EMAR 516 Issue 1.1 17dec2010-1
EMAR 516 Issue 1.1 17dec2010-1
EMAR 516 Issue 1.1 17dec2010-1
EMAR 516
MILITARY AIRWORTHINESS
AUTHORITIES FORUM
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
DOCUMENT CONTROL
DOCUMENT APPROVAL
The following table identifies the persons who have approved this document
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 2/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
STATUS
EDITION
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 3/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
TABLE OF CONTENTS
SECTION 11 - AVIONICS.........................................................................................................................190
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 6/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 7/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
SECTION 1 - SCOPE
1.1. PURPOSE
This document establishes the airworthiness certification criteria to be used in the determination of
airworthiness of all manned and unmanned, fixed and rotary wing air vehicle systems. It is a foundational
document to be used by the relevant military airworthiness authority or authorities or other entity to define
the air system’s airworthiness certification basis.
1.2. APPLICABILITY
The criteria within this document may be tailored and applied at any point throughout the life of an air
vehicle system when an airworthiness determination is necessary, especially when there is a change to
the functional or product baseline.
Rotary wing air vehicle and unmanned air system/remotely operated aircraft (UAS/ROA) features demand
unique safety-of-flight (SOF) system requirements. Therefore, unique criteria are included for these types
of systems to ensure that minimum levels of design for safe operation and maintenance are established.
The UAS/ROA operating system can be built into the vehicle or be part of the control station for remotely
operated aircraft. The UAS/ROA system comprises the control station, data links, flight control system,
communications systems/links, etc., as well as the air vehicle. UAS/ROA vary greatly in size, weight, and
complexity. Because they are unmanned, SOF risks associated with loss of aircrew may not apply.
However, as with manned air vehicles, SOF risk associated with personnel, damage to equipment,
property, and/or environment must be considered. As such, the airworthiness criteria may be tailored for
this unique application, including when a UAS/ROA is designed to be “expendable” or where the
UAS/ROA will conduct missions with “minimum life expectancy.” Consideration should be given to the
environment in which the UAS/ROA will be operated (controlled test range, national airspace, fleet usage,
including ship based applications), to the airframe life for which the air vehicle is designed, and to the
“expendability” of the UAS/ROA in close proximity to the control system, personnel, property, or other
equipment.
Similarly, air vehicles intended for use in ship-borne operations have unique requirements in areas such
as structural integrity, propulsion system dynamic response and tolerance to steam ingestion, control
systems response to approach and landings in high turbulence conditions, electromagnetic environmental
effects, deck handling, support and servicing, and pilot field of view.
Commercial derivative aircraft (CDA) are initially approved for safety of flight by a National approving
Authority for Civil Aviation and may have an approved Type Certificate (or equivalent document). Any
non-Civil approved alteration to a CDA may render all civil certifications invalid. While alterations to CDA
are covered by rules unique to each Nation (both Civil and Military regulations), the operating Nations’
service always has the responsibility for the airworthiness certification approval under public aircraft rules.
Therefore, when planning any alterations to a civil certified CDA, the modifier should contact the
appropriate National Military Airworthiness Authority at the earliest opportunity.
In all instances, complete and accurate documentation of both applicability and system specific
measurable criteria values is critical to ensuring consistent, timely, and accurate airworthiness
assessments.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 8/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
To meet individual Nation needs, tailoring may be required to ensure the following aspects are respected:
• The approach to governance and the associated contracting model(s);
• The approach to development, production and on-going upkeep of the product basis of
certification, including the acceptable approaches to means of compliance;
• Sufficient flexibility and adaptability within the criteria to met the operational needs, scenarios
and role for the Product(s).
The primary objective in tailoring is to maintain the intent and context of the criteria. It is not an exercise
intended to relax and/or degrade the criteria. Indeed, for military operations, tailoring may result in a more
arduous certification basis. Where possible, it is recommended that a risk based approach to the
evaluation of the potential impacts (if any) of the tailoring exercise is conducted.
Develop additional criteria, as appropriate, for any capabilities or systems (including the whole/complete
system) not fully addressed by the criteria contained in this document.
The criteria included in this document are written with the intent that an experienced engineer, trained in
the specific technical area under consideration, should be able to interpret, tailor, apply, and evaluate a
particular system’s compliance with the criteria.
Each EMAR 516 Airworthiness Certification Criteria is matched with corresponding Title 14, Code of
Federal Regulations reference (14CFR reference) and Joint Service Specification Guides (JSSG). In
addition, cross-references are provided to the relevant sections within EASA Certification Specifications
(CS), Defence Standard 00-970 and NATO STANAG documents.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 9/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
The FAA Code of Federal Regulations Part and EASA CS (i.e. 23, 25, 27, 29) referenced is dependent on
aircraft type and must be consistent with aircraft size and usage. The list shown is not exhaustive. The
user is cautioned to refer to the reference material only as a guide and not for the purposes of citing
requirements. The user is also advised to use additional FAA and EASA Advisory Circulars, Def-Stan 00-
970 leaflets or other acceptable means of compliance documents to assist in understanding the
implementation of the relevant regulatory requirements.
With respect to the cross-referencing of NATO STANAGs, Nations should examine their ratification status
for each STANAG prior to assuming that the document is applicable.
This document will be periodically updated through review and cross-checking of the referenced
documents. Users should always refer to the current version of the referenced documents. Where a
conflict exists between the reference documents and this document then this should be brought to the
attention of the EMAR 516 sponsor.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 10/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
The documents listed below are not necessarily all of the documents referenced herein but are those
necessary to understand the information provided by this handbook. Refer to the current version of these
documents, unless otherwise indicated.
The following specifications, standards, and handbooks form a part of this document to the extent
specified herein:
The table below details the issue status of the various sections of Defence Standard 00-970 as used in
the cross-references in this document.
2.3. STANAGS
Each EMAR 516B Airworthiness Certification Criteria is matched with corresponding Title 14, Code of
Federal Regulations reference (14CFR reference) and Joint Service Specification Guides (JSSG). In
addition, cross-references are provided to the relevant sections within EASA Certification Specifications
(CS), Defence Standard 00-970 and NATO STANAG documents.
The user is cautioned to look at the reference material only as a guide and not for purposes of citing
requirements. The user is also advised to use additional Advisory Circulars, Def-Stan 00-970 leaflets or
other acceptable means of compliance documents to assist in understanding the implementation of the
relevant regulatory requirements.
With respect to the cross-referencing of NATO STANAGs, pMS should examine their ratification status for
each STANAG prior to assuming that the document is applicable. Users should always refer to the
current version of the referenced documents. For NATO STANAG, this is reflected in the NATO
Standardization Document Database (NSDD). The table below details the ratification status for pMS for
rd
all reference EMAR516B STANAGs as of 3 June 2010.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 12/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 13/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 15/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 16/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 17/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
The following specifications, standards, and handbooks form a part of this document to the extent
specified herein:
The following specifications, standards, and handbooks form a part of this document to the extent
specified herein:
•
st
JSSG-2000B Air System, dated 21 September 2004;
•
nd
JSSG-2001A Air Vehicle, dated 22 October 2002;
• JSSG-2005 Avionic Subsystem, Main Body;
•
th
JSSG-2006 Aircraft Structures, dated 30 October 1998;
•
th
JSSG-2007B Engines, Aircraft, Turbine, dated 6 December 2007;
• JSSG-2008 Vehicle Control and Management System (VCMS);
• JSSG-2009 Air Vehicle Subsystems, dated 30th October 1998;
• JSSG-2010 Crew Systems.
The following specifications, standards, and handbooks form a part of this document to the extent
specified herein:
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 19/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
All definitions, unless otherwise referenced, are to be considered within the context of this document.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 20/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Corrosion.
Corrosion is the deterioration of a material or its properties due to the reaction of that material with its
chemical environment.
Corrosion Prevention and Control Program (CPCP)
A program of maintenance tasks implemented at a threshold designed to control an aircraft structure to
Corrosion Level 1 or better.
Critical location.
A critical location in an aircraft structure is one that has been identified through analysis, test, or service
history as a being especially sensitive to the presence of damage.
Damage.
Damage to aircraft structure is any crack, flaw, corrosion, disbond, delamination, and/or other feature that
degrades, or has the potential to degrade, the performance of the affected component.
Damage tolerance.
Damage tolerance is the attribute of a structure that permits it to retain its required residual strength for a
period of un-repaired usage after the structure has sustained specific levels of fatigue, corrosion,
accidental, and/or discrete source damage. An item is judged to be damage tolerant if it can sustain
damage and the remaining structure can withstand reasonable loads without structural failure or
excessive structural deformation until the damage is detected. A qualification standard for aircraft
structure.
Design loads/environment spectrum.
The design loads/environment spectrum is the spectrum of external loads and environments (chemical,
thermal, etc.) used in the design of the aircraft and is representative of the spectrum that the typical force
aircraft is expected to encounter within the design service life.
Design service life.
The design service life is the period of time (e.g., years, flight cycles, hours, landings, etc.) established at
design, during which the structure is expected to maintain its structural integrity when flown to the design
loads/environment spectrum.
Delamination/Disbond
Structural separation or cracking that occurs at or in the bond plane of a structural element, within a
structural assembly, caused by in service accidental damage, environmental effects and/or cyclic loading.
Deterministic Design Method
A Deterministic design method is a uses recognised calculations and engineering techniques in
formulating the values applied to a known and justified load (as opposed to using applicable experience,
reliability and sample data).
Direct Adverse Effect on Operating Safety
Direct
To be direct, the functional failure or resulting secondary damage must achieve its effect
by itself, not in combination with other functional failures (no redundancy exists and it is a
primary dispatch item).
Adverse Effect on Safety
Safety shall be considered as adversely affected if the consequences of the failure
condition would prevent the continued safe flight and landing of the aircraft and/or might
cause serious or fatal injury to human occupants.
Operating
This is defined as the time interval during which passengers and crew are on board for
the purpose of flight.
Discard
The removal from service of an item at a specified life limit.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 21/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Durability.
Durability is the ability of the aircraft structure to resist cracking, corrosion, thermal degradation,
delamination, wear, and the effects of foreign object damage for a prescribed period of time.
Economic life.
The economic life is the period during which it is more cost-effective to maintain and repair an aircraft
than to replace it. Economic life can be applied on a component, aircraft, or force basis.
Economic Effects
Failure effects which do not prevent aircraft operation, but are economically undesirable due to added
labour and material cost for aircraft or shop repair.
Electrical Wiring Interconnection System (EWIS)
An electrical connection between two or more points including the associated terminal devices (e.g.,
connectors, terminal blocks, splices) and the necessary means for its installation and identification.
Equivalent flight hours.
Equivalent flight hours are the actual flight hours accumulated by an aircraft adjusted for the actual usage
severity compared to the design spectrum or to the baseline spectrum.
Environmental Deterioration (ED)
Physical deterioration of an item's strength or resistance to failure as a result of chemical interaction with
its climate or environment.
Equivalent initial flaw size (EIFS) distribution.
The equivalent initial flaw size distribution is a characterization of the initial quality of the aircraft structure.
The EIFS distribution is derived by analytically determining the initial flaw size distribution that must be
used to obtain the measured flaw size distribution discovered following exposure to the test or actual
usage stress spectra.
Factor of Safety
Factor of Uncertainty as referred to within JSSG 2006 is the same as the Factor of Safety, i.e. a figure
that is applied to prescribed Limit Loads used in calculating the Ultimate Load.
Fail-safe structure.
A fail-safe structure is a structure that retains its required residual strength for a period of unrepaired
usage after the failure or partial failure of safety-of-flight structure.
Failure
The inability of an item to perform within previously specified limits.
Failure Cause
Why the functional failure occurs.
Failure Condition
The effect on the aircraft and its occupants, both direct and consequential, caused or contributed to by
one or more failures, considering relevant adverse operational or environmental conditions.
Failure Effect
What is the result of a functional failure?
Fatigue Damage (FD)
The initiation of a crack or cracks due to cyclic loading and subsequent propagation.
Fatigue Related Sampling Inspection
Inspections on specific aircraft selected from those which have the highest operating age/usage in order
to identify the first evidence of deterioration in their condition caused by fatigue damage.
Fault
An identifiable condition in which one element of a redundant system has failed (no longer available)
without impact on the required function output of the system (MSI). At the system level, a fault is not
considered a functional failure.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 22/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Fault-Tolerant System
A system that is designed with redundant elements that can fail without impact on safety or operating
capability.
Fracture-critical part.
As shown on figure 1, a fracture-critical part is a safety-of-flight structural component that is not single
load path nor sized by durability or damage tolerance requirements but requires special emphasis due to
the criticality of the component.
Fracture-critical traceable part.
As shown on figure 1, a fracture-critical traceable part is a safety-of-flight structural component that is
either single load path or sized by durability or damage tolerance requirements.
Function
The normal characteristic actions of an item.
Functional Check
A quantitative check to determine if one or more functions of an item perform within specified limits.
Functional Failure
Failure of an item to perform its intended function within specified limits.
Hidden Function
1. A function which is normally active and whose cessation will not be evident to the operating crew
during performance of normal duties.
2. A function which is normally inactive and whose readiness to perform, prior to it being needed, will not
be evident to the operating crew during performance of normal duties.
Initial quality.
Initial quality is a measure of the condition of the aircraft structure relative to flaws, defects, or other
discrepancies in the basic materials or introduced during manufacture of the aircraft structure.
Inherent Level of Reliability and Safety
That level which is built into the unit and, therefore, inherent in its design. This is the highest level of
reliability and safety that can be expected from a unit, system, or aircraft if it receives effective
maintenance to achieve higher levels of reliability generally requires modification or redesign.
Inspection - Detailed (DET)
An intensive examination of a specific item, installation or assembly to detect damage, failure or
irregularity. Available lighting is normally supplemented with a direct source of good lighting at an intensity
deemed appropriate. Inspection aids such as mirrors, magnifying lenses, etc. may be necessary. Surface
cleaning and elaborate access procedures may be required.
Inspection - General Visual (GVI)
A visual examination of an interior or exterior area, installation or assembly to detect obvious damage,
failure or irregularity. This level of inspection is made from within touching distance unless otherwise
specified. A mirror may be necessary to enhance visual access to all exposed surfaces in the inspection
area. This level of inspection is made under normally available lighting conditions such as daylight,
hangar lighting, flashlight or drop-light and may require removal or opening of access panels or doors.
Stands, ladders or platforms may be required to gain proximity to the area being checked.
Inspection - Special Detailed (SDI)
An intensive examination of a specific item, installation, or assembly to detect damage, failure or
irregularity. The examination is likely to make extensive use of specialized Inspection Techniques and/or
equipment. Intricate cleaning and substantial access or disassembly procedure may be required.
Inspection - Zonal
A collective term comprising selected general visual inspections and visual checks that is applied to each
zone, defined by access and area, to check system and powerplant installations and structure for security
and general condition.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 23/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 24/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 25/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 26/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Structural Detail
The lowest functional level in an aircraft structure. A discrete region or area of a structural element, or a
boundary intersection of two or more elements.
Structural Element
Two or more structural details which together form an identified manufacturer's assembly part.
Structural Function
The mode of action of aircraft structure. It includes acceptance and transfer of specified loads in items
(details /elements /assemblies) and provides consistently adequate aircraft response and flight
characteristics.
Structural Health Monitoring (SHM)
The concept of checking or watching a specific structural item, detail, installation or assembly using on
board mechanical, optical or electronic devices specifically designed for the application used. SHM does
not name any specific method or technology
Supportability.
Supportability means that thermal, environmental, and mechanical deterioration of materials and
structures fabricated using the selected manufacturing processes and joining methods have been
identified and that acceptable quality and cost-effective preventive methods and/or in-service repair
methods are either available or can be developed in a timely manner.
Task Applicability
A set of conditions that leads to the identification of a task type when a specific set of characteristics of
the failure cause being analyzed would be discovered and/or corrected as a result of the task being
accomplished.
Task Effectiveness
A specific set of conditions that leads to the selection of a task already identified to be applicable. Avoids,
eliminates, or reduces the negative consequences of the failure to an extent that justifies doing the task at
the selected interval.
Tasks - Maintenance
An action or set of actions required to achieve a desired outcome which restores an item to or maintains
an item in serviceable condition, including inspection and determination of condition.
Threshold
See "Interval - Initial".
Threshold Period
A period during which no occurrences of the failure can reasonably be expected to occur after the item
enters into service.
Visual Check
A visual check is an observation to determine that an item is fulfilling its intended purpose. Does not
require quantitative tolerances. This is a failure finding task.
Wear Damage
Physical deterioration of the surface of an item due to relative motion between two parts in contact.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 27/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 29/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 30/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
4.1.1 Verify that the design criteria, including requirements and rules, adequately address safety for
mission usage, full permissible flight envelope, duty cycle, interfaces, induced and natural environment,
inspection capability, and maintenance philosophy.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 31/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
4.1.2 Verify that the design criteria address all components, system and subsystem interfaces, and
software.
4.1.3 Verify that, for commercial derivative air vehicles, the air vehicle's certification basis addresses all
design criteria appropriate for the planned military usage.
4.1.4 Verify that failure conditions have been adequately addressed in the design criteria.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 32/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
4.2.1 Verify that all tools, methods, and databases used in the requirements definition/allocation, design,
risk control and assessments of safety have been adequately validated and/or certified.
4.3.1 Verify that the material selection process uses validated and consistent material properties data,
including design mechanical and physical properties such as material defects, and corrosion and
environmental protection requirements. (For Navy aircraft, see section 19, Materials)
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 33/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
4.4.2 Verify that all critical process capabilities exist to meet key product characteristic requirements.
4.4.3 Verify that all critical process controls exist to assure key product characteristic requirements are
met.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 34/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
4.4.4 Verify that production allowances and tolerances are within acceptable limits and assure
conformance to design.
4.4.5 Verify that non-destructive inspection (NDI) accept/reject criteria have been validated.
4.5.1 Verify that processes are in place to identify and document all restrictions, warnings, and cautions.
4.5.2 Verify that processes are in place to identify and document the technical data, and that the technical
data reflects the defined functional and product baseline.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 36/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
4.5.3 Verify that procedures are in place for establishing and maintaining flight vehicle integrity.
4.6.1 Verify that the functional baseline is properly documented, established, and brought under
configuration control.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 37/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
4.6.2 Verify that the product baseline is properly documented, established, and brought under
configuration control.
4.7.1 Verify that the configuration status accounting (CSA) information system has the capability to track
the configuration of safety-critical items.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 38/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
SECTION 5 - STRUCTURES
The air vehicle structure includes the fuselage, wing (fixed or rotating), empennage, structural elements of
landing gear, the control system, control surfaces, drive system, rotor systems, radome, antennae, engine
mounts, nacelles, pylons, thrust reversers (if not part of the engine), air inlets, aerial refuelling
mechanisms, structural operating mechanisms, structural provisions for
equipment/payload/cargo/personnel, etc.
CERTIFICATION CRITERIA
5.1. LOADS.
5.1.1 Verify that the limit loads used in the design of the aircraft include the maximum and most critical
combination of loads that can result from authorized ground and flight loading conditions for the air
vehicle. These include loads during piloted or autonomous manoeuvres, loss of control manoeuvres,
gusts, turbulence, take-off, landing, catapult (if applicable), shipboard and land based arrestment (if
applicable), ground operations, maintenance activity, systems failures from which recovery is expected,
and loads expected to be seen throughout the specific lifetime of usage.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 40/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.1.2 Verify that the ultimate loads used in the design of the airframe are obtained by multiplication of limit
loads by the appropriate factor of safety, or in the case of crash conditions, the ultimate loads are
obtained by applying the appropriate crash load factors sufficient to prevent injury to occupants and to
maintain the integrity of egress paths.
The factor of safety is not typically lower than 1.5. If a factor of safety is less than 1.5,
justification should be agreed with the Certifying Authority.
For crash case conditions, specific ultimate load factors are be applied allowing a
structural design to give each occupant every reasonable chance of escaping serious
injury.
The aircraft structure shall be designed so that the ultimate loads do not generate
stresses higher than relevant allowable stress values (i.e. rupture).
5.1.3 Verify the design service loads spectra include all sources of repeated loads.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 42/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
This requirement defines the load capability that the airframe must possess to
achieve adequate structural safety and economic operation. Where such loads are
the result of randomly occurring loads, the minimum frequency of occurrence of these
loads must be defined. This insures the inclusion of loads which are of sufficient
magnitude to size elements of the airframe and whose frequency of occurrence
warrants their inclusion. It is typically only necessary to include loads whose
frequency of occurrence is greater than or equal to 1 x 10-7 per flight.
