How does DO-254 apply to commercial processors? For instance, I've noticed that "DO-254 certifiable" processors exist. Does that mean that these were designed with inherent redundancy?

  • $\begingroup$ I don't see why this would be off-topic, it's about aviation regulations. $\endgroup$
    – Federico
    Commented Jun 27, 2017 at 10:11
  • $\begingroup$ Agree with @Federico. This is a valid question concerning certification of avionics. $\endgroup$
    – Gerry
    Commented Jun 27, 2017 at 11:11
  • 1
    $\begingroup$ I don't know enough to provide a full answer, but it isn't the device that is certified to DO-254, it is the design and verification process used to develop the code. I suspect that this statement is just a marketing tactic. (i.e. if you are designing to DO-254 and are faced with a choice between two devices, you might be inclined to select one over the other simply for the peace of mind this phrase induces...) $\endgroup$ Commented Jan 16, 2021 at 17:28

1 Answer 1


DO-254 is for Airborne Electronic Hardware. Redundancy isn't necessarily required for DO-254. I would expect that the processor manufacturer would be able to provide a data package with the necessary documentation if a company were to use it in a DO-254 certifiable product.

In my experience, however, DO-254 is applied for custom micro-coded components only (for the FAA at least). DO-254 was a way to apply concepts similar to DO-178 to things like PLDs, FPGAs, and ASICs to prevent a "firmware" gap in certification.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .