unintentional, such as effects from the signals of a GPS repeater, or may be intentional and even malicious. There are two classes of spoofing. Measurement spoofing introduces RF waveforms that cause the target receiver to produce incorrect measurements of time of arrival or frequency of arrival or their rates of change. Data spoofing introduces incorrect digital data to the target receiver for its use in processing of signals and the calculation of PNT. Either class of spoofing can cause a range of effects, from incorrect outputs of PNT to receiver malfunction. The onset of effects can be instantaneous or delayed, and the effects can continue even after the spoofing has ended. Improperly used or installed GNSS re-radiators act like spoofers. Re-radiators, replay and GNSS emulator devices can present misleading information to GNSS equipment and/or could cause lasting effects. Equipment manufacturers should implement measures to mitigate processing of erroneous data. Cross-checks of GNSS sensor data against independent position sources and/or other detection monitors using GNSS signal metrics or data checks can be implemented in the antenna, receiver, and/or through integration with other systems at the aircraft level. Data validity checks to recognize and reject measurement and data spoofing should be implemented in the receiver. Additional guidance and best practices related to GPS equipment can be found in the U.S. Department of Homeland Security document ‘Improving the Operation and Development TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 76 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 of Global Positioning System (GPS) Equipment Used by Critical Infrastructure’8 and GLOBAL POSITIONING SYSTEMS DIRECTORATE SYSTEMS ENGINEERING & INTEGRATION: INTERFACE SPECIFICATION, IS-GPS-200, Navstar GPS Space Segment/Navigation User Interfaces, Revision H, IRN-IS-200H-003 28 July 2016. Aircraft equipment information vulnerabilities (such as cybersecurity risks) have been present for digital systems since the development of the personal computer (PC) in the late 70’s and even longer for RF systems, and the advent of internet connectivity has substantially increased those risks. Typically, access to navigation receivers has been controlled such that they are considered vulnerable only through RF signals and OEM and/or aircraft operator controlled processes for maintenance and update. In some cases, aircraft GNSS receivers may be field loadable by approved personnel, requiring physical access and physical interface to the ground receivers. However, it is expected that not all aircraft in the future will rely on such physical isolation for the security of avionics. Internet and Wi-Fi connectivity have become popular as a means for aircraft or equipment manufacturers to update installed avionics software, to update databases, or provide an alternate means of communicating with the flight crew or cabin (e.g., in-flight entertainment, weather, etc.). In most countries, the State provides oversight of safety-of-flight systems (sometimes referred to as ‘authorised services’) which provide information to aircraft, such as ILS, VOR, GNSS, and DME, to name a few. However, the State typically does not provide oversight on ‘non-trusted’ connectivity such as the internet, Wi- Fi, or manufacturer-supplied equipment interfaces which permit input of externally-supplied data into aircraft systems. A manufacturer may expose aircraft information vulnerability through equipment design, or become vulnerable as a result of being connected to a common interface. Therefore, it is important that manufacturers consider aircraft information security risk mitigation strategies in their equipment design, particularly when the equipment is responsible for an interface between the aircraft and aircraft-external systems. Apart from any specific aircraft-information-security-related performance requirements that are contained in the MOPS, it is recommended that manufacturers look at a layered approach to aircraft information security risk mitigation that includes both technical (e.g., software, signal filtering) and physical strategies. From a technical perspective, for example, this could include signal spoofing detection capabilities or more stringent, multi-factored authentication techniques such as passwords, PINs, and digital certificates. From a physical perspective, a manufacturer could consider connectors that require special tools to remove them to prevent passenger tampering; although navigation avionics are typically located in an avionics bay inaccessible to passengers. And finally, but just as important, manufacturers should consider supply chain risk management; for example, if a manufacturer is outsourcing software code development, is the contractor and its staff properly vetted? Civil Aviation Authorities (CAAs) have a regulatory interest when an applicant’s design makes use of a non-trusted connectivity where the installation can potentially introduce aircraft information security vulnerability. This requires the applicant to address not only the information security vulnerabilities and mitigation techniques for the new installation, but to also consider how vulnerability could propagate to existing downstream systems. Therefore, it is recommended that manufacturers reference their equipment aircraft information security review and mitigation strategies in the equipment’s installation manual so that the applicant can consider them in meeting the installation regulatory requirements. 2.2.1.3 Path Definition 8 https://ics-cert.us- cert.gov/sites/default/files/documents/Improving_the_Operation_and_Development_of_Global_Positioning_System_(G PS)_Equipment_Used_by_Critical_Infrastructure_S508C.pdf . TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 77 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 Replace the list of required leg types in the first paragraph after the last sentence as shown: The desired path shall be defined according to the following leg types: Leg Type Description IF Initial Fix CF Course to Fix leg DF Direct to Fix leg TF Track to Fix leg FA Fix to Altitude leg FM Fix to Manual Termination VA Heading to Altitude leg VI Heading to Intercept VM Heading to Manual Termination CA Course to Altitude Leg Holding legs Leg Type Description HA Terminates at an altitude HF Terminates at a fix after one orbit HM Manual termination Note: There is no intent to require a heading or altitude source connected to the equipment to automatically execute leg types with heading or altitude components. Manual equipment inputs for heading/altitude with manual aircraft control methods are acceptable for these leg types. Replace Section 2.2.1.3.6 as shown and add the following leg type descriptions. Re-number existing paragraphs (starting with 2.2.1.3.7) to account for the newly added sections: 2.2.1.3.6 Fix to Altitude (FA). An FA leg shall be defined as a specified track over the ground from a database waypoint to a specified altitude at an unspecified position. 2.2.1.3.7 Fix to Manual Termination (FM). TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 78 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 An FM leg shall be defined as a specified track over the ground from a database fix until a manual termination of the leg. Manual FM Leg Termination 2.2.1.3.8 Heading to Altitude (VA). A VA leg shall be defined as a specified heading to a specific altitude termination at an unspecified position. No correction is made for wind. VA Leg 8,000 Ft 2.2.1.3.9 Heading to Intercept (VI). A VI leg shall be defined as a specified heading to intercept a subsequent leg at an unspecified position. No correction is made for wind. Next VI Leg Leg 2.2.1.3.10 Heading to Manual Termination (VM). A VM leg shall be defined as a specified heading until a manual termination of the leg. No correction is made for wind. Manual VM Leg Termination 2.2.1.3.12 Course to Altitude (CA). TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 79 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C146ce Date: 21.12.2010 xx.xx.2017 A CA leg shall be defined as a specified course to a specific altitude at an unspecified position. The course is flown making adjustment for wind. APPENDIX 3 Reserved (to be aligned with FAA TSO). APPENDIX 4 This Appendix prescribes EASA modifications to RTCA document DO-229E, Section 2. At Section 2.1.1.2, after the first sentence add: ‘The demodulation of data from the GPS signals shall be restricted to the necessary subset of the data defined in Appendix II of IS-GPS-200D, “Navstar GPS Space Segment/Navigation User Interfaces”, December 2004 provided on RF link L1. The pseudo-ranging shall be performed on RF link L1 utilizing the coarse/acquisition (C/A) code.’ This is to ensure that only the L1 NAV data, for which the SBAS provides corrections and integrity, is used, and no CNAV data, which is defined in Appendix III of IS-GPS-200D, is used, for which the SBAS does not provide integrity. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 80 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C155ab Date: 12.07.2013 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) Subject: Recorder Independent Power Supply 1- Applicability This ETSO gives provides the requirements which recorder independent power supplies (RIPSs) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. ETSOs that may be used in conjunction with this ETSO are those covering: — rechargeable lithium cells and lithium batteries; — digital flight data recorders; — cockpit voice recorders; — data link recorders; — cockpit image recorders. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in Sections 5-2, 5-3, 5-4 and 5-5 5 of EUROCAE ED-112A, Minimum Operational Performance Specification MOPS for Crash Protected Airborne Recorder Systems, dated March 2003 September 2013, with the following changes: — in paragraph 5-2.1.1: ‘b. The intent of the RIPS is to allow for continued operation for 10 or more minutes applied in all cases when aircraft power to the recorder is removed.’ — in paragraph 5-2.2: the following sentence ‘The RIPS shall detect and report any internal failures, if maintenance is required, and of any conditions affecting the ability of the RIPS to perform its intended function.’ shall be replaced by ‘The RIPS shall detect and report internal failures, whether maintenance is required, and any TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 81 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C155ab Date: 12.07.2013 xx.xx.2017 conditions affecting the ability of the RIPS to perform its intended function.’ — in paragraph 5-3.2.1: ‘The backup time shall be at least 9 minutes and not exceed 30 minutes’. Other ED-112A requirements related to installation, flight testing, and aircraft maintenance are excluded from this ETSO. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific The applicant shall declare the rated performance of the equipment associated to the time of recording (Output power, rated capacity, as applicable …). If any battery is used in the RIPS, it must meet the requirements of the applicable ETSO related to the battery type or any other battery standards acceptable to EASA. Exceptions to ED-112. We make the following first two exceptions to ED-112 to comply with EASA requirements. The third item is an exception to requirements for installation, flight testing, aircraft maintenance, and others that do not pertain to MPS criteria specific to the ETSO equipment. — RIPS location, Chapter 2-5.3.10: We don’t require Chapter 2-5.3.10 as part of this ETSO. RIPS location must comply with applicable EASA requirements. — Equipment Installation and Installed Performance (RIPS) Chapter 5-6. — Other ED-112 requirements for installation, flight testing, aircraft maintenance, and others that do not pertain to MPS specific criteria. 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 of this ETSO has been determined to be is a minor failure condition. Loss of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition. The applicant must develop the system to at least the development assurance level commensurate with these failure conditions. Note: The failure classification is driven by the use of recorders in accident investigations. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 82 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C159bc Date: 05.08.2016 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: Next Generation Satellite Systems (NGSS) Equipment 1- Applicability This ETSO gives provides the requirements which Next Generation Satellite Systems (NGSS) Equipment that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the RTCA DO-262B, Minimum Operational Performance Standards for Avionics Supporting Next Generation Satellite Systems (NGSS), dated June 17, 2014; except that they are not required to meet any requirement of RTCA DO-326, Information Airworthiness Security Process Specification, in Normative Appendix D or E (as applicable) where referenced. Note: There are no MPS security requirements for the NGSS equipment. However, a security risk assessment may be required at the time of installation, and if needed, security controls may be implemented in connected aircraft systems or addressed by flight crew procedures. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware Qualification See CS-ETSO, Subpart A, paragraph 2.3 3.2 - Specific The MPS allows for different equipment classes and subclasses as defined by RTCA DO -262B. There are 6 applicable equipment classes and 13 equipment subclass components identified (see RTCA DO-262B, Aappendix D and Aappendix E). The manufacturer must declare the equipment TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 83 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C159bc Date: 05.08.2016 xx.xx.2017 class requirements from those identified in the applicable appendix. The equipment configuration shall satisfy the relevant requirements of the RTCA DO-262B minimum operational performance standards (MOPS) as identified in tables 1 and 2 in Appendix 1 of this ETSO. This ETSO standard applies to equipment intended for long-range communication services, aeronautical mobile satellite (route) services (AMS(R)S) by means of satellite communications between AES, corresponding satellites, and ground earth stations (GES). The NGSS supports data communications, or data and voice communications, between aircraft users and ground -based users, such as air navigation service providers (ANSP) and aircraft operators. Equip ment class AES1 supports data communications only. All other equipment classes support both data and voice communications. (1) The functionality of an NGSS supports four categories of communication service. Two are in the safety of flight category: air traffic services (ATS) and aeronautical operational control (AOC). The other two are in the non-safety of flight category: aeronautical administrative communication (AAC) and aeronautical passenger communication (APC). (2) NGSS equipment is intended for procedural airspace area operations. The failure conditions specified in paragraph 3.2.1 of this ETSO have been determined based on NGSS equipment operating as an approved Long-Range Communication System (LRCS) in oceanic airspace area environments. Use of NGSS equipment in other operating environments (for example, high-density terminal/en route airspace) may impact equipment performance and safety considerations. 3.2.1 — Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4 Failure of the function defined in paragraph 3.b of this ETSO is a minor failure condition. Loss of the function as defined in paragraph 3.b of this ETSO is a minor failure condition. Note: The use of NGSS equipment for primary voice or data communications may necessitate the development of the NGSS equipment to a higher design assurance level than required for the failure criticality levels specified above and may drive a revision to this ETSO. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific The NGSS class and subclass markings should shall include the complete equipment identifier reference (such as AES1, AES4, or AES7). An example subclass component (such as a high-gain antenna (HGA), Transceiver, or Diplexer/Low Noise Amplifier(DLNA)) marking would display AES6-2/HGA, Type A Transceiver AES7-7/7MA, or Type F Diplexer AES6-3/DF, etc. For valid combinations of system component markings, see table 3 in Appendix 1 to this ETSO. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 84 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C166b A23 Date: 05.08.2016 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: EXTENDED SQUITTER AUTOMATIC DEPENDENT SURVEILLANCE-BROADCAST (ADS-B) AND TRAFFIC INFORMATION SERVICES-BROADCAST (TIS-B) EQUIPMENT OPERATING ON THE RADIO FREQUENCY OF 1090 MEGAHERTZ (MHz) 1- Applicability This ETSO provides the requirements which Extended Squitter Automatic Dependent Surveillance-Broadcast (ADS-B) and Traffic Information Services-Broadcast (TIS-B) Equipment Operating on the Radio Frequency of 1090 Megahertz (MHz) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the EUROCAE ED-102A, Minimum Operational Performance Standards for 1090 MHz Extended Squitter Automatic Dependent Surveillance-Broadcast (ADS-B) and Traffic Information Services-Broadcast (TIS-B), dated December 2009, section 2. EUROCAE ED-102A Corrigendum 1 dated January 2012 is also acceptable. This ETSO supports two major classes of 1090 MHz ADS-B and TIS-B equipment: (a) Class A equipment, consisting of transmit and receive subsystems; and (b) Class B equipment, containing a transmit subsystem only. Class A equipment includes Classes A0, A1, A1S, A2 and A3. This standard requires 1090 MHz airborne Class A equipment to include the capability of receiving both ADS-B and TIS-B messages and delivering both ADS-B and TIS-B reports, as well as transmitting ADS-B messages. A receive-only Class of equipment is allowed. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 85 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C166b A23 Date: 05.08.2016 xx.xx.2017 Class B equipment includes Classes B0, B1, and B1S. Classes B0, B1, and B1S are the same as A0, A1, and A1S, except they do not have receive subsystems. Note that Classes B2 and B3 are not for aircraft use. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. The required performance under test conditions is defined in EUROCAE ED-102A, section 2.4. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 of this ETSO resulting in misleading information is a major hazardous failure condition. Failure of the function defined in paragraph 3.1.1 of this ETSO resulting in loss of function is a major minor failure condition at equipment level. Note: The major failure condition for transmission of incorrect ADS-B messages is based on the use of the data by other aircraft or Air Traffic Control for separation services. Note: The discontinuity probability of the function defined in paragraph 3.1.1 of this ETSO at aircraft level shall be equal to or less than 2E-4 per flight hour (see COMMISSION IMPLEMENTING REGULATION (EU) No 1207/2011 of 22 November 2011 laying down requirements for the performance and the interoperability of surveillance for the single European sky). 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific Transmitting and receiving components must be permanently and legibly marked. The following table explains how to mark components. EUROCAE ED-102A provides the equipment class in section 2.1.11, and the receiving equipment type in section 2.2.6. If the component can: Mark it with the: Sample marking pattern: Transmit and receive Equipment class it supports, and Class A0/Type 1 Receiving equipment type Transmit, but not receive Equipment class it supports Class B1, or Class A3-Transmitting only Receive, but not transmit Equipment class it supports, and Class A2/Type 2-Receiving only Receiving equipment type 5- Availability of Referenced Document TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 86 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C166b A23 Date: 05.08.2016 xx.xx.2017 See CS-ETSO, Subpart A, paragraph 3 . TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 87 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C176a Date: 21.12.2010 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) SUBJECT: Aircraft Cockpit Image Recorder Systems 1- Applicability This ETSO gives provides the requirements that new models of aircraft cockpit image recorder systems (CIR) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1. - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the applicable sections of EUROCAE document ED-112A, Minimum Operational Performance Specification MOPS for Crash Protected Airborne Recorder Systems, dated March 2003 September 2013, including amendment 1 dated 25 July 2003 and amendment 2 dated 22 September 2003 that pertain to the cockpit image recorder (CIR) type, except chapters III-1 and III-6, and Sections 2-1.1 , 2-1.5 , 2-1.6 , 2-1.11 , 2-1.12 , 2-3.1 , 2-5 , 3-1.1, 3-1.2, 3-1.3, 3-1.4, 3-1.5 , 3-1.7, Annex III-A, Annex III-B, that compliance with ED-112 chapters 2-5, 3-4, 5-6, and all other ED-112A requirements for related to installation, flight testing, and aircraft maintenance, and others that do not pertain to MPS specific criteria are not required for this ETSO. The table below lists recorder types and the ED-112A section or part with the MPS for each: Table 1. CIR MPS Requirements Recorder MPS Requirements CIR Type ED-112A Reference Single CIR Section 2 and Part III CIR function in a deployable recorder Section 2, Section 3 and Part III CIR function in a combined recorder Section 2, Section 4 and Part III Note : a CIR article may cover multiple types. A CIR may be a combined CIR and may also be deployable, in which case the applicable MOPS are in Sections 2, 3, 4 and Part I, following the table above. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 88 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C176a Date: 21.12.2010 xx.xx.2017 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2 3.1.4 Airborne Electronic Hardware Qualification See CS-ETSO, Subpart A, paragraph 2.3 3.2 - Specific 3.2.1 - Failure Condition Classification Failure of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition depends on the aircraft installation. Loss of the function defined in paragraph 3.1.1 of this ETSO is a minor failure condition. The applicant must develop the system to at least the design assurance level commensurate with the failure condition classification in the table below: Classifications of Failure Conditions for Recorders Recorder Type Failure Classification Single CIR Minor CIR function in deployable recorder Major CIR function in combined recorder function: Minor  Aeroplane or rotorcraft with two Major recorders  Rotorcraft with one combined recorder Note: The failure classification requirement is driven by the use of recorders in accident investigations need. 4- Marking 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific 4.2.1 - Lettering Identification The equipment shall comply with the identification requirement in EUROCAE ED-112A, section 2-1, paragraph 2-1.16.3. ED112-Chapter 2-1 paragraph 2-1.16.3 requires the lettering on the recorder be at least 25 mm in height. Where it is considered impractical to incorporate lettering of this height due to the size of the recorder case, the applicant may propose an alternative height provided that the size is adequate in relation to the size of the unit and allows easy readability. 4.2.2 - Marking recommendation Marking in French: “ENREGISTREUR DE VOL NE PAS OUVRIR” is optional. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 89 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: TRAFFIC AWARENESS BEACON SYSTEM (TABS) 1- Applicability This ETSO provides the requirements for the applicable equipment class defined by this ETSO which traffic awareness beacon systems (TABSs) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. TABS devices are distinctly different from other transponders. TABS devices are intended for voluntary equipage on aircraft exempted from carrying a transponder or automatic dependent surveillance- broadcast (ADS-B) equipment, such as gliders, balloons and aircraft without electrical systems. TABS devices do not meet the transponder or ADS-B requirements defined in Commission Implementing Regulation (EU) No 1207/2011 of 22 November 2011 laying down requirements for the performance and the interoperability of surveillance for the single European sky. TABS equipment built to the minimum requirements of this ETSO will enable an aircraft to be visible to other aircraft equipped with: — a Traffic Advisory System (TAS) as defined in ETSO-C147(); — a Traffic Alert and Collision Avoidance System I (TCAS I) as defined in ETSO-C118(); — a Traffic Alert and Collision Avoidance System II, (TCAS II), as defined in ETSO-C119d; — ADS-B IN capability as defined in ETSO-C154c, ETSO-C166b (), and ETSO-C195b. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical conditions 3.1 - Basic 3.1.1 - Minimum performance standard TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 90 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 TABS requirements are derived from existing transponder and ADS-B requirements. Equipment meeting only the minimum TABS requirements will provide the capability to be seen by other aircraft equipped with traffic advisory systems but may not support detection by ground surveillance systems relying on full transponder functionality. A designer building equipment to meet this ETSO may decide to incorporate more capability than what is outlined in this ETSO as long as it meets the applicable requirements in the referenced standards (e.g., EUROCAE ED-73E, MOPS for Secondary Surveillance Radar Mode S Transponders, as amended by Appendix 1 to ETSO-C112e). TABS functionality is divided into four categories: the transponder function, the altitude source function, the ADS-B OUT function, and the position source function. A Class A TABS: — includes the transponder, altitude source, and ADS-B OUT functionality; refer to Subparagraphs (1), (2), and (3) below; — consists of a Class A device, or a TSO-C112e and TSO-C166b compliant device. A Class B TABS: — includes the Global Navigation Satellite System (GNSS) position source functionality; refer to Subparagraph (4) below; — consists of a Class B device, or a ETSO-C129a, ETSO-C145d, ETSO-C146d or ETSO-C196b- compliant GPS. A TABS may include an ADS-B IN function but it is not required. If implemented, the ADS-B IN function shall meet the performance specified in ETSO-C195b as well as ETSO-C154c, or ETSO-C166b, or all three. A TABS is intended to make the aircraft a valid TIS-B and ADS-R client. (a) The transponder functionality must meet a subset of the requirements in document RTCA/DO-181E, MOPS for Air Traffic Control Radar Beacon System/Mode Select (ATCRBS/Mode S) Airborne Equipment, dated March 17, 2011, section 2, for a Level 2, Class 2 transponder as modified by Appendix 1. (b) The altitude source functionality must meet the requirements of ETSO-C88b, Automatic Pressure Altitude Reporting Code Generating Equipment, dated August 5, 2016. (c) The ADS-B OUT function must meet a subset of the requirements found in document EUROCAE ED-102A, Minimum Operational Performance Standards for 1090 MHz Automatic Dependent Surveillance – Broadcast (ADS-B) and Traffic Information Services-Broadcast (TIS-B), dated December, 2009, including Corrigendum-1, section 2, dated January, 2012, Class B0 as modified by Appendix 1. The system must be built such that it transmits Navigation Integrity Code (NIC), Navigation Accuracy Category for Position (NACp), Navigation Accuracy Category for Velocity (NACv), Geometric Vertical Accuracy (GVA), and Safety Integrity Level (SIL) values appropriate for the GNSS receiver used. (d) The position source function must use a GNSS receiver that meets the requirements defined in Appendix 1. The intent of this ETSO is to allow the use of commercially available GNSS position sources. The receiver must be capable of using SBAS provided corrections and health messages, as defined in Appendix 1, in order to provide a means to prevent the TABS from transmitting false or misleading information. The receiver may continue to provide position when outside of SBAS coverage or when using unmonitored satellites. TABS Class B position sources may not be used for certified navigation equipment. 3.1.2 - Environmental Standard TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 91 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 See CS-ETSO, Subpart A, paragraph 2.1. For Class A equipment, demonstrate the required performance under the test conditions specified in RTCA/DO-181E section 2.3 and EUROCAE ED-102A, including Corrigendum-1, section 2.3, dated January, 2012, For Class B equipment, demonstrate the required performance under the test conditions specified in Appendix 3. 3.1.3 - Software See CS-ETSO, Subpart A, paragraph 2.2. This requirement applies to Class A equipment only. Class B equipment is exempt from software qualification defined in this paragraph. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. This requirement applies to Class A equipment only. Class B equipment is exempt from electronic hardware qualification defined in this paragraph. 3.2 - Specific 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. Failure of the function defined in paragraph 3.1.1 of this ETSO resulting in misleading information is a minor failure condition. Failure of the function defined in paragraph 3.1.1 of this ETSO resulting in loss of function is a minor failure condition. Class B equipment is intended to be met by commercially available GNSSs and is unlikely to be designed specifically to support a minor hazard classification. Class B equipment suitability for supporting the function in paragraph 3.1.1 of this ETSO is established by performing the functional and environmental testing in Appendix 2 and Appendix 3 of this ETSO with no further analysis required. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None. 5- Availability of Referenced Documents See CS-ETSO, Subpart A, paragraph 3. EUROCONTROL Documents: EUROCONTROL, STA/R/460/0001/1, Study to Address the Detection and Recognition of Light Aircraft in the Current and Future ATM Environment, Issue 1.0, Final Report, dated 31 March 2005. EUROCONTROL Surveillance Document Library: https://www.eurocontrol.int/articles/surveillance-library FCC Documents: Federal Communication Commission document OET Bulletin 65 Ed 97-01, Evaluating Compliance with FCC Guidelines for Human Exposure to Radiofrequency Electromagnetic Fields is available on the internet at: TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 92 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 http://transition.fcc.gov/Bureaus/Engineering_Technology/Documents/bulletins/oet65/oet65.pdf US Code of Federal Regulations (CFR) Documents: order copies of 14 CFR parts 21, 45 and 91 from the Superintendent of Documents, Government Printing Office, P.O. Box 979050, St. Louis, MO 63197. Telephone (202) 512-1800, fax (202) 512-2250. You can also download copies online at: http://www.ecfr.gov/cgi-bin/text-idx?tpl=/ecfrbrowse/ UK Public Health Documents Public Health England document HPA-RPD-031, Exposure to EMFs from Lightweight Aviation Transponders, dated September 2007, ISBN 978¬0-85951-605-1, can be obtained on line by going to: http://www.hpa.org.uk/Publications/Radiation/HPARPDSeriesReports/HpaRpd031/ Global Positioning System Signals, Measurements, and Performance, Ganga -Jamuna Press, by Pratap Misra and Per Enge. ISBN: 0-9709544-0-9 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 93 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 Appendix 1. Traffic Awareness Beacon System Requirements A1 Introduction A1.1 TABS Intent A1.1.1 The intent of a TABS is to increase safety by encouraging the voluntary equipage of a low cost, compact, easy to install device that will allow other aircraft equipped with collision avoidance systems and traffic advisory systems to track and display the TABS aircraft. TABS are intended to be used on aircraft that are exempted from carrying a transponder or Automatic Dependent Surveillance - Broadcast (ADS-B) equipment, such as gliders, balloons and aircraft without electrical systems. TABS devices do not meet the transponder requirements defined in Commission Implementing Regulation (EU) No 1207/2011 of 22 November 2011 laying down requirements for the performance and the interoperability of surveillance for the single European sky. A TABS will allow these exempted aircraft to be visible to other aircraft equipped with: — a Traffic Advisory System (TAS) as defined in ETSO-C147(); — a Traffic Alert and Collision Avoidance System I (TCAS I) as defined in ETSO-C118(); — a Traffic Alert and Collision Avoidance System II, (TCAS II), as defined in ETSO-C119d; — ADS-B IN capability as defined in ETSO-C166b, and ETSO-C195b; — ADS-B IN capability as defined in ETSO-C154c in airspace where UAT is used. A1.1.2 A TABS is designed to: — reply to ATCRBS Mode C, and Mode S UF=0, 4, 5, 20 and 21 interrogations; — not reply to ATCRBS Mode A interrogations; — not reply to Mode S UF=11, and 16 interrogations; — incorporate ETSO-C88b, Automatic Pressure Altitude Reporting Code-Generating Equipment; — transmit ADS-B Messages: Aircraft Identification and Category, Airborne Position, Airborne Velocity, Emergency Priority Status Message, and Aircraft Operational Status; — optionally provide Surface Position Messages; — optionally use a commercial GNSS source meeting the requirements of this ETSO. A1.1.3 A TABS can potentially act as a low-cost platform for other aviation applications. Although additional capabilities are beyond the scope of this ETSO, TABS may include additional functions such as data loggers, search and rescue transmitter, or provide flight information services. A1.2 Requirements A1.2.1 TABS requirements are derived from existing Mode S transponder and 1090 MHz Extended Squitter ADS-B requirements. A designer building equipment to meet this ETSO may decide to incorporate the full transponder and ADS-B capability by using a device that meets ETSO-C112e and ETSO-C166b. If electing to implement full functionality, they must demonstrate that functionality against the unmodified test procedures EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, required by ETSO-C112e and ETSO-C166b respectively. Designers that wish to take advantage of the reduced transponder requirements afforded to ETSO-C199 Class A devices must meet the modified requirements outlined in paragraphs A1.2.3 Transponder TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 94 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 Function Requirements, A1.2.4 Altitude Source Function Requirements, and A1.2.5 ADS-B OUT Function Requirements in this Appendix in their entirety. Designers wishing to take advantage of the Class B reduced GNSS requirements will need to meet the requirements outlined in paragraphs A1.2.6 GNSS Position Source Function Requirements. A1.2.2 MOPS text is used here with the permission of the RTCA. Table 1 provides notes in italics and parenthesis explaining how to read the tables that modify the text in the source documents. (Source document reference) Modified text for this ETSO (This is a copy of the original text from the (This is the requirement for this ETSO. source document. Material to be deleted Modifications to the source text are marked from this original text is marked with in bold and underlined to assist in strikethrough formatting.) identifying changes). Table 1 (Source document reference) (type of change) A1.2.3 Transponder Function Requirements Derived From DO-181E (For Class A Devices) A1.2.3.1 The transponder function must meet the Minimum Performance Standards (MPS) qualification and documentation requirements in RTCA, Inc. document RTCA/DO-181E, section 2, for a Level 2, Class 2, transponder as modified below. A1.2.3.1.1 Flight Crew Control Function Changes A1.2.3.1.2 A cost factor in any device is the control and display functions to interface with the human operator. TABS display and control requirements are a subset of those required for transponders. Some user controls are allowed via an external device prior to flight (e.g., a personal electronic device (PED)). If the system is powered by batteries, display of available battery life is recommended. Table 2 provides an overview of flight crew control functions. Operation mode Required Controls Required Indicators In flight - Power, Power on, (i.e., control head) - Emergency (3/A code 7700) Transponder Fail - IDENT (optional) ADS-B Fail Battery indicator (optional) Non flight (optional in flight) - Set 4096 code, Display of 4096 code, (i.e., Personal Electronic - Set Flight ID Display of Flight ID Device PED) Maintenance actions (allowed - Set ICAO 24 bit aircraft Display of ICAO 24 bit aircraft in non-flight conditions only) address, address, - Set implementation specific Display of implementation configuration specific configuration. Display software version (optional) Table 2 Summary of Control and Indication Requirements by Operation Mode A1.2.3.1.3 RTCA/DO-181E, section 2.1.7 a, Flight Crew Control Functions, is amended as shown in Table 3. DO-181E text Modified text for this ETSO TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 95 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 The following functions Shall be provided The following functions SHALL be provided as a. A means of selecting each of the ATCRBS indicated in items a-f. 4096 reply codes, and of indicating the code a. A means of selecting and displaying the selected. ATCRBS 4096 code on the ground SHALL be provided. A means of selecting and displaying the ATCRBS 4096 code in flight is optional. A means of setting the Mode 3/A code to 7700 (emergency), either by entering in the value or an automated means such as a switch, SHALL be provided. A means of setting an alternate 4096 code other than the primary 4096 code, either by entering in the value or an automated means such as a switch, SHALL be provided. Table 3 DO-181E section 2.1.7 a amendment A1.2.3.1.4 RTCA/DO-181E, section 2.1.7 b, Flight Crew Control Functions, is amended as shown in Table 4. DO-181E text Modified text for this ETSO The following functions Shall be provided The following functions SHALL be provided as b. A means of selecting the air/ground state: indicated in items a-f. 1) An automatic means Shall be the only b. A means of selecting the air/ground state: acceptable means to determine the air/ground 1) An automatic means to determine the state. air/ground state is recommended. 