5.1.4 The airframe shall be designed taking account of the loads required under structural impacts such
as bird strike, hail, runway, taxiway, ramp debris, propeller and uncontained fan blade impact;
uncontained engine failure, uncontained high energy rotating machinery failure and other sources of
foreign object damage (FOD), in order to assure the capability of continued safe flight and landing of the
aeroplane after collision. The structural airframe load requirements shall be based upon impact object
characteristics, parameters and data (such as impact object weight, aircraft altitude and speed), that shall
be defined by the appropriate certifying authority.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 43/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Note FAR 25.571 considers size and velocity of bird, but also other types of FOD.
Harmonised The airframe shall be designed taking account of the loads required under structural
Text: impacts such as bird strike, hail, runway, taxiway, ramp debris, propeller and
uncontained fan blade impact; uncontained engine failure, uncontained high energy
rotating machinery failure and other sources of foreign object damage (FOD), in order
to assure the capability of continued safe flight and landing of the aeroplane after
collision. The structural airframe load requirements shall be based upon impact object
characteristics, parameters and data (such as impact object weight, aircraft altitude
and speed), that shall be defined by the appropriate certifying authority.
5.1.5 Verify that the ultimate loads are used in the design of elements of the airframe subject to a
deterministic design approach (No Longer Used – See Line 5.1.2).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 44/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.1.6 Verify that the airframe is designed such that all sources of repeated loads and the associated
frequencies are considered and included in the development of the service loads spectra and do not
detract from the airframe service life.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 45/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.1.7 Verify that the airframe is designed such that the power or thrust of the installed propulsion system
is commensurate with the ground and flight conditions of intended use, including system failures, and the
capabilities of the propulsion system and crew.
5.1.8 Verify, in the generation of loads, that flight control and automatic control devices, including load
alleviation and ride control devices, are to be in all modes (operative, inoperative, and transient) for which
use is required. This includes use due to, or likely due to single or multiple system failure conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 46/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.1.9 Verify that flight loading conditions are based upon essentially realistic, physically achievable
conditions of airframe response to pilot induced or autonomous manoeuvres, loss of control manoeuvres,
gusts, and turbulence. Also verify that the realistic conditions considered are both required and expected
to be encountered critical combinations of configurations, gross weights, centres of gravity, thrust or
power, altitudes, speeds, and type of atmosphere and are used in the design of the airframe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 47/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Symmetric and asymmetric flight operations shall include symmetric and asymmetric
fuel and payload loadings as well as adverse trim conditions.
5.1.10 Verify that the airframe is designed for ground loading conditions which reflect ground and
maintenance operations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 48/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.1.11 Verify that in the generation of loads the airframe is able to withstand crashes and to protect
personnel to the extent reflected by the ultimate loading conditions and parameters.
Particular attention should be applied to people on the ground. This criteria applies to
UAS.
Harmonised The airframe, although it may be damaged in emergency landing conditions on land
Text: or water, shall be designed to protect personnel during crash landings.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 49/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
The airframe should provide a protective shell surrounding the personnel, and should
minimize the loads experienced by personnel so that (hopefully) they will be less than
human tolerance limits. Mass items are to be supported in such a manner so as to
prevent lethal or injurious blows to personnel.
a. Seat installations.
b. Fuel tanks and installations.
c. Fixed and removable equipment.
d. Cargo.
e. Litters.
f. Bunks.
The airframe shall also not inhibit personnel egress from an airframe.
5.2.1 Verify that the air vehicle, in all configurations including store carriage and system failures, is free
from flutter, whirl flutter, divergence, and other related aeroelastic or aeroservoelastic instabilities,
including transonic aeroelastic instabilities, for all combinations of altitude and speed
encompassed by the limit speed (VL/ML) versus altitude envelope enlarged at all points by the
airspeed margin of safety. Also, verify that all aerodynamic surfaces and components of the air
vehicle are free from aeroelastic divergence and that the inlet, transparency, and other
aerodynamically loaded panels are designed to prevent flutter and limited amplitude oscillations
when exposed to high transonic or supersonic flow.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 50/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Also, verify that all aerodynamic surfaces and components of the air vehicle are free
from aeroelastic divergence and that the inlet, transparency, and other
aerodynamically loaded panels are designed to prevent flutter and limited amplitude
oscillations when exposed to high transonic or supersonic flow.
Adequate tolerances shall be established for quantities which affect flutter; including
speed, damping, mass balance and control system stiffness.
5.2.2 Verify that the control surfaces and tabs contain sufficient static and dynamic mass balance, or
sufficient bending, torsional, and rotational rigidity; or a combination of these means to prevent
flutter; or limited-amplitude instabilities of all critical modes under all flight conditions for normal
and failure operating conditions of the actuating systems. Verify that all control surfaces and parts
thereof are free from single-degree-of-freedom flutter, such as buzz. Also verify that all other air
vehicle components exposed to the airstream, such as spoilers, dive brakes, scoops, landing
gear doors, weapon bay doors, ventral fins, movable inlet ramps, movable fairings, and blade
antennae are free from aeroelastic instability.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 51/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.2.3 Verify that the airframe structure (including cavities), equipment, and equipment provisions
withstand the aeroacoustic loads and vibrations induced by the aeroacoustic environment for the
air vehicle specified service life and usage without cracking or functional impairment.
5.2.4 Not applicable to Section 5. This criteria has been moved to Section 9.4.6.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 52/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: No applicable criteria for STANAG 4671 other than crew workstation (4671.1703) as
this standard applies to UAS.
5.2.5 Verify that the airframe is designed such that it can operate in the vibration environments induced
by the operational use for the specified service life. Also verify that the airframe is designed such
that no fatigue cracking or excessive vibration of the airframe structure or components occurs
that would result in the air vehicle or the components of the air vehicle systems not being fully
functional.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 53/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.2.6 Verify that equipment and structure behind and near vents and louvers are designed for the
effects of flow through the vents and louvers during conditions of normal and reverse flows.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 54/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Hot gases from auxiliary power units as well as from propulsion systems may be
drawn into the airframe through vents and louvers under some conditions thus
damaging equipment and structure. If necessary to maintain their required
usefulness, equipment and structure behind and near vents and louvers shall be
designed for the effects of flow through the vents and louvers during conditions of
normal and reverse flows. Thermal, sand abrasion, rain, ice and other foreign object
damage effects are to be covered.
5.3. STRENGTH.
5.3.1 The airframe structure must be able to support p x limit loads (proof loads) without detrimental,
permanent deformation. At any load up to proof loads, the deformation may not interfere with safe
operation if the aircraft. The ratio p is typically defined between 105% and 115% as to be agreed by the
Certifying Authority.
The airframe structure must be able to support ultimate loads without failure for at least three seconds,
except local failures or structural instabilities between limit and ultimate load are acceptable only if the
structure can sustain the required ultimate load for at least three seconds.
Verification of sufficient strength is required for operations, maintenance functions, occurrences of system
failures, and any tests that simulate load conditions, including modifications, new or revised equipment
installations, major repairs, extensive reworks, extensive refurbishment, or remanufacture.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 55/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
The airframe structure must be able to support ultimate loads without failure for at
least three seconds, except local failures or structural instabilities between limit and
ultimate load are acceptable only if the structure can sustain the required ultimate
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 56/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.3.2 Verify that the allowables for materials are derived using statistical compensations appropriate to
part criticality and the nature of the material; are established considering component and assembly
variability, the expected environmental extremes, fabrication processes, repair techniques, and quality
assurance procedures; and are validated. Verify that conditions and properties associated with material
repairs satisfy design requirements.
The allowable structural properties shall include all applicable statistical variability and
environmental effects, such as exposure to climatic conditions of moisture and
temperature; exposure to corrosive and corrosion causing environments; airborne or
spilled chemical warfare agents; and maintenance induced environments
commensurate with the usage of the airframe. Specific material requirements are:
a. Where applicable, average values of crack growth data (da/dN) should be used in
the crack growth analysis;
b. Where applicable, minimum values of fracture toughness should be used for
residual strength analysis;
c. "A" basis design allowables should be used in the design of all critical parts. "A"
basis design allowables should also be used in the design of structure not tested to
ultimate load in full scale airframe static testing. "B" basis design allowables may be
used for all other structure.
The processes used to prepare and form the materials for use in the airframe as well
as joining methods shall be commensurate with the material application. Further, the
processes and joining methods shall not contribute to unacceptable degradation of
the properties of the materials when the airframe is exposed to operational usage and
support environments.
5.3.3 Verify that stresses and strains in structural members are controlled through proper sizing, detail
design, and materials selection. Verify that for all limit, design (including the Navy design landing
condition, where applicable), and ultimate loads are reacted resulting in zero or positive margins
of safety for all configurations within allowable operating conditions (including probable failure
and defined emergency conditions).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 60/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
(1) The airframe shall have adequate (as defined by the type of aircraft and
application) residual strength in the presence of flaws for the period of service usage
before they are detected.
(2) The damage tolerance evaluation must include a determination of the probable
locations and modes of damage due to fatigue, corrosion, or accidental damage.
Damage at multiple sites due to fatigue must be included where the design is such
that this type of damage can be expected to occur. The evaluation must incorporate
repeated load and static analyses supported by test evidence. The extent of damage
for residual strength evaluation at any time within the operational life of the aeroplane
must be consistent with the initial detectability and subsequent growth under repeated
loads.
(3) Replacement time evaluation and/or inspection interval. It must be shown that the
probability of catastrophic fatigue failure provides an acceptable level of safety, as
defined by the relevant authority, within a replacement time or inspection interval as
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 61/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.4.2 Verify the airframe structure has sufficient durability to preclude adverse safety, economic,
operational, maintenance, repair, or modification cost impacts throughout its intended service life.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 62/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 63/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
To ensure sufficient durability over the useful operating life of the aircraft, protective
measures should be applied to the materials and structure, particular with respect to
environmental degradation, corrosion and abrasion.
5.4.3 Verify that a durability and damage tolerance control process is established and implemented in
the engineering design and manufacturing process.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: MIL-HDBK-6870 for guidance Def-Stan 00-970 00-970 3.2.13
in the development of Reference: 00-970 Part 1 Sec 3 3.2.6
Nondestructive Inspection 00-970 Part 1 Sec 3 3.2.7
procedures.
JSSG-2006: A.3.13, pg 417 STANAG 4671 573
Reference: 4671 575
JSSG-2006: A.4.13, pg 419
(for compliance development)
MIL-HDBK-1568
MIL-STD-1530C
FAA Doc: 14CFR reference: EASA CS CS 23.575
Section 23.575; Reference: CS 25.571
Section 25.571; CS 27.571
Section 27.571; CS 29.571
Section 29.571.
Harmonised A Durability Control Program shall be established for the aircraft structure. This
Text: program shall identify and define all the tasks necessary to ensure compliance with
the durability requirements (including damage tolerance). The disciplines of fracture
mechanics, fatigue, materials and processes selection, environmental protection,
corrosion prevention and control, design, manufacturing, quality control, non-
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 64/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 65/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.4.4 Verify that environmental protection (including corrosion prevention) systems remain effective
during the service life. Specific corrosion prevention and control measures, procedures, and processes
are to be identified and established commensurate with the operational and maintenance capability
required of the airframe.
5.5.1 Verify that the mass properties fully support safe vehicle operations for all defined mission
requirements, variation in useful load, basing/deployment concepts, interfaces, and necessary
maintenance.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 67/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Ranges of mass and centres of gravity within which the aeroplane may be safely
operated shall be established and shall include the range for lateral centres of gravity
if possible loading conditions can result in significant variation of their positions.
Consideration shall be given to all masses, measured using agreed standards, with
defined and appropriate tolerances, between:-
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 68/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
5.5.2 Verify that centre of gravity margins are properly defined to handle aerodynamic, centre of
gravity, and inertia changes resulting from fuel usage, store expenditure, asymmetric fuel and store
loading, fuel migration at high angle of attack and roll rates, and aerial refuelling, and release of external
sling loads, and air drop of internal cargo.
STANAG 4671 21
Reference: 4671 23
4671 29
4671 321
4671 1519
FAA Doc: 14CFR reference: EASA CS CS 23.21
Section 23.21, 23.29, 23.529, Reference: CS 23.29
23.1519; CS 23.529
Section 25.21, 25.23, 25.27, CS 23.1519
25.29, 25.1519; CS 25.21
Section 27.21, 27.27, 27.29, CS 25.23
27.1519; CS 25.27
Section 29.21, 29.27, 29.29, CS 25.29
29.1519. CS 25.1519
CS 27.21
CS 27.27
CS 27.29
CS 27.1519
CS 29.21
CS 29.27
CS 29.29
CS 29.1519
Harmonised Centre of gravity margins shall be properly defined to handle aerodynamic, centre of
Text: gravity, and inertia changes resulting from fuel usage, store expenditure, asymmetric
fuel and store loading, fuel migration at high angle of attack and roll rates, and aerial
refuelling, and release of external sling loads, and air drop of internal cargo.
5.5.3 Verify that flight and maintenance manuals are consistent and contain all required checklists and
loading data necessary to conduct required weight and balance checks while complying with specific
weight and balance requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 69/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Verify that flight and maintenance manuals are consistent and contain all required
checklists and loading data necessary to conduct required mass and balance checks
while complying with specific mass and balance requirements.
5.6.1 Verify that the flight release is based on up-to-date design criteria and mass properties, and the
completion of all required analyses; laboratory, ground, and flight tests relating to loads, strength,
durability, damage tolerance, structural dynamics, and stiffness; and verify that the structural data
generated by the required analysis and test substantiates the integrity and flight worthiness of the design.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2006: A.3.5, A.3.6, Def-Stan 00-970 00-970 Part 1 Sec 3 3.1.25
A.3.7, A.4.7, A.4.10.5.3, Reference: 00-970 Part 1 Sec 3 3.5.9
A.4.10.5.4, A.4.10.5.5 00-970 Part 1 Sec 3 3.7.11
00-970 Part 1 Sec 4 4.8.4
00-970 Part 1 Sec 4 4.8.10
00-970 Part 1 Sec 4 4.8.12
00-970 Part 1 Sec 4 4.10.12
00-970 Part 1 Sec 4 4.15.77
00-970 Part 1 Sec 4 4.15.78
00-970 Part 1 Sec 4 4.15.80
00-970 Part 1 Sec 4 4.26.80
STANAG 4671 21
Reference: 4671 251
4671 307
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 70/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
The structural data generated by the required analysis and test shall substantiate the
integrity and flight worthiness of the design.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 71/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
6.1.2.1 Verify that safe static and dynamic stability exists with augmentation or active control functions
operating. If sufficient redundancy is not provided in the air vehicle flight control functions to provide fail-
safe operation, verify that the basic airframe (unaugmented) possesses the required stability
characteristics and safety margins.
6.1.2.2 Verify that augmentation function(s), active control function(s), and related flight mode(s)
engagements and disengagements do not result in unsafe transients.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 74/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.2.3 For autonomous vehicle control, verify that the net stability, with the guidance and control system
operating, is safe for the intended mission under normal operating conditions.
6.1.3.2 Verify that the control law concepts employed are compatible with mission and safety
requirements.
6.1.3.3 Verify that the design exhibits safe vehicle flying characteristics for:
a. Classical, safe, second-order response in pitch
b. First-order, well-behaved response in roll without roll ratcheting or other roll sensitivities
c. Equivalent system time delay
6.1.3.4 Verify that aeroelastic, nonlinear, discontinuous, and unsteady aerodynamic effects demonstrate
a safe vehicle.
6.1.3.5 Verify that aircraft pilot coupling (APC) and pilot-induced oscillation (PIO) tendencies and flight
characteristics are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 76/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.3.5.2 Verify, under high gain conditions, that the design does not exhibit unsafe limit cycle oscillations,
unbounded oscillations, unsafe triggering mechanisms during mode transitions, or unsafe sudden/steep
gain changes.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 77/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 78/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.3.8 Verify hinge moment characteristics are adequate to satisfy safety requirements.
6.1.3.9 Verify safe stability and control dynamics under symmetrical and asymmetrical manoeuvres, with
and without stores, for:
a. Control surface float angles
b. Control surface blow-back
c. Control surface nonlinearities
d. The vehicle control system or actuation functions to overcome actual moments
e. Establishing levels of flying qualities for the vehicle
f. Control surface hinge moment limiting
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 79/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.3.10 Verify that the stability and control effects of basic design features, as well as unique features,
are safe in the entire flight envelope(s).
6.1.3.11 Verify all rate-limiting functions of the control function are safe to fly under flight scenarios
employing all types of gain changes.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 80/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.4.2 Verify that flight path guidance systems safely compensate for degraded modes/failures of
operation.
6.1.4.3 Verify that all transitions to and from normal flight path guidance modes, whether augmented or
manually selected, are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 81/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.5.2 Verify that no unsafe roll-yaw-pitch coupling(s) occur due to engine coupling for symmetrical or
asymmetrical thrust and gyroscopic effects.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 82/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.5.3 Verify that stall or loss of control warning function(s) and limiting and prevention functions to be
safe for all required combinations of manoeuvre configurations, flight conditions, and loadings.
6.1.5.4 Verify that "WRONG CONFIGURATION" warning functions are safe in all flight regimes. These
include wing sweep, flap and landing gear position, and other variable geometry features.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 83/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.5.5 Verify that flying quality nonlinear effects are safe when these effects or characteristics influence
the vehicle characteristics including degradation and retention of critical pilot vehicle interface (PVI) and
vehicle control functions (VCF) due to failures.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 84/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 85/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.5.10 Verify that control gradient forces are safe for the entire range of applications.
6.1.5.11 Verify safe, unimpeded crew visual characteristics for all flight and ground conditions.
6.1.5.12 Verify that proposed ship launch/recovery wind envelopes and ship pitch and roll limits are safe.
6.1.5.13 Verify that the control tasks and workload levels associated with flight profiles are safe.
6.1.5.14 Verify that handling qualities with backup power sources are safe.
6.1.6. Envelopes.
6.1.6.1 Verify that stability and response characteristics are safe for the anticipated critical flight
conditions for the entire ground and flight envelopes.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 87/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 88/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.6.4 Verify that the flight manual, and any supplements containing the air vehicle/engine operating
limits, adequately describes the air vehicles:
a. Performance
b. Flight characteristics under normal and emergency conditions
c. Control functions under normal and emergency conditions
d. Other critical limits to ensure safe flight.
6.1.7.2 Verify that existing stores are safe for use in the intended envelope and environment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 89/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.1.7.3 Verify the safety and envelope of intentional and unintentional asymmetric stores combinations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 90/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.1.2 Verify the VCF high-level architecture function to be safe for the supporting control function.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 91/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.1.3 Verify that the integrated VCF architecture safely implements the proper levels of redundancy,
fault tolerance, physical/functional separation of flight/safety-critical functions/components and other
aspects.
6.2.1.4 Verify the autonomy of each function integrated in or by the VCF design to be safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 92/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.1.5 Verify that failure mode effects are safe for the entire VCF operation.
6.2.1.6 Verify that special failure states of single fail, dual fail, and special single fail/combination
failure(s), as well as order of failure(s), are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 93/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 94/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.2 Verify that functional characteristics of friction levels, breakout forces, dead zones, hysteresis, and
backlash are safe.
6.2.2.3 Verify that longitudinal, lateral-directional, lift, drag, performance limiting, and variable geometry
control functions are safely mechanized.
6.2.2.4 Verify that the vehicle control system is safely able to obtain the maximum required control
surface positions without mechanical interference.
6.2.2.5 Verify actuation for surface rate and hinge moments under normal conditions and capability under
blowback conditions to be safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 96/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.6 Verify that the cockpit control forces are safe for any control mechanization.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 97/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 98/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.10 Verify that control devices in normal and failed states intended for intermittent operation are safe
(e.g., flaps, speed brakes, geometry mechanisms, auxiliary control devices).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 99/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.12 Verify that alternate control paths available for each control axis or mode are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 100/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.13 Verify that ratio changers and artificial feel devices with proper protection are safely
implemented.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 101/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.14 Verify that no single, like dual, second, or single combination failure points in any VCF function
result in an unacceptable probability of loss of function.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 102/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.16 Verify that no unsafe mechanical interference or jamming situations exist in VCF mechanization.
6.2.2.17 Verify that the clearances available safely tolerate foreign object damage (FOD).
6.2.2.18 Verify that control laws are safe for the normal intended application.
6.2.2.19 Verify that control laws transients for gain and mode changes prevent unsafe flight conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 104/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.20 Verify that control laws do not induce any kind of unsafe oscillatory effects.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 105/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.21 Verify that control laws do not have unsafe PIO tendencies.
