Tektronix 5 Series MSO Low Profile with Option 5-SEC Enhanced Security Declassification

xx
5SeriesMSOLowProfile With Option 5-SEC Enhanced Security
ZZZ
Declassication and Security
Instructions
www.tektronix.com
*P077140700*
Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published material. Specications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
TekSecure is a trademark of Tektronix; Inc.
Contacting Tektronix
Tektronix, Inc. 14150 SW Karl Braun Drive P.O. Box 500 Beaverton, OR 97077 USA
For product information, sales, service, and technical support:
In North America, call 1-800-833-9200. Worldwide, visit www.tek.com to nd contacts in your area.
Table of Contents
Preface ........... ................................ .................................. ................................ ................................................. iii
Supported products ........................................................................................................................................... iii
About option 5-SEC .......................................................................................................................................... iv
Terms............................................................................................................................................................ v
Memory device clear and sanitize procedures................................................................................................................... 1
Nonvolatile, volatile memory device table terminology.. . .... . . .... . ..... . ..... . ... . . ..... . ..... . ..... . .... . ..... . ..... . ..... . .... . ...................... 1
Memory devices ............................... ................................ .................................. .............................................. 2
Media and data export devices ............................................................................................................................... 6
Resetting the instrument CMOS ............................................................................................................................. 7
Resetting the instrument clock ... ................................ .................................. .......................................................... 8
How to clear or sanitize a working instrument ... . . . .... . ..... . ..... . .... . ..... . ..... . .... . . .... . ..... . ..... . .... . ..... . ..... . .... . . ........................... 10
Clear the Network Conguration password............................. ................................ .................................. .................10
Clear the network DNS Hostname and description ....................................................................................................... 10
Clear Ethernet port settings............................. ................................ .................................. ................................... 11
Delete USB port and software update password .......................................................................................................... 11
Run TekSecure and Default Setup ................... ................................ .................................. ..................................... 12
The Clear/Sanitize process is done ......................................................................................................................... 12
How to sanitize a nonfunctional instrument ..... . ..... ..... . ..... . ..... . ..... . .... . . .... . ..... . ..... . ..... . ..... . .... . ..... . ..... . ............................. 13
Repair charges................................................................................................................................................. 15
MSO58LP with Option 5-SEC Declassication and Security Instructions i
Table of Contents
ii MSO58LP with Option 5-SEC Declassication and Security Instructions
Preface
This document helps customers with data security concerns to clear or sanitize a 5 Series MSO Low Prole MSO58LP instrument that has factory option 5-SEC installed.
The instrument has data storage devices (memory and a removable mass storage drive) and data export interfaces (USB and Ethernet). These instructions describe how to clear or sanitize the memory devices and disable the data output interfaces. The instructions also describe how to sanitize an instrument that is not functioning.
Reference
Supported products
The procedures in this document are written to meet the requirements specied in:
National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22–M, Chapter 8
Defense Security Service Manual for the Certication and Accreditation of Classied Systems under the NISPOM
These instructions cover the following instrument:
MSO58LP with factory installed option 5-SEC
NOTE.
Option 5-SEC must be ordered at the same time that you order an instrument.
MSO58LP with Option 5-SEC Declassication and Security Instructions iii
Preface
About option 5-SEC
NOTE.
Option 5-SEC provides the highest level of instrument security for 5 Series MSO products. Option 5-SEC features include:
Option 5-SEC must be ordered at the same time you order an instrument.
Oscilloscope hardware is configured to easily declassify the oscilloscope:
The main system memory is easily removed without disassembling the instrument
Data can only be saved to or read from a USB port on the instrument, a mounted network drive, or through the
programmatic interface
Password protection to enable/disable external USB Host and Device ports
Password protection to enable/disable rmware upgrades or downgrades
PasswordprotectiontopreventBIOSmodification and booting from USB flash devices.
iv MSO58LP with Option 5-SEC Declassication a nd Security Instructions
Terms
Preface
The following terms may be used in this document:
Clear.
deny access to previously stored information by standard means of access.
Erase.
Media.
drive or USB port.
Sanitize.
This is typically used when the device is moved (temporarily or permanently) from a secured area to a nonsecured area.
Scrub.
Remove.
are available in the product service manual.
User-Accessible.
User-Modiable.
instrument user interface or remote control.
Volatile memory.
Nonvolatile memory.
Power off.
data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either push a rear-panel OFF switch or remove the power source from the instrument.
This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to
This is equivalent to clear.
Storage/data export device. A device that stores or exports data from the instrument, such as a USB ash
This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is equivalent to sanitize.
This is a physical means to clear the data by removing the memory device from the instrument. Instructions
The user can directly retrieve the memory device contents.
The memory device can be written to by the user during normal instrument operation, using the
Memory that loses data when the instrument is powered off.
Memory that retains data when the instrument is powered off.
Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For clearing
Instrument Declassication.
removed from a secure environment. Declassication procedures include memory sanitization, memory removal, and sometimes both.
MSO58LP with Option 5-SEC Declassication and Security Instructions v
A term that refers to procedures that must be undertaken before an instrument can be
Loading...
+ 16 hidden pages