Rohde&Schwarz ESIB Instrument Security

Products: R&S EMI Test Receiver ESIB

Resolving Security Issues

When Working with the R&S®ESIB in

Secure Areas

Based upon the user’s security requirements, this document describes the Rohde&Schwarz options

available to address the user’s EMI test receiver needs. It also covers the different memory types and

locations where user information can be stored in the EMI test receiver R&S

For secure environments, it describes an approach to physically remove the user data from the

EMI test receiver.

®

ESIB.

1175.6190.52-01 1

Contents

R&S® ESIB - Instrument Security

1 OVERVIEW 2

2 INSTRUMENT MODELS COVERED .............................................................................. 3

3 BATTERY INFORMATION .............................................................................................. 3

4 TYPES OF MEMORY IN THE R&S®ESIB EMI TEST RECEIVER

AND THEIR SECURITY CONCERNS ............................................................................. 3

5 INFORMATION STORAGE IN THE R&S®ESIB EMI TEST RECEIVER ........................ 5

6 INFORMATION SECURITY IN HIGHLY SENSITIVE AREAS ........................................ 6

7 PERFORMING SERVICE, CALIBRATION AND MAINTENANCE

8 PERFORMING FIRMWARE UPDATES AND BACKING-UP USER DATA

9 ADDITIONAL INFORMATION......................................................................................... 9

1 Overview

ON THE R&S

IN SENSITIVE AREAS..................................................................................................... 8

®

ESIB EMI TEST RECEIVER ................................................................... 6

In many cases it is imperative that the R&S®ESIB EMI test receiver be
used in a secured environment. Generally these highly secured
environments will not allow any test equipment to leave the area unless it
can be proven that no user information will leave with the test equipment.
Security concerns can arise when EMI test receivers need to leave a
secured area to be calibrated or serviced.

This document describes the types of memory and their usage in the R&S
ESIB EMI test receiver. It also addresses methods of ensuring that no user
data will leave the secured area should the product be removed for
calibration or service needs.

®

1175.6190.52-01 2 E-1

2 Instrument Models Covered

R&S EMI Test Receiver

R&S®ESIB

ESIB7

ESIB26

ESIB40

3 Battery Information

There are no batteries in the R&S®ESIB EMI test receiver other than the
one on the CPU board used to buffer the SRAM and to power the clock in
the chipset.

R&S® ESIB - Instrument Security

4 Types of Memory in the R&S®ESIB EMI Test Receiver and Their

Security Concerns

SDRAM

The R&S®ESIB EMI Test receiver has 64 MByte of SDRAM on the CPU
board.

In addition there are four RISC processor units (Transputer) in the R&S
ESIB. The Transputers are each equipped with memory: 3 x 1MByte and 1
x 4MByte SDRAM memory.

SDRAM is volatile memory and it loses its memory as soon as power is
removed. The SDRAM will be unreadable within one minute after the power
is removed from the instrument.

The SDRAM is not a security concern.

EEPROM

Each board assembly in the R&S®ESIB EMI Test receiver has one serial
EEPROM device. These devices hold 256 Byte up to 2 kByte and contain
information related to the installed hardware, such as board serial number,
options, correction constants, etc. This data can be changed only by the
factory or by service personnel when performing adjustments. The
EEPROM does not hold user data nor can the user access the EEPROM
storage.

®

The EEPROM is not a security concern.

FLASH EPROM

The CPU board of the R&S®ESIB EMI Test receiver has one 512 kByte
flash EPROM memory device which contains the BIOS. The Flash memory
does not hold user data nor can the user access the Flash memory.

The Flash EPROM memory is not a security concern.

1175.6190.52-01 3 E-1

R&S® ESIB - Instrument Security

SRAM

The five DSPs in the R&S®ESIB EMI Test receiver have 384 kByte of
SRAM each.

SRAM is volatile memory and it loses its memory as soon as power is
removed. The SRAM will be unreadable within one minute after the power
is removed from the instrument.

The SRAM is not a security concern.