6.2.2.22 Verify that control laws redundancy and failure management designs are safely implemented.
6.2.2.23 Verify that control laws sensitivity margins and phase and gain margins for each feedback loop
are safe (see 6.1).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 107/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.24 Verify that functional command control authority limits are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 108/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.26 Verify that the vehicle provides the crew with the capability to override the design-limited vehicle
control functions safely.
6.2.2.27 Verify that nonoperative devices/programs can be safely locked out of any functions.
6.2.2.28 Verify that engage/disengage functions/devices are safely assigned and identified for the crew.
6.2.2.29 Verify that interlocks safely preclude incompatible modes, simultaneous engagement, and
engagement with incompatible flight conditions or air vehicle configurations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 110/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.30 Verify that engage and disengage transient times are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 111/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.32 Verify that warning and caution functions safely operate and properly notify the crew.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 112/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.33 Verify that sensors are safely located to minimize/avoid structural mode coupling including
vibration from configuration loading and gun fire, and to have safe sensitivity margins.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 113/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.34 Verify that sensitivities with variations in slope and bias conditions of air data functions have safe
margins.
6.2.2.36 Verify that pre-flight checklists of VCF are all-inclusive and safe.
6.2.2.37 Verify that interfaces/integration with other functions and sub-functions are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 115/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.39 Verify that any functional modes do not defeat any limiters designed for vehicle safety.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 116/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.40 Verify that data transfer and update rates are safe with adequate margins.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 117/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.41 Verify that air vehicle functional/transient interruption characteristics are safe.
6.2.2.42 Verify that failure mode effects for critical manoeuvres and critical flight regions are safe.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2008: 3.0, 3.1, 3.1.5, Def-Stan 00-970
3.1.5.7, 3.1.5.8, 3.1.5.9, 3.1.9, Reference:
3.1.14, 3.2.1.3, 3.2.1.2, 3.2.2.2, STANAG
3.2.2.5, 3.2.2.5.4, 3.2.2.6, 3.3,
and associated section 4 Reference:
paragraphs
FAA Doc: 14CFR references: 23.141- EASA CS CS 23.21
23.253, 25.21-25.255, 23.321- Reference: CS 23.141-23.257*
23.459, 25.321-25.459, CS 23.321-23.459*
23.1501-23.1529, 25.1501-
CS 23.1501-CS 23.1529*
25.1529
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 118/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.43 Verify that flow rates for hinge moment, stiffness, and control surface rates are safe.
6.2.2.44 Verify that the actuator design meets safety requirements for:
a. Actuator redundancy techniques
b. Failure isolation design capability and limitations
c. Hydraulic contamination effects
d. Bottoming and snubbing
6.2.2.45 Verify that the actuation system is safe (e.g., burst pressure, normal performance, high and low
temperature, pressure impulses).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 120/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.46 Verify that motor/torque tube driven and similar control actuation mechanisms are safe (e.g.,
performance, implementation, redundancy management).
6.2.2.47 Verify that command and control communications on the vehicle, other linked vehicles, and
ground control are integrated safely with an acceptable probability of failure.
6.2.2.48 Verify that all command and control communications are secure against unwanted intrusions and
security techniques used are implemented safely.
6.2.2.49 Verify that single space radiation upset events do not cause loss of control and that the
probability of encountering multiple upsets producing loss of control is acceptably low.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 122/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.50 Verify that propulsion control integration, control mechanisms, feedback loops, automatic throttle
control systems, asymmetric thrust controlling conditions, special thrust control use conditions,
atmospherics and hypersonic effects on thrust control are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 123/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.51 Verify that VCF primary and integrated control function(s) security design is implemented safely.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 124/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.53 Verify that the environmental design and the equipment installation are safe.
6.2.2.54 Verify that vehicle control, payload, and ground system latencies and synchronizations are safe
for mission accomplishment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 125/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.2.55 Verify that emergency procedures are appropriate and safe for the emergency that they address.
6.2.2.56 Verify, for rotary wing air vehicles, adequate transient response for single axis (collective or
pedal) inputs.
6.2.2.57 Verify that multi-axis inputs (e.g., collective, pedal, and cyclic) are safe during typical operational
mission manoeuvres.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 126/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.3.1 Verify that hydraulic distribution has no single failure points resulting in loss of more than one
hydraulic function.
6.2.3.2 Verify that hydraulic function dynamics do not have any unsafe pressure pulsating or resonant
conditions.
6.2.3.3 Verify that backup and emergency hydraulic power function(s) do not have any unsafe effects
from reduced flow rates or pressure or flutter margin.
6.2.3.4 Verify that any VCF flight limitations with emergency/backup hydraulic power and switchover time
constants are safe.
6.2.3.5 Verify that VCF effects due to loss of each or part of each hydraulic function are safe. (See 8.1 for
specific criteria.)
6.2.3.6 Verify that electrical power normal/backup/emergency capability following loss of engine(s) and
generator(s) for VCF is safe.
6.2.3.7 Verify that independent electrical power sources provide safe redundancy for VCF.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 129/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.3.8 Verify that electrical power transients, both normal and switchover, are safe.
6.2.3.9 Verify that, if batteries are employed for SOF backup power, adequate charging methods and
checks are provided and installation provisions for all batteries are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 130/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.3.10 Verify that electrical power bus separation for prevention of single failure points is safe.
6.2.3.11 Verify that effects of normal, abnormal, and failure modes of the electrical power function are
safe for VCF.
6.2.3.12 Verify that direct, uninterruptible, quality electrical power implementation for VCF is safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 131/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.4.2 Verify that all single point failures are identified with the associated probability of failure(s) and that
they demonstrate an acceptable flight safety risk.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 132/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.4.3 Verify that transient effects of failures impacting controllability or structure do not have any safety
impacts to the vehicle or crew.
6.2.4.4 Verify that the VCF can safely recover the air vehicle under worst-case flight envelope and engine
failure conditions and identify any flight limitations in the flight manual.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 133/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.4.5 Verify that undetected, latent, or unannounced failures do not result in unacceptable flying
qualities.
6.2.4.6 Verify that no unsafe handling characteristics are exhibited in critical flight phases for aerodynamic
and air data uncertainty sensitivity studies/analyses.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 134/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.4.7 Verify that vehicle control's and payload system's latency and synchronization responses are safe.
6.2.5.1 Verify the safe operation of each computer software configuration item (CSCI)/operational flight
program (OFP) from unit to full flight program levels for all modes, inputs, failure detection,
reconfiguration techniques, self-check operations, interfaces, and integration under all dynamic
conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 135/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.5.2 Verify that the flight software version demonstrates acceptable performance and safety.
6.2.5.3 Verify that critical control modes in all flight conditions are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 136/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.2.5.4 Verify that single-point or probable multiple failures that can paralyze redundant controlling
functions are within the required safety probabilities.
6.2.5.5 Verify that software compatibility with external, integrating software functions is safe.
Def-Stan 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 137/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Def-Stan 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety
Related Software.
6.2.5.7 Verify that software design of self-check, failure monitoring, redundancy management,
reconfiguration, voting, transient suppression, overflow protection, anti-aliasing, saturation, interlocks,
memory protection, failure propagation, and other techniques prevent unsafe flight situations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 138/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Def-Stan 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety
Related Software.
6.2.5.8 Verify that built-in-test implementation operates failure free and safely identifies, isolates, and
corrects malfunctions.
Def-Stan 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety
Related Software.
6.2.5.9 Verify that security design of VCF software loading techniques is safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 139/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Def-Stan 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety
Related Software.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 140/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.1.2 Verify that safe takeoff, landing, and critical field length performance are safe for the intended
atmospheric conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 141/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.1.4 Verify that the flight manual data limits for takeoff, landing, hover, climb, manoeuvre, cruise,
descent, emergency conditions, including height/velocity diagrams for rotary wing air vehicles, and any
other critical factors, are adequate to conduct safe flights.
6.3.1.5 Verify that store carriage and separation characteristics for the prescribed stores are safe.
6.3.1.6 Verify that flight manual specified performance or other predictions of power available, power
required, fuel flow, ground effect, engine out and autorotation performance are sufficiently accurate to
assure safe conduct of flight operations throughout the range of gross weights and ambient conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 143/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.2.3 Verify that engine performance restrictions resulting from thermal boundaries (reflected in the
proper databases and manuals) are safe (see 7.1.4).
6.3.2.4 Verify that inlet buzz boundaries and flight limitations are well defined (see 7.1.4).
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2001: 3.3.1.1 Def-Stan 00-970 00-970 P11 4.2.1#
Reference:
STANAG
Reference:
FAA Doc: 14CFR references: 23.901- EASA CS
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 145/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.2.5 Verify that there are no severe performance impacts due to flow disturbance and blockage items.
Also ensure that these items are safely implemented and located, especially ahead of or near the inlets.
6.3.2.6 Verify that engine performance for hot anti-icing air discharged into the inlet or inlet duct surface is
safe (see 7.2.1.2 and 7.2.4.1.8).
6.3.2.7 Verify safe engine performance for an inlet sand and dust separator (see 7.2.1.2 and 7.2.5.3.1).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 146/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.2.8 Verify that effects of armament gas (and debris) ingestion on engine performance (i.e., surge and
resulting torque spikes) are safe (see 7.2.2.4).
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2007: 3.3, 4.3, 3.4, 4.4, Def-Stan 00-970 00-970 P1 5.1.41
3.11, 4.11, 3.12, 4.12 Reference:
STANAG
Reference:
FAA Doc: 14CFR references: 33.14, EASA CS Nil
33.19, 33.63, 33.75, 33.76, Reference:
33.77, 33.90, 33.94, 33.97
AC 33.1B, AC 33.3, AC 33.4,
AC 33.4-2, AC 33.5
Comments: Military specific criteria so not covered in civil EASA standards.
6.3.3.2 Verify that stall angle of attack and velocity reflected in the flight manual are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 147/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.3.3 Verify that maximum allowable angle of attack, angle of attack limiter, and set margins are safe.
6.3.3.4 Verify that centre of gravity and gross weight limitations are safe.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 148/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
6.3.3.5 Verify that safe flight limitations account for vortex ring state, settling with power, retreating blade
stall, advancing blade compressibility, and critical azimuth factors.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 149/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 150/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.1.2 Verify that an engine out condition on multi-engine aircraft allows safe recovery of the aircraft.
7.1.3 Verify that single engine direct lift systems comply with specified safety requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 151/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.1.4 Verify that technical data includes all operational and maintenance procedures and limitations
necessary for safe operation of the air vehicle.
7.1.6 Verify that critical safety items (CSI) and critical characteristics are identified.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 152/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.1. Performance.
7.2.1.1 Verify that engine performance is adequate for safe operation of the air vehicle. This includes
consideration of all installation effects imposed by the air vehicle, and all intended operational
environments.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 153/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.1.2 Verify that degraded engine performance meets requirements for safety considerations. Degraded
engine performance includes performance in any backup control mode, as well as performance after bird,
ice, and sand ingestion.
7.2.2. Operability.
7.2.2.1 Verify that positive stability margin exists at all flight conditions or that placards are documented in
the flight manual.
7.2.2.2 Verify that the engine has adequate stability during throttle transients. The entire range of required
transients should be considered, including those during land and ship approaches, aerial refuelling, and
quick stops; for rotorcraft, bob-up and remask, and nap of the earth ridgeline crossings.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 154/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.2.3 Verify that air start requirements are met and documented in the flight manual. Air starts include
spool-down, windmill, cross-bleed and starter-assisted as appropriate for the air vehicle system.
7.2.2.4 Verify that the engine recovers from instability induced by external influences (such as inlet
distortion and steam and armament gas ingestion) after the external influence is removed, without
employing measures such as commanded idle or shutdown and without exceeding thermal or structural
limits.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 155/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.3. Structures.
7.2.3.1 Verify that the engine structure does not exhibit detrimental permanent set or deflect to the extent
that operation or performance is impaired when operated to limit load conditions (singly or in combination)
within the flight and ground envelope. Verify that the engine structure does not experience catastrophic
failure under ultimate load conditions or combinations of ultimate loading.
7.2.3.2 Verify that the engine has positive durability margins over the defined operational interval and duty
cycle to preclude adverse safety, economic, or operational impacts.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 156/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.3.3 Verify that all safety- and mission-critical parts are designed to be damage tolerant over the
defined operational interval and duty cycle.
7.2.3.4 Verify that the allowables for materials are minimums and are established considering statistical
variability, the expected environments, fabrication processes, repair techniques, and quality assurance
procedures. Verify that conditions and properties for material repairs satisfy design requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 157/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.3.5 Verify that the engine is designed such that pertinent environmental variables and all sources of
repeated loads are considered and these considerations are included in the development of the design
duty cycle.
7.2.3.6 Verify that all inspection intervals and life-limited components are identified in the technical
manuals and a process to track life consumption is operational and current.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 158/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.1.2 Verify that multiple propulsion subsystems are physically, systemically, and operationally
isolated from each other to prevent the failure of more than one propulsion subsystem due to any single
or common cause.
7.2.4.1.3 Verify that the control system maintains both stable engine operation and response during all
steady state and transient conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 159/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.1.4 Verify that any failure of the engine controls and associated subsystems results in a fail-
operational or fail-safe condition.
7.2.4.1.5 Verify that the engine control system failures do not cause unexpected engine transients; or
result in unacceptable controllability, stability, or handling qualities; or require any urgent or excessive
pilot action.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 160/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.1.6 Verify that the engine fuel system safely provides the required fuel supply to the combustor,
augmentor, and fueldraulics subsystems under all required conditions.
7.2.4.1.7 Verify that the engine ignition system provides a safe ignition source for the main combustor and
augmenter.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 161/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.1.8 Verify that the engine anti-ice/de-ice system prevents damaging ice build-up or provides safe
and non-damaging ice removal at all engine speeds/power levels and will not result in heat-induced
damage to the engine's front frame structure.
7.2.4.1.9 Verify that engine cooling and thermal management systems safely remove excess heat from
the engine and its subsystems (see 8.2.16).
7.2.4.1.10 Verify that the engine variable geometry systems safely operate under all engine operating
conditions.
Comments: CS 23.671, 25.671, 27.671 and 29.671 deals with general controls.
CS 27.695 and 29.695 appear to deal with such things as hydraulic systems. There
are no equivalent para 23.695 and 25.695.
Variable geometry is specific to military.
# means judgement call to made.
7.2.4.1.11 Verify that the engine lubrication system safely operates under all engine operating conditions.
7.2.4.1.12 Verify that the lubrication system is free from excessive discharge at the breather.
7.2.4.1.13 Verify that the lubrication system and bearing compartments do not support combustion.
7.2.4.1.14 Verify that the engine health monitoring and prognostics systems provide adequate warnings in
a timely manner to reduce occurrences of in-flight shutdowns and power losses.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 164/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.2.2 Verify that changes in bearing thrust balance do not result in the bearing operating in failure
prone regions of operation.
7.2.4.2.3 Verify that all engine mounted tubing, manifolds and clamps are safely affixed and routed on the
engine.
7.2.4.2.4 Verify that all engine mounted tubing, manifolds and clamps do not contain natural frequencies
within the engine and subsystems operating ranges.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 165/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.2.5 Verify that all pressure vessels, tubes and manifolds have design margin for their maximum
operating conditions.
7.2.4.2.6 Verify that engine gearboxes have design margin for their maximum operating conditions.
7.2.4.2.7 Verify that failure of any gearbox mounted component (oil pumps, fuel pumps, starters,
generators, etc.) does not result in failure of the gearbox itself.
7.2.4.2.8 Verify that failure of the engine power take-off (PTO) coupling assembly does not adversely
affect safe operation of the air vehicle.
7.2.4.2.9 Verify that all engine mounted electrical components and cabling are safely affixed and routed
on the engine.
7.2.4.2.10 Verify that all engine mounted electrical components and cabling can safely operate in the
lightning and electromagnetic effects environment of the air vehicle.
7.2.4.2.11 Verify that all engine mounted electrical components and associated cabling do not react to
engine or air vehicle induced vibratory and acoustic excitations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 168/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.4.2.12 Verify that electrical power is supplied to all safety critical engine systems under all flight
conditions.
Comments: CS 23.993, 25.993, 27.993 and 29.993 cover fuel line fittings not electrical fittings.
* means direct read across of MIL-HDBK-156B 14CFR reference to EMAR 516.
# means judgement call to made.
7.2.4.3 Engine controls and monitoring devices that use computers and software meet all applicable
criteria of Section 15
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 169/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.5. Installations.
7.2.5.1 Physical Installation.
7.2.5.1.1 Verify that all engine/air vehicle physical interfaces such as mechanical, fluid, and electrical
connections are safe.
7.2.5.1.2 Verify that the aircraft/engine mounts contain adequate design margin to secure the engine
properly under all operating conditions and failure modes.
7.2.5.1.3 Verify that, when applicable, the installed power-take-off (PTO) shaft system is free of any
potentially damaging resonant conditions (refer to section 8.6 for additional details) for all loads and
modes of operation.
7.2.5.1.4 Verify that the probability of failure due to uncontained rotating parts damaging air vehicle safety
of flight (SOF)/critical safety items (CSIs) is acceptable.
7.2.5.1.5 Verify that clearance between the air vehicle and engine (including associated components,
plumbing, and harnesses) is maintained under all operating conditions within the ground and flight
envelopes.
7.2.5.1.6 Verify that drain systems have sufficient capacity, operate throughout required ground and flight
attitudes and regimes, and expel/store the fluids in a safe manner.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 171/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.5.1.7 Verify the engine air inlet components have adequate structural margin to withstand the over-
pressures generated by inlet/compressor anomalies.
7.2.5.1.9 Verify that airframe and propulsion systems eliminate sources of self-induced foreign/domestic
object damage (FOD/DOD) to engines.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 172/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.5.2.2 Verify that the engine can safely supply all customer extractions (bleed air, horsepower,
electrical power, etc.) under all operating conditions.
7.2.5.2.3 Verify customer bleed air contamination does not exceed safe limits.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 173/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 174/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.2.5.4.2 Verify that thrust reverser/thrust vectoring systems are fail-safe and compatible with engine and
air vehicle systems.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 175/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 176/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.3.1.2 Verify that any critical propeller speeds (e.g., speeds that excite resonant frequencies and cause
detrimental blade stresses) are outside the engine operating range or identified limitations are placed in
the appropriate operators and maintenance technical manuals (T.O.'s).
7.3.1.3 Verify the safety and functionality of the hardware and software components of propeller reversing
systems and pitch controls for all steady state, transient, and emergency operating conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 177/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.3.1.4 Verify the safety of all physical and functional interfaces between the propeller and any system
that drives the propeller.
7.3.1.5 Verify that the manual and automatic feathering systems are operational for all steady state,
transient, and emergency operating conditions.
7.3.1.6 Verify the compatibility of the propeller and engine control systems under all steady state,
transient, and emergency operating conditions.
7.3.1.7 Verify that the propeller system is free of destructive vibrations at all steady state and transient
operating conditions and is capable of balancing to remove vibration that could cause equipment to
operate below specified requirements or cause excessive crew discomfort.
7.3.1.8 Verify that the propeller ice control system prevents the dangerous accumulation of ice during all
operating conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 179/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
governor) provide sufficient power, torque, strength, and durability for safe operation at sea level hover
and margin for vertical climb and hover throughout the flight envelope.
7.3.2.2 Verify that the rotor system provides safe controllability of the air vehicle under all expected
operating conditions.
7.3.2.3 Verify that, for rotary wing air vehicles, the effects of high-energy, low-frequency vibrations,
generated by main rotor blade passage (fundamental and harmonic) frequencies at all engine and related
component operating speeds and powers, do not adversely affect the operation of the engine and the
drive system.
7.3.2.4 Verify, for rotary wing air vehicles, that a satisfactory interface is achieved between the engine
(including subsystems/accessories) and the airframe relative to both high-frequency engine-excited and
low-frequency air vehicle rotor(s) excited vibrations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 180/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.3.2.5 Verify that the transmission/gearbox lubrication system safely operates under all air vehicle
operating conditions.
7.3.2.6 Verify that unfavourable dynamic coupling modes do not occur when the engine, engine
accessories, rotor system, and all dynamic transmission components are operated as a combined
dynamic system.
7.3.2.7 Verify that the engine's control/rotor system torsional stability has required gain and phase
margins and main rotor torque damping during steady-state and transient operation.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 181/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
7.3.2.8 Verify that the torque and misalignment capabilities of drive shaft couplings are suitable for all
possible combinations of torque and speed when installed in the aircraft at the maximum permissible
misalignment.
7.3.2.9 Verify that the rotors can be held from rotating in winds at specified velocities and directions,
during engine nonoperation, power up, and ground idle conditions.
7.3.2.10 Verify that the normal and emergency braking systems (consisting of aerodynamic rotor drag
and subsequent mechanical braking) are capable of stopping the rotor, from 100% speed, within specified
times after engine shutdown.
7.3.2.11 Verify that rotor system condition monitoring provides warning of impending failure that could
result in loss of the air vehicle or prevent a safe landing.
7.3.2.12 Verify that the drive system permits engagement and disengagement of the engines from the
load absorbers as required for all applicable modes of air vehicle operation
7.3.2.13 Verify that, during a loss of the primary lubrication system, the gearboxes continue to function
and transmit required power until appropriate pilot action can be accomplished.
7.3.2.14 Verify that inadvertent operation of externally phased intermeshing-rotor systems cannot occur if
the rotors become dephased and that cockpit indications are provided to the pilot.
7.3.2.15 Verify that failure or seizure of any individual accessory does not cause damage to any power
drive subsystem components during all phases of air vehicle operation.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 183/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 184/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
(Note: For subsystems that use computer resources, see section 15 for additional, specific criteria.)
8.1.1 If there is more than one hydraulic system or pneumatic system, verify that safe operation can be
continued if any one hydraulic or pneumatic system fails.
Comments: * means direct read-across of 14CFR reference from MIL-HDBK-516B to EMAR 516
14CFR reference 25.1435 b4 does not appear to have much relevance to specific
paragraph, however other sections parts of 25.1435 do.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 185/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.1.1.1 Verify that any single-point failure locations are identified and their consequences of failure are
acceptable, eliminated, or mitigated.
Comments: 1309 is the only reference to associated single point failures (and their
consequences)
8.1.2 Verify that interfaces and redundancies with the flight control, electrical, and avionics systems are
evaluated and verified to be safe.
8.1.3 Verify normal, back-up, and emergency hydraulic or pneumatic system operation.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 186/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: Assumption made that within STANAG 4671 1437 that Accessories for Multi Engine
UAS applies to Pneumatic systems.
8.1.4 Verify that hydraulic fluid temperatures do not exceed the maximum allowable temperature.
8.1.5 Verify that adequate crew station information is available to notify the flight crew of the hydraulic and
pneumatic systems' operating conditions.
8.1.6 Verify that flight and maintenance manuals include normal, back-up and emergency operating
procedures, limitations, restrictions, servicing, and maintenance information.
8.1.7 Verify that the plumbing installation and component installations are safe for flight.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 188/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.1.8 Verify that the air vehicle hydraulic and pneumatic systems' size/power meets demand.
8.1.9 Verify that undesirable pressure fluctuations are precluded from the system.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 189/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.1.10 Verify that methods and procedures exist for controlling and purging impurities from the hydraulic
and pneumatic systems and that the systems' level of contamination is acceptable.
8.2.1 Verify that the design incorporates system safety requirements of the air vehicle.
Terminology: Civil documentation does not mention ECS specifically, but does
mention ventilation and heating requirements.
23/25.1437 mentions safety of engine driven accessories essential for safe operation
(you could say air supply/environmental control touches on that?)
8.2.2 Verify that the ECS meets safety requirements when operating under installed conditions over the
design envelope and maintains integration integrity to ensure the weapon system’s SOF.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 191/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.2.3 Verify the availability of alternate means of cooling of safety-critical avionics and sufficient cockpit
ventilation when the primary ECS is nonoperational.
STANAG 4671 841 is not referenced as it does not exist due to UAS nature of
platform.
8.2.4 Verify that normal and emergency pressurization requirements are met in the air vehicle and, as
appropriate, are indicated or monitored at the ground station to ensure SOF.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 192/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.2.5 Verify that the effects of loss of some or all ECS functions on air vehicle safety, on air vehicle
performance, or on the safety and performance of other air vehicle systems are understood and
acceptable.
8.2.6 Verify that normal and emergency procedures are included in the flight manual and training
curriculum for the air vehicle.
8.2.7 Verify that adequate controls and displays for the ECS are installed in the crew station/ground
segment control station or other appropriate locations to allow the ECS to function as intended.
8.2.8 Verify that the ECS meets the requirements for personnel atmosphere including adequate
crew/occupant ventilation and protective flight garment supply systems (oxygen equipment, pressure
suits, and anti-g garments or ventilation garments).
8.2.9 Verify that subsystems used for environmental protection (e.g., windshield rain/snow/ice removal,
ice protection and defog) provide for safe operation of the air vehicle in the specified environment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 194/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.2.10 Verify that the crewmember's breathing air is protected from contamination in all forms, including
oil leakage in the engine and nuclear-chemical-biological warfare conditions.
8.2.11 Verify that the bleed air or other compressed air duct system is monitored for leaks and structural
integrity. Verify that hot air leaking from damaged ducting does not cause ignition of any flammable fluids
or other materials or cause damage to SOF items/CSIs.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 195/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.2.12 Verify that bleed air shut-off provisions are available at, or as close as possible to, the bleed
source.
8.2.13 Verify that pressurization rate control is available to preclude pressure surges in the cockpit.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 196/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.2.14 Verify that nuclear, biological, and chemical (NBC) equipment and/or procedures are provided for
protecting or maintaining ECS cooling air free from contaminants. DoD/MIL Doc: JSSG-2009:
D.3.4.4.2.8/D.4.4.4.2.8 Occupied compartment flow shutoff; D.3.4.4.5.1/D.4.4.4.5.1 Occupied
compartment normal ventilation; D.3.4.4.5.2/D.4.4.4.5.2 Occupied compartment emergency ventilation
and smoke removal; D.3.4.4.6.1/D.4.4.4.6.1 Occupied compartment; D.3.4.4.6.3/D.4.4.4.6.3 Nuclear,
biological, and chemical contamination.
8.2.15 Verify that the air vehicle's thermal management system is stable for all flight conditions and
environments.
8.2.16 Verify adequate smoke clearance is available to ensure safe operation with or without an
operational ECS.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 197/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.2.17 Verify that all surface touch temperatures remain within required limits to preclude any operational
limitations to safety of flight operations of the air vehicle.
(Refuel, defuel, feed, transfer, pressurization, vent, quantity gauging, dump, and inerting, including
external and auxiliary fuel systems (tanks, plumbing, and pumps))
8.3.1 Verify that the fuel system is safely compatible with other system interfaces.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 198/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.1.1 Verify that all components, either individually or as part of a subsystem, have passed all safety-
related qualification tests (e.g., proof, burst, vibration, containment, over-speed, acceleration, explosive
atmosphere, pressure cycling, and temperature cycling as required for airworthy performance). (For Navy
and Marine Corps use only, verify external fuel tanks survive without rupture after fragment impact, forced
ejection, overpressure following ignition of fuel vapours, and are fire resistant.)
8.3.1.2 Verify that adequate crew station information is available to notify the flight crew of the system
operating conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 199/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.2 Verify that the fuel system functions under all probable conditions with the approved fuels.
Only EASA and STANAG reference 951 is truly relevant with regards to fuel system
function under all probable operating conditions.
8.3.3 Verify that all fuel system critical failure modes and hazards have acceptable risk levels.
8.3.4 Verify the safe installation of the fuel system and components.
8.3.5 Verify that the plumbing and components in the fuel system (as completely assembled and installed
within the air vehicle) can withstand exposure to the specified proof pressure limit for the subsystem
without resulting in fuel leakage, critical system performance degradation or critical life limited durability.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 202/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.6 Verify that the fuel feed system provides a continuous supply of fuel to the engine at sufficient
pressure throughout the flight and ground operation envelopes, including starting and all flight
manoeuvres.
STANAG 4671.951(a)
Reference: 4671.953
4671.955(a)
4671.959
FAA Doc: 14CFR references: 23.951, EASA CS CS 23.951
23.953, 23.955, 23.959, Reference: CS 23.955
25.951, 25.953, 25.955, 25.959 CS 23.959
CS 25.951
CS 25.953
CS 25.955
CS 25.959
CS 27.951
CS 27.953
CS 27.955
CS 27.959
CS 29.951
CS 29.953
CS 29.955
CS 29.959
8.3.7 Verify that fuel transfer flow rates meet the operational ground and flight envelope requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 203/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CS 23.952 does not exist but is included in read across from 14CFR references
(Neither does it exist within 14CFR Part 23)
8.3.8 Verify that the air vehicle centre-of-gravity limits are not exceeded during all fuel system and air
vehicle functions, including release of stores, aerial refuelling (if applicable), fuel transfer, fuel dumping
operations, wing sweep operations, catapult launches, arrested landings, and engine feed.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 204/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.9 Verify that the fuel system is designed to prevent pressures from exceeding the system's proof
pressure limits (both minimum and maximum) during refuelling (aerial and ground), defueling, transfer,
fuel feed, fuel dump operations and engine feed.
8.3.10 Verify that the flight and maintenance manuals include normal and emergency operating
procedures, limitations, restrictions, servicing, and maintenance information.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 205/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.11 Verify that the design and procedures are adequate for controlling and purging impurities from the
fuel system and that the fuel system's level of contamination is acceptable at all times.
8.3.12 Verify that the system is designed to withstand the hazards associated with lightning, static
electricity, fuel leaks, and the introduction of electrical power into fuel tanks.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 206/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.12.1 Verify that the fuel system is designed and arranged to prevent the ignition of fuel vapour within
the system.
8.3.12.2 Verify that secondary fuel and vapour tight barriers is provided between fuel tanks, fire hazard
areas, and inhabited areas.
STANAG 4671.863
Reference: 4671.967
FAA Doc: 14CFR references: 23.863, EASA CS CS 23.863
23.967, 23.1185, 25.863, Reference: CS 23.967
25.967, 25.1185, 25.981
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 207/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.12.3 Verify that drainage provisions are provided to remove all normal and accidental fuel leakage to
a safe location outside of the air vehicle.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2009 Appendix E: Def-Stan 00-970 00-970 P1 5.2.87
E.3.4.5.6.2, E.4.4.5.6.2, Reference: 00-970 P1 5.2.89
E.3.4.5.1.10, E.4.4.5.1.10
STANAG 4671 967
Reference: 4671 977
4671 997
4671 999
FAA Doc: 14CFR references: 23.977, EASA CS CS 23.977
23,997, 23.999, 25.977, Reference: CS 23.997
25.997, 25.999 CS 23.999
CS 25.977
CS 25.997
CS 25.999
CS 27.977
CS 27.997
CS 27.999
CS 29.977
CS 29.997
CS 29.999
8.3.12.4 Verify that fuel jettison, fuel venting, fuel leaks, or fuel spills can not be ingested by the engine,
flow into hazardous ignition areas, onto the environmental management system, or become reingested
into the air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 208/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: * means direct read-across of 14CFR reference from MIL-HDBK-516B to EMAR 516
8.3.13 Verify that fuel tanks are capable of withstanding, without failure, the vibration, inertia, fluid, and
structural loads that they may be subject to in operation.
STANAG 4671.963(a)
Reference: 4671.965
4671.993
FAA Doc: 14CFR references: 23.963, EASA CS CS 23.963
23.965, 23.993, 25.963, Reference: CS 23.965
25.965, 25.993 CS 23.993
AC 25.963-1
CS 25.963
CS 25.965
CS 25.993
CS 27.963
CS 27.965
CS 27.993
CS 29.963
CS 29.965
CS 29.993
Comments: Same words as MIL-HDBK-516B
8.3.14 Verify that tank pressure does not exceed tank structural limits due to a single failure under normal
operation.
Only EASA references 965 (and 963 for CS 25) provide relevant information with
respect to tank pressure, structural limits and failure under normal operations
8.3.15 Verify that the air vehicle can be safely refuelled and defuelled.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 210/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.16 Verify that the fuel system has been designed to prevent fuel spills during refuel operations.
8.3.17 Verify that adequate controls and displays for the fuel system functions are provided for the
appropriate crewmember(s) to indicate the necessary fuel system functions and warn of hazardous
conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 211/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.3.18 Verify that built-in-test (BIT) and fault isolation provisions are available to ensure safe fuel system
operations.
8.3.19 Verify that jettisoned fuel does not impinge on air vehicle surfaces or become re-ingested into the
air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 212/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.1 Verify that the fire protection system safely integrates within the air vehicle, both physically and
functionally.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 213/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.1.1 Verify that any single-point failure conditions are identified and their consequences of failure are
acceptable, eliminated or mitigated.
Comments: There does not appear to be verification that single point failure conditions for fire
systems are identified within STANAG 4671 since 4671 853 and 855 are not
applicable.
8.4.1.2 Verify that all components, either individually or as part of a subsystem, have passed all safety-
related qualification tests (e.g., proof, burst, vibration, containment, over-speed, acceleration, explosive
atmosphere, pressure cycling, and temperature cycling as required for airworthy performance).
8.4.1.3 Verify that adequate crew station information is available to notify the flight crew of the system
operating conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 214/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.2 Verify that each component of the air vehicle is properly zoned according to the fire and explosion
hazards and that protection is provided to counter the hazards such that no fire or explosion hazards exist
under normal operating conditions.
8.4.3 Verify that the design of subsystems other than fire protection have taken into consideration any
potential for fire hazards.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 215/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 216/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.3.1 Verify that, in areas where a fluid system might leak flammable fluids or vapours, there is a means
to minimize the probability of ignition of the fluids and vapours and to minimize the resultant hazards if
ignition does occur.
STANAG 4671.863(a)
Reference:
FAA Doc: 14CFR references: 23.851- EASA CS CS 25.867*
23.865, 25.851-25.869, Reference: CS 25.869*
23.1181-23.1203, 25.1181- CS 25.1181*
25.1207, 23.1411, 25.1411
CS 25.1182*
CS 25.1183*
CS 25.1185*
CS 25.1187
CS 25.1189*
CS 25.1191*
CS 25.1193*
CS 25.1195*
CS 25.1197*
CS 25.1199*
CS 25.1201*
CS 25.1203*
CS 25.1207*
CS 25.1411*
CS 27.863
CS 29.863
Comments: * means direct read-across of 14CFR reference from MIL-HDBK-516B to EMAR 516.
8.4.3.2 Verify that provisions exist for air vehicle safety-critical components to withstand fire and heat to a
predetermined safe level.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 217/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.4 Verify that provisions for drainage and ventilation of combustible fluids or vapours are adequate to
preclude the occurrence of fire or explosion hazards.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 218/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.4.1 Verify that drainage and ventilation provisions are located so that combustibles are removed from
the air vehicle to a safe location on the ground and can not re-enter the air vehicle in flight or ground
operations.
8.4.5 Verify that drains and vents from areas that might carry flammable fluids are not manifolded with
drains from areas that do not carry a potentially flammable fluid.
8.4.6 Verify that engine nacelle cooling and ventilation provisions are adequate to provide required heat
rejection and maintain nacelle conditions necessary to avoid both hot surface ignition sources and
collection of flammable fluids or vapours.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 220/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.7 Verify that all potential fire zones (e.g. engine, auxiliary power unit (APU) and other compartments,
such as engine-driven airframe accessory area) are designated as such and that suitable fire warnings
and protection are provided.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 221/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.8 Verify that essential flight controls, engine mounts, and other flight structures located in designated
fire zones or adjacent areas are qualified to withstand the effects of fire.
STANAG 4671.850
Reference: 4671.863(b)(5)
4671.865
FAA Doc: 14CFR references: 23.851- EASA CS CS 25.867*
23.865, 25.851-25.869, Reference: CS 25.869*
23.1181-23.1203, 25.1181- CS 25.1181*
25.1207, 23.1411, 25.1411
CS 25.1182*
CS 25.1183*
CS 25.1185*
CS 25.1187
CS 25.1189*
CS 25.1191*
CS 25.1193*
CS 25.1195*
CS 25.1197*
CS 25.1199*
CS 25.1201*
CS 25.1203*
CS 25.1207*
CS 25.1411*
CS 27.861
CS 29.861
Comments: * means direct read-across of 14CFR reference from MIL-HDBK-516B to EMAR 516
8.4.9 Verify that each electrically powered fire protection subsystem (e.g., fire detection, extinguishing,
and explosion suppression) is provided power at all times during air vehicle operations, including engine
start and battery operations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 222/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.10 Verify that the air vehicle explosion suppression system meets performance requirements for fire
and hazard protection.
8.4.11 Verify that the fire detection system is designed to preclude false warnings.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 224/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.13 Verify that fireproof protective devices are provided to isolate a fire within a defined fire zone from
any portion of the air vehicle where a fire could create a hazard.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 225/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.14 Verify that air vehicle interior finishes and materials deter combustion and that any toxic by-
products of combustion are at acceptable levels.
STANAG 4671 does not refer to air vehicle interior finishes and materials since this is
an unmanned vehicle specification
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 226/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.15 Verify that hazardous quantities of smoke, flames, or extinguishing agents are prevented from
entering inhabited areas, UAS/ROA control station, or UAS/ROA flight-critical sensor bays.
within STANAG 4671 both 831 and 1197 are not applicable, however, 4671 1703
relates to safe crew work place conditions within the control station
8.4.16 Verify that proper separation is provided between oxidizers and flammable fluid systems or
electrical components.
8.4.17 Verify that provisions are available to shut off flammable fluids and de-energize all electrical
ignition sources in the identified fire zone(s) for all mission phases including ground operations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 228/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.18 Verify that ground fire fighting access provisions are compatible with standard ground fire fighting
systems and that fire suppression can be accomplished through this access provision.
Other Reference documentation cannot be found with respect to ground fire fighting
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 229/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.4.19 Verify that the air vehicle provides safety features for post-crash fire and explosion hazards.
STANAG Nil
Reference:
FAA Doc: 14CFR references: 23.851- EASA CS Nil
23.865, 25.851-25.869, Reference:
23.1181-23.1203, 25.1181-
25.1207, 23.1411, 25.1411
AC 25-17, AC 25.994.1
Comments: * means direct read-across of 14CFR reference from MIL-HDBK-516B to EMAR 516
No EASA or STANAG information could be found with respect to safety features for
post crash fire and or explosion.
8.4.20 Verify that the air vehicle has provisions to detect and control overheat conditions that are potential
fire and explosion hazards.
STANAG 4671 does not appear to hold any relevant references with respect to this
criteria.
8.4.21 Verify, if unoccupied cargo holds are present, that fire protection, fire detection/ suppression, and
smoke detector requirements are met.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 231/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.1 Verify safe ground flotation capability of the landing gear systems.
8.5.2.1 Verify that the landing gear arrangement and servicing criteria prevents ground contact (including
servicing equipment, arresting cables, runway lights, etc.) at all weapons loading configurations, engine
runs, and for flat gear or flat tire, or flat gear and flat tire situations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 232/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.2.2 Verify that, for all ground operations, the air vehicle maintains operational control and stability
such that no part of the air vehicle or its weapons contacts the ground or other permanent ground
structures (servicing equipment, arresting cables, runway lights, etc.).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 233/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.2.3 For retractable gears, verify that sufficient clearance exists within the wheel well under all ground
and flight conditions so that no part of the gear contacts the airframe or becomes stuck in the up position
due to interference with any air vehicle structure or component.
8.5.2.4 Verify that the design of the landing gear system prevents the occurrence of unsafe dynamics,
vibrations, or pitching motions for all operational phases of the air vehicle on the ground and in the
transition to air.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 234/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.2.5 Verify that the air vehicle does not tip back when reverse braking or towing is done at the
specified conditions.
8.5.2.6 Verify the landing gear kneeling capability allows for safe kneeling of the air vehicle.
8.5.2.6.1 Verify the servicing procedures for landing gear kneeling and unkneeling are safe and properly
sequenced.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 235/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.3.2 Verify the functionality of the shock strut to perform all its required suspension, stroking, and
energy absorption for all ground operations, landing, and takeoffs with normal servicing and with
acceptable levels of misservicing.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 236/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CS 25.737 does not exist within EASA but does exist within 14 CFR part 25.
8.5.3.3 Verify that a misserviced gear safely supports all weapons loading, fuelling and defueling, does
not compromise takeoff and landings nor result in ground resonance.
Only DEF-STAN , CS 23.729 and STANAG 4671 729 supply relevant information.
