Tektronix DPO7000/C, DPO70000/B/C/D/DX, DSA70000/B/C/D, MSO70000/C/DX, MSO5000/B,,DPO5000/B Series User manual
xx
MSO70000/C/DX, MSO5000/B Series Mixed Signal Oscilloscopes,
DSA70000/B/C/D Series Digital Serial Analyzers,
DPO70000/B/C/D/DX Series Digital Phosphor Oscilloscopes, and
DPO7000/C, DPO5000/B Series Digital Phosphor Oscilloscopes
ZZZ
Declassification and Security
Instructions
www.tektronix.com
*P077024507*
077-0245-07
Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by
national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published
material. Specifications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
Contacting Tektronix
Tektronix, Inc.
14150 SW Karl Braun Drive
P.O. B o x 5 0 0
Beaverton, OR 97077
USA
For product information, sales, service, and technical support:
In North America, call 1-800-833-9200.
Worl dwi de, v isit www.tektronix.com to find contacts in your area.
Table of Contents
Preface ........... ................................ .................................. ................................ ................................................. iii
Products..................................................................................................................................................... ... iii
Related Documents ........................ .................................. ................................ ................................................. iv
Terms............................................................................................................................................................ v
Clear and Sanitize Procedures. . ..... . ..... ..... . ..... . ..... . .... . . .... . ..... . ..... . ..... ..... . ..... . ..... . .... . . .... . ..... . ..... . ........................... ...... 1
Memory Devices..................................... .................................. ................................ ........................................ 1
Media and Data Export Devices ....................... ................................ .................................. .................................... 7
Troubleshooting................................. ................................ .................................. ................................................. 17
How to Clear or Sanitize a Non-Functional Instrument ............. .................................. ................................ ................... 17
How to Recover from Clearing or Removing the Instrument Memory................................................................................. 18
Change Log ....................... .................................. ................................ ............................................................... 19
Declassification and Security i
Table of Contents
ii Declassification and Security
Preface
This document helps customers with data security concerns to sanitize or remove memory devices from the DPO5000,
DPO5000B, DPO7000C, DPO7000, DPO70000, DPO70000B, DPO70000C, DPO70000D, DPO70000DX, DSA70000,
DSA70000B, DSA70000C, DSA70000D, MSO5000, MSO5000B, MSO70000, MSO70000C, and MSO70000DX Series
instruments.
This series of instruments contains an open architecture PC with a removable hard drive. You can order additional
removable hard drives to swap in and out of the instrument as needed for security reasons.
These products have data storage (memory) devices and data export devices (USB ports, CD-RW/DVD ROM drive [except
for DPO5000/B and MSO5000/B Series instruments], Ethernet, GPIB [except for DPO5000/B and MSO5000/B Series
instruments], eSATA, and TekLink [except for DPO5000/B, MSO5000/B, and DPO7000C Series instruments]). These
instructions describe how to clear or sanitize the memory devices and disable the data output devices. The instructions also
describe how to declassify an instrument that is not functioning.
Reference
The procedures in this document are written to meet the requirements specified in:
NISPOM, DoD 5220.22–M, Chapter 8
ISFO Process Manual for Certification & Accreditation of Classified Systems under NISPOM
Products
The following Tektronix products are covered by this document:
DPO5034, DPO5054, DPO5104, and DPO5204
DPO5034B, DPO5054B, DPO5104B, and DPO5204B
DPO7054, DPO7104, DPO7254, and DPO7354
DPO7054C, DPO7104C, DPO7254C, and DPO7354C
DPO70404, DPO70604, DPO70804, DPO71254, DPO71604, a nd DPO72004
Declassification and Security iii
Preface
DPO70404B, DPO70604B, DPO70804B, DPO71254B, DPO71604B, and DPO72004B
DPO70404C, DPO70604C, DPO70804C, DPO71254C, DPO71604C, and DPO72004C
DPO73304D and DPO72504D
DPO73304DX, DPO72504DX, and DPO72304DX
DSA70404, DSA70604, DSA70804, DSA71254, DSA71604, and DSA72004
DSA70404B, DSA70604B, DSA70804B, DSA71254B, DSA71604B, and DSA72004B
DSA70404C, DSA70604C, DSA70804C, DSA71254C, DSA71604C, and DSA72004C
DSA73304D and DSA72504D
MSO5034, MSO5054, MSO5104, and MSO5204
MSO5034B, MSO5054B, MSO5104B, and MSO5204B
MSO70404, MSO70604, MSO70804, MSO71254, MSO71604, and MSO72004
MSO70404C, MSO70604C, MSO70804C, MSO71254C, MSO71604C, and MSO72004C
MSO73304DX, MSO72504DX, and MSO72304DX
Related Documents
DPO7000/C, DPO70000/B/C, DSA70000/B/C, and MSO70000/C Series Service Manual.
