Wind River's Role in the Historic Artemis Missions

NASA’s Artemis II mission was a crucial step toward a sustained return to lunar exploration. The four astronauts spent nearly 10 days on the Orion spacecraft in April 2026 on a journey that included a lunar flyby and a safe splashdown in the Pacific Ocean.

Artemis II turned years of preparation into real‑world success, clearing the path for upcoming crewed lunar landings and laying the foundation for long‑term human exploration of the moon — and eventually Mars. Its primary scientific accomplishment was the successful crewed test of NASA’s deep‑space exploration systems. Orion’s life support, navigation, propulsion, and communications systems all performed as designed. Together with the Space Launch System (SLS) rocket, Artemis II validated the technologies and operations needed for future missions.

Like everyone else in the aerospace community, we at Wind River are proud of and excited about the successful space mission — but we take special pride in knowing that the Artemis II mission benefited from Wind River’s product and service contributions.

Wind River Contributions

Space exploration is the very essence of mission critical. Everything must work reliably, predictably, and with an acceptable amount of risk. That’s why Wind River’s VxWorks® is so often selected for aerospace programs. For example, its deterministic performance, when allied to redundancy built into the system design, ensures that failovers between control systems occur within acceptable time limits. 

Here are several places where VxWorks and other Wind River technologies made a difference in the Artemis II mission.

Orion flight software simulation

In the early development stages of Orion’s flight software, NASA’s Kedalion lab relied heavily on virtual testing. Creating an accurate digital twin of the target hardware lets spacecraft engineers test unmodified code in a virtual environment long before physical components are produced, accelerating development and reducing cost. Engineers can validate algorithms and analyze results directly from their desktop environments.

For Orion, Wind River enabled full system simulation for virtual testing using Intel® Simics®. Because the Intel Simics digital twins so closely mirrored the actual hardware, the flight software could eventually be transitioned from virtual platforms to hybrid hardware emulators and physical engineering development units.

SLS control systems

The SLS control systems encompass the hardware and software that guide, steer, and stabilize the launch vehicle, from liftoff through ascent.

These computers continuously calculate the rocket’s position, speed, and orientation. The system uses that data to determine how to keep the rocket on its planned trajectory and to then command the SLS’s engines and actuators to steer the vehicle or physically move engine nozzles and control surfaces. The components permit the SLS to counteract winds, engine variations, and other disturbances during ascent. And they perform vehicle health monitoring and fault management, automatically adjusting control responses or triggering protective actions. 

VxWorks is the foundational real-time operating system (RTOS) on which the applications calculate trajectories, monitor control systems, and verify equipment status. The SLS core stage runs VxWorks 653, a DO-178C/ARINC 653 partitioned RTOS. These standards apply to commercial aviation as well.

Orion crew vehicle avionics 

While it’s easy to think of Artemis and other space missions in hardware terms, the hardware is controlled by a huge amount of software. One key part of it is NASA’s core Flight System (cFS), an open source flight software framework that has powered more than 40 NASA missions. cFS enables reuse, rapid development, and portability through its dynamic runtime environment, layered architecture, and component-based design. 

The Orion crew vehicle’s avionics are the integrated electronics and software systems that control, monitor, and manage the spacecraft. Orion’s avionics system consists of seven main subsystems that together function as the spacecraft’s brain and nervous system.

VxWorks, which is used in cFS, enabled NASA and its contractors to design applications such as flight path software. 

Orion Backup Flight Software

The Orion Backup Flight Software (BFS) is an independent, simplified version of Orion’s flight control software, designed to take over if the primary flight software fails. Its purpose is to ensure crew safety by maintaining basic spacecraft control and enabling a safe mission continuation or return to Earth.

Orion’s Primary Flight Software (PFS) handles complex guidance, navigation, control, system management, and crew interface functions. The BFS runs in parallel on separate processors, constantly monitoring spacecraft behavior and the primary system’s health. 