8.5.3.4 Verify that, for both main and nose/tail landing gear, landing conditions (normal and emergency)
are within the safe operating limits.
8.5.3.5 Verify that dynamic stability is adequate and landing gear shimmy is not evident.
8.5.4 Verify that all mission and all ground handling conditions, including maximum air vehicle
deceleration at the most critical C.G. and gross weight, have a maximum expected tire load and speed
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 239/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
below that demonstrated for the selected tire at its intended inflation pressure and maximum wear limit
(MWL).
8.5.5 Verify that the worst-case loads expected during operational missions on the nose/tail wheels and
main gear wheels are not exceeded.
8.5.6 Verify that protection is incorporated to preclude wheel and tire over pressurization.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 241/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 242/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.7.2 Verify that failure of any brake (structural or control system) does not prevent the air vehicle from
stopping within the runway length needed to conduct the missions.
8.5.7.3 Verify that the brakes provides sufficient torque to prevent wheel rotation with engine thrust at
least equal to normal pre-flight test levels.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 243/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.7.4 Verify that an appropriate device is installed to release tire pressure if the brakes overheat.
Comments: * means direct read-across of 14CFR reference from MIL-HDBK-516B to EMAR 516
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 244/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Note STANAG 4671 735 describes alternative stopping methods, but only with
respect to it not being used within kinetic energy absorption.
8.5.8.2 Verify that the braking function can be maintained from the pilot’s station in a smooth and
controllable manner for all normal and emergency operations.
8.5.8.3 If a parking brake is required, verify that it provides holding power for the required time and
conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 245/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.8.4 Verify safe stopping performance for all expected runway conditions (dry, wet, snow, ice, etc.)
over all mission speed ranges and for all ground manoeuvring conditions.
Note CS 25.45, CS 25.55 and 25.187 do not exist either in 14CFR or EASA CS
documentation
8.5.8.5 Verify that anti-skid system design can respond to any power interruptions or system malfunctions
without compromising the ability of the pilot to control the air vehicle.
8.5.8.6 Verify that the anti-skid system precludes locked wheel/tire occurrences for all normal operating
conditions.
8.5.8.7 Verify that brake control power is equal and proportional to brake pedal movement.
8.5.8.8 Verify that when pedal pressure is removed, pedals return to brakes-off position and that brake
control power is not trapped or slow to release at any brake.
Only CS 25.735 within the civil documentation refers to safe operation of brakes in all
modes
8.5.8.10 Verify that the anti-skid control system is compatible with and continues to function in the
installed environment and that heat build-up does not cause locked wheels on touchdown or during the
landing roll.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 248/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.8.11 Verify that there is no anti-skid coupling into the landing gear structure.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 249/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Within DEF-STAN Steering optional for RW Part 7/2 Section 3 Lft 303. Emergency
steering optional for FW Part 1/6 Section 4 4.14.1
8.5.9.2 Verify that the steering control system protects against steering failures and that system failures
does not cause loss of control of the air vehicle.
Further information within Def-Stan Part 7/2 Section 3 Lft 303 and 305
8.5.9.3 Verify that control of the air vehicle can be maintained during engagement or disengagement of
the steering throughout all the operational speed ranges and conditions, even if it occurs from a pilot
commanded or a system uncommanded action.
8.5.9.4 Verify that the steering control system can detect and correct or prevent steering hardovers.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2009 Appendix A: Def-Stan 00-970 00-970 P1 4.11.30
A.3.4.1.4.5.2/A.4.4.1.4.5.2 Reference: 00-970 P1 4.14.6
Response to nose wheel 00-970 P1 4.14.9
steering failure
MIL-S-8812 STANAG Nil
Reference:
FAA Doc: EASA CS Nil
Reference:
Comments: Unable to find any suitable reference material within CS and STANAG documentation
8.5.9.5 Verify that steering system operation during taxi, takeoff, and landing is sufficient to accomplish all
the required ground manoeuvring and parking, and is not sensitive to high-speed, ground rolling effects
on directional control.
8.5.10.2 Verify that loss of doors, reversal of commands, or any single failures in the air vehicle power
does not prevent gear extension. Verify that the emergency extension system is independent of the
landing gear primary power source(s).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 252/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.10.3 Verify that proper gear position indications are given to the flight crew for all gear sequencing
events during any phase of mission operations.
8.5.10.4 Verify that the gear position warning system operates properly and allows the crew to override
the warning systems.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 253/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.10.5 Verify that the time to move the gear to the command positions is compatible with air vehicle
performance requirements for takeoff, landing, and go-around.
8.5.10.6 Verify that the emergency extension times are compatible with emergency landing requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 254/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.10.7 Verify that the gear is restrained in the final commanded positions for all ground and flight
conditions required by all mission profiles.
8.5.10.8 Verify that a positive secondary means is available to lock the gear and doors during ground
operations to prevent retraction on the ground. Also verify that visual indicators are provided so the
ground retention devices are removed prior to flight.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 255/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.10.9 Verify that no damage to airframe or gear structure results if power is supplied to retract the
gears when secondary ground devices are installed.
8.5.10.10 Verify the downlocking and uplocking fail-safe provisions of the landing gear.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 256/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.11.2 Verify the safety of the following: hook load, hold-down, and damping forces; engagement
probabilities; off-centre engagement capabilities; lateral run-outs; barrier compatibility; and any other
specific engagement provisions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 257/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.11.3 Verify that the hook can be deployed from the crew station in a timely manner and that a means
is provided in the crew station to determine the position of the hook.
8.5.11.4 Verify that no part of the landing gear, air vehicle, or stores snags the arresting cable when the
air vehicle is rolling on rims after a tyre failure.
8.5.11.5 Verify that the performance of drag chutes meets the specified deceleration requirements without
any adverse loading or damage to air vehicle structure.
8.5.11.6 As applicable to the air vehicle, verify the performance of thrust reversers, speed brakes, and/or
other auxiliary deceleration systems; and verify that there is no adverse loading or structural damage to
the air vehicle when these devices are used.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 259/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 260/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.12.2 Verify that the jacking interface meets the defined standards, including appropriate international
standards.
STANAG 3098
Reference: 4671 507 #
FAA Doc: 14CFR reference: 23.507, EASA CS CS 23.507#
25.519 Reference: CS 25.519(b)#
Comments: # means a judgement call on the applicability of the cross-refence is required - as no
specific reference to appropriate international standards unlike STANAG 3098 (ISO
43 / ISO 1464) or BS C 12 within DEF-STAN
8.5.12.3 Verify that the air vehicle is capable of being safely towed in all specified directions, at all mission
weights, under the required environmental conditions, on expected operational surfaces.
8.5.12.4 Verify emergency towing capability of the air vehicle to the maximum weight and load
requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 261/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
STANAG 3278 #
Reference: 4671 509
8.5.12.5 Verify that all mooring requirements are met for all mission weights and environmental
conditions, and that these requirements address the defined standard arrangements and interface for
mooring to ensure safety.
8.5.12.6 Verify that any specialized systems requirements and functional characteristics are safe for the
operational mission conditions. (Examples of specialized systems are skis, skids, kneeling, crosswind
positioning, and in-flight pressure control systems.)
8.5.12.7 Verify all known potential single-point failures are identified and are acceptable.
8.5.12.8 Verify that the air vehicle does not turnover or ground loop for all mission conditions that produce
side-load. All taxi and turn conditions at all gross weights are evaluated for all possible strut/tire conditions
and for adversely sloped taxiways and runways.
8.5.12.9 Verify the landing gear and engine inlet geometry are designed to prevent possible FOD to
engines.
8.5.12.10 Verify that the landing gear systems are compatible with air vehicle structure, weight, and
balance, and with any other subsystems that interface with the landing gear system.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 264/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.12.11 Verify landing gear system's integrity in preventing uncommanded or unsafe effects in the event
of single-point failures, dormant failures, or primary system loss. Ensure that the consequences of the
failure are eliminated, mitigated, or evaluated to be at a risk level acceptable to the procuring activity.
8.5.12.12 Verify that the system and system components have damage tolerance capability to sustain
partial failure or leakage before failure without jeopardizing safety.
8.5.12.13 Verify that failures and leakage are evident in flight and/or during routine ground maintenance.
8.5.12.14 Verify that adequate and safe lift points are provided for air vehicles that require routine
external ground crew movement utilizing hands, mechanical lifts, hoists, etc.
8.5.12.15 Verify that adequate crew station information is available to notify the flight crew of the landing
and deceleration system operational conditions and state of functionality.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 266/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.12.16 Verify that flight and maintenance manuals include normal, back-up, and emergency operating
procedures, limitations, restrictions, servicing, and maintenance information for all landing gear and
deceleration systems.
Comments: No information on flight and maintenance manual with respect to landing gear
systems within DEF-STAN documentation.
8.5.12.17 Verify that all components, either individually or as part of a landing gear and deceleration
subsystem, have passed all safety-related qualification tests (e.g., proof, burst, vibration, acceleration,
explosive atmosphere, pressure cycling, and temperature cycling as required for airworthy performance).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 267/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.5.12.18 Verify the safe installation of the landing gear and deceleration system and their components.
8.6.1 Verify that system components are safe for the intended use and environment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 268/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: # means a judgement call on the applicability of the cross-refence is required - refers
to ice formation on intakes
8.6.2 Verify that the APS/EPS operates safely under installed operating conditions over the design
envelope.
Comments: # means a judgement call on the applicability of the cross-refence is required - CS-E
identifies a wide range of operating envelope criteria for powerplants including APUs
8.6.2.1 Verify that protective safety features (auto shutdown, etc.) are available and effective in protecting
the equipment against hazardous malfunctions and conditions such as over-speed, over-temperature and
inadvertent activation.
8.6.3 Verify that the functional and physical compatibility of the integrated system is safe.
8.6.4 Verify that high-speed rotating components are designed to be damage tolerant, or that there are
provisions for containment of failed parts. Also, verify that any potentially uncontained fragments do not
damage SOF components or CSIs or injure personnel.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 270/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.6.4.1 Verify that containment or other provisions preclude a failed power-take-off (PTO) system from
causing secondary damage, due to flailing or whipping, to critical safety items (CSI) or to nearby safety of
flight component/systems, including fuel and hydraulic lines.
8.6.5 Verify that APS/EPS equipment in the installed configuration is free of damaging vibrations at all
operating conditions throughout the APS/EPS operational envelope.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 271/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.6.5.1 Verify, when applicable, that the PTO system is capable of operating safely when installed at the
maximum allowable conditions of misalignment and imbalance.
8.6.6 Verify that the emergency power system (including the APU or jet fuel starter (JFS) when deemed
flight essential) is capable of responding to failures and providing adequate levels of bleed air, shaft,
electrical and/or hydraulic power in sufficient time to meet design requirements.
8.6.7 Verify that provisions for the following adequately address safety:
a. Structural mounting
b. Wiring and plumbing support, routing, and clearances
c. System/component and compartment drainage
d. System/component and compartment cooling and ventilation
e. System/components designed for appropriate level of fire hardening
f. Accessibility to all required inspection and servicing features and areas
8.6.8 Verify that the inlet and exhaust hazards (i.e., velocities, temperatures, acoustics, exhaust by-
products, etc.) to the ground/flight/passenger personnel, air vehicle subsystems, and air vehicle structure
are acceptable.
8.6.9 Verify that personnel hazards are properly documented in the appropriate flight/operator and
maintenance manuals (T.O.) with warnings and precautions.
8.6.10 Verify that compatibility of the accessory drive system with the air vehicle accessories and engine
drive system is adequately evaluated for torsional vibrations and loads as well as possible misalignments.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 274/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.6.11 Verify that all critical failure modes and hazards have acceptable risk levels.
8.6.12 Verify that the crew station provides for adequate control and monitoring of the system.
8.6.13 Verify that equipment service life, overhaul, and operating limits are safe and that life-limited
components have a reliable means of tracking the limiting parameter.
8.6.14 Verify that the flight/operator and maintenance manuals include normal and emergency operating
procedures, limitations, servicing, and maintenance information.
8.7.1 Verify that aerial refuelling operations can be safely and successfully accomplished with the
targeted tanker/receiver aerial refuelling subsystem(s).
Note DEF-STAN does not cover flying boom and receptacle refuelling systems
8.7.1.1 Verify that the operator and maintenance manuals for the air vehicle and the targeted
tanker(s)/receiver(s) document safe aerial refuelling procedures. The manuals should identify the proper
instructions/information and placards noting restrictions and limitations in the use of the air vehicle's aerial
refuelling system(s) under all operating conditions (ground/in flight; normal/emergency).
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 276/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.1.2 Verify that there is dimensional, physical, electrical, and material compatibility between each aerial
refuelling interface and the targeted tanker's/receivers aerial refuelling interface to permit safe
engagement.
8.7.1.2.1 Verify that all structural fastener heads around the receptacle are flush with the surrounding
structural surface.
8.7.1.3 Verify that the aerial refuelling system interface, its attachment to airframe structure, and the
structure surrounding the interface can withstand the loads experienced during the aerial refuelling
process (engagement, disengagement, and fuel transfer) with the tanker/receiver interface(s) without
being damaged or creating FOD.
8.7.1.4 Verify that cues (visual or equivalent) are provided on the air vehicle to assist the
crewmember(s)/operator(s)/automated system(s) of the targeted tanker(s)/ receiver(s) and the
crewmember(s)/operator(s)/automated system(s) of the air vehicle during the aerial refuelling process
under mission-defined environmental conditions. Likewise, verify that cues (visual or equivalent) provided
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 278/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
on the targeted tanker/receiver air vehicle(s) can be viewed/received as intended by the appropriate air
vehicle crewmember(s)/operator(s)/automated system(s), during the aerial refuelling process under
mission-defined environmental conditions.
8.7.1.4.1 Verify that all markings used for aerial refuelling are compatible with the expected environmental
conditions and fluid exposures (fuel, hydraulic fluid, air vehicle cleaning solvents, etc.).
8.7.1.4.2 Verify that exterior aerial refuelling lights are provided on the air vehicle to assist the targeted
tanker/receiver crewmember(s)/operator(s)/automated system(s) and the air vehicle
crewmember(s)/operator(s)/automated system(s) during the aerial refuelling process.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 279/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.1.4.3 Verify that the appropriate air vehicle crewmember(s)/operator(s)/automated system(s) can
view/receive exterior aerial refuelling lights provided on the targeted tanker/receiver air vehicle(s), as
intended, during the aerial refuelling process.
8.7.1.4.4 Verify that the intensity of each exterior aerial refuelling light, or light group, can be
independently varied to accommodate the needs of the targeted tanker/receiver
crewmember(s)/operator(s)/automated system(s) and the air vehicle
crewmember(s)/operator(s)/automated system(s).
8.7.1.4.5 Verify that the appropriate exterior aerial refuelling lights are compatible with night vision
imaging systems (NVIS) or automated systems.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 280/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
STANAG Nil
Reference:
FAA Doc: 14CFR reference: 23.951- EASA CS Nil
23.1001, 25.951-25.1001 Reference:
Comments: As EASA CS documents are civil docs, In-Flight Refuelling is not considered.
8.7.1.4.6 Verify that all exterior aerial refuelling lights are compatible with the expected environmental
conditions and fluid exposures (fuel, hydraulic fluid, air vehicle cleaning solvents, etc.).
8.7.1.5 Verify that a communication system is provided which permits the timely exchange of all identified
data/information between the crewmember(s)/operator(s)/ automated system(s) of the air vehicle and the
crewmember(s)/operator(s)/automated system(s) of the targeted tanker/receiver air vehicle(s) during the
aerial refuelling process.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 281/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.1.6 Verify that the types of fuels to be transferred/received and any allowed deviations are identified.
8.7.1.7 Verify that the delivery pressure and flow rate of the transferred/received fuel are identified and
are within all applicable tanker/receiver design limits.
8.7.1.8 Verify that surge pressures generated during the aerial refuelling process do not exceed proof
pressure limits for the aerial refuelling system(s) of any air vehicle involved in the aerial refuelling
process.
STANAG 3447
Reference: 3971
3681 #
3847 #
FAA Doc: EASA CS CS 25.951 #
Reference: CS 25.963 #
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 282/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.1.8.1 Verify that surge pressure conditions are safe, including, but not limited to:
a. With and without a single failure in the tanker system's pressure regulation feature(s)
b. Pump start-up surges (no flow to receiver)
c. All possible receiver valve closures (manually or automatically activated) which could terminate
flow into the receiver
d. Flowing disconnects
8.7.1.9 Verify that any spray resultant of the aerial refuelling process does not negatively affect the safe
operation of the air vehicle(s). (Fuel spray is typically created during the engagement and disengagement
of the aerial refuelling interfaces.)
STANAG Nil
Reference:
FAA Doc: EASA CS Nil
Reference:
Comments: As EASA CS documents are civil docs, In-Flight Refuelling is not considered.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 283/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.1.9.1 Verify that any fuel spray entering receiver engine(s), hazardous ignition areas, environmental
management systems, and air data systems does not compromise safety.
8.7.1.9.2 Verify that any fuel spray that covers or contacts lights, optical windows, antennae, and any
other sensitive device does not compromise safety.
8.7.1.10 Verify that satisfactory flight stability and handling qualities are achievable for the tanker/receiver
aerial refuelling interface within the specified aerial refuelling envelope.
8.7.2 Verify that each aerial refuelling system can be installed and operated (normal and single-failure
conditions) without causing loss of the air vehicle or creating a potential hazard to personnel in the
identified environment (induced and natural).
8.7.2.1 Verify that the system has been designed to minimize the hazards from lightning, static electricity,
fuel leaks, ignition sources, and ground potential.
STANAG Nil
Reference:
FAA Doc: EASA CS Nil
Reference:
Comments: As EASA CS documents are civil docs, In-Flight Refuelling is not considered.
8.7.2.1.1 Verify that the receptacle installation has a fuel- and vapour-proof pressure box below it to
collect the fuel spray that may occur during aerial refuelling.
8.7.2.1.2 Verify that all fluids that collect within the pressure box are capable of being drained safely.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 285/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.2.1.3 For probe installations (retractable), verify that the probe compartment is fuel- and vapour-proof
such that any fuel spray that may collect in this compartment does not migrate.
8.7.2.1.4 Verify that the collected fluids within the probe compartment are capable of being drained safely.
8.7.2.1.5 For aerial refuelling pods, verify that there is adequate air flow/exchange within the pod to
preclude the build up of a flammable vapour within the pod.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 286/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.2.1.6 Verify that all fluids that can be collected within the pod are capable of being drained safely.
STANAG Nil
Reference:
FAA Doc: EASA CS CS 25.975#
Reference:
Comments: As EASA CS documents are civil docs, In-Flight Refuelling is not considered.
# means a judgement call on the applicability of the cross-refence is required - DEF-
STAN Refers to Fuel vapour hazards in general
8.7.2.1.7 Verify that a dry-run condition with an aerial refuelling pump does not create a potential ignition
source.
8.7.2.1.8 Verify that there is a secondary liquid- and vapour-tight barrier between the aerial refuelling fuel
tanks and identified fire hazard areas/inhabited areas.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 287/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.2.1.9 Verify that each aerial refuelling system can withstand the static discharge typically encountered
during the engagement of tanker and receiver interfaces.
8.7.2.1.10 Verify that each aerial refuelling system, in the open/deployed position and in the
closed/retracted position, is designed to withstand the appropriate lightning strike criteria.
8.7.2.2 Verify that the flight control/handling qualities of the air vehicle are not negatively impacted when
the aerial refuelling system is installed or operating under normal aerial refuelling and single-failure
conditions.
8.7.2.2.1 Verify that the flight control/handling qualities of the air vehicle are not degraded below safe
limits, and the air vehicle can safely land when the system interface cannot be returned to its fully stowed
configuration.
8.7.2.2.2 For aerial refuelling pods, verify that any ram air turbine (RAT) failure mode does not degrade
flight control/handling qualities of the air vehicle below acceptable limits.
8.7.2.3 Verify that in-flight egress, ground emergency egress, and assisted egress of any crewmember
are not affected when the system interface cannot be returned to its fully stowed configuration.
8.7.2.4 Verify that built-in-test (BIT) and fault isolation provisions are available to appropriate
crewmember(s)/operator(s)/maintenance personnel to ensure safe ground or in-flight operations under all
configuration options.
8.7.3 Verify that the flight control/handling qualities of the air vehicle are not negatively impacted by the
removal of hardware associated with an aerial refuelling system. For tankers, this may include pods,
palletized systems, and fuel tanks that must be removed to reconfigure the tanker for another mission.
