Integrity
Signed EDS crates allow customers to check that the content is complete and error-free.
Collins Aerospace is addressing the industry’s demand for digital signing of delivered products. Carillon’s Loadable Software Aircraft Part (LSAP) allows Collins Aerospace to send software parts and other content to its aerospace business partners in a secure and standard way. Carillon uses a special format called an Electronic Distribution of Software (EDS) crate which follows ARINC 835 and ARINC 827 rules.
Signed EDS crate benefits
Authenticity
Signed EDS crates verify the content comes from Collins Aerospace and has not been tampered with.
Regulation compliance
Signed EDS crates certify the contents meet ARINC, NIST, ATA among many other Aerospace industry electronic distribution of software requirements.
Customers will receive deliveries in a zipped folder (crate) that includes a manifest (a file with information about the folder) inside. The manifest can help you check that the files have not been tampered with or damaged during transit. This is called validation. You can unzip and use the folder as usual, or you can use a tool to do validation. If you would like to ensure the integrity of the delivery and comply with industry regulations, Carillon provides a "workstation validator" tool that customers can use during the receiving process.
You can get the validator tool from the company that makes it – Carillon. Carillon's website provides additional information on the various provided solutions; however, procurement must be through their contact number or email:
- Procurement contact number: 1-514-485-0789
- Procurement contact email: [email protected]
- Informational Website: https://www.Carillon.ca
Carillon provides a workstation validator that is able to open and read the contents of the package (EDS crate), validate the signature, and validate the packaged files remain unchanged. Currently, Carillon's tool is the only option to parse and validate packages.
If you have your own signing solution and Collins has adapted it within the Collins delivery process, you will not be affected. You can keep using your specified delivery method.
The data loader will still have the capability to load unvalidated software. However, if the data loader is ARINC 645-1 compliant, the software will have the capability to validate digital signatures.
You can contact your sales representative or the Collins Customer Service group that matches your needs. You can find them using our support lookup tool.