DPO5000, DPO7000, DPO70000B/C, DSA70000B/C, MSO5000, and MSO70000/C Series Service Manual.
DPO5000/B, DPO7000C, DPO70000C, DPO70000D/DX, DSA70000C, DSA70000D, MSO5000/B, and MSO70000C/DX
Series Service Manual.
iv Declassification and Security
Terms
Preface
The following terms may be used in this document:
Clear.
deny access to previously stored information by standard means of access.
Erase.
Media.
USB port/USB flash drive.
Sanitize.
This is typically used when the device will be moved (temporarily or permanently) from a secured area to a nonsecured
area.
Scrub.
Remove.
are available in the product service manual.
User Accessible.
User-Modifiable.
instrument user interface or remote control.
Volatile memory.
Nonvolatile memory.
Power off.
purpose of clearing data, putting the instrument in Standby mode does not qualify as powering off. For these products,
you must either press a rear-panel OFF switch or remove the power source from the instrument.
This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to
This is equivalent to clear.
Storage/data export device. A device that is used to store or export data from the instrument, such as a
This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is equivalent to sanitize.
This is a physical means to clear the data by removing the memory device from the instrument. Instructions
User is able to directly retrieve the memory device contents.
The memory device can be written to by the user during normal instrument operation, using the
Data is lost when the instrument is powered off.
Data is retained when the instrument is p owered off.
Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For the
Instrument Declassification.
removed from a secure environment. Declassification procedures include memory sanitization and memory removal,
and sometimes both.
Declassification and Security v
A term that refers to procedures that must be undertaken before an instrument can be
Preface
vi Declassification and Security
Clear and Sanitize Procedures
Memory Devices
The following tables list the volatile and nonvolatile memory devices in the instrument.
Terminology
The following terms are used in the tables in this section:
User data – Describes the type of information stored in the device. Refers to waveforms or other measurement data
representing signals connected to the instrument by users.
User settings – Describes the type of information stored in the device. Refers to instrument settings that can be
changed by the user.
Both – Describes the type o f information stored in the device. It means that both user data and user settings are
stored in the device.
None – Describes the type of information stored in the device. It means that neither user data or user settings
are stored in the device.
Directly – Describes how data is modified. It m eans that the user can modify the data.
Indirectly – Describes how data is modified. It means that the instrument system resources modifies the data and that
the user cannot modify the d ata.
Declassification and Security 1
Clear and Sanitize Procedures
Table 1: Volatile memory devices (DPO7000, DPO70000/B, and DSA70000/B Series Instruments)
Typ e and
minimum size Function
SDRAM, 512M X
16 up to 512M X
64 bits
PC RAM (See
PC
page 16,
Ram Size
.)
SDRAM, 512M X
16 bits
Acquisition memory for
holding and processing
waveforms, and
processor system
RAM
PC motherboard
Acquisition memory for
holding and processing
digital waveforms
Type of user
info stored
User data No Indirectly Written by
User data No Indirectly Written by
User data No Indirectly Written by
Backed-up
by battery
Method of
modification
Data input
method Location
processor
system
processor
system
processor
system
Analog
acquisition board
PC motherboard
or COM-E
module
Digital acquisition
board
User
accessible To clear To sanitize
Yes Remove
power
from the
instrument
for at least
20 seconds
Yes Remove
power
from the
instrument
for at least
20 seconds
Yes Remove
power
from the
instrument
for at least
20 seconds
Remove power from
the instrument for at
least 20 seconds
Remove power from
the instrument for at
least 20 seconds
Remove power from
the instrument for at
least 20 seconds
2 Declassification and Security
Clear and Sanitize Procedures
Table 2: Volatile memory devices (MSO/DPO5000/B, DPO7000C, DSA70000C/D, DPO70000C/D/DX, and MSO70000/C/DX Series Instruments)
Typ e and
minimum size Function
SDRAM, 512M X
16 up to 1024M
X64bits
PC RAM (See
PC
page 16,
Ram Size
.)