For receivers, this may include probe installations that are not permanent.
8.7.3.1 When aerial refuelling hardware is removed, verify that interfaces with other systems (e.g.,
electrical, hydraulic, and fuel system) are properly covered, sealed, isolated, etc., to preclude providing a
new leak or ignition source in the air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 290/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.4 Verify that each aerial refuelling system, as installed, can meet its design and performance
requirements when operated within the specified parameters.
8.7.4.1 Verify that the plumbing/components in each aerial refuelling system (as completely assembled
and installed within the air vehicle) can withstand exposure to the specified proof pressure limit without
resulting in fuel leakage and system performance degradation.
STANAG Nil
Reference:
FAA Doc: EASA CS Nil
Reference:
Comments: As EASA CS documents are civil docs, In-Flight Refuelling is not considered.
8.7.4.2 Verify that critical operational functions and functional modes are provided in the aerial refuelling
system to ensure the aerial refuelling process can be conducted safely.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 291/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.4.3 Verify that controls are provided and properly located for the appropriate
crewmember(s)/operator(s) to activate and control the identified functions of the aerial refuelling system.
8.7.4.4 Verify that displays are provided and properly located for the appropriate
crewmember(s)/operator(s) to indicate the necessary information to conduct the aerial refuelling operation
safely.
8.7.4.5 Verify that display lights are variable intensity and, if appropriate, NVIS compatible.
8.7.5 Verify that the installation and operation of each aerial refuelling system (normal/single-failure
conditions) does not negatively impact the operation of other systems on the air vehicle or on the targeted
tanker(s)/receiver(s) throughout the mission(s) of the air vehicle or the targeted tanker(s)/receiver(s).
8.7.5.1 Verify that any fuel tank vent system can accommodate the maximum refuel/transfer rate and
pressures associated with aerial refuelling transfer rates encountered during aerial refuelling normal
operations and single-failure conditions.
8.7.5.2 Verify that no ground or flight hazards are created if leakage occurs in the air vehicle fuel system
and/or other aerial refuelling system plumbing during aerial refuelling operations. Consider leakage due to
a failure of the sealing mechanism at the single-point refuelling adapter, at the pressure defueling
adapter, or at the other aerial refuelling system interface(s).
8.7.5.3 For tankers carrying a unique fuel for the designated receiver air vehicle(s), which cannot be
utilized by the tanker's propulsion system(s), verify that there is adequate isolation of the aerial refuelling
system from the tanker's fuel system.
8.7.5.4 Verify that any data communication system provided on the air vehicle is compatible with (1) the
flight control system on the air vehicle, (2) other electrical systems on the air vehicle, and (3) the flight
control and electrical systems on the targeted tanker(s)/receiver(s).
8.7.5.5 Verify that the field of view of the crew member(s)/operator(s)/automated system(s) is adequate
during landing and during other critical flight phases when an aerial refuelling system is installed, is
operating, or fails to return to the fully stowed configuration.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 294/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.7.5.6 When the plumbing of the aerial refuelling system interfaces with the fuel system plumbing of the
air vehicle or of other aerial refuelling systems, verify that a leak in the aerial refuelling system plumbing
does not impact the fuel system's fuel management functions (engine feed, thermal management, centre
of gravity control, etc.).
8.7.5.7 Verify that electrical failures within the aerial refuelling system do not adversely affect the air
vehicle electrical system.
8.7.5.8 When aerial refuelling components interface with the fuel or hydraulic system, verify that
pressures and temperatures within the fuel/hydraulic system remain within safe limits under normal aerial
refuelling operations and single-failure conditions. Typical components for consideration are RAT-driven
pumps in aerial refuelling pods, aerial refuelling pumps, probe door actuation/retraction mechanisms,
probe extension/retraction mechanisms, and receptacle door/toggle latch mechanisms.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 295/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9. MECHANISMS
(Equipment involved in the securing, fastening, and mechanizing of air vehicle doors, hatches, ramps,
weapon launchers, etc.; includes items such as locks, latches, bearings, hinges, linkages, indicators, and
actuators.) Mechanical actuation subsystems that provide motion and position locking functions for
stowable and deployable surfaces such as folding wing panels, folding rotor blade systems, folding tail
rotors/pylons, air scoops, air vents, and weapons bay doors in ground and air applications for both
operational and maintenance purposes.
Equipment that is mechanical in form, fit, and function, but not covered by any other system-level
requirements should be included herein.
8.9.1 Verify that all SOF critical mechanisms perform their allocated air vehicle functions under their
specified operating environments and conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 296/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
STANAG 4671 807 and 813 are not applicable, i.e. no emergency exits aboard UAS
8.9.2 Verify that damage or permanent deformation to latches or support structures does not result from
the most critical jam load condition.
STANAG 4671 807 and 813 are not applicable, i.e. no emergency exits aboard UAS
8.9.3 Verify that the failure of any mechanism does not cause the loss of control of the air vehicle or
prevent continued safe flight and landing.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 297/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.4 Verify that inadvertent loosening or opening of air vehicle doors, door latches, locks, or fasteners
does not restrict the operation of any flight control system.
8.9.5 Verify that no single failure allows any latch to open inadvertently.
8.9.6 Verify that any locking system is incapable of locking or indicating it is locked unless all the latches
are properly latched in the fully secured position.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 298/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.7 Verify that all air vehicle doors, whose inadvertent opening would present a probable hazard to
continued safe flight and landing, have provisions to prevent depressurization of the air vehicle to an
unsafe level if the doors are not fully closed, latched, and locked.
8.9.8 Verify that the indication system continuously monitors and provides an unsafe indication when the
door, latching, or locking system is unsecured, and provides a safe indication when the system is
secured.
8.9.9 Verify that the door control systems are designed for emergency operation by means of manual
actuation of the door/drive sequence.
8.9.10 Verify that all door seals prevent rain or water leakage into the air vehicle during all flight and
ground operations and while the air vehicle is parked and depressurized under storm conditions.
8.9.11 Verify that all actuation subsystems are able to be locked and unlocked, provide for folding,
unfolding, and deploying, and can be folded, unfolded, and deployed within a wind environment that
encompasses atmospheric and weather-induced conditions, wind-over-deck from carrier vessel
movement, and downwash and jet wash conditions caused by other vehicles expected in the operational
ground/deck environment.
No EASA or STANAG comparisons could be found for this particular criteria, which
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 300/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.12 Verify that mechanisms that provide a structural load path incorporate redundant means of locking
the mechanism in position.
8.9.13 Verify that the locked-or-unlocked condition of mechanisms with sensors is displayed in the
cockpit, on aircraft, and in all remote operator control locations during ground operations.
8.9.14 Verify that, when applicable, a means is provided for controlling utility actuation. Where possible,
include a separate means for "motion" and "locking" control.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 301/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.15 Verify that actuation subsystems that have a provision for manual operation include safety devices
to prevent injury to maintainers in case of inadvertent application of power during a manually powered
operation, and incorporate a controlled deployment speed at a specified safe rate.
8.9.16 Verify that utility actuation subsystems are capable of operating from the ground power supplied to
the air vehicle as well as air vehicle supplied power.
8.9.17 Verify that all actuation subsystems are able to perform their specified function within the specified
safe time and cycle. Also specify allowable intervals between actuation cycles as well as total cycles
expected during the application lifetime.
8.9.18 Verify that utility actuation subsystems incorporate some means to prevent damage to adjacent
movable surfaces (for example, flaps) during folding and unfolding operations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 302/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.19 Verify that the actuation subsystem attachment is not an integral part of the air vehicle structure,
such as a wing rib, but is a replaceable attachment designed so that, in case of an overload or fatigue
failure, the attachment fails in lieu of a structural component failure on the primary air vehicle.
8.9.20 Verify that clearance is provided in the deployed or stowed position and during the deployment
operation to prevent damage to the surface, attached equipment, and to other areas of the air vehicle.
8.9.21 Verify that utility actuation mechanisms used during ground operations have a purely manual
backup available for motive power and locking/unlocking purposes if the primary mode of operation is
automatic or powered (or both). And verify that subsystems used for purely in-flight applications also have
means incorporated to allow cockpit controlled activation for ground maintenance actions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 303/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.22 Verify that the locked-unlocked condition of mechanisms used during ground operations is
displayed visually, externally, by purely mechanical, nonelectric means.
8.9.23 Verify that for ground operation with power off, means are provided to hold the air vehicle doors in
the open or closed position, and that manually operated hold-open latches are provided to secure doors
in the open position, incorporate a lock, and are located in an area where personnel can access safely.
Also verify that subsequent power operation of the doors, with these means left in place, will not result in
damage.
8.9.24 Verify that the controls automatically stop the sequence in the event a malfunction or failure occurs
part way through a cycle, and in the event of a power interruption, doors do not change position, and the
door controls go to the stop position and remain in the stop position upon resumption of power.
8.9.25 Verify that the controls are capable of stopping or reversing door movement at any time in the
cycle at the option of the operator by selecting the appropriate control option.
8.9.26 Verify that locking mechanisms incorporate a means of operational command interrupt to prevent
in-flight actuation of ground-only operating systems, that all mechanical and powered locks and actuators
are designed to prevent undesired surface positioning in flight, and that the "fold" sequence requires two
separate, deliberate actions in the case of flight critical surfaces.
8.9.27 Verify that provisions are incorporated to (a) prevent actuation following activation and subsequent
relief of safety devices, (b) provide for locking of folding wings, blades, or other surfaces in the
folded/stowed position, and (c) ensure locks are positive and do not depend on any power source to
remain engaged.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 305/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.9.28 Verify that removable surface securing devices, if specifically permitted by the Government, have
strength equal to or exceeding that of the air vehicle.
8.9.29 Verify that airframe bearings are capable of safely joining mechanical elements; transmitting
design loads through the full range of the system operating parameters; permitting rotation, misalignment,
or both while maintaining a specified dimensional relationship between the joined elements; and reducing
friction and wear more predictably.
8.10.1 Verify that the cargo hook system operation in normal, automatic, and emergency modes does not
adversely affect safety of the air vehicle system.
Applies to RW Platforms
# - AMC 27.865
Class D (Human External Cargo) for Operations within Europe
8.10.2 Verify that the cargo hook system cockpit switches and indicators provide for normal, automatic,
and emergency release of cargo.
# - AMC 27.865
Class D (Human External Cargo) for Operations within Europe
8.10.3 Verify that the cargo can be hooked safely to the hook and that the manuals contain the maximum
and minimum loads for safe movement of cargo.
Applies to RW Platforms
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 307/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
8.10.4 Verify that the electromagnetic environment of the air vehicle is compatible with safe loading and
release of cargo.
Applies to RW Platforms
8.10.5 Verify that the air vehicle structure can support all loads imposed by the external transport of cargo
during operational usage.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 308/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Applies to RW Platforms
# - AMC 27.865
Class D (Human External Cargo) for Operations within Europe
8.10.6 Verify that the external cargo hook and supporting structure limits are defined and are published in
all applicable operator and maintenance manuals.
Applies to RW Platforms
# - AMC 27.865
Class D (Human External Cargo) for Operations within Europe
8.10.7 Verify that air vehicle flight performance/control is not adversely affected by load movement
experienced during external load operations and the emergency jettison of external cargo.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 309/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Applies to RW Platforms
# - AMC 27.865
Class D (Human External Cargo) for Operations within Europe
8.11.1 Verify that the external rescue hoist system does not adversely affect safety to personnel or to the
air vehicle system.
AMC 27.865
Class D (Human External Cargo) for Operations within Europe
Applies to RW Platforms
8.11.2 Verify that the hoist system operates safely under rated and emergency loading conditions.
AMC 27.865
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 310/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Applies to RW Platforms
8.11.3 Verify that the electromagnetic environment of the air vehicle is compatible with safe operation of
the rescue hoist.
Applies to RW Platforms
8.12.1 Verify that H-bar and FRIES bar provides for the safe insertion and extraction of personnel into
and out of the air vehicle.
CS 27.865 relates to Class D (Human External Cargo) for Operations within Europe
8.12.2 Verify that the back-up structure possesses adequate structural margins of safety for the safe
insertion and extraction of personnel.
CS 27.865 relates to Class D (Human External Cargo) for Operations within Europe
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 312/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
This element provides the means whereby the occupant(s) can leave the air vehicle during in-flight,
water, and ground emergencies. It may include the following equipment and devices: the ejection seat (if
equipped), restraint system, escape sequencing system, cartridge actuated or pyrotechnic actuated
devices (CAD/PAD), canopy jettison (including thrusters and rockets), escape path clearance,
parachute(s), provisions for survival equipment (flares, medicine, radio, sustenance, arms, emergency
oxygen, flotation equipment), manual bailout, emergency escape exits, escape paths, life rafts, slides,
emergency ground egress provisions, and aeromedical evacuation.
9.1.1 Verify that the escape system is safe for human use and compatible with the aircraft.
Comments: CS 23.803 and 29.803 have been included, but cover emergency evacuation rather
than assisted escape system.
There is no equivalent para. CS 27.803.
9.1.1.1 Verify that the systems and subsystems of the escape system have a designed and demonstrated
reliability sufficient for use.
9.1.2 Verify that escape exits and escape routes are provided in appropriate sizes and numbers for
emergency evacuation, landing or ditching to permit timely and complete egress of occupants.
9.1.3 Verify that emergency exits have operating instructions and markings, both internally and externally.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 314/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.1.4 Verify that devices for ground emergency egress assist (slides, descent reels, life rafts, etc.) and
their deployment handles/actuators meet safety requirements.
9.1.5 Verify that ground/ditching emergency egress and rescue processes and procedures exist, are
incorporated in system documentation, and are implemented in training.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 315/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.1.6 Verify that egress equipment exists to aid escape in the event exits are blocked, damaged, or when
exit opening actuation fails.
Aircrew station (accommodations, lighting, furnishings and equipment): This element provides the
crewmember with crew station geometry covering workspace size and arrangement as specified by the
anthropometric requirements, internal and external visibility necessary to perform the specified missions
safely, cockpit illumination (primary, secondary, night vision imaging systems (NVIS), laser eye protection
(LEP), utility and emergency lighting), thermal and acoustic protection, and storage facilities. Additionally,
for manned air vehicles, other elements include sanitary facilities, cockpit finish and trim, instrument panel
and consoles, and protection from cockpit generated reflections (glare shields). It may also cover
boarding arrangements such as ropes or ladders. Crew and passenger accommodations may also be
covered.
This element also covers UAS/ROA control station requirements, where appropriate.
9.2.1 Verify that all controls and displays are arranged and located so that they are completely functional
and visible and that cockpit or operator station geometry (including seats) accommodates the specified
multivariate flight and mission crew population.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 316/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.2.1.1 Verify that all displays are readable, from all crewmember (or operator/controller) eye positions,
under the full range of ambient conditions.
9.2.1.2 Verify that the interior and exterior fields of view are sufficient to safely perform all flight and
mission-critical functions.
9.2.2 Verify that all controls are properly designed and can be operated through their complete range of
travel without interference with other controls, structures, or crewmembers' bodies; and that all
emergency action controls are reachable by the aircrew member from a restrained shoulder position in all
air vehicle attitudes and throughout the complete range of "g" force loads.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 318/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.2.3 Verify that the master caution and warning systems' displays are located in the prime visual signal
area, and that all warning and caution situations are displayed and/or conveyed to the aircrew or operator
in a fashion that permits recognition in sufficient time to take actions necessary for safe flight.
9.2.5 Verify that, if appropriate, the design allows each crewmember, in an emergency, to operate all
controls essential for crew survival.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 319/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.2.6 Verify that all interior finishes, components, and equipment, including lavatories, galleys, and areas
that are not continuously occupied, are made with flame-resistant materials.
9.2.7 Verify that a system exists such that the flight deck can readily communicate with other aircrew.
9.2.8 Verify that all audio communication systems have speech intelligibility of sufficient quality to ensure
safe and effective aircraft operation.
This element involves the following: Lighting environments and mechanisms (e.g., NVIS, LEP) allowing
crewmembers to see information from displays and instruments, to operate controls, to move safely
throughout and emergency egress the compartment, to see other vehicles in formation and during aerial
refuelling, and to perform all other mission-critical functions where sight is necessary.
9.3.1 Verify that lighting systems exist to illuminate everything in or on the air vehicle that needs to be
seen by crew, wing men, passengers, maintainers, and ground support personnel, regardless of ambient
lighting conditions.
9.3.2 Verify that the lighting is fully controllable and uniform and does not produce unacceptable glare,
shadows, or reflections.
9.3.3 Verify that the lighting allows the air vehicle to operate in commercial airways without restriction.
9.3.4 Verify that lighting and illumination exists for crewmembers to perform all flight-critical tasks and that
lighting systems are NVIS and laser eye protection (LEP) compatible, if applicable.
This element provides the means for the crewmember to monitor and control the system flight path
management, navigation, caution, warning, advisory, communications, identification, propulsion, and
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 322/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
mission and utilities subsystems. It covers presentation of emergency checklists and procedures. It
encompasses the location and arrangement of the primary flight display suite, crew workload, situation
awareness, and spatial disorientation aspects.
9.4.1 Verify that all functional operations can be safely performed including tasks performed by aircrew,
operators, and maintainers.
9.4.1.1 Verify that the primary flight display suite provides the necessary information to the crewmembers
to enable all basic and unique flight manoeuvres to be performed safely, in both normal emergency
conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 323/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.4.2 Verify that all operating instructions, flight handbooks/checklists, flight/performance management
and planning systems, and other relevant documentation, are not in conflict with system descriptions and
procedures (normal and emergency) and actual system performance; that emergency procedures are
clear and corrective actions do not create other hazardous situations; and that all procedures or
pilot/vehicle interfaces can be accomplished within acceptable crew workload limits.
9.4.3 Verify that external visibility, or transmitted visual indications, is sufficient for the aircrew to maintain
flight, conduct all necessary flight tasks, and avoid ground or flight obstacles.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 324/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.4.4 Verify that the crew system interface is designed to reduce the potential for, and minimize the
consequences of, a crew-induced error, and provides a simple means to correct an error.
9.4.5 Verify that technical manuals/technical orders and publications are accurate and complete for all
tasks that may have flight safety impacts.
This element provides the human with breathing and anti-g provisions, and natural, induced, and combat
hazard protection. This includes chemical biological protection, laser protection, cold water immersion
protection, head protection, noise protection, altitude protection (pressure suits), protection from rapid
decompression, personal services, etc.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 325/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.5.1 Verify that the air vehicle integrated life support systems (for example, high altitude, "g" protection,
ocular protection, and breathing) are fully functional and accessible within the flight envelope.
9.5.2 Verify that the system satisfies the physiological requirements of the occupants during mission,
escape, and survival.
Comments: CS 23.1301and 25.1301 covers general section about the function and installation of
all equipment.
CS 23.1441 and 25.1441 refer out to 23.1443-23.1453 and 25.1443-25.1453.
Covers oxygen equipment only, no escape systems.
No equivalent paras. CS 27.1441 and 29.1441 as oxygen not applicable to
helicopters.
9.5.3 Where the life support system must interface with other air vehicle subsystems, verify that the
operation of the life support system is not degraded by, and does not degrade, the normal or failure
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 326/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
modes of operation of those subsystems (for example, controls and displays, escape systems,
communication, environmental management system (EMS)).
9.5.4 Verify that emergency oxygen is available for all occupants of the air vehicle.
9.5.4.1 Verify sufficient emergency oxygen is available during high altitude escape.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 327/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.5.5 Verify that each life raft has obviously marked operating instructions. Ensure that approved survival
equipment is marked for identification and method of operation and that emergency flotation and
signalling equipment is installed so that it is readily available to the crew and passengers.
STANAG Nil
Reference:
FAA Doc: 14CFR references: 25.1561, EASA CS CS 23.1415
23.1561, 23.1415, 121.339 Reference: CS 23.1561
CS 25.1415
CS 25.1561
CS 23.1415
CS 23.1561
CS 25.1415
CS 25.1561
9.5.6 Verify that each life raft to be released automatically or by a crewmember is attached to keep it in
place alongside the air vehicle until the raft is afloat on water. Verify that this attachment is sufficiently
weak to break away from the air vehicle before submerging the fully occupied life raft to which it is
attached.
This element provides the crewmember with exterior vision capability in accordance with system
requirements. It may consist of a remote camera system, a flat transparency window, a windscreen,
and/or a canopy system. It also may include the transparency/canopy frame, canopy actuator, canopy
latch/locking system, etc.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 328/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.6.1 Verify that canopies and associated support structure, as well as the actuation, latching, and locking
mechanisms, are compatible with the air vehicle escape system to permit safe egress and escape in the
event of an emergency.
