Interface Control Document (ICD) Explained: How Satellites and Rockets Are Matched

Every satellite that rides a rocket has to fit that rocket exactly: mechanically, electrically, thermally and operationally. The document that records this fit is the Interface Control Document, or ICD. It is one of the most important documents in launch integration, because it turns a commercial booking into a technically agreed mission. This guide explains what an ICD contains, how it is created, who signs it and what it means for satellite operators.

What is an Interface Control Document?

An ICD is the agreed definition of the interfaces between two systems. In launch services, those two systems are the payload, meaning the satellite, and the launch vehicle with its adapters and separation system. The ICD tells both sides what the other will deliver: dimensions, bolt patterns, mass properties, electrical connections, environments, timelines and constraints.

SpaceX's Rideshare Payload User's Guide describes its Rideshare ICD as a standard document that references a list of applicable documents. Customers must review and sign the ICD, confirming that the documents and information it contains are correct. Before the payload is delivered to the launch site, the ICD must be signed.

ICD, user's guide and contract: how they fit together

User's guide: the launch provider's general rules for all customers, for example SpaceX's Rideshare Payload User's Guide or the Falcon User's Guide.
Launch services agreement: the commercial contract with price, payment schedule, delay terms and liability. See launch service agreement explained.
Statement of work: the list of deliverables and due dates for both parties. SpaceX's guide links its deliverables to Table 1 of the customer's statement of work.
ICD: the mission-specific technical agreement, built from the deliverables and signed by the customer.

What an ICD typically covers

Mechanical interface

The physical connection between satellite and launch vehicle. SpaceX's rideshare program supports CubeSat dispensers, small spacecraft with 8, 15 or 24 inch standard mechanical interfaces, and spacecraft with a 4-point interface compatible with its rideshare plate. Non-standard interfaces need mechanical adapters at extra cost. The ICD also records the allowed volume, which the user's guide defines per plate and interface. Our article on fairings, adapters and separation systems explains the hardware.

Mass properties

Mass, center of gravity, moments and products of inertia. SpaceX collects these through a mass properties webform, split into the parts that fly away and the parts that stay on the rocket. The same form describes the separation system: springs, switches, connector locations and separation energy.

Separation

How the satellite leaves the rocket. SpaceX asks rideshare payloads to target a separation velocity between 0.3 and 1.0 m/s and, for microsatellites, a tip-off rate of no more than 5 degrees per second. Customers submit a separation analysis to show compliance.

Electrical interface

Connectors, harnesses and pin-outs. In SpaceX's process, the customer fills in the payload side of an electrical interface pinout webform, and SpaceX completes the launch vehicle side. The released pinout documents the end-to-end connection including the electrical characteristics of each pin.

Environments

The loads the satellite must survive: quasi-static and random vibration, acoustic, shock, pressure, thermal and cleanliness. SpaceX defines temperature, humidity and cleanliness for each processing phase, and payloads must be cleaned to "visibly clean, highly sensitive" before integration. The customer agrees a test approach and reports results in a verification report, see environmental testing.

Radio frequency and operations after separation

When transmitters may switch on, when the satellite may deploy appendages and when it may maneuver. SpaceX's guide sets a minimum transmitter turn-on delay that depends on transmitter power and separation velocity, requires attitude maneuvers to wait at least 120 seconds and propulsive maneuvers at least seven days after separation. Customers verify transmitter timing in a dedicated webform.

Orbit and trajectory

The target orbit and deployment sequence. SpaceX lets rideshare customers choose drop-off parameters from a list of options prepared for each mission, then develops a nominal trajectory that defines the injection state vector, launch window, deploy order and timeline.

Safety and range data

Hazardous materials, pressure vessels, batteries and propellants. Range safety submissions run in parallel to the ICD and are explained in range safety and launch licensing.

How an ICD is developed

Kickoff: after contract signature, the launch provider shares templates and webforms. SpaceX uses a customer portal for this.
Initial inputs: the customer provides mass properties, dimensions, a dynamic model, electrical data and orbit selection. In SpaceX's typical schedule, mission analysis inputs are due around eight months before launch.
Analyses: the provider runs coupled loads, trajectory and separation analyses. Final mission analysis inputs are due around 3.5 months before launch, and the analysis is completed around two months before launch.
Verification: the customer tests the satellite and submits the verification report.
Signature: the ICD is signed before delivery, and a readiness review confirms the launch campaign.

Who is responsible for what

NASA's Small Spacecraft Technology report explains that a launch integrator ensures compatibility between satellite and launch vehicle through analyses and physical integration, and may provide the dispenser or separation system. If you book through an integrator, much of the ICD work runs through them. If you book directly, your team owns the inputs. Either way, NASA notes that licensing stays with the spacecraft owner or operator, and launch providers require proof of licensing plus safety data such as orbital debris information, materials and venting data, and spacecraft models.

Common ICD pitfalls

Late mass growth: changes to mass or center of gravity after the analyses can force rework.
Transmitter timing: on rideshares, early transmissions can endanger co-payloads, so timing rules are strict.
Separation system mismatch: separation system limits and launch vehicle limits both apply, and SpaceX's guide notes that their effects compound.
Late test results: without an approved verification report, the satellite cannot be integrated.

Frequently asked questions

What does ICD stand for in spaceflight?

Interface Control Document. It defines the technical interfaces between a payload and the launch vehicle.

Who signs the ICD?

The customer signs to confirm that the information is correct. In SpaceX's rideshare process, the ICD must be signed before the payload is delivered to the launch site.

Is the ICD part of the contract?

It is a technical document that sits next to the launch services agreement and the statement of work. The contract defines the commercial terms, the ICD the technical ones.

How long does an ICD take?

For a SpaceX rideshare, the process runs from inputs about eight months before launch to signature before delivery, roughly one month before launch.

Does a CubeSat need its own ICD?

CubeSats usually fly inside a dispenser. The dispenser assembly has the interface with the rocket, while each CubeSat must fit the dispenser's own requirements.

Sources

Cover image: The Sentinel-6 Michael Freilich satellite is encapsulated in a Falcon 9 payload fairing at Vandenberg, 3 November 2020. Credit: NASA/Randy Beaudoin (KSC-20201103-PH-RNB02_0016), public domain.