SDRAM, 512M
X16bitsupto
1024M X 16 bits
Acquisition memory for
holding and processing
waveforms, and
processor system
RAM
PC motherboard
Acquisition memory for
holding and processing
digital waveforms
Type of user
info stored
User data No Indirectly Written by
User data No Indirectly Written by
User data No Indirectly Written by
Backed-up
by battery
Method of
modification
Data input
method Location
processor
system and
ASICs
processor
system
processor
system
Analog
acquisition
board or, on
MSO/DPO5000/B
instruments,
Main acquisition
board
PC motherboard
or COM-E
module
Digital acquisition
board or, on
MSO/DPO5000/B
Series
instruments,
Main Acquisition
board
Table 3: N onvolatile memory devices (DPO7000, DPO70000/B, and D SA70000/B Series Instruments)
Typ e a nd
minimum size Function
Removable hard
drive ( See page 15,
Removable Hard
Drive/Solid State
Drive
.)
FLASH 512K X
4bits
Holds all user-storable
data (waveforms and
instrument settings)
Video controller BIOS
Type of user
info stored
User data and user
settings
None User cannot
Method of
modification
Directly and
indirectly
modify
Data input
method Location
Windows UI and
TekSco pe U I
Programmed at
factory
Rear panel Yes
PC Interface
board
User
accessible To clear To sanitize
Yes Remove
power
from the
instrument
for at least
20 seconds
Yes Remove
power
from the
instrument
for at least
20 seconds
Yes Remove
power
from the
instrument
for at least
20 seconds
Remove power from
the instrument for at
least 20 seconds
Remove power from
the instrument for at
least 20 seconds
Remove power from
the instrument for at
least 20 seconds
User
accessible To clear To sanitize
(See page 15,
Removable Hard
Drive/Solid State
Drive
.)
No Not applicable, does
not contain user data
or settings
(See page 15,
Hard Drive/Solid State Drive
Not applicable, does not
contain user data or settings
Removable
.)
Declassification and Security 3
Clear and Sanitize Procedures
Table 3: Nonvolatile memory devices (DPO7000, DPO70000/B, and DSA70000/B Series Instruments) (cont.)
Typ e and
minimum size Function
EEPROM, 4096 bits PCI/PCIe bus settings
SPI Flash
2 Megabits
SERIAL EEPROM,
4096 bits
NVRAM, 2 MB
NVRAM, 4 MB
Option key, event log,
serial number, and model
number
TekLink settings None User cannot
Calibration data
Motherboard BIOS and
BIOS settings
Type of user
info stored
None User cannot
None Directly Programmed at
None User cannot
None Directly
Method of
modification
modify
modify
modify
Data input
method Location
Programmed at
factory
factory. Option
keys can be
input by the user
Programmed at
factory
Programmed at
factory
BIOS UI. User
can change
BIOS settings.
PC Interface
board
PC Interface
board
PC Interface
board
Acquisition
board
PC
motherboard
User
accessible To clear To sanitize
No Not applicable, does
not contain user data or
setting. Clearing would
disable instrument
functionality.
Yes Not applicable, does
not contain user
data or settings.
Clearing would disable
instrument functionality
No Not applicable, does
not contain user data
or settings
No Not applicable, does
not contain user
data or settings.
Clearing would disable
instrument functionality
Yes Not applicable, does
not contain user
data or settings.
Clearing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
(See page 14,
TekLink Using the Windows
Device Manager
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
To Disable
.)
4 Declassification and Security
Table 4: Nonvolatile memory devices (DPO7000C, DPO70000C/D/DX, DSA70000C/D, and MSO70000C/DX Series Instruments)
Clear and Sanitize Procedures
Typ e a nd
minimum size Function
Removable hard
drive ( See page 15,
Removable Hard
Drive/Solid State
Drive
.)