9.6.2 Verify that the transparency system meets survivability requirements for bird-strike impact.
9.6.3 Verify that the structural/thermal capability of the transparency system is adequate for all loads and
flight conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 329/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.6.4 Verify that the transparency system shape is compatible, and does not interfere, with crewmember
and equipment positions and motions used during normal and emergency conditions.
9.6.5 Verify that the optical characteristics of the transparencies (windshield, canopy, windows, as
applicable), including transmissivity, angular deviation, optical distortion, haze, multiple imaging, binocular
disparity, birefringence, and minor optical defects are compatible with the safety-critical optical systems
used by the aircrew and provide a safe optical environment to the pilot.
9.6.6 Verify that necessary deployment power is available under normal and emergency conditions and
that there is no interference with manual actuation of the canopy when air vehicle or external power is not
available.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 330/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.6.7 Verify that the environmental management system interface provides necessary defogging,
pressurization, heating, cooling, humidity control, and ventilation of the transparency system under
normal and emergency conditions.
9.6.8 Verify that provisions for rain removal, de-icing and defogging, and snow and ice removal are
adequate for pilot external vision and that these provisions do not cause temporary or permanent optical
degradation of the transparencies.
This element provides the pilot, crew, and passengers with protection/procedures in the event of a crash
scenario. It covers crash rescue procedures, fire protection, equipment containment, smoke protection,
emergency lighting and seating.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 331/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.7.1 Verify that seating system load capabilities are commensurate with the air vehicle type for aircrew
and passengers and that the design of the floor and load paths to the seat attachments is capable of
sustaining the loads of the seat system in applicable crash load conditions.
9.7.2 Verify that the stroke clearance envelope for energy absorbing seats is clear of structures and
equipment that could impede seat stroke.
9.7.3 Verify that restraint systems are designed to restrain the occupant properly for the escape system
environment and the crash loading of the seat.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 332/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.7.4 Verify that the strike envelope of the occupant during crash loads is kept free of objects that are
risks to survival or may cause serious injury that renders the crewmember unable to perform post-crash
egress functions.
9.7.5 Verify that the exits are post-crash operational up to the design crash loads.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 333/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.7.6 Verify that, under emergency landings, ditching, and crash loads, items of mass do not cause
serious injury to occupants or prevent escape.
9.7.7 Verify that the air vehicle is equipped with breathing and eye protection equipment, fire- fighting
equipment, and fire extinguishers appropriate for the expected use.
9.7.8 Verify that ditching provisions, including flotation devices for all occupants, are installed on all air
vehicles without assisted escape systems.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 334/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.7.9 Verify that pre-crash warning between aircrew and all compartments is possible without aircrew or
occupants leaving their seating position.
9.7.10 Verify that, for rotary wing air vehicles, occupiable volume reduction resulting from design crash
loads provides reasonable protection against occupant injury.
9.7.11 Verify that mechanisms used for emergency crew extraction and for fire fighting are properly
marked and can be operated while wearing personal protective equipment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 335/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
This element addresses technical requirements in the area of aerial delivery of cargo and personnel with
regard to safety of the air vehicle. It may cover cargo restraint, tiedowns, external load equipment,
transport of hazardous materials, handling/loading of either problem or unique cargo, and airdrop of cargo
and personnel.
9.8.1 Verify that the air vehicle structure can support all loads (internal or external, as applicable) imposed
by the transported items during operational usage.
9.8.2 Verify that clearance exists for aircrew and passengers during flight-critical and emergency
functions.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: JSSG-2000: 3.1.7.2 Def-Stan 00-970
JSSG-2001: 3.4.5, 3.4.6 Reference:
MIL-HDBK-1791 illustrates the STANAG Nil
minimum acceptable aircrew Reference:
access clearances for C-130
aircraft AFI 11-2C-130 Vol 3,
addenda A, defines C-130
passenger safety aisle
requirements
MIL-STD-1472 defines
anthropometric data
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 336/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.8.3 Verify that NAVAIR NATOPS/cargo-loading manuals include shear, bending, crushing, or puncture
load limits such that the cargo does not impart excessive loads into the air vehicle structure during any
phase of the loading process.
9.8.3.1 Verify cargo hook and backup structural load limits and verify that limits are included in applicable
operators and maintenance manuals.
9.8.4 Verify that the positioned cargo meets required flight weight and balance requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 337/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.8.5 With the exception of items designated for airdrop, verify that the loaded item will not change the air
vehicle C.G. position during flight.
9.8.6 Verify that restraints afford sufficient capacity and are provided in sufficient quantity to restrain the
transported items safely.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 338/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.8.7 Verify that all operator and maintenance manuals (T.O.'s) are accurate and provide cargo
preparation, handling, carriage, and delivery procedures necessary for safe ground and flight operations.
9.8.8 Verify that cargo compartment dimensions allow enough room to load, transport, and/or airdrop
required items safely.
9.8.9 Verify that air vehicle flight performance/control is not hazardously affected by movements in C.G.
of airdrop loads or by load and C.G. movement experienced during external load operations.
9.8.10 Verify that air vehicle personnel airdrop systems can withstand the loads imposed by personnel
during airdrop and possible malfunctions of personnel airdrop equipment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 339/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.8.11 Verify that the air vehicle provides the capability to safely recover a towed jumper.
9.8.12 Verify that, for personnel airdrop, acceptable risk levels exist to avoid paratrooper collision,
adverse vortex interaction, and adverse multi-ship formation effects induced by the air vehicles.
9.8.13 Verify for airdrop or jettisonable cargo, that the loaded items can be safely jettisoned during flight.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 340/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.8.14 Verify that necessary in-flight movement or operation of transported items and mission equipment
does not adversely affect aircraft flight systems or cause injury to aircrew and passengers.
This element addresses air vehicle compartments, and areas that may be accessible to crew, passengers
or maintainers, but that may not be occupied at all times during flight.
9.9.1 Verify that food service carts, refuse carts, and waste containers used to receive any combustible
materials contain a fire ignited within.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 341/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.9.2 Verify that all compartments have separate and approved smoke and/or fire detectors to alert the
crew at the pilot or flight engineer station for both in-flight and ground operations; that each compartment
has dedicated hand fire extinguishers; and that if unoccupied cargo holds are present, fire protection and
fire detection/suppression requirements are met.
9.9.3 Verify that the fire alarm and intercom/public address system can be heard in all lavatories, galleys,
and other compartments.
9.9.4 Verify that the human factors design for operation of installed equipment minimizes the probability of
human error that could create a safety hazard in the aircraft.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 342/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
9.9.5 Verify that all equipment installed in lavatories, galleys, and other areas can be safely operated in
the aircraft environment, and is designed to withstand all potential aircraft environmental exposures,
including rapid decompression, without creating a safety hazard.
9.9.6 Verify that occupants cannot become trapped in lavatories, galleys, and other compartments during
emergency evacuation situations, and that emergency lighting is available to aid egress.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 343/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 344/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
10.1.1 Verify that critical functional failure modes are identified and detection methods incorporated.
STANAG 4671.1309*
Reference: 4671.1351*
4671 1788
FAA Doc: 14CFR references: 23.1301, EASA CS CS 23.1309*
23.1309, 23.1351, 25.1301, Reference: CS 23.1351*
25.1309, 25.1351 CS 25.1309*
CS 25.1351*
Comments: 00-970 P1 4.12.8 doesn’t cover detection.
00-970 P9 only covers failure for a few specific systems.
CS 23.1301 and 25.1301 covers general function and installation of equipment.
* means read across from 14CFR reference.
10.1.2 Verify that all critical functional failures, including built-in-test (BIT) features, are linked to the
caution and warning function and message indicators.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 345/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
10.2. OPERATION.
10.2.1 Verify that the operation of air vehicle and ground diagnostic systems is proper for all SOF
parameters.
10.2.2 Verify that critical parameter values can be measured with established tolerances and that
operation and calibration procedures are defined.
10.2.3 Verify that measures are taken to ensure the diagnostic system itself does not induce undetected
failures or otherwise damage the air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 346/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
10.2.4 Verify functionality of safety systems that provide protection against catastrophic failures prior to
potential need of the safety system.
10.2.5 Verify that all operator and maintenance manuals containing diagnostic systems are complete and
accurate.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 347/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
SECTION 11 - AVIONICS
Avionics certification criteria apply to manned air vehicle avionics, as well as airborne and ground
segment avionics for UAS/ROA.
CERTIFICATION CRITERIA
(Note: For subsystems that use computer resources, see section 15 for additional, specific criteria.)
11.1.1 Avionics subsystems. Verify that the number and type of sensors, data processors, data buses,
controls and displays, and communications devices are adequate for SOF considerations. As a minimum,
the following are provided:
a. Air data system, including provisions for displaying primary flight parameters
b. Propulsion system instrumentation, with the ability to monitor performance, fuel status, and
integrity of the system
c. Display of other air vehicle or vehicle management system parameters as required for safe
flight
d. An installed interoperable communications subsystem capable of supporting SOF operations
with the required integrity and continuity of service throughout the intended missions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 348/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 351/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 352/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 353/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
11.1.2 Verify that redundancy is incorporated such that failure of any single sensor, connection,
processor, or display unit does not result in loss of safety-critical data or display of unsafe or misleading
data.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 354/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
11.1.3 Verify that data buses have sufficient redundancy, reliability, and integrity to meet system safety
and flight-critical requirements to preclude:
a. Loss of flight-critical functioning
b. Display of unsafe or misleading information to the operator or maintainer
c. Undetected failure modes
11.1.4 Verify the overall avionics system operates in a deterministic or bounded manner and limits latency
of any time-critical data, including primary flight data, as needed to support all safety-critical functions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 355/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
11.1.5 Verify that all normal, backup, and emergency modes of operation are safe for the integrated
system. Verify the following events do not result in unsafe system operation:
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 356/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
11.1.6 Verify that the avionics system integrated diagnostics provides the fault coverage, low false alarm
rates, fault isolation, and fault detection needed to detect bad data and failed components that would
degrade safe operation.
11.2.2 Verify that controls have adequate redundancy and/or reliability to maintain control of all safety-
critical functions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 358/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
11.2.3 Verify that data links, such as unmanned air vehicle (UAS)/remotely operated aircraft (ROA)
command and control data links, manned systems with automatic/semi-automatic (man-in-the-loop)
landing, formation, or other control functions with off-board aiding, used for safety- and flight-critical
requirements to
a. Preclude loss of flight-critical functioning and ensure SOF integrity and continuity of service
throughout the intended missions.
11.2.4 Verify that each subsystem (including any off-the-shelf equipment) and the overall system
operates throughout the required operational environment without imposing a SOF risk. This verification
typically includes environmental qualification and/or analysis.
11.2.5 Verify safe avionics subsystem operation with required power characteristics.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 359/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
11.3.1 Verify that the avionics equipment installation, including arrangement and crashworthiness, is
adequate for SOF.
11.3.2 Verify that flight manual and maintenance manual limits are adequate to conduct safe flight,
including emergency operations.
11.3.3 Verify that antenna performance and patterns for safety/flight-critical transmitting and receiving
systems provide adequate coverage to ensure:
a. Flight-critical functioning is retained
b. Unsafe information is not displayed to the operator or maintainer
c. Adequate availability and continuity of service for SOF operations
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 361/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
(Note: For subsystems that use computer resources, see section 15 for additional specific criteria.)
Definition: For airborne, ship borne or ground applications, the electric power generating system includes
electrical power sources, main power buses, transmission cables, and associated control, regulation and
protective devices.
12.1.1 Verify that sufficient power is available to meet the power requirements during all modes of
operation and failure conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 362/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.1.2 Verify that the operation of the electric power generation system and its component parts is safe,
including adequate implementation of cooling provisions, status/failure indications, and
mechanical/thermal disconnect (as applicable) of generators, converters, inverters, batteries, etc.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 363/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.1.3 Verify that operation of the integrated electrical power system for normal and emergency modes is
safe. This includes use of actual or simulated drives and loads, all flight and control configurations,
transition between modes, bus switching, load shedding, fault condition operation (detection, clearing,
and reconfiguration), and assurance that no single fault affects more than one power source.
12.1.4 Verify that required power quality is maintained for all operating conditions and load combinations.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 364/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.1.5 Verify that the independent, uninterruptible power sources, including power control panels, are
available to satisfy requirements of essential redundancy for flight-critical functions after failure of the
primary power system and there is no single-point failure (including circuit boards) anywhere in the power
system.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 365/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.1.6 Verify that, if batteries are employed for SOF backup power, adequate charging methods and
checks are provided and installation provisions for all batteries are safe.
12.1.7 Verify that emergency backup electrical power systems provide required power for flight conditions
associated with the mission profiles of the platform and for malfunction recovery procedures.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 366/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.1.8 Verify that any subsystem limitations are defined and included in the appropriate manuals.
12.1.9 Verify that suitable normal and emergency operating procedures are included in the flight manual.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 367/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.1.10 Verify that the system powers up in a safe state and, upon loss of power or power
transient/fluctuation, the system remains in a known safe state or reverts to a known safe state.
This element involves all wiring and wiring components (connectors, circuit breakers, etc.) throughout the
air vehicle; and for UAS/ROA, the control station safety of flight-related wiring system.
12.2.1 Verify that appropriate electrical wiring (conductor material and coating and insulation system),
electrical system components, and support devices in the design are suitable for the physical
environment in each area on the air vehicle. Verify that electrical wiring system installation is safe
regarding shock hazard protection for personnel.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 368/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.2 Verify that wiring is sized properly for the required current handling capability and voltage drop.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 369/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.3 Verify that proper circuit protection is provided for wiring associated with power distribution
throughout its entire run, including circuits contained in or exiting from any electronic enclosures
performing intermediate power switching or distribution functions.
12.2.4 Verify that redundant circuits provided for safety are sufficiently isolated.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 370/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.5 Verify that design precludes single-point failures related to wiring when redundant functions are
integrated within an electronics enclosure.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 371/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.6 Verify that the design of the wiring system installation, including connectors, is adequate for all
planned operating conditions.
Comments: 00-970 6.6.1 and P7 C706 2.2 covers ability of electrical system to provide required
power.
00-970 6.6.35 covers vibration.
00-970 6.6.52-6.6.58 covers installation.
P7 C706 5.1.1 covers environmental conditions.
CS 23.1301 and CS 25.1301 cover general equipment function and installation.
CS 23.1309 and 25.1309 cover equipment systems and installation.
CS 23.1351-23.1357 and CS 25.1351-251363 cover entire electrical system and
equipment section.
CS 25.1529 covers general instructions for airworthiness.
* means direct read across of MIL-HDBK-156B 14CFR reference to EMAR 516.
# means a judgement call on the applicability of the cross-refence is required.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 372/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.6.1 Verify that wiring in areas containing explosive vapours is protected to prevent potential ignition
sources, including issues with aging and deterioration of the wiring.
Comments: 00-970 4.26.14 and P7 C712 3.7.1 covers installations next to flammable fluid
systems.
00-970 4.26.32 and 6.2.59 cover flammable fluid protection.
00-970 6.2.90 covers protection from fluid lines
P9 L706 2.5 covers installation.
CS 25.1309 covers equipment systems and installation.
CS 23.1351-23.1357 and CS 25.1351-251363 cover entire electrical system and
equipment section.
CS 25.1529 covers general instructions for airworthiness.
12.2.6.2 Verify that failure (either open circuit fault or shorted/crossed-circuits fault) within a wiring
harness that includes safety-critical wiring does not cause loss of, or unacceptable degradation to, any
safety-critical functions.
12.2.6.3 Verify that the wiring design and installation procedures maintain positive separation of wiring
from all fluid or gas carrying lines and flight controls (taking into account movement caused by dynamic G
loading, thermal effects and vibration).
12.2.6.4 Verify that the routing design and installation procedures are such that the installation of wiring is
free from chafing conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 374/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.6.5 Verify that wiring design provides primary and secondary support for the wiring throughout the
installation.
12.2.6.6 Verify that maintainability is a factor in the design and installation procedures for wiring and
components.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 375/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
12.2.6.7 Verify that all equipment and equipment racks are designed for proper electrical bonding.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 376/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 377/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
13.1.1 Verify that all flight-critical equipment complies with all electromagnetic environmental effects
requirements, including lightning susceptibility, that are appropriate for the system application; or verify
that appropriate flight restrictions are imposed.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 378/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
13.1.2 Verify that all non-flight-critical equipment complies with the conducted and radiated emissions and
susceptibility requirements (including external electromagnetic environments), and does not impact the
safe operation of flight-critical equipment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 379/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
13.1.3 Verify that all non-flight critical equipment complies with transient susceptibility requirements that
include consideration of indirect effects levels derived from the external lightning environment, and does
not impact the safe operation of flight-critical equipment.
13.2.1 Verify that all equipment and subsystems exhibit mutual electromagnetic compatibility.
13.2.2 Verify that antenna-connected equipment is compatible with one another and it is not degraded
beyond its operational requirements, by any other on-board and off-board equipment to a level that would
impact safety.
13.2.3 Verify that the system is electromagnetically compatible with its intended external radio frequency
(RF) electromagnetic environment.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 381/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
13.2.4 Verify that the system has met all requirements for lightning, either direct (physical) or indirect
(electromagnetic) effects and that any potential for ignition of fuel vapours are eliminated.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 382/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
13.2.5 Verify that the system meets the requirements for electromagnetic pulse (EMP) protection, if
applicable.
US Cross References European Cross References
Comm'l Doc:
DoD/MIL Doc: MIL-STD-464,section 5.5 Def-Stan 00-970 00-970 6.5.23
MIL-STD-2169 Reference: 00-970 6.10(all)
STANAG 4671.1431 (g)
Reference:
FAA Doc: EASA CS Nil
Reference:
Comments: Military specific requirement so not covered in EASA standards.
No equivalent to MIL-STD-464 and 2169 looked into.
13.2.6 Verify that the system is able to control and dissipate the build-up of electrostatic charges caused
by particle impingement, fluid flow, air flow, and other tribolectric charge-generating mechanisms to avoid
ordnance hazards, personnel shock hazards and to control p-static interference or damage to electronics.
13.2.7 Verify that sources of electromagnetic radiation pose no hazard to personnel (HERP), fuel (HERF),
and ordnance (HERO), and that the appropriate manuals include safe criteria regarding distance from on-
board and off-board transmitters to personnel and fuel sources.
13.2.8 Verify that the system electrical bonding is adequate to ensure safe system operation.
13.2.9 Verify that the required safety margins for electro explosive devices are met.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 384/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
13.2.10 Verify that the system meets the electromagnetic spectrum licensing requirements in accordance
with the Authority, national, and international regulations and has received electromagnetic spectrum
certification.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 385/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
14.1.1 Verify that an effective system safety program is implemented that mitigates risks/hazards
attributed to hardware, software, and human system integration and that the safety program documents
and tracks the risks/hazards of the design/modification.
14.1.1.1 Verify that the system safety program incorporates system safety into all aspects of systems
engineering.
14.1.1.2 Verify that appropriate analysis tasks of MIL-STD-882 are accomplished for all programs,
including temporary and permanent modifications.
Comments: Def-Stan 00.56 covers Safety Management Requirements for defence systems.
SAE ARP 4761 covers safety management for civilian aircraft.
MIL-STD-882 is a US standard
14.1.1.3 Verify that hazards/risks are tracked and residual risks documented.
14.1.1.4 Verify that the system safety program addresses the following:
a. Flight safety
b. Ground/industrial safety
c. Explosives and ordnance safety; non-nuclear munitions
d. Range safety
e. Nuclear safety
f. Radiation/laser safety
g. Test safety and support
h. Software safety
i. Materials
j. Failure modes and effects testing and built-in-test
k. Fail safe design
l. Support equipment
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 388/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
14.2.1 Verify that a systematic process is employed that provides for hazard identification, hazard control
requirement generation and implementation, and residual risk assessment.
14.2.2 Verify that the design is free from unacceptable mishap risk.
14.2.3 Verify that no single-point failure unacceptably affects the safety of the system.
14.2.4 Verify that the design adequately protects the power sources, controls, and critical components of
redundant subsystems.
14.2.5 Verify that all aspects of human factors are addressed and unacceptable human factors safety
issues/risks are resolved in the design process.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 390/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
14.2.6 Verify that the system is produced/manufactured ensuring risk reduction of failures or hazards
potentially created by human error during the operation and support of the system.
