DIU Blue sUAS

DIU Blue sUAS - Astro

The Freefly Systems Astro has been approved by the Defense Innovation Unit and was added to the Blue sUAS List. Freefly has sold a variety of different Astro configurations, and their Blue status is listed below:

Aircraft	Blue Compliant	Hand Controller	Radio
Astro	N	Herelink GCS	Herelink
Astro	N	Pilot Pro	Herelink
Astro (NDAA/Blue)	Y	Pilot Pro	Doodle
Astro Prime	N	Pilot Pro	Herelink
Astro Prime (NDAA/Blue)	Y	Pilot Pro	Doodle
Astro Max	N	Pilot Pro	Herelink
Astro Max (NDAA/Blue)	Y	Pilot Pro	Doodle

Part 950-00142 Astro (NDAA/Blue) Package conforms to the exact Authority to Operate (ATO) configuration approved by DIU. This aerial system consists of 3 main components: Astro, Pilot Pro, and Doodle Labs Radios.

---

Design

The design of Astro’s Blue configuration aims to balance user flexibility with the security requirements of DIU’s Blue program. Astro can achieve Blue status through settings alone, which involves reconfiguring various systems and enabling passwords and permissions that only administrators can change. The Blue configuration is delivered fully compliant, allowing administrators to enable specific features according to their security needs.

---

Security Features Overview

Pilot Pro

The Samsung tablet mounted on the Pilot Pro features a multi-user concept with user and admin levels. This multi user security feature is not enabled by default, but is available for those who require it.

The tablet’s standard Android login security password, provided on a card with the vehicle, serves as the “pilot” level password. This boots the tablet into Samsung KNOX kiosk mode through the designated app. From this mode, the pilot can open AMC, the primary ground control software for the drone, while background apps communicate with the controller hardware.

Exiting the kiosk mode requires the administrator password, granting full control over the Android system. Administrators can change passwords, enable or disable wireless networks, and access the Freefly updater app to check for updates.

The RJ45 port on the back of the Pilot Pro typically connects to the drone network, enabling telemetry and video consumption and interaction with the drone. By default, this port is disabled, but the administrator can log in and reconfigure.

Astro Local Configuration

Astro serves a webpage at https://10.41.1.1, allowing certain drone configurations like enabling LTE or WIFI, cloud services, local Mavlink streams, and more. These settings are disabled by default. An unauthenticated user can view the drone’s serial number and software versions on this page. However viewing and enabling other settings requires a login password. The administrator can enable features and remove the password.

Logging

Logging is set to "stealth mode" by default on the Blue Astro, and is disabled on the controller, and payloads. It is recommended that administrators enable all logging to assist with support requests to Freefly. Stealth logging can be disabled by changing the SDLOG_NO_POS_DAT parameter to disabled.

When logging is set to stealth mode, Astro stops recording any positional data to logs and other places like image capture metadata. It is important to note that this breaks mapping workflows that involve PPK processing.

Admins can enable full logging on Astro by:

• Connect Astro to PC with USB, login to https://10.41.1.1, go to settings, enable Cloud Services (this feature also enables advanced features. in the future we will make it a separate setting so they are not tied together)

• Go to AMC, then repeatedly tap on the AMC icon in the top-left-hand corner of the app. After tapping about 6 times, a popup menu will appear asking if you would like to switch to Advanced Mode. Then tap on the button again to open menu. Go to Advanced > Parameters, then search for SDLOG_NO_POS_DAT. Then set it to disabled.

• Power cycle

External Ports

Critical auxiliary ports on Astro are disabled. The USB connector allows connection to the internal webpage (as mentioned above). The CAN port is available but only shows battery telemetry communication, serving as a non-essential bus for the aircraft. The Ethernet port on Astro’s IO panel is not electrically connected to anything.

Firmware Updates

All bootloaders are encrypted and require the correct keys to install firmware. Firmware updates for the Pilot Pro are managed through the Freefly updater app. Accessing this application requires the administrator to exit the kiosk mode.

Astro Firmware can be downloaded from our website or the Auterion Suite. Installation requires the administrator to log in to the https://10.41.1.1 webpage via USB to access the installer tools.

Drone parameter configuration is protected by AMC. While in user mode, AMC restricts all configuration settings beyond basic pilot requirements to administrator mode.

---

NDAA

Astro (NDAA/Blue) variant ships with very strict security requirements. Users needing an NDAA aerial system without these security features can break the ATO conformance and setup the Astro as described below. System was designed so that these features can be enabled/disabled individually as needed.

Astro

• Using the admin login password, connect to 10.41.1.1. Then you can enable any of the following:

  • LTE and Wifi

  • Remote ID

  • Mavlink

  • Cloud services

  • Remove the administrator feature to update firmware

  • Disable stealth logging

• Open AMC and go to advanced mode. Then you can change any of the following:

  • Enable missions to be stored and persisted on power cycle

  • Enable physical access to:

    • Mavlink and parameter access

    • TCP Mavlink port (enables access to USB and the Ethernet from the payload port on the IO Board)

    • Enable Telem 3 and Telem 4 access from the IO Board

Pilot Pro

• Disable Kiosk mode (if already enabled) by logging in with the Admin password

• Enable Pilot Pro App logging and Doodle radio logging

• Enable the RJ45 port on Doodle radio (enabled ethernet)

Screenshot showing the configuration interface. This example is a non Blue configuration with certain features enabled.

---

FAQ

• Does the Astro (NDAA/Blue) variant ship with Remote ID?

  • All Astro variants, including Blue/NDAA and Herelink variants ships with RemoteID enabled.