EEPROM, 4096 bits PCI/PCIe local bus settings
EEPROM, 1024 bits PCI/PCIe bridge settings
SPI Flash
2 Megabits
SERIAL EEPROM,
1024 bits
NVRAM,
16 Megabits
NVRAM,
4 Megabytes
Holds all user-storable
data (waveforms and
instrument settings)
Option key, event log,
serial number, and model
number
TekLink and GPIB settings
Calibration data
Motherboard BIOS and
BIOS settings
Type of user
info stored
User data and user
settings
None User cannot
None User cannot
None Directly Programmed at
None User cannot
None User cannot
None Directly
Method of
modification
Directly and
indirectly
modify
modify
modify
modify
Data input
method Location
Windows UI and
TekSco pe U I
Programmed at
factory
Programmed at
factory
factory. Option
keys can be
input by the user
Programmed at
factory
Programmed at
factory
BIOS UI. User
can change
BIOS settings.
User
accessible To clear To sanitize
Rear panel Yes
PC Interface
board
PC Interface
board
PC Interface
board
PC Interface
board
Acquisition
board
PC
motherboard
No Not applicable, does
No Not applicable, does
Yes Not applicable, does
No Not applicable, does
No Not applicable, does
Yes Not applicable, does
(See page 15,
Removable Hard
Drive/Solid State
Drive
.)
not contain user data or
setting. Clearing would
disable instrument
functionality.
not contain user data or
setting. Clearing would
disable instrument
functionality.
not contain user
data or settings.
Clearing would disable
instrument functionality
not contain user data
or settings
not contain user
data or settings.
Clearing would disable
instrument functionality
not contain user
data or settings.
Clearing would disable
instrument functionality
(See page 15,
Hard Drive/Solid State Drive
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
(See page 14,
TekLink Using the Windows
Device Manager
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Removable
To Disable
.)
.)
Declassification and Security 5
Clear and Sanitize Procedures
Table 5: Nonvolatile memory devices (DPO5000/B and MSO5000/B Series Instruments)
Typ e and
minimum size Function
Removable hard
drive (See page 15,
Removable Hard
Drive/Solid State
Drive
.)
EEPROM, 1024 bits PCI/PCIe bus settings
SPI Flash
4 Megabits
SPI Flash, 2 MB Motherboard BIOS and
Holds all user-storable
data (waveforms and
instrument settings)
Calibration data on
DPO5000/B and
MSO5000/B Series
instruments
BIOS settings on COM-E
module
Type of user
info stored
User data and user
settings
None User cannot
None Directly Programmed at
None Directly
Method of
modification
Directly and
indirectly
modify
Data input
method Location
Windows UI and
TekScope UI
Programmed at
factory
factory. Option
keys can be
input by the
user
BIOS UI. User
can change
BIOS settings.
Side panel
Main
Acquisition
board
Main
Acquisition
board
COM-E
module
User
accessible To clear To sanitize
Yes
No Not applicable, does
Yes Not applicable, does
Yes Not applicable, does
(See page 15,
Removable Hard
Drive/Solid St ate
Drive
.)
not contain user data or
setting. Clearing would
disable instrument
functionality.
not contain user
data or settings.
Clearing w ould disable
instrument functionality
not contain user
data or settings.
Clearing w ould disable
instrument functionality
(See page 15,
Hard Drive/Solid State Drive
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality
Removable
.)
6 Declassification and Security
Clear and Sanitize Procedures
Media and Data Export Devices
The following table lists the data export devices in the instrument.
Table 6: Media and Data export devices (DPO7000/C, DPO70000/B/C/D/DX, DSA70000/B/C/D, and MSO70000/C/DX Series Instruments)
Typ e a nd
minimum size Function
USB port Supports removable USB
flash drive. User storage of
reference waveforms, screen
images, and instrument
setups
CD-RW/DVD
ROM Drive
Ethernet
eSATA port Supports removable hard
User storage of reference
waveforms, screen images,
and instrument setups and
installation of software
User storage of reference
waveforms, screen images,
and instrument setups and
installation of software
drive. User storage of
reference waveforms, screen
images, and instrument
setups
Method of
modification
Directly Directly by
Directly
Directly
Directly Read, write and
Data input
method Location User accessible To disable
system resources
System resources
and directly by
user
System resources
control programs
USB host ports on
front, side, or rear
of instrument
Drive on front of
instrument
Ethernet port on,
side or rear of
instrument
eSATA port on
rear of some
instruments
Yes
Yes Remove all DVDs. Rewriteable
Yes
Yes Files can be deleted or overwritten
Remove all USB memory devices.