CMOS-SRAM

This 128 kByte memory device resides on the CPU board of the
instruments. The CMOS-SRAM stores system information like last state
settings, remote interface configuration and printer settings. This memory
has battery back-up, so it is not lost when power is removed from the
instrument.

The CMOS-SRAM is a security concern and has to be cleared with the
Cold-Boot Procedure (see below).

Removable Compact Flash Memory and Non-removable Hard Drive

The R&S®ESIB EMI test receiver can be equipped with either a Hard Drive
or a Compact Flash Memory. The Flash Disk Drive disk is used to store:

®

 Instrument operating system (Windows

 Instrument firmware

 Instrument states and setups, limit lines, transducer tables

 Measurement results, trace data and screen images

The Hard Drive and Compact Flash Memory are non-volatile. Hence, user
data is not erased when power is removed from the instrument.

The Hard Drive and the removable Compact Flash Memory should be
treated differently with respect to security concerns.

 The Compact Flash Memory is not a security concern because

it can be removed
area.

 The Hard Drive can still pose a security concern because it

cannot be removed

from the instrument and left in the secure

from the instrument.

NT)

1175.6190.52-01 4 E-1

R&S® ESIB - Instrument Security

5 Information Storage in the R&S®ESIB EMI Test Receiver

DATA

Temporary Information
storage for the
functionment of the
CPU (CPU Cache, and
Swap area)

Hardware Info, Serial
Number
Product Options
and Calibration
Correction Constants

BIOS

Operating System and
Instrument Firmware

Instrument states,
setups, Limit Lines and
Transducer tables

SDRAM

Not a
security
concern

SRAM

Not a
security
concern

CMOS-

RAM

S

Is a
security
concern

EEPROM

Not a
security
concern

FLASH

Not a
security
concern

REMOVABLE

OMPACT

C
FLASH MEMORY

Not a security
Concern

X X

X

X

X X

X

Trace data,
Measurement Results
and Screen Images

DSP Firmware and data
processing

X

X

1175.6190.52-01 5 E-1

R&S® ESIB - Instrument Security

6 Information Security in Highly Sensitive Areas

Since the SRAM and SDRAM is erased when power is removed from the
EMI test receiver it does not pose a security risk. No user data is written to
the EEPROM and FLASH memories; hence, it is deemed that they do not

ose a risk either.

p

The REMOVABLE COMPACT FLASH MEMORY does not lose its memory
when power is removed and can contain user data. It can be removed from
the EMI test receiver leaving the customer assured that no user data is
stored within the EMI test receiver. The R&S
be equipped with this option.

The R&S
COMPACT FLASH MEMORY (Option ESIB-B18) address the needs of
customers working in highly sensitive areas.

®

ESIB EMI test receiver equipped with the REMOVABLE

®

ESIB EMI test receiver can

7 Performing Service, Calibration and Maintenance on the R&S

ESIB EMI Test Receiver

Clearing the different types of memory

SDRAM

This memory is volatile. All you have to do is remove the power from the
instrument and all data stored in it will be lost.

SRAM

This memory is volatile. All you have to do is remove the power from the
instrument and all data stored in it will be lost.

CMOS-SRAM

This is volatile memory that is kept alive with an internal battery, and the
battery cannot be removed to clear the memory without taking the
instrument apart. However, there is a procedure that can be used to have
the instrument clear this memory itself.

Cold Boot procedure

To clear the CMOS-SRAM memory follow these steps:

®

 Turn the instrument Off

 Turn the instrument back On while holding down the decimal point

key [.] on the number keypad on the front panel

 Continue to hold this key for about 10 seconds after pressing the

"On" button

 The instrument will now clear it's CMOS-SRAM memory and then

power up

This procedure will clear any last state information and forces the
instrument to power up with the factory default settings. Information such as
the current time and date will not be erased by this procedure.

1175.6190.52-01 6 E-1

R&S® ESIB - Instrument Security

R&S®ESIB EMI Test Receiver equipped with the REMOVABLE COMPACT FLASH MEMORY

Turn-off the EMI test receiver and remove the classified compact flash
memory (with the user data). This removes all user data from the EMI test
receiver. The EMI test receiver, without

emory, can now leave the secured area. Once the EMI test receiver is

m
outside the secured area, installing a second non-classified removable
compact flash memory (without any user data), allows the EMI test receiver
to function properly for service or other needs.

