embeddedTS Cyber Resilience Act (CRA) Support
Navigating European Union cybersecurity requirements with Long-Term Support (LTS) platforms, secure boot, SBOM generation, and managed software lifecycles.
embeddedTS is committed to helping our customers navigate the European Union Cyber Resilience Act (CRA) with confidence. As cybersecurity expectations continue to evolve, we are expanding our Long-Term Support (LTS) program to provide practical tools, guidance, and workflows that enable customers to create and maintain secure application deployments.
Our focus is on delivering flexible, real-world solutions that help customers meet CRA requirements without unnecessary complexity.
Delivered Through Our BSP and LTS Platforms
We are leveraging our Yocto Board Support Package (BSP) to enable customers to adhere to CRA requirements. By providing both platform support and reference images in a single Yocto layer, we ease integration into larger applications with custom Yocto layers. Alongside this layer comes extensive examples and documentation, allowing our customers to fully own their workflow and integrate this support however they choose.
Support will be rolled out across our LTS platforms on a platform-series basis, connecting to our existing LTS software stacks to give our hardware platforms the best software support possible. Learn more about our LTS Support Program.
Secure Boot & Foundations
embeddedTS will provide reference implementations for secure boot flows, enabling customers to establish a trusted chain of execution from system startup onward. These solutions ensure that only authenticated software runs on deployed systems, protecting against unauthorized modification and persistent threats.
Software Transparency (SBOM)
To support CRA requirements for visibility and documentation, we provide tooling and examples for generating Software Bills of Materials (SBOMs). Customers can clearly identify all software components in their systems for compliance.
We also offer guidance for vulnerability communication using tools like Dependency-Track to help track vulnerabilities and satisfy downstream customer reporting.
Ongoing Vulnerability Reporting
We provide direct vulnerability reporting for embeddedTS-maintained software, including our LTS Linux kernel, bootloaders, userspace utilities, and other platform components. This enables engineering teams to respond quickly and maintain secure deployments over time.
Supporting Your Path to Secure Deployment
embeddedTS is committed to providing a strong foundation for secure, maintainable system design. By combining long-term platform stability with practical tools and proven workflows, we give customers the flexibility needed to meet evolving security and compliance requirements.
As cybersecurity regulations evolve—including new frameworks similar to the CRA—we will continue to expand and adapt our tooling, documentation, and platform support.
Need a physical copy for your vendor compliance records? Download a print-friendly version of our official Cyber Resilience Act statement for your internal documentation. Download CRA Statement (PDF)