USB devices can be formatted,
stored in a secure area, or
destroyed.
USB ports can be disabled. (See
page 10,
CD-RW Capability
DVDs can be formatted, stored
in a secure area, or destroyed.
Nonrewriteable DVDs can either
be stored or destroyed.
Drive can be disabled. (See
page 10,
CD-RW Capability
Disconnect from Network cable.
Ethernet port can be disabled.
(See page 13,
Ethernet Connectivity Using the
BIOS
on the instrument or a PC; drive
can be removed and destroyed.
To disable the eSATA port, remove
the eSATA port cable.
Disabling USB and
.)
Disabling USB and
.)
To Disable LAN
.)
Declassification and Security 7
Clear and Sanitize Procedures
Table 6: Media and Data export devices (DPO7000/C, DPO70000/B/C/D/DX, DSA70000/B/C/D, and MSO70000/C/DX Series Instruments) (cont.)
Type and
minimum size Function
GPIB Remote control of
instrumentation systems
TekLi nk
Remote control of
instrumentation systems
Method of
modification
Directly
Indirectly Read, write and
Data input
method Location User accessible To disable
System resources GPIB port on rear
control programs
of instrument
TekLink port on
side or rear of
instrument
Table 7: Media and Data export devices (DPO5000/B and MSO5000/B Series Instruments)
Type and
minimum size Function
USB port Supports removable USB
flash drive. User storage of
reference waveforms, screen
images, and instrument
setups
Ethernet
USB device Remote control of
User storage of reference
waveforms, screen images,
and instrument setups and
installation of software
instrumentation systems
Method of
modification
Directly Directly by
Directly
Directly
Data input
method Location User accessible To disable
system resources
System resources
System resources Rear of instrument
USB host ports
on front or rear of
instrument
Ethernet port on,
rear of instrument
Yes
No
Yes
Yes
No
The GPIB can be disabled. (See
page 15,
the Windows Device Manager
TekLink can be disabled. (See
page 14,
the Windows Device Manager
Remove all USB memory devices.
USB devices can be formatted,
stored in a secure area, or
destroyed.
USB ports can be disabled. (See
page 10,
CD-RW Capability
Disconnect from Network cable.
Ethernet port can be disabled. (See
page 14,
the Windows Device Manager
The USB Device Controller
cannot be disabled. Disabling
the controller would prevent the
instrument from booting.
To Disable GPIB Using
.)
To Disable TekLink Using
.)
Disabling USB and
.)
To Disable TekLink Using
.)
8 Declassification and Security
Clear and Sanitize Procedures
Clearing Hard Disk/Solid
State Disk Drives
NOTE.
If your organization's security protocols allow the use of software to purge or clear hard drives/solid state drives, you
can use commercial software to erase free space on the drive before sending the instrument out for upgrades or repair.
Follow the instructions that come with the software to be sure that the erasure of sensitive data from the drive complies
with your organization's security protocols.
On solid state drives, the drive and the operating system work together to reallocate sectorsonthedrivetoevenoutthewear
of the storage cells. Make sure that software you use to purge or clear a solid state drive is approved for solid state drives.
CAUTION.
restore disk a re available and that you have the procedures needed to restore the OS and product software. On MSO5000/B
and DPO5000/B Series instruments, if you delete files that are required by the operating system or the instrument software,
you must install a new drive that has the OS and instrument software already installed.
Sequence for clearing secure data from a drive:
1.
The following procedure covers only Tektronix installed software.
Before clearing the drive to meet security requirements, be sure that an OS-restore disk and product software
Erase all files with the following extensions:
*.png; *.bmp;*.pcx, *.tif, *.jpg – These file types can be screenshots that can contain valuable information.