Prior to re-entering the secured area, the non-classified removable
compact flash memory (without the user data), is removed. When the EMI
test receiver is back within the secured area, the original classified
removable compact flash can be reinstalled.

To hold classified
recommends the REMOVABLE COMPACT FLASH MEMORY Option
ESIB-B18.

To hold non-classified
Schwarz recommends the REMOVABLE COMPACT FLASH MEMORY
Option ESIB-B19.

user data in the secure areas, Rohde & Schwarz

user data in the non-secure areas, Rohde &

the removable compact flash

Calibration and the validity of the EMI test receiver’s calibration after exchange of the REMOVABLE COMPACT FLASH MEMORY

The calibration ensures a user that their measurements are traceable to a
government standard. Rohde & Schwarz highly recommends that users
follow the calibration cycle suggested for their instrument.

The EEPROM is the only location used to hold permanent adjustment
values required to maintain the validity of the EMI test receiver’s calibration.
Hence, replacing one removable compact flash memory with another, does
not affect the validity of the instrument’s calibration.

After an exchange of the removable compact flash memory, the board
assembly EEPROMs need to be registered. This operation has to be
executed once:

 Turn the instrument Off

 Turn the instrument back On while holding down the decimal point

key [.] on the number keypad on the front panel

 Continue to hold this key for 10 seconds after pressing the "On"

button

 The instrument will now recognize the changes and then power up

It is only necessary to perform these steps the first time the analyzer returns
from the service.

After an exchange of the removable compact flash memory, the self­alignment function has to be executed once. This is done with the CAL ­CAL TOTAL function. This function uses the high-stability internal reference
generator to produce the temporary adjustment values. Using the
permanent and temporary values, the necessary adjustment information is
then stored on the compact flash memory. Rohde & Schwarz recommends

1175.6190.52-01 7 E-1

R&S® ESIB - Instrument Security

that users perform the self-alignment function on a weekly basis after the
analyzer has had sufficient time to warm-up.

8 Performing Firmware Updates and Backing-Up User Data in

Sensitive Areas

Rohde & Schwarz highly recommends, but does not require, the users of its
products, to maintain their products with the latest updates and to regularly
back-up important user data that can be erased. Firmware updates are
available from the R&S website. How does a user perform firmware
updates and back-up user data in sensitive areas? There are several
options available for the user to safely perform these operations without
compromising the security of the sensitive areas.

Via the Floppy Disk Drive

The R&S®ESIB EMI test receiver is equipped with a floppy disk drive as
standard equipment. The instrument firmware update can be performed
directly from floppy disks. The floppy disk can likewise hold or transport
user data back-ups to an approved storage medium.

Via the LAN interface

The R&S®ESIB EMI test receiver is equipped with a LAN interface as
standard equipment. A user can transport the firmware update into the
secure area via a CD or another medium that meets the security
requirements. The update can then be placed on a system on the LAN
within the secure area. The EMI test receiver can be updated directly from
the LAN. The LAN can likewise be used to back-up user data to an
approved storage medium.

1175.6190.52-01 8 E-1

9 Additional Information

Please contact your support center for comments and further suggestions:

Europe, Africa, Middle East Phone [phone]

North America Phone 1-888-TEST-RSA (1-888-837-8772)

Latin America Phone [phone]

Asia/Pacific Phone [phone]

R&S® ESIB - Instrument Security

[e-mail]

[e-mail]

[e-mail]

[e-mail]

China Phone [phone] /

[phone]

[e-mail]

ROHDE & SCHWARZ GmbH & Co. KG .Mühldorfstraße 15 .D-81671 München .P.O.B 80 14 69 .D-81614 München

Telephone [phone] .Fax [phone] - 13777 .Internet: http://www.rohde-schwarz.com

1175.6190.52-01 9 E-1