14.2.7 Verify that the system design is within acceptable risk bounds over worst-case environmental
conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 391/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
14.2.8 Verify that personnel exposure to hazards during the installation process, including hazards due to
locations of systems in the air vehicle, are at an acceptable risk level.
14.2.9 Verify that the system design isolates hazardous substances, components, and operations from
other activities, areas, personnel, and incompatible material.
14.2.10 Verify that a system safety change analysis is accomplished on changed or modified equipment
or software.
14.3.1 Verify that a comprehensive software safety program is integrated into the overall system safety
program.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 393/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
14.3.2 Verify the software safety program requires that appropriate software safety-related analyses be
performed as part of the software development process.
a. Software safety analyses preparation
b. Software safety requirements analysis
Comments: 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety Related
Software
CS-25 refers out to ED-12() / RTCA 178()
14.3.3 Verify that the design/modification software is evaluated to ensure controlled or monitored
functions do not initiate hazardous events or mishaps in either the on or off (powered) state
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 394/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
15.1.1 Verify that the flight-essential configurations are identified and proper levels of redundancy
(hardware and software) exist at the system level to preclude loss of critical processing capabilities.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 395/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety Related
Software.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.2 Verify that all processing elements of the architecture that interface (physically and functionally)
with SOF functions are designed to meet SOF requirements.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 396/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety Related
Software.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.3 Verify that all hardware and software safety/flight-critical items are identified and their safety critical
functions are allocated to components within the architecture.
Comments: 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety Related
Software.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.4 Verify that SOF hardware and software interfaces are clearly defined and documented and that
control flow and information flow are established.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 397/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Comments: 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety Related
Software.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.5 Verify that redundancy (hardware and software) is incorporated to satisfy fault tolerant SOF
requirements, including probability of loss of control (PLOC) and reliability numbers.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 398/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.1.6 Verify that separate and independent power sources are provided for redundant operations.
No equivalent 27.1309
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.7 Verify that single component failure does not impede redundant operations.
Comments: 00-970 P13 1.7 refers out to 00-56 and DO-178B for guidance on Safety Related
Software.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 399/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.8 Verify that physical and functional separation between safety/flight critical and mission critical is
accounted for in the computer system architecture.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.1.9 Verify that no patches (object code changes not resulting from compilation of source code
changes) exist for flight-critical software.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 400/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.2.1 Verify that all parameters passed among SOF processing elements are defined and that
unnecessary coupling is avoided.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.2.2 Verify that level of autonomy achieved by the flight-essential elements is sufficient to preclude loss
of flight-critical functions due to failure in mission- or maintenance-related elements.
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.2.3 Verify that a controlled methodology is established and applied to integrate all safety-critical
elements of the processing architecture, including verification coverage.
3
.
3
.
1
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.3.1. Electronics.
15.3.1.1 Verify that all computer resources hardware components are safe and SOF elements have
redundant buses that are physically separated.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 402/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
No equivalent CS 27.1431
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
15.3.1.2 Verify that all safety/flight-critical electronic components are physically and functionally separated
from non-safety-critical items. (This includes items such as processors, memory, internal/external buses,
input/output (I/O) management, internal/external power supplies, circuit cards, motherboards, etc.) If not
separated, verify that non-safety-critical elements are treated as safety-critical items.
No equivalent CS 27.1431
00-970 also states in Part 0, Section 4 "Any items for installation on aircraft shall be
qualified and/or certified in accordance with a process such as DEF-STAN 05-123 or
an equivalent procedure agreed within the project requirements."
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 403/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.3.2.2 Verify that the software design, timing, control flow, interrupt structure, and data structures meet
the required processing capabilities of the SOF subsystem/system real-time architecture.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 404/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.3.2.3 Verify that all mode inputs, failure detection techniques, failure management, redundancy
management, self-checks, and interfaces operate safely under all dynamic conditions.
15.3.2.4 Verify that embedded SOF software provides acceptable performance and safety.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 405/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.3.2.5 Verify that the SOF software design has the necessary interrupt, reinitialization,
resynchronization, recheck, and reconfiguration provisions to restart or reset safely and quickly in flight.
15.3.2.6 Verify that the method of SOF software loading and verification is safe and carefully managed.
(This includes the software operational flight program (OFP) loaded on individual black boxes or the air
vehicle-loadable OFP.)
15.3.2.7 Verify that the SOF software design has adequate self-check, failure monitoring, redundancy
management, reconfiguration, voting, transient suppression, overflow protection, anti-aliasing, saturation
interlock, memory protection, and techniques for preventing failure propagation to preclude SOF issues.
15.3.2.8 Verify that there is sufficient throughput margin for both input/output and processor capabilities
(including memory) under worst-case mode performance scenarios for both average and peak worst-case
loading conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 407/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.3.2.9 Verify that a controlled methodology is established and applied to integrate all functional
elements of a highly coupled, integrated OFP.
15.3.3.2 Verify that critical hardware/software discrepancies are identified and corrected or mitigated.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 408/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
15.3.3.3 Verify that adequate configuration management controls are in place to ensure proper/
functionally compatible software loading for the intended use on the air vehicle.
15.3.3.4 Verify that all data or communications are secure against unwanted intrusions and that security
techniques used are implemented safely.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 410/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
SECTION 16 - MAINTENANCE
TYPICAL CERTIFICATION SOURCE DATA
1. Maintenance manuals/checklists (equivalent or supplement to -2 T.O.'s)
2. Inspection requirements (equivalent or supplement to -6 T.O.'s)
3. Life-limited/time replacement plan/list
4. Subsystem hazard analysis (SSHA)
5. Failure modes, effects, and criticality analysis (FMECA)
6. Maintenance records (including failure report and corrective action system (FRACAS))
7. Air Force Regulation (AFR) 8-2, T.O. 00-5-1
8. Test reports
9. Test plans
CERTIFICATION CRITIERIA
16.1.1 Verify that servicing instructions are provided for all systems that require servicing; for example,
fuel, engine oil, hydraulic systems, landing gear struts, tires, oxygen, escape system, etc.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 411/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
16.1.2 Verify that cautions and warnings are included in maintenance manuals, aircrew checklists, and
ground crew checklists.
3
.
6
.
2
JSSG-2001: 3.1.5
FAA Doc: 23.1501, 23.1529, 25.1501, EASA CS CS 23.1501
25.1503-25.1533, 25.1529, Reference: CS 23.1529
25.1541, 25.1543, 25.1557, CS 25.1501
25.1563
CS 25.1503 *
CS 25.1505 *
CS 25.1507 *
CS 25.1511 *
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 412/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
16.1.3 Verify that maintenance checklists are available for critical maintenance tasks, such as fuel and
oxygen serving procedures, towing procedures and restrictions, jacking procedures, engine operation
during maintenance, lifting procedures, integrated combat turn procedures, etc.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 413/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
16.1.4 Verify that support equipment does not adversely affect the safety of the air vehicle.
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: 516B is arguably clutching at straws giving the named civilian references.
16.1.5 Verify that maintenance manuals incorporate procedures for system/component removal.
3
.
6
.
1
,
3
.
6
.
2
JSSG-2001: 3.1.5
FAA Doc: 14CFR reference Part 23, EASA CS CS H25.3(b)(3)
Appendix G and 14CFR Reference: CS 23.1529
reference Part 25, Appendix H CS 25.1529
CS 27.1529
CS 29.1529
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: Further Information available within Appendix G of STANAG 4671.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 416/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
16.1.6 Verify that maintenance manuals require system operational testing for normal/emergency system
operation when systems are affected by removal/replacement of components.
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: Further Information available within Appendix G of STANAG 4671.
16.1.7 Verify that maintenance manuals provide adequate troubleshooting procedures to correct
expected system/component failures.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 417/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
STANAG 2445
Reference: 4671 1501
4671 1529
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: Further Information available within Appendix G of STANAG 4671.
16.2.1 Verify that ground crew work cards for pre-flight inspection are coordinated with the aircrew
checklists.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 418/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: CS 23.1501 refers out to CS 23.1541-23.1589.
CS 23.1529 covers instructions for continued airworthiness.
16.2.2 Verify that special inspection procedures are available for unusual or specified conditions, such as
a. Exceeding operating limits
b. Severe vibration
c. Engine stall
d. Foreign object damage to engine or structure
e. Excessive loss of oil
f. Conditions requiring oil sampling and analysis
g. Severe braking action, hard landing, and running off runway
h. Air vehicle subject to excessive "g" loads or manoeuvres outside the specified flight envelope
i. Lost tools
j. Emergency procedures implemented
k. Dropped objects or parts
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 419/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: CS 23.1501 refers out to CS 23.1541-23.1589.
CS 23.1529 covers instructions for continued airworthiness.
16.2.3 Verify that life-limited items and replacement intervals are identified using relevant operational
data.
Appendix G of CS-23
Appendix H of CS-25
Appendix A of CS-27
Appendix A of CS-29
Comments: CS 23.1501 refers out to CS 23.1541-23.1589.
CS 23.1529 covers instructions for continued airworthiness.
16.2.4 Verify that all required inspection intervals are identified using relevant operational data.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 421/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
Appendix A of CS-27
Appendix A of CS-29
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 422/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
17.1.1 Verify that environment induced by gun/rocket operation is compatible with the air vehicle's
limitations for muzzle blast and overpressure, recoil, vibroacoustics, cooling, egress, human factors, and
loads of the air vehicle.
17.1.2 Verify that gun/rocket gases and plume do not create SOF hazards for the air vehicle, air and
ground crew.
17.1.3 Verify that gun/rocket gas impingement does not cause unacceptable erosion of air vehicle
structure/skin.
STANAG Nil
Reference:
FAA Doc: EASA CS N/A
Reference:
Comments: 00-970 P7 L709 covers gun only.
Section covers armaments so not covered by civilian EASA CS.
17.1.4 Verify that the gun/rocket gas ventilation/purge system prevents accumulation of explosive gas
mixture.
17.2.1 Verify that the stores/air vehicle interface does not create unsafe conditions during ground and
flight operations and that no unsafe environment is created for maintenance personnel.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 425/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
17.2.2 Verify that the stores separate safely from the air vehicle throughout the air vehicle/store launch or
jettison flight envelope.
17.2.3 Verify that the store or suspension and release equipment and air vehicle are structurally capable
of operating safely in the air vehicle/store carriage flight envelope.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 426/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
17.2.4 Verify that electrical interfaces do not cause unsafe stores operation or interactions with the air
vehicle for all required store configurations.
17.2.5 Verify that the environment induced by the stores on the air vehicle, and by the air vehicle on the
store during carriage and launch/separation/jettison for the cleared usage, does not adversely affect SOF
of the air vehicle.
17.2.6 Verify that the stores operations do not adversely affect any safety aspect of the flight control of
the air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 427/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
17.2.7 Verify that all stores configurations for the air vehicle are documented in the flight manuals.
17.2.8 Verify that malfunctioning stores can be turned off or released if required to protect the air vehicle.
17.3.1 Verify that the crew and maintenance personnel are not exposed to laser radiation (direct and
reflected) in excess of maximum permissible exposure limits in order to ensure safe conditions.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 428/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
17.3.2 Verify that the induced environment resulting from laser operation is compatible with the air
vehicle's limitations for vibroacoustics, thermal loads, and structural loads of the air vehicle.
17.3.3 Verify that laser chemical and exhaust gases do not create SOF hazards for the air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 429/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
17.3.4 Verify that a means is provided for the crew to determine when the laser is operating and discern
the direction of the beam.
17.3.5 Verify that laser operation and direction is controllable only by the crew and does not latch on
(radiating).
17.3.6 Verify that the laser beam cannot contact any part of the airframe and/or rotor system.
17.3.7 Verify the laser cannot inadvertently lase when the aircraft is on the ground.
17.4.1 Verify that appropriate safety lockout and interlocks are in place to assure that unsafe store
operation does not take place.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 431/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
18.1.1 Verify that seats with restraints are provided for each passenger that do not cause serious injury in
an emergency landing. Verify each seat/restraint system is designed to protect each occupant during an
emergency landing provided the restraints are used properly.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 432/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
18.1.2 Verify that each restraint system has a single-point release for passenger evacuation.
STANAG Nil
Reference:
FAA Doc: 14CFR references: 25.785, EASA CS CS 23.785*
23.2, 23.562, 23.785 Reference: CS 25.785*
CS 25.789*
CS 27.785*
CS 29.785*
Comments: There is no equivalent para CS 23.2.
CS 23.562, 25.562, 27.562 and 29.562 make no mention of restraint release.
No CS 23.789, 27.789 and 29.789 equivalent paras.
* means read across from 14CFR reference.
18.1.3 Verify that, if stowage compartments are present, they are designed to contain the maximum
weight of its contents and the critical load conditions in an emergency landing. The contents should not
become a hazard to passengers due to shifting, such as under emergency landing conditions.
18.1.4 Verify that each passenger carrying area has at least one external door that is operable from the
inside and outside, is located to avoid hazardous external areas, and is inspected to ensure it is locked in
flight.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 433/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
18.1.5 Verify that exits are lockable, simple to open, and do not open in flight unless mission
requirements necessitate this function.
STANAG Nil
Reference:
FAA Doc: 14CFR references: 25.813, EASA CS CS 23.807*
25.809, 23.807, 25.813 Reference: CS 23.813*
CS 25.807*
CS 25.809*
CS 25.813*
CS 27.807*
CS 29.807*
CS 29.809*
CS 29.813*
Comments: No CS 23.809, 27.809 and 27.813 equivalent paras.
* means read across from 14CFR reference.
18.1.6 Verify that each non-over-wing exit higher than 6 feet off the ground has a means to assist
passengers to the ground. Provisions should exist for evacuees to be assisted to the ground from the
wing when the exit opens to the wing.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 434/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
18.1.7 Verify that the weight of each passenger exit, if removable, and its means of opening, is
conspicuously marked.
18.1.8 Verify that an emergency lighting system, independent of the main lighting system, provides
sufficient illumination and guidance for passenger and crew emergency evacuation, including illumination
of each exit and its exterior surrounding. Verify that energy to supply lighting allows complete egress of all
passengers and crew before diminishing.
STANAG 4671.1351
Reference: 4671.1353
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 435/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
18.1.9 Verify that emergency exit signs are installed and that each seated passenger is able to recognize
at least one emergency exit sign.
18.1.10 Verify that a public address system is installed that is powerable when the air vehicle is in flight or
stopped on the ground, including after the shutdown or failure of all engines and auxiliary power units.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 436/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
18.1.11 Verify that the public address system is accessible for immediate use by all aircrew, is capable of
functioning independently of any required crewmember interphone system, and is intelligible at all
passenger seats, aircrew seats, and workstations.
18.1.12 Verify that each safety equipment control to be operated in an emergency, such as controls for
automatic life raft releases, is plainly marked to show its method of operation.
18.1.13 Verify that each location, such as a locker or compartment, that carries fire extinguishing,
signalling, or other life saving equipment is marked accordingly. Verify that stowage provisions for
required emergency equipment are conspicuously marked to identify the contents and facilitate easy
removal of the equipment.
18.1.14 Verify that readily accessible individual flotation devices are provided for each occupant if the air
vehicle flies missions over water.
18.1.15 Verify that the air vehicle is outfitted with equipment to deal with in-flight, ground, and ditching
emergencies.
STANAG Nil
Reference:
FAA Doc: 14CFR references: 121.309, EASA CS Nil
121.310 Reference:
Comments: No equivalent EASA doc to FAR 121.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 438/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
18.2.1 Verify, sources of ignition are located and/or designed to prevent contact with cargo.
18.2.2 Verify that oxygen equipment and lines are not located in any designated fire zone; are protected
from heat that may be generated in, or escape from, any designated fire zone; are not routed with
electrical wiring; and are installed so that escaping oxygen cannot cause ignition of grease, fluid, or
vapour accumulations present in normal operation or as a result of failure or malfunction of any system.
18.3.1 Verify that air vehicles flying above 10,000 feet mean sea level (MSL) are capable of providing
supplemental oxygen from the air vehicle, or from a stand-alone system, and are capable of delivering it
to each passenger.
18.3.2 Verify that emergency medical kit(s) capable of providing medical support for the designed mission
are installed in the air vehicle.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 440/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
SECTION 19 - MATERIALS
(This section is applicable for Navy and Marine Corps aircraft only. This section is not required for Air
Force or Army aircraft. Materials criteria are addressed throughout the MIL-HDBK-516B. If section 19 is
used, the using aircraft or rotorcraft system office should tailor out the materials related criteria throughout
the rest of the document as not applicable since these criteria may be in conflict with section 19.)
Materials comprise the entire flight vehicle including air vehicle structure, air vehicle subsystems,
propulsion systems, electrical power systems, mission systems, crew systems, and armament/stores
systems.
CERTIFICATION CRITERIA
19.1.1 Verify that the material property evaluations are performed using a combination of recognized and
standardized analyses, tests, inspections, and examinations.
19.1.2 Verify that the material properties are certified as specification compliant and that specification
properties are represented as minimum values achievable using standardized processes.
19.1.3 Verify that the material design allowable properties are represented as statistical values that
account for product form and size, production representative processing, manufacturing variability, effects
of defects, final assembly interfaces, environmental exposure, and repair.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 442/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
19.1.4 Verify that the likelihood and consequence of failure are accounted for when a material
specification property is less than its corresponding material design allowable property.
19.1.5 Verify that the material property degradation due to the environment (e.g., moisture absorption;
chemical, solvent, fuel, and lubricant exposure; hydrolytic instability; thermal exposure; electromagnetic
radiation; wear; and erosion) is accounted for.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 443/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
19.1.6 Verify that critical process capability is demonstrated and that procedures for identifying,
monitoring, and controlling critical process variation are in place.
19.1.7 Verify that critical material and process integrity are established.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 444/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
19.1.8 Verify that the maximum size and severity limits for damage requiring repair do not exceed repair
capability.
19.1.9 Verify that insidious failure modes (e.g., hydrogen embrittlement, crack bifurcation) are understood
and accounted for.
19.2. CORROSION
19.2.1 Verify that adequate corrosion prevention and control practices are in place for uniform surface
corrosion, pitting, galvanic, crevice, filiform, exfoliation, inter-granular, fretting, high temperature oxidation
(hot corrosion), corrosion fatigue, and stress corrosion cracking.
19.2.2 Verify that corrosion prevention systems remain effective during the service life, including the
mitigation of environmentally assisted cracking. Specific corrosion prevention and control measures,
procedures, and processes are to be identified and established commensurate with the operational and
maintenance capability.
19.2.3 Verify that adequate prevention and control practices are in place for non-metallic materials
degradation as a result of the degradation processes described in 19.2.1.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 446/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
19.2.4 Verify that the finish systems provide adequate corrosion protection for specific parts, surfaces of
similar and dissimilar materials, and attaching parts and fasteners. Identify/specify all surface treatments,
inorganic and organic coatings, and other protective finishes to be used and their application.
19.3.1 Verify that specific defect types, sizes, and locations critical to material integrity are characterized
and assessed for probability of detection.
19.3.2 Verify that non-destructive inspection (NDI) accept/reject criteria are validated and correlated with
'effects of defects' testing.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 447/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
19.3.3 Verify that the non-destructive inspection manuals are developed and that each of the methods is
valid.
19.3.4 Verify that initial and recurring inspection intervals are defined where applicable.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 448/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
19.4.1 Verify that adequate wear and erosion practices are in place for wear mechanisms (abrasive,
fretting, corrosive, and thermal wear) and erosion mechanisms (impinging fluid, solid particles). Specific
wear and erosion prevention practices, measures, procedures, and processes are to be identified and
established commensurate with the operational and maintenance capability.
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 449/451
EMAR 516B - EUROPEAN MILITARY AIRWORTHINESS CERTIFICATION CRITERIA
CERTIFICATION CRITERIA
20.1.1 Verify that the following items do not adversely affect the primary SOF functionality (such as
structural capability, flying and handling qualities, electronic compatibility) of the air vehicle:
a. Special non-SOF mission or test equipment and software including instrumentation and wiring
b. Non-SOF mission-specific equipment and software
c. Nonessential mission equipment (hardware and software)
d. Carry-on/carry-off equipment that will be operated in flight
20.1.2 Verify that carriage of cargo or payload does not adversely affect safety of the air vehicle system.
20.1.3 Verify that in-flight operation of mission-specific personnel and cargo equipment (e.g. cargo hooks,
rescue slings and hoist, H-Bar and FRIES bar) does not adversely affect the safety of the air vehicle
system
Edition Number : 1.0 Edition Date :Nov 2010 Status: Working Draft Page 451/451