*.msk, *.set, *.wfm, *.csv, *.txt, *.dat – These file types can contain data exported from the instrument (setup,
waveforms, measurement results).
2.
Acquire several full memory-length acquisitions of noise (no signal attached to the input).
3.
Close the TekScope application and erase the free space on the hard disk using commercial software.
Declassification and Security 9
Clear and Sanitize Procedures
Removing a Removable
Hard Drive/Solid State
Drive
For detailed information on removing parts from the instrument, see the
DSA70000/B/C/D, MSO5000/B, and MSO70000/C/DX Series Service Manual
WARNING.
cause serious injury or death.
CAUTION.
electro-static discharge controls in place.
DPO7000/C, DPO70000/B/C/D/DX, DSA70000/B/C/D, and MSO70000/C/DX Series Instruments.
1.
Loosen the thumbscrews on the removable drive panel.
2.
Pull the removable drive out from the instrument.
DPO5000/B and MSO5000/B Series Instruments.
1.
Remove the drive cover.
2.
Loosen the thumbscrew on the removable drive panel.
Before doing this procedure, disconnect the power cord from the line voltage source. Failure to do so could
To avoid damaging the drive, perform the following procedure in a static-safe environment with proper
DPO5000/B, DPO7000/C, DPO70000/B/C/D/DX,
, Tektronix part number 077-0076-XX.
3.
Pull the removable drive out from the instrument.
Disabling USB and CD-RW
Capability
10 Declassification and Security
The following instructions describe how to disable the built-in USB and CD-RW capability. Using the BIOS disables the
devices for DOS and Windows programs, while the Windows Device Manager disables the devices for Windows programs.
These procedures disable both USB and the CD-RW to prevent their use.
NOTE.
hard drive. To do so, you must enable one of these items.
If you disable the USB, CD-RW, and LAN in the following procedures, you cannot write new firmware to the
Clear and Sanitize Procedures
To disable USB DOS using the BIOS on DPO7000, DPO70000/B, and DSA70000/B Series Instruments.
1.
PressF2duringinstrumentBootUptogototheBIOSconfiguration menu.
2.
Go to Advanced > USB Configuration.
3.
Set High-Speed USB and Legacy USB Support to Disabled.
4.
Hit Esc once to return to the main BIOS configuration menu.
5.
Go to Security > Set Supervisor Password. Press Enter.
6.
Specify a password. You will be asked to confirm the password by entering it again. Note the password, and store
it in a safe place for future use.
7.
Set User Access Level to No Access.
8.
Exit Saving Changes by pressing F10, and selecting OK.
To disable USB DOS using the BIOS on DPO7000C, DPO70000C/D/DX, DSA70000C/D, and MSO70000/C/DX Series
Instruments.
1.
PressDeleteduringinstrumentBootUptogototheBIOSconfiguration menu.
2.
Go to Chipset > South Bridge Configuration.
3.
Set USB Functions and USB Port Configure to Disabled.
4.
Hit Esc once to return to the main BIOS configuration menu.
5.
Go to Security > Set Supervisor Password. Press Enter.
6.
Specify a password. You will be asked to confirm the password by entering it again. Note the password, and store
it in a safe place for future use.
7.
Set User Access Level to No Access.
8.
Exit Saving Changes by pressing F10, and selecting OK.
Declassification and Security 11
Clear and Sanitize Procedures
To disable USB DOS using the BIOS on DPO5000/B and MSO5000/B Series Instruments.
1.
PressDeleteduringinstrumentBootUptogototheBIOSconfiguration menu.
2.
Go to Integrated Peripherals > USB Device Settings.
3.
Set High-Speed USB and Legacy USB Support to Disabled.
Set USB 2.0 Controller to Disabled.
Set USB UHCI #2 Support to Disabled.
Set USB UHCI #3 Support to Disabled.
Set USB UHCI #4 Support to Disabled.
4.
Hit Esc once to return to the main BIOS configuration menu.
5.
Go to Security > Set Supervisor Password. Press Enter.
6.
Specify a password. You will be asked to confirm the password by entering it again. Note the password, and store
it in a safe place for future use.
7.
Exit Saving Changes by pressing F10, and selecting OK.
To Disable USB and CD-RW for Windows Using the Windows Device Manager.
1.
Connect a PS2 mouse and a PS2 keyboard to the instrument before powering on (because USB will be disabled).
2.
Logontotheinstrumentasanadministrator.
3.
Right-click My Computer on the desktop, and select Properties.
4.
On DPO7000, DPO70000/B, and DSA70000/B Series Instruments, select the Hardware tab.
5.
Click Device Manager.
6.
Expand the Universal Serial Bus controllers entry by clicking the + next to it.
7.
Double-click the first USB Root Hub entry.
8.
Select the Power tab.
12 Declassification and Security
Clear and Sanitize Procedures
9.
If the Device Description is anything other than Generic USB Hub (4 ports), click the General tab, and select Do not
use this device (disable) in the Device usage drop-down list.
To Disable LAN Ethernet
Connectivity Using the
BIOS
NOTE.
10.
11.
12.
13.
14.
DPO7000, DPO70000/B, and DSA70000/B Series instruments.
1.
2.
3.
4.
It is critical to leave the USB Root Hub operating; otherwise, the front panel will not function.
Click OK.
Repeat steps 7 through 9 for each USB Root Hub shown in the Device Manager window.
On DPO7000/C, DPO70000/B/C/D/DX, DSA70000/B/C/D, and MSO70000/C/DX Series instruments, expand
DVD/CD-ROM drives in the Device Manager window.
Right-click TEAC DW-224E-C, and select Disable.
Reboot the instrument to make the changes effective.
We suggest that you password-protect the Windows Administrator account and set up Guest accounts for end users so
that these changes cannot be easily reversed.
PressF2duringinstrumentBootUptogototheBIOSconfiguration menu.
Go to Advanced > Peripheral Configuration.
Set Onboard LAN to Disabled.
Press Esc once to return to the main BIOS configuration menu.
NOTE.
5.
Declassification and Security 13
If you do not use a BIOS password, the LAN can be reactivated by any user.
Press F10, and select OK to save changes and exit. The LAN system will be disabled and will no longer allow
data traffic in or out.
Clear and Sanitize Procedures
DPO7000C, DPO70000C/D/DX, DSA70000C/D, and MSO70000/C/DX Series instruments.
1.
PressDeleteduringinstrumentBootUptogototheBIOSconfiguration menu.
2.
Go to Chipset > South Bridge Configuration.
3.
Set Onboard LAN to Disabled.
4.
Press Esc once to return to the main BIOS configuration menu.
To Disable TekLink Using
the Windows Device
Manager
NOTE.
5.
On instruments that have TekLink, do the following steps to disable TekLink:
NOTE.
1.
2.
3.
4.
5.
6.
If you do not use a BIOS password, the LAN can be reactivated by any user.
Press F10, and select OK to save changes and exit. The LAN system will be disabled and will no longer allow
data traffic in or out.
On instruments with software version 6.8.1 or above, TekLink has already disabled.
Connect a PS2 mouse and a PS2 keyboard to the instrument before powering on (because USB will be disabled).
Logontotheinstrumentasanadministrator.
Right-click My Computer on the desktop, and select Properties.
On DPO7000, DPO70000/B, and DSA70000/B Series Instruments, select the Hardware tab.
Click Device Manager.
Expand the device category Network Adapters.
14 Declassification and Security
Clear and Sanitize Procedures
7.
Double click on the Intel(R) PRO/100 M Network Connection. This will be the Network Adapter located on the
interfaceboardinPCIslot2.
8.
Click the General tab, and select Do not use this device (disable) in the Device usage drop-down list.
To Disable GPIB Using the
Windows Device Manager
Removable Hard
Drive/Solid State Drive
On instruments with a GPIB, do the following steps to disable the GPIB:
1.
Connect a PS2 mouse and a PS2 keyboard to the instrument before powering on (because USB will be disabled).
2.
Logontotheinstrumentasanadministrator.
3.
Right-click My Computer on the desktop, and select Properties.
4.
On DPO7000, DPO70000/B, and DSA70000/B Series Instruments, select the Hardware tab.
5.
Click Device Manager.
6.
Expand the device category National Instruments NI-Device GPIB Interfaces.
7.