Under normal conditions, the BFS remains dormant. It kicks in only if the primary software experiences a serious fault, whereupon the BFS assumes responsibility for essential functions. It is completely independent from the PFS, with a different architecture and its own failure modes, and no shared vulnerabilities. 

The BFS is a mix of C and C++ applications running within the cFS framework, using a LEON3 processor and the VxWorks operating system.

Orion Ascent Abort

The Orion Ascent Abort‑2 (AA-2) was a critical NASA flight test that demonstrated Orion’s ability to safely pull a crew away from a failing rocket during the most dangerous phase of launch — early ascent. Flown in July 2019, the AA-2 tested Orion’s Launch Abort System under realistic, high‑stress conditions comparable to what could occur during an Artemis mission. It was the first full‑scale, high‑altitude abort test since the Apollo program and validated that Orion’s abort system would work across the full ascent envelope. The test confirmed motor performance, guidance and control software, structural integrity, and separation timing.

In short, the Orion AA-2 proved that if something went wrong during launch, Orion could rapidly escape danger and protect its crew — a cornerstone safety capability for crewed Artemis missions.

Wind River actively supported the AA-2 flight test avionics, which operated on a design running the VxWorks RTOS with cFS. This integrated software foundation successfully powered the vehicle’s flight computers.

European Service Module and Propulsion Drive Electronics Software

The European Service Module (ESM), built by the European Space Agency for the Artemis program, is the propulsion, electrical power, and life‑support backbone of NASA’s Orion spacecraft. The ESM also supplies thermal control, consumables, and structural support. Its main engine and auxiliary thrusters perform major maneuvers, such as translunar injection, course corrections, and return burns. The ESM uses solar arrays to generate electricity, and radiators to regulate spacecraft temperature. The ESM also stores oxygen, water, and nitrogen for the crew module.

Central to operating the ESM propulsion system is the Propulsion Drive Electronics (PDE) software. The PDE software translates high‑level commands from Orion’s flight computers into precise electrical signals that control valves, ignition sequences, and thruster firing. It manages timing, sequencing, and safety interlocks, ensuring that engines fire correctly and shut down safely.

Together, the ESM and PDE software form a tightly integrated system: The ESM provides physical propulsion and resources, while the PDE software ensures that those systems operate accurately, autonomously, and safely. This partnership is essential for deep‑space navigation and crew safety on Artemis missions.

Software development and unit testing can be done independently of target systems through the use of similar hardware in conjunction with VxWorks to run the PDE software modules/subroutines as one dedicated task. As NASA’s “Critical Software for Human Spaceflight” document explains, it has fast turnaround times and greatly shortens development times without interfering with hardware development and subsystem testing.

Out to Launch

These contributions are not one-offs. Wind River is a long-standing contributor to the worldwide space and aerospace ecosystem, supporting standards organizations and scientific consortia that enable safe, reliable, and interoperable mission‑critical systems. Through this involvement, Wind River enables standards-aligned, certifiable, and long-lifecycle software platforms that reduce risk and support modern space missions.

The company actively participates in and supports several standards. Among them:

• The FACE™ and POSIX® standards, managed by The Open Group, enable portable, reusable software for space avionics and ground systems.
• DO‑178C and DO‑254 practices support safety‑critical software and hardware used in launch vehicles, spacecraft subsystems, and mission control systems. The process documents are published by RTCA and EUROCAE.
• Data Distribution Service, or DDS, from the Object Management Group®, supports reliable, real‑time data distribution for satellite constellations and mission operations.
• Given the growing importance of Linux in space, Wind River is an active participant in both the Yocto Project and the ELISA Space Grade Linux Special Interest Group.

As most space enthusiasts likely know, Artemis III planning and preparations are underway. Wind River expects to be equally engaged with that mission’s progress — and we are excited to contribute our technology and expertise.

Intel and Simics are trademarks of Intel Corporation or its subsidiaries.