2) If an automatic means is not available, the 2) If an automatic means is not implemented, transponder Shall ensure that the air/ground the transponder SHALL ensure that the state is Airborne air/ground state is Airborne. Table 4 DO-181E section 2.1.7 b amendment A1.2.3.1.5 RTCA/DO-181E, section 2.1.7 c, Flight Crew Control Functions, is amended as shown in Table 5. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 96 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 DO-181E text Modified text for this ETSO The following functions Shall be provided The following functions SHALL be provided as c. A means of selecting the condition in which indicated in items a-f. all transponder functions, other than c. A means of selecting the condition in which transmission on the reply frequency and all transponder functions, other than associated self-testing, are operational (i.e., the transmission on the reply frequency and Standby condition). Return to normal operation associated self-testing, are operational (i.e., the from this condition Shall be possible within five Standby condition) is not required. However if seconds. provided, return to normal operation from Standby condition SHALL be possible within five seconds. Table 5 DO-181E section 2.1.7 c amendment A1.2.3.1.6 RTCA/DO-181E, section 2.1.7 d, Flight Crew Control Functions, is amended as shown in Table 6. DO-181E text Modified text for this ETSO The following functions Shall be provided The following functions SHALL be provided as d. A means of initiating the IDENT (SPI) feature. indicated in items a-f. d. A means of initiating the IDENT (SPI) feature is optional. Table 6 DO-181E section 2.1.7 d amendment A1.2.3.2 Reply Rate Capability Changes A1.2.3.2.1 This section reduces the minimum reply rate capability of the TABS consistent with the interrogation acceptance based on two assumptions. The following rationale describes how the modified reply rates were chosen. A1.2.3.2.1.1 Assumption 1. The worst case Mode C interrogation count in a 100 millisecond interval from one ATCRBS radar is approximately 14 interrogations. Four ATCRBS radar overlapping beam dwells in a second is approximately 53 Mode C interrogations. The Mode C interrogation acceptance rate from 10 TCAS I units is approximately 15 interrogations per second. This represents a total demand on the TABS of 68 Mode C replies per second for this example. A1.2.3.2.1.2 Assumption 2. The worst case Mode S reply rate is primarily derived from the expected interrogation pattern of a set of 50 nearby TCAS II units all equipped with hybrid surveillance. The radar load from only roll-call interrogations would be small and would require networked sensors, otherwise the Mode S ground interrogation acceptance rate from radar systems would be zero. A1.2.3.2.2 Based on assumptions 1 and 2, RTCA/DO-181E section 2.2.3.4 Reply Rate Capability is changed as follows: A1.2.3.2.2.1 RTCA/DO-181E, Section 2.2.3.4.1 a, ATCRBS Reply Rate Capability is amended as shown in Table 7. DO-181E text Modified text for this ETSO The transponder Shall be able to continuously The transponder Shall be able to continuously generate at least 500 ATCRBS 15-pulse replies generate at least 100 ATCRBS 15-pulse replies per second. per second. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 97 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 Table 7 DO-181E Section 2.2.3.4.1 a amendment A1.2.3.2.2.2 RTCA/DO-181E, Section 2.2.3.4.1 c, ATCRBS Reply Rate Capability is amended as shown in Table 8. DO-181E text Modified text for this ETSO For Class 2 equipment, the transponder Shall be For Class 2 equipment, the transponder SHALL capable of a peak reply rate of 1000 ATCRBS 15- be capable of a peak reply rate of 150 ATCRBS pulse replies per second for a duration of 100 15-pulse replies per second for a duration of milliseconds. 100 milliseconds. Table 8 DO-181E Section 2.2.3.4.1 c added A1.2.3.2.2.3 RTCA/DO-181E, Section 2.2.3.4.2 a, Mode S Reply Rate Capability, is amended as shown in Table 9. DO-181E text Modified text for this ETSO A transponder equipped for only short Mode S A transponder equipped for only short Mode S downlink formats (DF), Shall have the following downlink formats (DF), SHALL have the minimum reply rate capabilities: following minimum reply rate capabilities: 50 Mode S replies in any 1-second interval. 29 Mode S replies in any 1-second interval. 18 Mode S replies in a 100-millisecond interval. 10 Mode S replies in a 100-millisecond interval. 8 Mode S replies in a 25-millisecond interval. 5 Mode S replies in a 25-millisecond interval. 4 Mode S replies in a l.6-millisecond interval. 3 Mode S replies in a l.6-millisecond interval. Table 9 DO-181E Section 2.2.3.4.2 a amendment A1.2.3.2.2.4 RTCA/DO-181E, Section 2.2.3.4.2 b, Mode S Reply Rate Capability, is amended as shown in Table 10. DO-181E text Modified text for this ETSO A transponder equipped for long Mode S reply A transponder equipped for long Mode S reply formats Shall be able to transmit as long formats SHALL be able to transmit as long replies: replies: At least 16 of the 50 Mode S replies in any At least 10 of the 29 Mode S replies in any 1- 1-second interval. second interval. At least 6 of the 18 Mode S replies in a 100 At least 4 of the 10 Mode S replies in a 100 millisecond interval. millisecond interval. At least 4 of the 8 Mode S replies in a 25 At least 3 of the 5 Mode S replies in a 25 millisecond interval. millisecond interval. At least 2 of the 4 Mode S replies in a l.6 At least 2 of the 4 Mode S replies in a l.6 millisecond interval. millisecond interval. Table 10 DO-181E Section 2.2.3.4.2 b amendment A1.2.3.3 Reply Rate Limiting Changes A1.2.3.3.1 The modifications in this section address reply rate limiting for ATCRBS and Mode S reply rates consistent with the previous section. A1.2.3.3.2 RTCA/DO-181E, Section 2.2.7.3.1, ATCRBS Reply Rate Limiting is amended as shown in Table 11. DO-181E text Modified text for this ETSO TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 98 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A sensitivity-reduction reply rate limit Shall be A sensitivity-reduction reply rate limit SHALL be incorporated in the transponder for ATCRBS incorporated in the transponder for ATCRBS replies. The limit Shall be capable of being replies. The limit SHALL be capable of being adjusted between 500 continuous ATCRBS adjusted between 100 continuous ATCRBS Mode A and Mode C replies per second and the Mode C replies per second and the maximum maximum continuous rate of which the continuous rate of which the transponder is transponder is capable, or 2000 replies per capable, or 200 replies per second, whichever is second, whichever is less, without regard to the less, without regard to the number of pulses in number of pulses in each reply. Sensitivity each reply. Sensitivity reduction SHALL apply reduction Shall apply only to the receipt of only to the receipt of ATCRBS interrogations. ATCRBS, ATCRBS/Mode S All-Call, and ATCRBS- Only All-Call interrogations. Table 11 DO-181E Section 2.2.7.3.1 amendment A1.2.3.4 RTCA/DO-181E, Section 2.2.13.1.2 c, Variable Direct Data is amended as shown in Table 12. DO-181E text Modified text for this ETSO c. On-the-Ground Condition c. On-the-Ground Condition The transponder Shall report the automatically The transponder may report the automatically determined on-the-ground state as determined determined on-the-ground state as determined by the aircraft in the Flight Status (FS), Vertical by the aircraft in the Flight Status (FS), Vertical Status (VS), and Capability (CA) fields (see Status (VS), and Capability (CA) fields (see §2.2.14.4.15, §2.2.14.4.42, and §2.2.14.4.6), §2.2.14.4.15, §2.2.14.4.42, and §2.2.14.4.6), except when reporting airborne status when on- except when reporting airborne status when the-ground is reported to the transponder on-the-ground is reported to the transponder under the conditions specified in §2.2.18.2.7. under the conditions specified in §2.2.18.2.7. Table 12 DO-181E section 2.2.13.1.2 c amendment A1.2.3.5 RTCA/DO-181E, Section 2.2.13.1.2 d, Variable Direct Data, is amended as shown in Table 13. DO-181E text Modified text for this ETSO d. Special Position Identification (SPI) d. Special Position Identification (SPI) In the ATCRBS mode, an SPI pulse Shall be In the FS field of Mode S replies, an equivalent transmitted upon request, following a Mode A of the ATCRBS SPI pulse shall be transmitted reply. In the FS field of Mode S replies, an upon request if the optional IDENT flight crew equivalent of the ATCRBS SPI pulse Shall be control is implemented per A1.2.3.1.6 of this transmitted upon the same request. The code is ETSO. The code is transmitted for 18 ± 1.0 transmitted for 18 ±1.0 seconds after initiation seconds after initiation and can be reinitiated at and can be reinitiated at any time. any time. Table 13 DO-181E section 2.2.13.1.2 c amendment A1.2.3.6 RTCA/DO-181E, Section 2.2.13.1.2 e, Variable Direct Data is amended as shown in Table 14. DO-181E text Modified text for this ETSO e. Aircraft Identification Data e. Aircraft Identification Data If the aircraft uses a flight number for aircraft If the aircraft uses a flight number for aircraft identification, a means Shall be provided for the identification, a means SHALL be provided for variable aircraft identification to be inserted by the variable aircraft identification to be inserted TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 99 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 the pilot while on the ground, or during flight. by the pilot while on the ground. A means may The means for modifying and displaying aircraft be provided for modifying aircraft identification Shall be a simple crew action identification in flight. independent of the entry of other flight data. Table 14 DO-181E Section 2.2.13.1.2 e amendment A1.2.3.7 Interrogation Acceptance Protocol Changes (All-Call reply capability) A1.2.3.7.1 The transponder All-Call interrogation reply acceptance requirements are reduced to reply only to ATCRBS Mode C (P1-P3) interrogations. The purpose is to reduce the reply rate of TABS while maintaining TCAS and TAS interoperability. The requirements of this ETSO are identical to RTCA/DO-181E except for the changes shown below. A1.2.3.7.2 RTCA/DO-181E, Section 2.2.18.2.2 b, Interrogation Acceptance Protocol (Figure 2-12) is amended as shown in Table 15. DO-181E text Modified text for this ETSO All-Call Address – If the address extracted from All-Call Address – If the address extracted from the received interrogation consists of 24 ONEs the received interrogation consists of 24 ONEs and UF=11, the transmission is a Mode S-Only and UF=11, the transmission is a Mode S-Only All-Call and the received interrogation Shall be All-Call and the received interrogation SHALL accepted according to “i” below unless the not be accepted. lockout protocol is in effect. Mode S-Only All- Call Shall not be accepted (no replies) when in the on-the-ground state (consistent with the CA, VS and FS fields) Table 15 DO-181E Section 2.2.18.2.2 b amendment A1.2.3.7.3 RTCA/DO-181E, section 2.2.18.2.2 c, Interrogation Acceptance Protocol (Figure 2-12) is amended as shown in Table 16. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 100 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 DO-181E text Modified text for this ETSO ATCRBS/Mode S All-Call – An ATCRBS/Mode S ATCRBS/Mode S All-Call – An ATCRBS/Mode S All-Call interrogation (1.6 microseconds P4) All-Call interrogation (1.6 microseconds P4) Shall be accepted unless the TD timer is running SHALL not be accepted. or side lobe suppression is in effect or when in the “on-the-ground” state (consistent with the CA, VS and FS fields). Table 16 DO-181E Section 2.2.18.2.2 c amendment A1.2.3.8 RTCA/DO-181E, Section 2.2.18.2.2 g, Interrogation Acceptance Protocol, paragraph g, All-Call Lockout Conditions is amended as shown in Table 17. DO-181E text Modified text for this ETSO All-Call Lockout Conditions – On receipt of a All-Call Lockout Conditions – On receipt of a Mode S-Only All-Call (UF=11) containing an Mode S-Only All-Call (UF=11) the interrogation Interrogator Code (IC and CL fields) SHALL not be accepted. corresponding to the designator of a running TL timer, the interrogation Shall not be accepted. unless the contained PR code is 8 through 12 and the “on-the-ground” report (CA, VS or FS field) does not include the ground condition. Upon receipt of a Mode S-Only All-Call (UF=11) containing II=0, the interrogation Shall be accepted if the TD timer is not running or if the received PR code is 8 through 12 and the “on- the-ground” report (CA, VS or FS field) does not include the ground condition. Table 17 DO-181E Section 2.2.18.2.2 g amendment A1.2.3.9 RTCA/DO-181E, Section 2.2.18.2.2 i, Interrogation Acceptance Protocol Stochastic All-Calls should not be implemented in Class A TABS. A1.2.3.10 Two new sections are added here to explicitly define interrogation acceptance criteria for TABS. A1.2.3.10.1 RTCA/DO-181E, Section 2.2.18.2.2 L, Interrogation Acceptance Protocol (Figure 2-12) is added as shown in Table 18. DO-181E text Modified text for this ETSO None ATCRBS Mode A Rejection – ATCRBS Mode A interrogations (P1-P3 spacing 8 microseconds) SHALL not be accepted. Recovery from a Mode A interrogation shall adhere to the requirements of Section 2.2.7.2 defined for recovery from a desensitizing pulse. Table 18 DO-181E Section 2.2.18.2.2 L addition A1.2.3.10.2 RTCA/DO-181E, Section 2.2.18.2.2 m, Interrogation Acceptance Protocol (Figure 2-12) is added to as shown in Table 19. This change reduces the range at which addressed Mode S ground interrogations would TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 101 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 be replied to. The intent is to reduce the reply rate of the TABS. Sensitivity to TCAS interrogations are not affected. DO-181E text Modified text for this ETSO None Ground-to-Air Mode S Acceptance – Mode S interrogations, excluding UF=0 SHALL be accepted at the Mode S MTL (§2.2.2.4 b) +3dB ± 1dB. Table 19 DO-181E Section 2.2.18.2.2 m addition A1.2.3.11 RTCA/DO-181E, Section 2.2.18.2.3, Interrogation Reply Coordination, is amended as shown in Table 20. DO-181E text Modified text for this ETSO The transponder SHALL generate replies as follows, except when in The transponder SHALL generate the on-the-ground state: replies as follows, except when in the on-the-ground state: Interrogations Replies Interrogations Replies ATCRBS Mode A 4096 Codes ATCRBS Mode A SHALL not reply ATCRBS Mode C Altitude Codes ATCRBS Mode C Altitude Codes ATCRBS Mode A/Mode S All-Call Reply is DF=11 ATCRBS Mode SHALL not Reply A/Mode S All-Call ATCRBS Mode C/Mode S All-Call Reply is DF=11 ATCRBS Mode SHALL not Reply C/Mode S All-Call Mode S-only All-Call (UF=11) Reply is DF=11 Mode S-only All- SHALL not Reply Call (UF=11) Table 20 DO-181E Section 2.2.18.2.3 amendment A1.2.3.12 RTCA/DO-181E, Section 2.2.18.2.4, Lockout Protocol, should not be implemented in Class A TABS. A1.2.3.13 RTCA/DO-181E, Section 2.2.18.2.5, Multisite Lockout Protocol, should not be implemented in Class A TABS. A1.2.3.14 RTCA/DO-181E, Section 2.2.18.2.7, Flight Status and Vertical Status Protocols are amended as shown in Table 21. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 102 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 DO-181E text Modified text for this ETSO Mode S-equipped aircraft Shall report details of Mode S-equipped aircraft SHALL report details their flight status. The source of and the rules of their flight status. The source of and the rules for such reports are as follows: for such reports are as follows: a. Alert – The transponder Shall transmit the a. Alert – The transponder SHALL transmit the 4096 identification code in ATCRBS Mode A 4096 identification code in the ID field of replies and in the ID field of downlink format downlink format DF=5. When a change is made DF=5. This code can be changed by the pilot, an alert condition SHALL be established. If the and when a change is made an alert condition identification code is changed to 7500, 7600 or Shall be established. If the identification code is 7700, the alert condition SHALL be permanent. changed to 7500, 7600 or 7700, the alert If the identification code is changed to any condition Shall be permanent. If the other value, the alert condition SHALL be identification code is changed to any other temporary and self-cancelling after 18 ± 1 value, the alert condition Shall be temporary seconds (TC timer). The TC timer SHALL be and self-canceling after 18 ± 1 seconds (TC retriggered and continued for 18 ± 1 seconds timer). The TC timer Shall be retriggered and after any change has been accepted by the continued for 18 ± 1 seconds after any change transponder function. The alert condition SHALL has been accepted by the transponder function. be reported in the FS field. The permanent alert The alert condition Shall be reported in the FS condition SHALL be terminated and replaced by field. The permanent alert condition Shall be a temporary alert condition when the terminated and replaced by a temporary alert identification code is set to a value other than condition when the identification code is set to 7500, 7600 or 7700. a value other than 7500, 7600 or 7700. Table 21 DO-181E Section 2.2.18.2.7 amendment A1.2.3.15 RTCA/DO-181E, Section 2.2.18.2.9, All-Call Reply Protocol should not be implemented in Class A TABS. A1.2.3.16 RTCA/DO-181E, Section 2.2.19.1, Minimum Level 2 Transponder Requirements amended as shown in Table 22. DO-181E text Modified text for this ETSO The operational functions described in §1.4.3.2 The operational functions described in §1.4.3.2 require that this transponder Shall, in addition require that this transponder SHALL, in addition to the functions of the Level 1 transponder: to the functions of the Level 1 transponder: a. Process uplink and downlink formats DF=16, a. Process uplink and downlink formats DF=16, UF=DF=20 and 21 (Figure 2-14). The format UF=DF=20 and 21 (Figure 2-14). UF=16 is optional. The format UF=16 SHALL not be accepted. TABS Note: UF=16 is supported by transponders SHALL not be installed with an on-board TCAS connected to an on-board operational TCAS (see system. §2.2.22). b. Requirement Deleted. b. Receive broadcast transmissions from sensors c. Follow the protocols for: (§2.2.19.1.11). Comm-B (see §2.2.19.1.12.1 – §2.2.19.1.12.3). c. Follow the protocols for: Report Codes 4 through 7 in the CA field (see Comm-A (see §2.2.19.1.10). §2.2.14.4.6). Comm-B (see §2.2.19.1.12). TCAS crosslink capability (see §2.2.19.1.18). Comm-U/V (air-air) (see §2.2.19.1.16). Multisite message operation (see §2.2.19.2). TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 103 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 Report Codes 4 through 7 in the CA field (see §2.2.14.4.6). TCAS crosslink capability (see §2.2.19.1.18). Table 22 DO-181E Section 2.2.19.1 amendment A1.2.3.17 RTCA/DO-181E, Section 2.2.19.1.3, Information Transfer, should not be implemented in Class A TABS. A1.2.3.18 RTCA/DO-181E, Section 2.2.19.1.4, Interrogation-Reply Coordination, is amended per Table 23. Equipment using Minimum Level 2 Transponder Requirements SHALL follow the text in DO-181E as written. DO-181E text Modified text for this ETSO The transponder SHALL generate replies to The transponder SHALL generate replies to interrogations as follows: interrogations as follows: Interrogation Reply Interrogation Reply ATCRBS Mode A (see 4096 code ATCRBS Mode A (see Note) SHALL not reply Note) ATCRBS Mode C (see Altitude Code ATCRBS Mode C (see Note) Altitude Code Note) ATCRBS/Mode S All- ATCRBS/Mode S All-Calls DF = 11 SHALL not reply Calls (see Note) (see Note) UF=4 and UF=5 as below UF=4 and UF=5 as below UF=11 (see Note) DF = 11 UF=11 (see Note) SHALL not reply UF=20 and UF=21 as below UF=20 and UF=21 as below Broadcast None Broadcast None Table 23 DO-181E Section 2.2.19.1.4 amendment A1.2.3.19 The Lockout Protocol described in RTCA/DO-181E, Section 2.2.19.1.5, should not be implemented in Class A TABS. A1.2.3.20 The UM Protocol described in RTCA/DO-181E, Section 2.2.19.1.9, should not be implemented in Class A TABS. A1.2.3.21 The Comm-A Protocol described in RTCA/DO-181E, Section 2.2.19.1.10, should not be implemented in Class A TABS. A1.2.3.22 The Broadcast Protocol described in RTCA/DO-181E, Section 2.2.19.1.11, should not be implemented in Class A TABS. A1.2.3.23 The Air-Initiated Comm-B Protocol described in RTCA/DO-181E, Section 2.2.19.1.12.4, should not be implemented in Class A TABS. A1.2.3.24 The Comm-B Broadcast Protocol described in RTCA/DO-181E, Section 2.2.19.1.12.5, should not be implemented in Class A TABS. A1.2.3.25 The Updating the Data Link Capability Report described in RTCA/DO-181E, Section 2.2.19.1.12.6.3 should not be implemented in Class A TABS. A1.2.3.26 The Change of Aircraft Identification described in RTCA/DO-181E, Section 2.2.19.1.13.e, should not be implemented in Class A TABS. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 104 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A1.2.3.27 Linked Comm-A Coding described in RTCA/DO-181E, Section 2.2.19.1.14, should not be implemented in Class A TABS. A1.2.3.28 The Comm-U/V Protocol described in RTCA/DO-181E, Section 2.2.19.1.16, should not be implemented in Class A TABS. A1.2.3.29 The Data Handling Interfaces described in RTCA/DO-181E, Section 2.2.19.1.17, should not be implemented in Class A TABS. A1.2.3.30 The Multisite Message Protocol described in RTCA/DO-181E, Section 2.2.19.2, should not be implemented in Class A TABS. A1.2.3.31 Surveillance Identifier (SI) requirements contained in RTCA/DO-181E, Section 2.2.24.2, should not be implemented in Class A TABS. A1.2.3.32 The Elementary Surveillance (ELS) Compliant Transponder requirements in RTCA/DO-181E, Section 2.2.24, do not apply to TABS equipment. TABS SHALL not claim ELS compliance. Changes made to ELS registers do not need to be indicated via a Comm-B broadcast. If one or more of the ELS registers are supported, then Section 2.2.24 requirements SHALL apply except Sections 2.2.24 b 4, 2.2.24 c, 2.2.24.2, 2.2.24.3.2.5, and 2.2.24.3.4, which do not apply. A1.2.3.33 The Enhanced Surveillance (EHS) Compliant Transponders requirements in RTCA/DO-181E, Section 2.2.25, do not apply to TABS. TABS equipment SHALL not claim EHS compliance. Changes made to EHS registers do not need to be indicated via a Comm-B broadcast. If one or more of the EHS registers are supported, then Section 2.2.25 requirements SHALL apply except Sections 2.2.25.1.2.4 and 2.2.25.2.3, which do not apply. Also, Section 2.2.25, paragraph 6 ‘Transponder capable of supporting EHS…’, must support ELS per A1.2.3.32 of this ETSO. A1.2.4 Altitude Source Function Requirements (For Class A Devices) A1.2.4.1 The altitude source function shall meet the performance requirements of ETSO-C88b, Automatic Pressure Altitude Reporting Code-Generating Equipment, dated August 5, 2016. It is recommended that the altitude source provide 25 ft or better resolution. A1.2.5 ADS-B OUT Function Requirements Derived From EUROCAE ED-102A, including Corrigendum-1, (For Class A Devices) A1.2.5.1 The ADS-B OUT function must be 1090 Extended Squitter (ES) OUT, to support TCAS surveillance. The 1090ES OUT function must meet the Minimum Performance Standards (MPS) qualification and documentation requirements in EUROCAE ED-102A, MOPS for 1090 MHz Automatic Dependent Surveillance – Broadcast (ADS- B) and Traffic Information Services – Broadcast (TIS-B), dated December, 2009, including Corrigendum-1, Section 2, dated January, 2012, for a Class B0 ADS-B OUT transmitter with the following modifications. A1.2.5.2 EUROCAE ED-102A, including Corrigendum-1, Section 2, dated January, 2012, Paragraph 2.2.2.1 c, Mode S Transponder Based Transmitters, is amended as shown in Table 24. ED-102A text Modified text for this ETSO If the ADS-B transmitter is based on Mode S If the ADS-B transmitter is based on Mode S transponders, then for transponder functions it transponders, then for The transponder Shall comply with RTCA/DO-181D (EUROCAE functions SHALL comply with RTCA/DO-181E ED-73C) for each class of transponder specified (EUROCAE ED-73E) for each class of in the latest version of FAA TSO C112 (ETSO transponder specified in the latest version of 2C112) ETSO-C112 (FAA TSO C112), except where modified by Appendix 1 of this ETSO. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 105 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 Table 24 ED-102A Section 2.2.2.1 c amendment A1.2.5.3 The output power SHALL be as specified in EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, Section 2.2.2.2.10.1.a., for Class A0 and B0 equipment. The RF Peak Output power SHALL be at least 18.5 dBW (70 watts). A1.2.5.4 Broadcast of the ADS-B Surface Position Messages defined in EUROCAE ED-102A including Corrigendum-1, Section 2.2.3.2.4 is optional. A1.2.5.5 EUROCAE ED-102A including Corrigendum-1, Section 2.2.3.2.7.2, Aircraft Operational Status Messages, is amended as shown in Table 25. ED-102A text Modified text for this ETSO The ‘Aircraft Operational Status Message’ is The ‘Aircraft Operational Status Message’ is used to provide the current status of the used to provide the current status of the aircraft. The format of the Aircraft Operational aircraft. The format of the Aircraft Operational Status Message shall be as specified in Figure 2- Status Message shall be as specified in Figure 2- 11, while further definition of each of the 11, while further definition of each of the subfields is provided in the subsequent subfields is provided in the subsequent paragraphs. paragraphs. Broadcast of Aircraft Operational Status Message subtype=1, Surface Messages, is optional. Table 25 Aircraft Operational Status Message A1.2.5.6 When TABS is installed with a position source meeting the Class B requirements of this ETSO and transmitting a valid position, the transmitted NIC SHALL be set to 6 (0.5 NM), reference EUROCAE ED-102A including Corrigendum-1, dated January, 2012, Section 2.2.8.1.6. The transmitted SIL SHALL be set to 1, (1x1E- 3/ hr), reference EUROCAE ED-102A including Corrigendum-1, dated January, 2012, Section 2.2.5.1.40. When TABS is installed with a position source compliant with ETSO-C145, ETSO-C146 or ETSO-C196, NIC and SIL SHALL be set in accordance with EUROCAE ED-102A including Corrigendum-1, dated January, 2012. When the position is not valid, NIC and SIL SHALL be set to zero. A1.2.5.7 The System Design Assurance (SDA), SHALL be set to 1, reference EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, Section 2.2.5.1.50. The probability of an undetected fault causing transmission of false or misleading information SHALL be less than or equal to 1E-3. A1.2.5.8 Navigation Accuracy Category for Position, (NACp) SHALL be derived from the Horizontal Figure of Merit (HFOM) in accordance with EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, Section A.1.4.9.9, however, TABS Class B position sources may not provide HFOM directly. When HFOM is not available directly, HFOM SHALL be derived from Horizontal Dilution of Precision (HDOP) according to the following formula: HFOM = 2 * HDOP * User Equivalent Range Error (UERE), where the UERE is 6 metres. This UERE is based on typical single frequency (L1) receiver performance and an assumption of mid-latitude atmospheric propagation. Although the real-time UERE may fluctuate, this assumption is sufficient to support the TABS use case. (Ref Global Positioning System Signals, Measurements and Performance, by Pratap Misra and Per Enge, copyright 2001). A1.2.5.9 When a TABS is installed with a position source meeting the Class B requirements of this ETSO and transmitting a valid position, the transmitted Navigation Accuracy Category for Velocity, (NACv) SHALL be set to 1 (10 m/s), reference EUROCAE ED-102A including Corrigendum-1, dated January, 2012, Section 2.2.5.1.19. When position is not valid, NACv SHALL be set to zero. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 106 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A1.2.5.10 Geometric Vertical Accuracy (GVA) SHALL be derived from Vertical Figure of Merit, (VFOM) in accordance with EUROCAE ED-102A including Corrigendum-1, dated January, 2012, Section 2.2.3.2.7.2.8. Class B position sources may not provide VFOM directly. When VFOM is not available directly, VFOM SHALL be derived from Vertical Dilution of Precision (VDOP) according to the following formula: VFOM = 2 * VDOP * UERE, where the UERE is 6 metres. A1.2.5.11 The Type Code 31, Operational Status Message, subfield ‘Airborne Capability Class Code’, SHALL be changed to indicate the device is a TABS. A1.2.5.11.1 The Operational Status Message SHALL be modified to indicate that it meets the performance standards of this ETSO. ED-102A, including Corrigendum-1, dated January, 2012, paragraph 2.2.18.4.7 and figure 2-40, is modified by this ETSO. Message bits 53-54, (ME Bits 21-22), SHALL describe the capabilities of the TABS per Table 26. Set bit 54 to 1 (one) to indicate that either TABS Class A, Class B, or both classes of equipment are installed. Bit 53 Bit 54 Description 0 0 Not TABS equipped 0 1 TABS Equipped 1 0 TABS device (reserved for future use) 1 1 TABS device (reserved for future use) Table 26 ED-102A Airborne Capability Class Message format A1.2.6 GNSS Position Source Function Requirements (For Class B Devices) A1.2.6.1 Manufacturers may use commercial off-the-shelf (COTS) GNSS position sources to meet the performance of this ETSO as long as the sensor meets the requirements in this section. The position source shall be capable of using Satellite-Based Augmentation System (SBAS) corrections and health messages to exclude satellites from the position solution or to correct satellite range errors. In areas where the SBAS is available, the TABS shall use the SBAS corrections and health messages to exclude satellites from the position solution or to correct satellite range errors. In areas where the SBAS is not available or out of service, the TABS may continue to operate. The regional airspace authority will determine what operational impacts this may have on air-to-ground usage of TABS equipment. According to the FAA the GPS constellation experiences a significant ramp error approximately once a year. During these events, a chipset which uses the SBAS will, depending on the received SBAS messages, either correct or exclude the faulty satellite. Refer to RTCA/DO- 229E, Minimum Operational Performance Standards for Global Positioning System/Satellite-Based Augmentation System Airborne Equipment, when interpreting SBAS-related requirements. A1.2.6.2 The GNSS position source SHALL provide a GPS-only solution for use by the TABS ADS-B function. The FAA and EASA have not evaluated the performance of other GNSS systems for use in support of aviation intended functions. This ETSO will be updated once sufficient analysis has been done to show that other GNSS are appropriate for use by TABS equipment. Note, the GPS-only solution refers to the use of the GPS satellite constellation, it does not exclude augmentation of the GPS solution, such as provided by SBAS or GBAS systems. A1.2.6.3 The GNSS horizontal position error SHALL not exceed 30 metres, 95th percentile, when the Horizontal Dilution of Precision (HDOP) is 2.5 or less. The GNSS position source SHALL either transmit a Horizontal Figure of Merit (95 %) (HFOM) or a HDOP metric. Note: The 30 metre horizontal position fixing error requirement assumes a UERE of 6 metres, consistent with Section A1.2.5.8. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 107 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A1.2.6.4 Removed A1.2.6.5 The GNSS position source SHALL be capable of transmitting horizontal velocity measurements more accurate than 10 m/s, 95th percentile. A1.2.6.6 The GNSS position source SHALL not transmit false or misleading data in the presence of broadband interference. There is no minimum interference rejection requirement for TABS equipment and loss of position in the presence of interference is acceptable behaviour. A1.2.6.7 The GNSS position source SHALL not use SBAS corrections when the SBAS satellite is broadcasting message type 0. A1.2.6.8 The GNSS position source SHALL exclude satellites with UDREI=15 reported in the SBAS fast corrections. A1.2.6.9 The GNSS position source SHALL apply SBAS fast and long term corrections when available. A1.2.6.10 The GNSS position source SHALL be capable of transmitting geometric altitude, Height Above the Ellipsoid (HAE) measurements more accurate than 45 metres, 95th percentile when the Vertical Dilution of Precision (VDOP) is 3.7 or less. The GNSS position source SHALL either transmit a Vertical Figure of Merit (95 %) (VFOM) or a Vertical Dilution of Precision (VDOP) metric. Note: The 45 metre vertical position fixing error requirement assumes a UERE of 6 metres, consistent with Section A1.2.5.10. A1.2.7 Antenna Function Requirements A1.2.7.1 The requirements for transponder antennas are specified in ETSO-C112e. The requirements for GNSS antennas are specified in ETSO-C190 and ETSO-C144a. The antennas should be designed to meet the performance specified in the applicable ETSO. However, the TABS may benefit significantly in installation costs from implementations where the antennas are integrated in the TABS equipment. Small degradations in antenna performance may be acceptable as a trade-off for installation cost. A1.2.7.2 Antennas may be installed internally on aircraft that are transparent to radio frequencies. An internal antenna may not be appropriate on aircraft with a metal hull. If an antenna is installed internally, testing will need to be conducted to ensure the TABS is not negatively impacted and installation guidance must accompany the unit to ensure the system is properly fitted to the aircraft. A1.2.7.3 Because TABS may be installed on a radio frequency (RF) transparent fuselage near a pilot or passenger, or in a cockpit in close proximity to a pilot or passenger, consideration must be given to antenna placement to ensure it does not pose a hazard to humans or combustible materials. Manufacturers must provide installation guidance describing the minimum safe distance the antenna can be to the nearest human body or if applicable, combustible material. Appendix 3 of this ETSO provides a more in-depth discussion of this subject based on FCC and European documents. A1.2.8 Form factor and power A1.2.8.1 An ideal implementation of the TABS would be a single integrated unit with minimal connections to the airframe, such as; mechanical mounting, power, and static air source. Where the equipment might be shared between multiple airframes, the mechanical mounting could incorporate an airframe specific configuration module (containing such items as the ICAO 24 bit aircraft address), and be designed such that no tools are required to remove or install the TABS. A1.2.8.2 Low power consumption design is important. Designs specifically intended for long-term battery operation are ideal. If the TABS is battery powered, it should be designed to provide system integrity commensurate with the failure condition category / classification stated in para 3.2.1. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 108 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 Appendix 2. Test Requirements A2 Testing Introduction A2.1 Testing Intent A2.1.1 This appendix provides an acceptable means to verify the major functions of the TABS. A2.1.2 The TABS is not intended to accept and reply to any UF=11 All-Call interrogations. RTCA/DO-181E tests like 2.4.2.1 Step 6 that use the Mode S Only All-Call interrogation (UF=11) will need to use a different interrogation, such as a UF=0 interrogation. A2.2 Testing Requirements A2.2.1 The tests defined here are derived from tests in the reference documents or written here to ensure compliance with the intended capabilities of TABS equipment. These tests are one acceptable means to demonstrate the equipment meets the functional requirements defined in Appendix 1 of this ETSO. Functionality not modified by Appendix 1 should be verified by the test outlined in the applicable standards, e.g. RTCA/DO-181E. A2.2.2 Table 27 provides notes in italics and parenthesis explaining how to read the tables that modify the text in the source documents. (Source document reference) Modified text for this ETSO (This is a copy of the original text from the (This is the requirement for this ETSO. source document. Material to be deleted Modifications to the source text are marked from this original text is marked with in bold and underlined to assist in strikethrough formatting.) identifying changes). Table 27 (Source document reference) (type of change) A2.2.3 Testing Transponder Function Requirements Derived From DO-181E (For Class A Devices) A2.2.3.1 Testing of the transponder function of the TABS should follow the tests outlined in document RTCA/DO-181E, Minimum Operational Performance Standards for Air Traffic Control Radar Beacon System/Mode Select (ATCRBS/Mode S) Airborne Equipment, dated March 17, 2011, Section 2.3, 2.4, and 2.5, with the following exceptions: A2.2.3.1.1 Testing of Flight Crew Control Functions A2.2.3.1.2 Testing should verify the requirements of RTCA/DO-181E, as modified by paragraph A1.2.3.1.2 of this ETSO have been properly incorporated. A2.2.3.1.3 Testing should verify changes made to para 2.1.7 a, in RTCA/DO-181E, per Section A1.2.3.1.3 have been properly incorporated. A2.2.3.1.3.1 Testing should verify the requirements of A1.2.3.1.3, by performing the test outlined in RTCA/DO- 181E Section 2.5.4.11. Test results should verify that the 4096 code can be set while on the ground. If the 4096 code can be set in flight, testing should verify the 4096 code can be set while in the air (weight-off-wheels condition) per RTCA/DO-181E Section 2.5.4.11. A2.2.3.1.3.2 Testing should verify the requirements of A1.2.3.1.3, by performing the test outlined in RTCA/DO- 181E Section 2.5.4.11. Testing should verify that a means of selecting and transmitting Mode 3/A code 7700 (emergency) is provided and tested per RTCA/DO-181E Section 2.5.4.11. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 109 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.3.1.3.3 Testing should verify the requirements of A1.2.3.1.3, by performing the test outlined in RTCA/DO- 181E Section 2.5.4.11. Testing should also verify that a means of selecting and transmitting an alternate Mode 3/A codes is provided and tested per RTCA/DO-181E Section 2.5.4.11. A2.2.3.1.4 Testing should verify the requirements of A1.2.3.1.4, by performing the test outlined in RTCA/DO- 181E 2.5.4.3.b. Test results should verify aircraft without a means of determining air/ground state, reports in- the-air at all times. Aircraft with an automatic means to determine the air/ground state, must verify that the air/ground state is set properly. Perform the test outlined in RTCA/DO-181E 2.5.4.3.b. If capable of determining the air-ground state, test results should verify the aircraft reports in-the-air when in the air, and on-the-ground when on the ground. A2.2.3.1.5 Testing should verify the requirements of A1.2.3.1.5, have been properly incorporated. If a means of selecting the Standby condition is provided, testing should verify return to normal operation from standby condition is within five seconds. A2.2.3.1.6 Testing should verify the requirements of A1.2.3.1.6, have been properly incorporated. If a means of initiating the IDENT (SPI) feature is installed, testing shall verify it functions properly per RTCA/DO-181E Section 2.5.4.3. (see Also A1.2.3.5and A2.2.3.5) A2.2.3.2 Testing Reply Rate Capability Changes A2.2.3.2.1 This section provides test criteria for the reply rate changes based on assumptions made in Section A1.2.3.2.1. A2.2.3.2.2 Testing should verify changes made to A1.2.3.2.2, have been correctly incorporated into TABS equipment. A2.2.3.2.2.1 Testing should verify the requirements of A1.2.3.2.2.1, of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 1 should verify that the transponder be able to continuously generate at least 100 ATCRBS 15-pulse replies per second. A2.2.3.2.2.2 Testing should verify the requirements of A1.2.3.2.2.2, of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 3 should verify that the transponder is capable of a peak reply rate of 150 ATCRBS 15-pulse replies per second for a duration of 100 milliseconds. A2.2.3.2.2.3 Testing should verify changes made to RTCA/DO-181E Section 2.2.3.4.2.a have been correctly incorporated into TABS equipment per A1.2.3.2.2.3. A2.2.3.2.2.3.1 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.a, as modified by paragraph A1.2.3.2.2.3 of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 2 should verify that the transponder provide at least 29 short Mode S replies in any 1-second interval. A2.2.3.2.2.3.2 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.a, as modified by paragraph A1.2.3.2.2.3 of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 3 should verify that the transponder provide at least 10 short Mode S replies in a 100-millisecond interval. A2.2.3.2.2.3.3 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.a, as modified by paragraph A1.2.3.2.2.3 of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 4 should verify that the transponder provide at least 5 short Mode S replies in a 25-millisecond interval. A2.2.3.2.2.3.4 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.a, as modified by paragraph A1.2.3.2.2.3 of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 5 should verify that the transponder provide at least 3 short Mode S replies in a l.6-millisecond interval. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 110 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.3.2.2.4 Testing should verify changes made to RTCA/DO-181E Section 2.2.3.4.2.b have been correctly incorporated into TABS equipment per A1.2.3.2.2.4. A2.2.3.2.2.4.1 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.b, as modified by paragraph A1.2.3.2.2.4, of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 2 should verify that the transponder provide at least 10 of the 29 Mode S replies as long format replies in any 1- second interval. A2.2.3.2.2.4.2 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.b, as modified by paragraph A1.2.3.2.2.4, of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 3 should verify that the transponder provide at least 4 of the 10 Mode S replies as long format replies in a 100- millisecond interval. A2.2.3.2.2.4.3 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.b, as modified by paragraph A1.2.3.2.2.4, of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 4 should verify that the transponder provide at least 3 of the 5 Mode S replies as long format replies in a 25- millisecond interval. A2.2.3.2.2.4.4 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.3.2.4.2.b, as modified by paragraph A1.2.3.2.2.4, of this ETSO have been satisfied. Testing outlined in DO-181E, Section 2.3.2.2.3 step 5 should verify that the transponder provide at least 2 of the 4 Mode S replies as long format replies in a l.6- millisecond interval. A2.2.3.3 Testing Reply Rate Limiting Changes A2.2.3.3.1 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.7.3.1, as modified by paragraph A1.2.3.3.1, of this ETSO have been satisfied. Testing outlined DO-181E Section 2.4.2.2.5 step 1 should be performed to verify the unit does not reply to Mode A interrogations. A2.2.3.3.2 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.7.3.1, as modified by paragraph A1.2.3.3.2 of this ETSO have been satisfied. Testing outlined inDO-181E Section 2.4.2.2.5 step 1 should be performed to verify the unit is capable of between 100 continuous ATCRBS Mode C replies per second and the maximum continuous rate of which the transponder is capable, or 200 replies per second, whichever is less, without regard to the number of pulses in each reply. Sensitivity reduction SHALL apply only to the receipt of ATCRBS interrogations. A2.2.3.4 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.13.1.2 c, as modified by paragraph A1.2.3.4 of this ETSO have been satisfied. Testing should show airborne status is set to in the air unless the aircraft is air/ground determination capable. If the aircraft can determine air/ground state, testing should show this capability determines on the ground when on the ground and in the air when in the air. A2.2.3.5 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.13.1.2 d, as modified by paragraph A1.2.3.5 of this ETSO have been satisfied. If the aircraft is capable of providing SPI, follow the test outlined in A2.2.3.1.6 of the ETSO to verify it functions properly per RTCA/DO-181E Section 2.5.4.3. (See also, Section A1.2.3.1.6 and A2.2.3.1.6 A2.2.3.6 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.13.1.2 e, as modified by paragraph A1.2.3.6 of this ETSO have been satisfied. Testing should show the Aircraft ID loaded while on the ground is broadcast. If aircraft ID can be changed in flight, testing should verify aircraft ID can be changed in flight and the new aircraft ID is broadcast. A2.2.3.7 Testing of Interrogation Acceptance Protocol Changes (All-Call reply capability) TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 111 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.3.7.1 Except where noted here, testing of the Interrogation Acceptance Protocol capability should follow that called out in RTCA/DO-181E. Testing of the Interrogation Acceptance Protocol capability should be modified from those called out in RTCA/DO-181E to meet the changes made in A1.2.3.7.1. A2.2.3.7.2 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.18.2.2 b, as modified by paragraph A1.2.3.7.2 of this ETSO have been satisfied. Various tests in RTCA DO-181E Section 2.4 utilize the Mode S Only All-Call interrogation and expected reply to execute the test procedure. A discrete interrogation should be used as a substitute for these test procedures. Testing outlined in RTCA/DO-181E, Section 2.5.4.2 should verify that UF=11 interrogations are not accepted. A2.2.3.7.3 Testing should verify the requirements of RTCA/DO-181E, Section 2.2.18.2.2 c, as modified by paragraph A1.2.3.7.3 of this ETSO have been satisfied. Testing outlined in RTCA/DO-181E, Section 2.5.4.2 should verify that an ATCRBS/Mode S All-Call interrogation (1.6 microseconds P4) is not accepted. The pulse decoder tests in Section 2.4.2.5 for ATCRBS/Mode S All-Call interrogation acceptance shall be modified to verify no ATCRBS/Mode S All-Call interrogations that meet the criteria for acceptance in RTCA DO-181E, Section 2.2.6.2, produce a reply. A2.2.3.8 Testing of the requirements of RTCA/DO-181E, Interrogation Acceptance Protocol, per Section 2.5.4.4 and 2.5.4.5 are not required per A1.2.3.8 of this ETSO. A2.2.3.9 Testing of the requirements of RTCA/DO-181E, Stochastic All-Calls, per 2.5.4.13 is not required per A1.2.3.9 of this ETSO. A2.2.3.10 Testing should verify the modified Mode S MTL requirements added to RTCA/DO-181E, per Section A1.2.3.10. Test to ensure paragraph 2.2.18.2.2 L, and 2.2.18.2.2 m, have been properly incorporated. A2.2.3.10.1 Testing outlined in RTCA/DO-181E, Section 2.4.2 should verify that ATCRBS Mode A interrogations (P1-P3 spacing 8 microseconds) are not accepted per A1.2.3.10.1. Various tests in RTCA DO-181E Section 2.4 utilize Mode A interrogations to execute the test procedure. Mode C interrogations should be used as a substitute for these test procedures. The pulse decoder tests in DO-181E, Section 2.4.2.5 for Mode A interrogation acceptance shall be modified to verify that no Mode A interrogations that meet the criteria for acceptance in DO-181E, Section 2.2.6.2 produce a reply. Requirement for recovery from a Mode A interrogation per A1.2.3.10.1 shall be tested according to DO-181E Section 2.4.2.6, Step 1 except using a Mode A interrogation from the master and a Mode C interrogation from the slave. A2.2.3.10.2 Testing should verify the requirements added to RTCA/DO-181E, paragraph 2.2.18.2.2 m, have been properly incorporated per Section A1.2.3.10.2. Verify the requirement added by this ETSO, by performing the test procedure in RTCA/DO-181E, Section 2.4.2.1. step 6, using a UF=0 to verify the Mode S MTL in Section 2.2.2.4 b and UF=4, 5, 20 and 21 to verify the modified MTL per A1.2.3.10.2. A2.2.3.11 Testing should verify the requirements of RTCA/DO-181E, Interrogation Reply Coordination, Section 2.2.18.2.3, as modified by A1.2.3.11 of this ETSO are satisfied. Testing outlined in DO-181E Section 2.5.4.2 shall be modified to verify the unit does not reply to ATCRBS Mode A interrogations. Test ATCRBS Mode A/Mode S All-Calls, ATCRBS Mode C/Mode S All-Calls or UF=11 interrogations per testing outlined in A2.2.3.7and A2.2.3.10. A2.2.3.12 Testing of RTCA/DO-181E, Lockout Protocol, Section 2.2.18.2.4, is not required since TABS devices do not reply to All-Call interrogations per A1.2.3.12 of this ETSO. Testing using interrogations in RTCA/DO-181E Section 2.5.4.4 should be performed to verify the unit properly replies to interrogations containing lockout commands from ground interrogations. A2.2.3.13 Testing of RTCA/DO-181E, Multisite Lockout Protocol, Section 2.2.18.2.5, is not required since TABS devices do not reply to All-Call interrogations per A1.2.3.13 of this ETSO. Testing using interrogations in TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 112 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 RTCA/DO-181E Section 2.5.4.5 should be performed to verify the unit properly replies to interrogations containing multisite lockout commands from ground interrogations. A2.2.3.14 Testing should verify the requirements of RTCA/DO-181E, Flight Status and Vertical Status Protocols, Section 2.2.18.2.7, as modified by A1.2.3.14 of this ETSO are satisfied. Testing outlined in DO-181E Section 2.5.4.7 should be performed to verify the unit sets the flight status bits properly consistent with the capabilities provided for Mode 3/A code entry per A1.2.3.1.3. A2.2.3.15 Testing the requirement of RTCA/DO-181E, All-Call Reply Protocol, Section 2.2.18.2.9, as modified by A1.2.3.15 is not required. Testing outlined in DO-181E Section 2.5.4.8 does not need to be performed since the TABS does not support the All-Call Protocol. A2.2.3.16 Testing should verify the Level 2 Transponder Requirements of RTCA/DO-181E, Minimum Level 2 Transponder Requirements, Section 2.2.19.1, as modified by A1.2.3.16 of this ETSO are satisfied. Testing outlined in RTCA/DO-181E Section 2.5.3 should be performed to verify the unit performs per design specifications. Also, testing outlined in RTCA/DO-181E section 2.5.4.17 should be performed to verify the unit does not process DF=16 messages. A2.2.3.17 No test is required to verify the requirements of RTCA/DO-181E, Information Transfer, Section 2.2.19.1.3, per A1.2.3.17. A2.2.3.18 Testing should verify the requirements of RTCA/DO-181E, Interrogation-Reply Coordination, Section 2.2.19.1.4, as modified by A1.2.3.18 are met. Use tests in A2.2.3.7 and A2.2.3.10 in this ETSO to verify the TABS does not reply to ATCRBS Mode A, ATCRBS/Mode S All Calls and UF=11 interrogations. A2.2.3.19 Testing of the requirements of RTCA/DO-181E, Lockout Protocol, Section 2.2.19.1.5, per Section 2.5.4.4, are not required per A1.2.3.19 of this ETSO. Testing should verify the TABS does not perform the UM Protocol per RTCA/DO-181E Section 2.5.4.18. A2.2.3.20 Since TABS do not support the Comm-B protocol except for GICB extraction requests, the requirements of RTCA/DO-181E, UM Protocol, Section 2.2.19.1.9, do not apply, per A1.2.3.20. Using a subset of the interrogations identified in RTCA/DO-181E Section 2.5.4.18, select 12 interrogations with UF 4, 5, 20 and 21 and containing DI=0, 1 and 7 and verify that the reply contains UM field of ZERO. A2.2.3.21 Testing of the requirements of RTCA/DO-181E, Comm-A Protocol, Section 2.2.19.1.10, per Section 2.5.4.15 are not required per A1.2.3.21 of this ETSO. Testing should verify the TABS does not perform the Com- A Protocol per RTCA/DO-181E Section 2.5.4.15. A2.2.3.22 Testing of the requirements of RTCA/DO-181E, Broadcast Protocol, Section 2.2.19.1.11, as modified by A1.2.3.22 is not required since TABS do not support this protocol. A2.2.3.23 Testing of the requirements of RTCA/DO-181E, Air-Initiated Comm-B Protocol, Section 2.2.19.1.12.4, per Section 2.5.4.18 is not required per A1.2.3.23. To verify GICB extraction requirements, perform the portion of the test procedure of RTCA/DO-181E, Section 2.5.4.18 using interrogation patterns 1 to 24, to test the transponder in state 1 of the test matrix to verify proper reply content. A2.2.3.24 Testing the requirements of RTCA/DO-181E, Comm-B Broadcast Protocol, Section 2.2.19.1.12.5, per 2.5.4.21 is not required per A1.2.3.24. A2.2.3.25 Testing should verify the requirements of RTCA/DO-181E, Updating the Data Link Capability Report, Section 2.2.19.1.12.6.3, as modified by A1.2.3.25. Testing should verify the TABS does not perform the Updating the Data Link Capability Report per RTCA/DO-181E, Section 2.5.4.33. A2.2.3.26 Testing should verify the requirements of RTCA/DO-181E, Change of Aircraft Identification, Section 2.2.19.1.13 e, as modified by A1.2.3.26. Testing should verify the TABS does not perform the Change of Identification per RTCA/DO-181E, Section 2.5.4.19. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 113 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.3.27 Testing the requirements of RTCA/DO-181E, Linked Comm-A Coding, Section 2.2.19.1.14, per 2.5.4.15, is not required per A1.2.3.27. A2.2.3.28 Testing the requirements of RTCA/DO-181E, Comm-U/V Protocol, Section 2.2.19.1.16, per 2.5.4.17, as modified by A1.2.3.28 is not required. A2.2.3.29 Testing the requirements of RTCA/DO-181E, Data Handling Interfaces, Section 2.2.19.1.17, per 2.5.4.20, as modified by A1.2.3.29 is not required. A2.2.3.30 Testing the requirements of RTCA/DO-181E, Multisite Message Protocol, Section 2.2.19.2, per Section 2.5.4.5, as modified by A1.2.3.30 is not required. A2.2.3.31 Testing the requirements of RTCA/DO-181E, Surveillance Identifier (SI), Section 2.2.24.2, per 2.6.2, as modified byA1.2.3.31 is not required. A2.2.3.32 Testing the requirements of RTCA/DO-181E, Elementary Surveillance Capability, Section 2.2.24 as modified by A1.2.3.32 is not required. If one or more ELS registers are supported, test per RTCA/DO-181E, Section 2.6. A2.2.3.33 Testing the requirements of RTCA/DO-181E, Enhanced Surveillance Capability, Section 2.2.25.3.2, as modified by A1.2.3.33 is not required. If the unit is Enhanced Surveillance Capability capable test per RTCA/DO- 181E, Section 2.7. A2.2.4 Testing Altitude Source Function Requirements A2.2.4.1 Testing of the Altitude Source Function should follow that called out in ETSO-C88b, Automatic Pressure Altitude Reporting Code Generating Equipment, dated August 5, 2016. A2.2.5 Testing ADS-B OUT Function Requirements (For Class A Devices) A2.2.5.1 Testing should verify the ADS-B system performs its intended function per EUROCAE ED-102A, MOPS for 1090 MHz Automatic Dependent Surveillance – Broadcast (ADS-B) and Traffic Information Services – Broadcast (TIS-B), dated December, 2009, including Corrigendum-1, dated January, 2012, except as modified by Section A1.2.5. Testing should follow the tests outlined in EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, Section 2.3 and 2.4 with the following exceptions: A2.2.5.2 Per Section A1.2.5.2, testing of transponder functions should follow the requirements in Section A1.2.3 and A2.2.3 of this ETSO. A2.2.5.3 Testing should verify the System RF Peak Power Output has a peak output level of at least 18.5 dBW (70 watts) per A1.2.5.3, reference EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, RF Peak Power, Section 2.2.2.2.10.1 a. Testing outlined in ED-102A, Section 2.3.2.2.6.1 step 5 should verify the unit under test provides a peak output power level of at least 18.5 dBW (70 watts). A2.2.5.4 If the optional ADS-B Surface Position Messages function is provided, per Section, A1.2.5.4, testing should verify the ADS-B Surface Position Message is correctly populated and broadcast per EUROCAE ED-102A Section 2.4.3.2.1.2.2. A2.2.5.5 If the optional Typecode 31, subtype 1, Aircraft Operational Status Messages is provided per Section A1.2.5.5, testing should verify the Aircraft Operational Status Messages is correctly populated and broadcast per EUROCAE ED-102A Section 2.4.3.2.7.2 A2.2.5.6 Per Section A1.2.5.6, testing should verify that NIC=6, and SIL=1 when using position from a Class B position source using test procedures in EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, Sections 2.4.8.1.5, 2.4.5.1.40. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 114 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.5.7 Testing should verify the System Design Assurance (SDA) is set to 1 to verify the requirement in Section A1.2.5.7, reference EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, System Design Assurance (SDA), Section 2.2.5.1.50. A2.2.5.8 Per Section A1.2.5.8, testing should verify that Navigation Accuracy Category for Position (NACp) is set according to EUROCAE ED-102A including Corrigendum-1, dated January, 2012, Section 2.4.3.2.7.1.3.8. Testing should verify that the NACp is set appropriately when the position source is providing HDOP and not HFOM. A2.2.5.9 If a TABS Class B position source is installed, verify Navigation Accuracy Category Velocity (NACv) is set to 1 (10 m/s) per A1.2.5.9. A2.2.5.10 Verify Geometric Vertical Accuracy (GVA) is set per A1.2.5.10. Testing outlined in EUROCAE ED-102A, including Corrigendum-1, dated January, 2012, Section 2.4.3.2.7.2.8 should verify GVA is set appropriately when the position source is providing VDOP and not VFOM. A2.2.5.11 Verify Type Code 31, Airborne Capability Class Message indicates the unit under test is a TABS per A1.2.5.11. A2.2.6 Testing of GNSS Position Source Function Requirements (For Class B Devices) A2.2.6.1 A TABS incorporating a position source that is compliant with ETSO-C129, ETSO-C145, ETSO-C146 or ETSO-C196 must also meet the additional ADS-B criteria defined in AMC1 ACNS.D.ADSB.070 of CS-ACNS, to include any required testing. GNSS position sources that are not compliant with an existing GNSS ETSO will need to meet the requirements in paragraph A1.2.6 of this ETSO and verify it meets the minimum requirements by performing the tests outlined in Section A2.2.6 of this ETSO. The following tests were derived from a reduced set of requirements and associated tests found in RTCA/DO-229E. A2.2.6.2 GPS Only Solution. A2.2.6.2.1 Per para A1.2.6.2, verify that the position source provides a GPS-SBAS or GPS Only solution for use by Class A TABS. A2.2.6.3 Position Accuracy Tests. A2.2.6.3.1 Two tests are used to verify the horizontal position accuracy to ensure the requirement in para A1.2.6.3 is met. The first test is a 24 hour static scenario using live satellite signals. The second test uses a GNSS simulator to generate a scenario incorporating both static and dynamic aircraft manoeuvers. A2.2.6.3.2 24 Hour Accuracy Test. A2.2.6.3.2.1 The equipment SHALL be tested over a 24-hour period using live GPS satellite signals at a surveyed location. The equipment SHALL use an antenna representative of what will be used in an actual airborne installation. The horizontal position error SHALL be computed for each position estimate output by the equipment. A2.2.6.3.2.2 Monitor the sensor provided HFOM and VFOM, or HFOM and VFOM derived from the sensor provided HDOP and VDOP per paragraphs A1.2.5.8 and A1.2.5.10. In order to pass the test, the horizontal position error must be less than 30 metres for at least 95 % of the samples and the horizontal accuracy reported must be greater than the actual position error for at least 95 % of the samples. In order to pass the test, the vertical position error must be less than 45 metres for at least 95 % of the samples and the vertical accuracy reported must be greater than the actual position error for at least 95 % of the samples. A2.2.6.3.2.3 The horizontal position error SHALL not exceed 0.5 NM at any time during the test. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 115 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.6.3.2.4 Only those position outputs that are reported as valid by the equipment need to be considered for the accuracy evaluation. In order to pass the test, 99.9 % of the position outputs must be reported as valid, excluding those position reports prior to the first position fix. A2.2.6.3.3 GPS Simulator-based Accuracy Tests. A2.2.6.3.3.1 The equipment SHALL be tested using a GPS simulator scenario that includes both static and dynamic aircraft manoeuvers. The horizontal and vertical position errors SHALL be computed for each position estimate output by the equipment. A2.2.6.3.3.2 Monitor the sensor provided HFOM and VFOM, or HFOM and VFOM derived from the sensor provided HDOP and VDOP per paragraphs A1.2.5.8 and A1.2.5.10. In order to pass the test, the horizontal position error must be less than 30 metres for at least 95 % of the samples and the horizontal accuracy reported must be greater the actual position error for at least 95 % of the samples. In order to pass the test, the vertical position error must be less than 45 metres for at least 95 % of the samples and the vertical accuracy reported must be greater than the actual position error for at least 95 % of the samples. A2.2.6.3.3.3 The horizontal position error SHALL not exceed 0.5 NM at any time during the test. A2.2.6.3.3.4 Simulator Scenario Details A2.2.6.3.3.4.1 Only those position outputs that are reported as valid by the equipment need to be considered for the accuracy evaluation. In order to pass the test, 99.9 % of the position outputs must be reported as valid, excluding those position reports prior to the first position fix. A2.2.6.3.3.4.2 The simulator scenario SHALL use the standard 24 satellite constellation in RTCA/DO-229E Appendix B. The initial position and time should be chosen to ensure the satellite geometry supports the test Pass/Fail criteria and the HDOP is close to 2.5 and VDOP is close to 3.7. A2.2.6.3.3.4.3 The simulation SHALL include both stationary and dynamic portions, as follows: A2.2.6.3.3.4.3.1 At least 10 minutes of stationary position. A2.2.6.3.3.4.3.2 A sequence of different manoeuvers, including acceleration to a constant velocity, climbs, descents, and turns. A2.2.6.3.3.4.3.2.1 A series of turns should be included to ensure a constantly changing velocity to expose any effects of filtering on the position output. A2.2.6.3.3.4.3.3 At least 10 minutes of accelerated manoeuvers SHALL be simulated. A2.2.6.3.3.4.3.4 Aircraft dynamics are as follows: ground speed = 200kt, horizontal acceleration=0.58g, vertical acceleration of 0.5g. A2.2.6.3.3.4.4 The simulated satellite signals SHALL be set to -134 dBm while position measurements are taken. Signal powers may be increased at the beginning of the scenario to allow for initial acquisition. A2.2.6.3.3.4.5 Simulated signals SHALL include ranging errors for atmospheric effects (troposphere and ionosphere) that adhere to approved models. Refer to DO-229E, Appendix A, Section A.4.2.4 and IS-GPS-200G dated September 5, 2012. A2.2.6.3.3.4.6 No interference needs to be simulated. 2.2.6.4 Reserved A2.2.6.5 Velocity Accuracy Tests. A2.2.6.5.1 The velocity accuracy tests specified AC 20-138D Appendix 4, Sections 4-2, 4-3 and 4-4 SHALL be performed per the requirement in A1.2.6.5 and show the unit provides an accuracy of 10 m/s or less, at least TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 116 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 95 % of the time. It is assumed that the GPS position source does not provide a velocity accuracy output and the TABS will broadcast NACv = 1. Only the tests required to demonstrate a NACv = 1 need be run. A2.2.6.6 Interference Tests. A2.2.6.6.1 The equipment SHALL be tested using simulated GPS signals mixed with an interfering signal of gradually increasing power until the equipment loses position to verify the requirement outlined in para A1.2.6.6. The horizontal position accuracy will be evaluated. A2.2.6.6.2 Simulator Scenario Details. A2.2.6.6.2.1 Use the same simulator scenario set up found in A2.2.6.3.3.4 with the following exceptions: A2.2.6.6.2.2 The interfering signal SHALL be broadband noise with bandwidth of 20 MHz centred on 1575.42 MHz. The initial power spectral density SHALL be -170.5 dBm/Hz (-97.5 dBm total power). A2.2.6.6.2.3 The scenario may to be extended to allow sufficient time for increasing interference power. A2.2.6.6.3 Test Procedure A2.2.6.6.3.1 Step 1 The interfering signal SHALL initially be turned off. A2.2.6.6.3.2 Step 2 The simulator scenario SHALL be engaged and the satellites’ RF SHALL be turned on. A2.2.6.6.3.3 Step 3 The equipment SHALL be powered on and initialized. It is assumed that the receiver has obtained a valid almanac for the simulator scenario to be tested prior to conducting these tests. A2.2.6.6.3.4 Step 4 The receiver SHALL be allowed to reach steady state. When the receiver has reached steady state, an interfering broadband noise signal of -170.5 dBm/Hz SHALL be applied. A2.2.6.6.3.5 Step 5 The interference power SHALL be maintained until the accuracy has reached steady-state. Position measurements and validity indications SHALL be recorded during this interval. A2.2.6.6.3.6 Step 6 The power of the interfering signal SHALL be increased by 2 dB and maintained for 200 seconds. A2.2.6.6.3.7 Step 7 Go to Step 5 and repeat until the receiver is unable to maintain a position fix. A2.2.6.6.4 Pass/Fail Criteria A2.2.6.6.4.1 The horizontal position errors SHALL be computed for each position estimate output by the equipment. A2.2.6.6.4.2 The horizontal position error SHALL not exceed 0.5 NM at any time during the test. A2.2.6.6.4.3 Only those position outputs that are reported as valid by the equipment need to be considered for the accuracy evaluation. There is no minimum interference rejection requirement for TABS equipment and loss of position in the presence of interference is acceptable behaviour. A2.2.6.7 Verification of SBAS Message Type 0 A2.2.6.7.1 Test to verify the GNSS position source does not use SBAS corrections when the SBAS satellite is broadcasting message type 0 per A1.2.6.7. A2.2.6.7.2 Simulator Scenario Details A2.2.6.7.2.1 The simulator scenario SHALL use the standard 24 satellite constellation in RTCA/DO-229E Appendix B A2.2.6.7.2.2 A single SBAS satellite SHALL be simulated with a fast corrections (MT 2-5) update rate of 6 seconds. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 117 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.6.7.2.3 At 500 seconds into the scenario, the SBAS satellite SHALL start broadcasting message type 0 for 60 seconds. The message type 0 broadcast SHALL contain message type 2 data (if appropriate for the SBAS service being simulated). A2.2.6.7.2.4 The scenario SHALL have a static user position. A2.2.6.7.2.5 The simulated satellite signals SHALL be set to a nominal power level (-128 dBm). A2.2.6.7.2.6 Simulated signals SHALL include ranging errors for atmospheric effects (troposphere and ionosphere) that adhere to approved models. Refer to DO-229E Appendix A Section A.4.2.4 and IS-GPS-200G dated September 5, 2012. A2.2.6.7.2.7 No interference needs to be simulated. A2.2.6.7.3 Test Procedure A2.2.6.7.3.1 Step 1 The simulator scenario SHALL be engaged and the satellites’ RF SHALL be turned on. A2.2.6.7.3.2 Step 2 The equipment SHALL be powered on and initialized. It is assumed that the receiver has obtained a valid almanac for the simulator scenario to be tested prior to conducting the tests. A2.2.6.7.3.3 Step 3 Monitor the receiver output for the indication of SBAS use. Verify that the receiver indicates that SBAS is not in use before an SBAS satellite has been acquired. A2.2.6.7.3.4 Step 4 Allow the receiver to reach steady state navigation. Verify that the receiver indicates that SBAS is in use before proceeding to the next step. A2.2.6.7.3.5 Step 5 500 seconds into the scenario, the SBAS satellite SHALL start broadcasting message type 0. A2.2.6.7.3.6 Step 6 Monitor the receiver output for the indication of SBAS use. Verify that the receiver indicates that SBAS is not used within 8 seconds. A2.2.6.8 Exclusion of satellites identified by SBAS as unhealthy A2.2.6.8.1 Test to verify the GNSS position source excludes satellites with UDREI=15 reported in the SBAS fast corrections per A1.2.6.8. The ability of the position source to exclude unhealthy satellites based on the SBAS UDREI will be tested by injecting a ramp error on a satellite measurement and subsequently broadcasting a SBAS UDREI of 15 (‘do not use’) for that satellite. A2.2.6.8.2 UDREI = 15 in Fast Corrections message (MT 2-5, 24) A2.2.6.8.2.1 The equipment SHALL be tested to verify that the UDREI data contained in the SBAS fast corrections messages (MT 2-5, 24) is used to exclude unhealthy satellites. Note: The test does not assume that the receiver outputs an indication that the unhealthy satellite has been removed from the position solution. Instead it uses a pass criteria based on horizontal position error. A2.2.6.8.2.2 Simulator Scenario Details A2.2.6.8.2.2.1 The simulator scenario SHALL use the standard 24 satellite constellation in RTCA/DO-229E Appendix B. A2.2.6.8.2.2.2 A single SBAS satellite SHALL be simulated with a fast corrections (MT 2-5, 24) update rate of 6 seconds. The integrity information message (MT 6) SHALL not be broadcast. A2.2.6.8.2.2.3 The simulation start time and location SHALL be such that the resulting HDOP is close to 5.0. A2.2.6.8.2.2.4 The simulation SHALL use nominal aircraft dynamics, defined to be ground speed = 200 kt and horizontal acceleration = 0.58 g. These dynamics can be simulated as a series of turns. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 118 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.6.8.2.2.5 The scenario SHALL allow the receiver time to achieve steady state navigation before introducing any satellite errors. A2.2.6.8.2.2.6 The scenario SHALL introduce a ramp error on each simulated GPS satellite individually, as follows: A2.2.6.8.2.2.6.1 Step 1 A 5 m/s ramp error SHALL be introduced on the simulated GPS satellite. A2.2.6.8.2.2.6.2 Step 2 Six seconds after the introduction of the ramp error, the simulated SBAS satellite SHALL broadcast a UDREI of 15 for the GPS satellite in the fast correction message. A2.2.6.8.2.2.6.3 Step 3 The ramp error SHALL be applied until one of the following conditions occur:  The horizontal position error of a valid position output exceeds 0.5 NM; or  The ramp error exceeds 2000 m; or  The affected GPS satellite is excluded from the solution. A2.2.6.8.2.2.6.4 Step 4 Allow the receiver time to return to steady state before repeating steps 1 - 3 on the next satellite. A2.2.6.8.2.2.7 The simulated satellite signals SHALL be set to -134 dBm while position measurements are taken. Signal powers may be increased at the beginning of the scenario to allow for initial acquisition. A2.2.6.8.2.2.8 Simulated signals SHALL include ranging errors for atmospheric effects (troposphere and ionosphere) that adhere to approved models. Refer to DO-229E, Appendix A, Section A.4.2.4 and IS-GPS-200G dated September 5, 2012. A2.2.6.8.2.2.9 No interference needs to be simulated. A2.2.6.8.2.3 Pass/Fail Criteria A2.2.6.8.2.3.1 The test SHALL be run on two different space-time scenarios. The two scenarios SHALL be sufficiently separated to ensure that different satellite geometry is presented to the receiver. A2.2.6.8.2.3.2 The horizontal position errors SHALL be computed for each position estimate output by the equipment during the test. A2.2.6.8.2.3.3 The horizontal position error SHALL not exceed 0.5 NM at any time during the test. A2.2.6.8.2.3.4 Only those position outputs that are reported as valid by the equipment need to be considered for the accuracy evaluation. A2.2.6.9 Testing GNSS Position Source SBAS Fast and Long Term Corrections A2.2.6.9.1 Application of Fast Corrections (MT 2-5, 24) and Long-Term Corrections (MT 24, 25) The equipment SHALL be tested to verify that fast corrections and long-term corrections are applied properly per A1.2.6.9. A2.2.6.9.2 Simulator Scenario Details A2.2.6.9.2.1 The simulator scenario SHALL use the standard 24 satellite constellation in RTCA/DO-229E Appendix B. A2.2.6.9.2.2 A single SBAS satellite SHALL be simulated with a fast corrections (MT 2-5, 24) update rate of 6 seconds and standard long-term corrections (MT 24, 25) update rate of 120 seconds. A2.2.6.9.2.3 The simulation start time and location SHALL be such that the resulting HDOP is close to 5.0. A2.2.6.9.2.4 The simulation SHALL use nominal aircraft dynamics, defined to be ground speed = 200 kt and horizontal acceleration = 0.58 g. These dynamics can be simulated as a series of turns. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 119 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A2.2.6.9.2.5 The scenario SHALL introduce a bias and ramp error on a single satellite selected so that the range error will result in the maximum horizontal position error if not corrected by SBAS. The SBAS long-term corrections will be applied to correct the bias error. At each 6 second update, SBAS fast corrections will be provided to correct the ramp error for the affected satellite, as follows: A2.2.6.9.2.5.1 STEP 1 A 70 metre bias SHALL be introduced on the simulated GPS satellite. Provide SBAS long- term corrections to correct the bias term. The bias magnitude was chosen to approximate the maximum value that can be corrected by the δaf0 term in a type 25 message (using velocity code 0). A2.2.6.9.2.5.2 STEP 2 Start the scenario broadcasting MT25 with the correction for the bias error introduced on the selected satellite. A2.2.6.9.2.5.3 STEP 3 Allow the receiver time to acquire the GPS and SBAS satellites and obtain a steady-state differential fix, including sufficient time to acquire a type 25 message for the selected GPS satellite. A2.2.6.9.2.5.4 STEP 4 Inject a 5 m/s ramp error on the selected satellite in the same direction as the bias error. A2.2.6.9.2.5.5 STEP 5 At each 6 second update, provide SBAS fast corrections equivalent to the size of the growing ramp error. A2.2.6.9.2.5.6 STEP 6 The ramp error SHALL be applied until the ramp error plus bias error reaches 325 metres. Maintain the error of 325 metres for 5 minutes. A2.2.6.9.2.6 The simulated satellite signals SHALL be set to -134 dBm while position measurements are taken. Signal powers may be increased at the beginning of the scenario to allow for initial acquisition. A2.2.6.9.2.7 Simulated signals SHALL include ranging errors for atmospheric effects (troposphere and ionosphere) that adhere to approved models. Refer to DO-229E Appendix A Section A.4.2.4 and IS-GPS-200G dated September 5, 2012. A2.2.6.9.2.8 No interference needs to be simulated. A2.2.6.9.3 Pass/Fail Criteria A2.2.6.9.3.1 The horizontal and vertical position errors SHALL be computed for each position estimate output by the equipment during the test. A2.2.6.9.3.2 Monitor the sensor provided HFOM and VFOM, or HFOM and VFOM derived from the sensor provided HDOP and VDOP per paragraphs A1.2.5.8 and A1.2.5.10. Compare the HFOM against the horizontal position error for each valid position estimate. Compare the VFOM against the vertical position error for each valid position estimate. In order to pass the test, the horizontal and vertical position accuracy output must be greater the actual position error at least 95 % of the time. Analyse the position estimates to determine if the fast corrections and long-term corrections are being applied correctly. A2.2.6.9.3.3 Only those position outputs that are reported as valid by the equipment need to be considered for the accuracy evaluation. A2.2.6.9.3.4 The test only needs to be run using a single space/time scenario. A2.2.6.10 Test the GNSS position source requirements in Section 0 by running the test outlined in Section A2.2.6.3.3. Appendix 3. Environmental Testing for Class B Equipment A3 Environmental Test Considerations TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 120 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C199 Date: xx.xx.2017 A3.1 The environmental tests and performance requirements described in this subsection provide a laboratory means of determining the overall performance characteristics of the equipment under conditions representative of those that may be encountered in actual aeronautical operations. A3.2 The following test procedures must be run when performing environmental testing on Class B Equipment. Class B equipment only needs to be tested under DO-160D change 3 or later Environmental Test, Section 4 Temperature and Altitude, and Section 5 Temperature Variation Testing. A3.3 The test procedure set forth below is considered satisfactory for use in determining equipment performance under environmental conditions. Although specific test procedures are cited, it is recognized that other methods may be preferred. These alternative procedures may be used if the manufacturer can show that they provide at least equivalent information. In such cases, the procedures cited herein should be used as one criterion in evaluating the acceptability of the alternative procedures. Note: The intent of this section is to minimise the testing of commercial off-the-shelf (COTS) devices. A3.4 Class B Equipment System Test A3.4.1 Equipment Required: A representative antenna of what will be installed in an actual airborne TABS. A3.4.2 Figure 1 provides a representation of the test setup. Figure 1 Test Setup A3.4.3 Measurement Procedure: A3.4.3.1 Set the test equipment to measure the output of the Position Source. A3.4.3.1.1 Verify the position information output by the GPS to the TABS is correct for: A3.4.3.1.1.1 The latitude and longitude of the surveyed location when connecting the device to a live (e.g. rooftop) antenna, or; A3.4.3.1.1.2 The output by the GPS simulator for the scenario outlined in Section A2.2.6.3.3 A3.4.3.1.2 Using the test setup in A3.4.2, monitor the sensor provided HFOM, or HFOM derived from the sensor provided HDOP per paragraph A1.2.5.8. This output SHALL be compared against the horizontal position error for each valid position estimate. In order to pass the test, the horizontal position accuracy output must be greater than the actual position error for at least 95 % of the samples. The horizontal position error SHALL not exceed 0.5 NM at any time during the test. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 121 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C203 A1 Date:19.12.2016 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: Fire Containment Cover s (FCC) 1- Applicability This ETSO gives provides the requirements which Fire Containment Covers (FCCs) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the SAE International AS6453, Fire Containment Cover - Design, Performance, and Testing Requirements, August 2013, as amended by Appendix 1 of this ETSO. 3.1.2 - Environmental Standard The required performance under the test conditions specified in SAE AS6453 Section 4.6 and Sections 6.1.2 through 6.1.5 as modified in the appendix of this TSO shall be demonstrated. 3.1.3 – Computer Software None. 3.1.4 - Airborne Electronic Hardware Qualification None. 3.2 - Specific 3.2.1 Failure Condition Classification N/A None. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 122 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C203 A1 Date:19.12.2016 xx.xx.2017 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific Each fire containment cover conforming to this Standard shall bear at least the following markings near the bottom edges on the two opposite long sides: — ‘FIRE CONTAINMENT COVER’, in bold characters at least 150 mm (6 in) high, — Substantiated protection time (e.g. ‘Minimum protection duration 6 hours’), — The IATA ULD ID (size) codes for the pallets and nets with which the FCC can be used. — Expiration date in the format ‘EXP YYYY-MM’. In addition each fire containment cover conforming to this Standard shall bear the markings identified in SAE AS6453 Section 7.3 and Section7.4 as amended in Appendix 1 of this ETSO. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 123 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C203 A1 Date:19.12.2016 xx.xx.2017 APPENDIX 1. MINIMUM PERFORMANCE STANDARD (MPS) FOR FIRE CONTAINMENT COVERS This Appendix prescribes the MPS for Fire Containment Covers. The applicable standard is SAE International AS6453, Fire Containment Cover – Design, Performance, and Testing Requirements dated August 2013 and modified as follows: AS6453 Section Action 1.1 – 1.2 Disregard 1.4 Disregard 1.7 Disregard 2 Disregard references to Japanese Airworthiness Standard Part 3 and Civil Aviation Agency of China Regulations CAAC CCAR-25 and CTSO C90 3.2 Disregard second sentence 4.1 Disregard 4.2.1 Disregard Note 4 and Note 6 4.3.1 Add to the end of the sentence “’which is sufficiently flexible to allow the FCC to collapse with the fire load’”. 4.3.3 – 4.3.6 Disregard 4.4 Disregard 4.5.3 Disregard 4.5.4 Disregard 4.5.6 – 4.5.8 Disregard 4.6.5 Disregard the phrase ‘as part of the required traceability code (see 7.2)’ 4.6.7 Disregard 4.7 Disregard 5.1.1 Add ‘seams and corners’ after ‘The fire container cover’s material’. 5.1.1 Disregard references to CCAR-25 and JAS Part 3 5.1.2 Disregard 5.1.3 Disregard 5.2.2 Disregard references to CCAR-25 and JAS Part 3 5.2.4 Disregard 5.3.1 Disregard second sentence 5.3 Disregard 6.1.1.1 Disregard references to CCAR-25 and JAS Part 3 6.1.1.2.b Disregard references to CCAR-25 and JAS Part 3 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 124 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C203 A1 Date:19.12.2016 xx.xx.2017 AS6453 Section Action 6.1.1.5 Add the following sentence to the end of this section ‘The FAA Aircraft Materials Fire Test Handbook includes an allowance for a brief ignition on the upper surface of the test specimen as long as the 400 degree F requirement is not exceeded.’ 6.1.1.6 – 6.1.1.7 Disregard 6.1.6 Disregard 6.2.1 Replace the words in the end of the second sentence ‘paragraph 4.3.2 of the US DOT/FAA/AR-TN05/20 document (see reference [16] in Bibliography).’ with the following, ‘the bulk load fire scenario section of report US DOT/FAA/TC-TN12/11.’ 6.2.3 Disregard references to CCAR-25 and JAS Part 3 6.2.4 Disregard 6.2.6 Disregard ‘, then with a repaired unit in order to substantiate the retained repair method. The test record files shall be used to substantiate the defined degree of damage as allowable operational serviceability limits, and repair method approval’ 6.2.7 – 6.2.9 Disregard 7.1 – 7.2 Disregard 7.3 Disregard last sentence 7.5 Disregard 8 Disregard 9 Disregard Annex D Disregard TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 125 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C209 Date:xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: Electronic Flight Instrument System (EFIS) Display 1- Applicability This ETSO provides the requirements which electronic flight instrument system (EFIS) displays that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in SAE AS6296, Electronic Flight Instrument System (EFIS) Display, dated March 2016, and AS8034B, Minimum Performance Standard for Airborne Multipurpose Electronic Displays, dated 27th June 2011. Note1: The hardware, physical, and optical (ocular) requirements of EFIS displays are addressed in SAE AS8034B. The EFIS display requirements, for a broad set of aircraft functions, are addressed in SAE/AS6296. Note2: This ETSO standard covers basic display standards (SAE/AS8034B) and sp ecific displayed functions requirements (SAE/AS6296). Specific displayed functions can include, but are not limited to, flight instrumentation, navigation, engine and system status, alerting, surveillance, communication, terrain awareness, weather, and/or other displays. This ETSO standard does not provide standards for head up displays. Two functions covered within SAE/AS6296 are required as a minimum. This ETSO does not address sensor requirements. This ETSO standard does not address the display of single function equipment (e.g., airspeed). Sensor requirements and single TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 126 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C209 Date:xx.xx.2017 function equipment requirements are located in their respective ETSO. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3 3.2 - Specific None. 3.2.1 Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4 The failure condition classification appropriate for the equipment will depend on the intended use of the equipment in a specific aircraft. The loss of function and malfunction failure condition classification for which the equipment is designed should be documented. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific Per SAE AS6296 Section 3.14, a specific marking is required: ‘See Installation Manual (IM) for Declared EFIS Functions’, or equivalent, on the primary (most prominent) component of the EFIS. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 127 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C210 Date: xx.xx.2017 European Aviation Safety Agency European Technical Standard Order Subject: Airborne Head Up Display 1- Applicability This ETSO provides the requirements which airborne head up displays that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with the applicable ETSO marking. This ETSO standard does not address sensor imaging systems, displays worn by the pilot (goggles, helmet-mounted displays) or specific symbology to be displayed. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO, Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in SAE AS8055A, Minimum Performance Standards for Airborne Head Up Display, dated July 2015. 3.1.2 - Environmental Standard See CS-ETSO, Subpart A, paragraph 2.1. 3.1.3 - Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO, Subpart A, paragraph 2.3. 3.2 - Specific TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 128 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-C210 Date: xx.xx.2017 None. 3.2.1 - Failure Condition Classification See CS-ETSO, Subpart A, paragraph 2.4. The failure condition classification appropriate for the equipment will depend on the intended use of the equipment in a specific aircraft. The loss of function and malfunction failure condition classification for which the equipment is designed should be documented. 4- Marking 4.1 - General Marking as detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific None 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 129 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 European Aviation Safety Agency European Technical Standard Order (ETSO) Subject: AIRBORNE SYSTEMS FOR NON REQUIRED TELECOMMUNICATION SERVICES (IN NON AERONAUTICAL FREQUENCY BANDS) (ASNRT) 1- Applicability This ETSO gives provides the requirements which airborne systems to be installed on aircraft for non-required telecommunication services (in non-aeronautical frequency bands) (ASNRT) that are designed and manufactured on or after the date of this ETSO must meet in order to be identified with applicable ETSO marking. Note: An antenna alone without an ASNRT controller does not fall under this standard. 2- Procedures 2.1 - General Applicable procedures are detailed in CS-ETSO Subpart A. 2.2 - Specific None. 3- Technical Conditions 3.1 - Basic 3.1.1 - Minimum Performance Standard Standards set forth in the Appendix 1. 3.1.2 - Environmental Standard The equipment must be tested according to the applicable environmental standards contained in EUROCAE ED-14E (RTCA/DO-160E) “Environmental Conditions and Test Procedures for Airborne Equipment” from March 2005. Equipment providing telecommunication services shall be tested in accordance with appendix 1, chapter 4 of this ETSO. 3.1.3 - Computer Software See CS-ETSO, Subpart A, paragraph 2.2. 