Right-clickonPCI-GPIB.
8.
Select Disable from the list.
All user-storable data is stored on the rear- or side-panel removable drive. Sanitize or replace the drive in a manner that
meets local and any other security requirements that you have.
NOTE.
NOTE.
scrubbing the hard drive/solid state drive or moving the instrument into a secure area. For more information see Creating
Operating System Restore CD-ROMs in your instrument User manual or in the 071-2501-xx Read This First.
To see the size of the drive, refer to the (C:) local disk properties window.
If your instrument did not ship with an OS Restore disk, be sure that you create OS Restore CD-ROMs before
On MSO5000/B and DPO5000/B Series instruments, if you scrub the drive, you must install a new drive that has the OS
and instrument software already installed.
Declassification and Security 15
Clear and Sanitize Procedures
After the drive is sanitized or replaced, the operating system and instrument software can be reinstalled. Following
reinstallation of the operating system and product software, you must run the Signal Path Compensation (SPC) procedure
in the Utilities menu after a 20-minute warm-up period. This returns the instrument hard drive/solid state drive to the
initial state shipped from the factory.
Scrubbing the drive will not affect calibration of the instrument, since the factory calibration constants are stored on the
acquisition board, entirely separate from any acquisition data or user files. You can completely e rase or remove any secure
data without affecting the calibration of the instrument. You can also calibrate the instrument in a nonsecure site, and then
use the instrument in a secure area without recalibration.
PC Ram Size
To see the size of the PC RAM in the instrument, refer to the General tab of the Windows System Properties dialog box.
16 Declassification and Security
Troubleshooting
How to Clear or Sanitize a Non-Functional Instrument
If your instrument is not functioning, you may proceed as follows:
Troubleshooting
Hard Drive/Solid State
Drive
CD-RW/DVD ROM Drive
External Memory Devices
Charges
Remove the drive and return the product to Tektronix. A new drive will be installed and the instrument will be repaired and
adjusted as necessary. Alternatively you may use the Removable Hard Drive/Solid State Drive procedure before returning
the product to Tektronix. (See page 15, Removable Hard Drive/Solid State Drive.)
For removal instructions, refer to the instrument service manual, available on the Tektronix Web site at
www.tektronix.com/manuals.
On instrument with a CD-RW/DVD ROM drive, remove all CDs and/or DVDs. These can be stored or destroyed according
to the internal policies of your organization.
Remove any attached USB flash drive or external hard drives from the instrument before returning the instrument to
Tektronix for repair.
Refer to your company’s internal policies regarding handling or disposal of the external memory device.
Replacement of any missing hardware will be charged according to the rate at the time of replacement.
Declassification and Security 17
Troubleshooting
How to Recover from Clearing or Removing the Instrument Memory
After t he hard drive/solid state drive is sanitized, the operating system and instrument software must be reinstalled. On
instruments with a CD/DVD ROM drive, the restore software opens automatically if the CD/DVD drive is the first
bootable device. If the CD/DVD drive is not the first bootable device, enable it as the first bootable device before
performing a restore from the CD-ROMs.
On MSO5000/B and DPO5000/B Series instruments, if you scrub the hard drive/solid state drive, you must install a new
drive that has the OS and instrument software already installed.
18 Declassification and Security
Change Log
Document
part number Revision date Change description
077-0245-02 10-14-2010
077-0245-03 10-22-2010
077-0245-04 2-11-2011
077-0245-05
077–0245–06
077–0245–07
9/28/2011 Added information for the DSA70000D and DPO70000D instruments.
7/4/2013 Added information for the MSO70000DX and DPO70000DX instruments.
11/5/2013 Added information for the MSO5000B and DPO5000B instruments.
Reference
Added
user-information stored, battery-backup information, and data input method. Added terminology definitions to
Clearing Hard Disk Drives
Added information for DPO5000, MSO5000, DPO70000C, DSA70000C, and MSO70000C instruments.
Added information for the DPO7000C, DPO70000C, DSA70000C, and MSO70000C instruments.
section to Preface. Updated
Change Log
Volatile memory devices
.
Nonvolatile memory devices
and
tables to include type of
Memory Devices
. Updated
Declassification and Security 19
Loading...