3.1.4 - Airborne Electronic Hardware See CS-ETSO Subpart A paragraph 2.3 TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 130 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 3.2 - Specific None. 3.2.1 - Failure Condition Classification See CS-ETSO Subpart A paragraph 2.4 4- Marking 4.1 - General Marking is detailed in CS-ETSO, Subpart A, paragraph 1.2. 4.2 - Specific The label shall indicate the communication system or network used. 5- Availability of Referenced Document See CS-ETSO, Subpart A, paragraph 3. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 131 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 APPENDIX 1. AIRBORNE SYSTEMS FOR NON REQUIRED TELECOMMUNICATION SERVICES (IN NON AERONAUTICAL FREQUENCY BANDS) (ASNRT) 1. GENERAL PURPOSE AND SCOPE This minimum operational performance specification defines the minimum performance expected from an airborne system to be installed on aircraft for non-required communication services in non- aeronautical frequency bands (ASNRT). The performance of specific equipment may be enhanced or superior to this specification, depending on the intended application and configuration. Chapter 1 describes typical equipment applications and operational objectives and is the basis for the performance criteria specified in Chapter 2 and Chapter 3. Definitions essential to proper understanding of this document are also provided in Chapter 1. Chapter 2 contains general design requirements. Chapter 3 contains the minimum performance specification for the equipment, defining performance under standard operating conditions. Chapter 4 prescribes the environmental test conditions which provide a laboratory means of determining the performance characteristics of the equipment under conditions representative of those which may be encountered in actual operations. Chapter 5 specifies the performance of the equipment and gives guidance for the installation. APPLICATION Compliance with this minimum operational performance specification by manufacturers, installers and users is recommended as a means of ensuring that the equipment will satisfactorily perform its intended functions under the conditions normally encountered in routine aircraft operations. This specification does not cover telecommunication aspects. It is the responsibility of the manufacturer as well as the operator to obtain the necessary approvals from the responsible telecommunication authority and from the network provider, if applicable. DESCRIPTION OF SYSTEM The purpose of the airborne system for non-required communication services (ASNRT) is to provide flight crew and passengers with additional air- ground / air-air voice and data communication service. The system does not support safety-related applications like air traffic service (ATS). It consists of electronic on board equipment which is not required for any phase of flight by any aviation rule. It is normally not connected to, nor interacts with, any aircraft system except the intercom, electrical power and mechanical mounting. In special cases, it may be useful to establish additional interfaces to other systems. Examples are communication management systems for transmission of data such as position, heading, etc. as well as company data. Furthermore, it might be useful to connect the ASNRT to devices serving as antenna steering units. The following drawing shows an example of such a system utilizing the Iridium satellite network. It does not define a requirement. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 132 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 Example Block Diagram: Airborne System for Non-Required Communication Services using the IRIDIUM satellite network 2. GENERAL DESIGN REQUIREMENTS AIRWORTHINESS The equipment shall not, under either normal or failure conditions, impair the airworthiness of the aircraft in which it is installed. OPERATION OF CONTROLS The operation of controls intended for use during flight, None of the in all possible positions, combinations and sequences, of the controls intended for use during flight shall not result in a condition whose presence or continuation would be detrimental to the continued safe operation of the aircraft. Operating the system shall not significantly affect the workload of the air crew. The issuance of a radio or telecommunication station license in accordance with national regulations is mandatory. For non-aviation services, which are not covered by EASA ETSOs, an EN standard is the appropriate definition for the transmission characteristic for a specific service in Europe. The EN applicable standard should be identified in the installation manual and DDP. DESIGN OF CONTROLS CONSIDERATIONS Controls and indicators intended for use by flight crew shall be of suitable design for the intended cockpit environment / philosophy (e.g. size, readability, illumination). If an ASNRT equipment is integrated with a required A/C system, the ASNRT equipment shall not adversely affect the safety of the aircraft or its occupants, or the proper functioning of required equipment or systems under all foreseeable conditions. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 133 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 EFFECTS OF TESTS Unless otherwise provided, the design of the equipment shall be such that, subsequent to the application of the specific tests, no condition exists which would be detrimental to the continued safe operation of the aircraft. AIRCRAFT EQUIPMENT INFORMATION VULNERABILITIES If the equipment interfaces with aircraft busses and has connectivity to non-governmental services (e.g., Wi-Fi, Internet, etc.) the manufacturer may expose aircraft information vulnerability (such as cybersecurity risks) through equipment design, or become vulnerable as a result of being connected to a common interface. Therefore, it is important that manufacturers consider aircraft information security risk mitigation strategies in their equipment design, particularly when the equipment is responsible for an interface between the aircraft and aircraft-external systems. It is recommended that manufacturers look at a layered approach to aircraft information security risk mitigation that includes both technical (e.g., software, signal filtering) and physical strategies. From a technical perspective, for example, this could include signal spoofing detection capabilities or more stringent, multi-factored authentication techniques such as passwords, PINs, and digital certificates. From a physical perspective, for example, such as in an in-flight entertainment system in the cabin, a manufacturer could consider connectors that require special tools to remove them to prevent passenger tampering. And finally, but just as important, manufacturers should consider supply chain risk management; for example, if a manufacturer is outsourcing software code development, are the contractor and its staff properly vetted? Civil Aviation Authorities (CAAs) have a regulatory interest when an applicant’s design makes use of a non-trusted connectivity where the installation can potentially introduce aircraft information security vulnerability. This requires the applicant to address not only the information security vulnerabilities and mitigation techniques for the new installation, but to also consider how vulnerability could propagate to existing downstream systems. Therefore, it is recommended that manufacturers reference their equipment aircraft information security review and mitigation strategies in the equipment’s installation manual so that the applicant can consider them in meeting the installation regulatory requirements. 3. MINIMUM PERFORMANCE SPECIFICATION UNDER STANDARD CONDITIONS GENERAL The aeronautical system for non-required telecommunication services (ASNRT) must meet the basic requirement not to interfere with on-board systems. It must be ensured that the equipment can neither become a source of danger in them itself, nor threaten the proper functioning of any essential system or service. Note: It is assumed that the manufacturer will also consult the telecommunication administration and (if applicable) the network provider as early as possible for approval of the technical parameters and requirements for the usage of the equipment. SYSTEM SPECIFIC PARAMETERS If appropriate, the manufacturer shall define details to show compliance with the “‘GENERAL’” subpart of this document. A set of technical parameters showing that the system performs its intended functions shall be declared by the manufacturer. This set of data should include the quality, availability and reliability of the TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 134 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 information channel and all the requirements which may be defined by the telecommunication administration or network provider for such equipment. However, when agreed by EASA, compliance demonstration is only necessary for a very basic requirement like ‘communication link established’. If the system interfaces to other on board equipment, compliance with the interface related requirements for that equipment has to be shown in order to exclude adverse effects on connected systems and the aircraft itself. In case of the intercom system electrical interface related parts of RTCA DO-214, or later revisions, (Audio Systems Characteristics and Minimum Operational Performance Standards for Aircraft Audio Systems and Equipment) Section 2.4 apply. Means to disconnect the equipment from power bus or other systems (if applicable) shall be provided (i.e. Master Switch) for the case of unexpected interference, fire, smoke or other hazards. Note: Compliance with this requirement can be achieved by the design of the equipment itself or by measures described in the installation manual. CLASSES OF EQUIPMENT There are two classes defined in accordance with technical means to ensure the proper operation of the equipment. There may be additional operational requirements which are not covered by this specification. — Class 1: Equipment with the operation restriction to parked and (air-) taxiing aircraft: Technical means shall be provided to ensure that the equipment cannot be operated during other phases of flight (e.g. by connection to sensors for airspeed, weight on wheels, etc.). Note: Equipment which can, due to interference problems, only be allowed to operate in a parked aircraft with engines and other systems switched off, is not in the scope of this specification. — Class 2: Equipment for operation during all phases of flight: The manufacturer shall obtain concurrence for the intended operation from the telecommunication authority or network provider (if applicable) before applying for an airworthiness approval. 4. MINIMUM PERFORMANCE SPECIFICATION UNDER ENVIRONMENTAL TEST CONDITIONS INTRODUCTION The environmental tests and performance requirements described in this chapter provide a laboratory means of determining the performance characteristics of the equipment under conditions representative of those which may be encountered in actual operations. The airborne system for non-required telecommunication services in non-aeronautical frequency bands (ASNRT) needs to comply with environmental tests so far as it is necessary to ensure that the equipment cannot become a source of danger under environmental conditions. Some of the tests contained in this chapter are identified with the phrase “’if required’“. They do not have to be performed unless the manufacturer wishes to qualify the equipment to these additional environmental conditions or if requested by EASA. Unless otherwise specified, the test procedures applicable to a determination of equipment performance under environmental test conditions are specified in ETSO-2C514 § 3.1.2. EQUIPMENT PERFORMANCE COMPLIANCE The performance requirements as defined in chapter 3 are not required to be tested under all of the conditions specified in CS-ETSO Subpart A paragraph 2.1. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 135 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 When exposed to high temperature and/or pressure as well as a power input and voltage spike test, it shall be ensured that there is no risk of fire, smoke or similar induced by the equipment. During all shock and vibration tests, the equipment shall remain in its mounting and no part of the equipment or its mounting shall have become detached and free of the shock test table. Direct lightning tests for antennas or other equipment to be mounted outside the aircraft are only intended to ensure that a lightning strike is already blocked at the antenna itself and cannot influence other installations or the aircraft itself. PERFORMANCE TESTS The equipment is sorted into two categories. Category 1 is for devices which are to be installed inside the aircraft, e.g. in the avionics bay. Category 2 covers subsystems to be installed outside, especially antennas. EUROCAE ED-14 / RTCA-DO160 Test Section Category 1 Category 2 Temperature and Altitude 4 + + Temperature Variation 5.0 - - Humidity 6.0 - - Operational Shocks and Crash Safety 7.0 + + Vibration 8.0 + + Explosion Proofness 9.0 - - Water Proofness 10.0 - - Fluids Susceptibility 11.0 - - Sand and Dust 12.0 - - Fungus Resistance 13.0 - - Salt Spray 14.0 - - Magnetic Effect 15.0 + +(1) Power Input 16.0 + - Voltage Spike 17.0 + - Audio Frequency Cond. Susceptibility 18.0 - - Induced Signal Susceptibility 19.0 - - Radio Frequency Susceptibility 20.0 - - Emission of Radio Frequency Energy 21.0 + +(1),(3) Lightning Induced Transient 22.0 - - Susceptibility Lightning Direct Effects 23.0 - +(2) Icing 24.0 - - Electrostatic Discharge 25.0 + + Fire, Flammability 26.0 + - + mandatory test - if required (1) active antenna only (2) This test can be omitted if compliance with the requirement is ensured by other means (3) non intended radiation The tests marked with ‘if required’ may become mandatory in case of specific technical reasons. This shall be agreed with EASA. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 136 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 3. Proposed Amendments ETSO-2C514a Date: 28.11.2008 xx.xx.2017 Note: The above table above is based on ED-14E ED-14G / DO-160E DO-160G. When and test conditions or test levels are should be revaluated, should CS-ETSO requires compliance with the latest revision of ED-14 / RTCA-DO160. 5. INSTALLED EQUIPMENT PERFORMANCE The material contained in the following paragraphs is intended as guidance material only and does not have direct significance in the type certification of the equipment concerned. The aircraft installation must comply with the applicable airworthiness requirements and needs to be agreed by EASA. EQUIPMENT INSTALLATION General guidance on installation which can be found in FAA AC 25-10, 25-16, 43.13-1b (or later editions) should be applied. Special care should be taken in selecting the antenna installation location in relation to other receiving and transmitting RF systems. A non-Noninterference demonstration tests are is required. Aircraft lightning zones and system lightning protection haves to be determined. Additionally, for satellite systems, a free sight to the sky is necessary for good system performance. Covering the antenna by structural elements will directly influence the installed communication performance. The interface to the on-board intercom or other systems shall be installed in a manner so that a malfunction of the communication system does not cause conditions which prevent the safe continuation of the flight. The equipment shall be installed in accordance with the manufacturer’s installation instructions. If the ASNRT equipment contains a memory retention device which is a rechargeable lithium battery, the flammability risk must be addressed. Installed ASNRT equipment employing a rechargeable lithium battery must ensure the lithium ion battery meet airworthiness standards appropriate for the battery size and intended function. OPERATING RESTRICTIONS All operation restrictions which are defined e.g. by the rules of telecommunication authority and/or network provider should be enforced by technical provisions and procedures stated in installation manual as well as the operation manual. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 137 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 4. Impact Assessment (IA) 4. Impact assessment (IA) No impact analysis has been conducted in line with Article 3(5) of EASA MB Decision No 18-2015, as this NPA has been prepared in the framework of a regular update of CS-ETSO. TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 138 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 5. Proposed actions to support implementation 5. Proposed actions to support implementation EASA has created a specific link within the EASA internet page9 in order to simplify the identification and the download of the current ETSO articles. For consultation purposes, EASA has also created a specific webpage10 listing all (current & historic) ETSOs. No additional actions are foreseen to support the implementation of new and amended ETSO articles. 9 https://www.easa.europa.eu/easa-and-you/aircraft-products/etso-authorisations/list-of-current-etso 10 https://www.easa.europa.eu/easa-and-you/aircraft-products/etso-authorisations/list-of-all-etso TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 139 of 140 An agency of the European Union European Aviation Safety Agency NPA 2017-08 6. References 6. References 6.1. Affected regulations N/A 6.2. Affected decisions Decision No. 2003/10/RM of the Executive Director of the Agency of 24 October 2003 on certification specifications, including airworthiness codes and acceptable means of compliance, for European Technical Standard Orders (‘CS-ETSO’). 6.3. Reference Documents None TE.RPRO.00034-04 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 140 of 140 An agency of the European Union

Allikas: Lennuamet dokumendiregister →