xx
4SeriesMSO(MSO44,MSO46)
With Option 4-SEC
Enhanced Security Instrument
ZZZ
Declassification and Security
Instructions
www.tektronix.com
*P077155100*
077-1551-00
Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by
national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published
material. Specifications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
TekSecure is a trademark of Tektronix; Inc.
Contacting Tektronix
Tektronix, Inc.
14150 SW Karl Braun Drive
P.O. Box 5 0 0
Beaverton, OR 97077
USA
For product information, sales, service, and technical support:
In North America, call 1-800-833-9200.
Worldwide, visit www.tek.com to find contacts in your area.
Table of Contents
Preface ........... ................................ .................................. ................................ ................................................. iii
Supported products ........................................................................................................................................... iii
About the 4-SEC option....................... .................................. ................................ ............................................. iv
Terms............................................................................................................................................................ v
Clear and sanitize procedures ..... . ..... ..... . ..... . ..... . .... . ..... . ..... . ..... ..... . ..... . ..... . .... . ..... . ..... . ..... . .... . ........ ............................ 1
Nonvolatile, volatile memory device table terminology.. . .... . . .... . ..... . ..... . ... . . ..... . ..... . ..... . .... . ..... . ..... . ..... . .... . ...................... 1
Memory devices ............................... ................................ .................................. .............................................. 2
Media and data export devices ............................................................................................................................... 4
How to sanitize a working instrument ..... ..... . ..... . ..... . ..... . ..... . ..... . ... . . . .... . . .... . ..... . ..... . ..... . ..... . ..... . ..... .......................... 5
How to sanitize a nonfunctional instrument ..... . ..... ..... . ..... . ..... . ..... . .... . . .... . ..... . ..... . ..... . ..... . .... . ..... . ..... . .............................. 7
Processor board removal instructions ....................................................................................................................... 8
Repair charges................................................................................................................................................. 14
4 Series MSO Opt. 4–SEC Declassification and Security Instructions i
Table of Contents
ii 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
Preface
This document helps customers with data security concerns to clear or sanitize 4 Series MSO instruments with
factory-installed Option 4-SEC.
This series of instruments contain a processor system with nonremovable mass storage.
These products have data storage (memory) devices and data export interfaces (USB and Ethernet). These instructions
describe how to clear or sanitize the memory devices and disable the data output interfaces. The instructions also describe
how to sanitize an instrument that is not functioning.
Reference
Supported products
The procedures in this document are written to meet the requirements specified in:
National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22–M, Chapter 8
Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM
Tektronix 4 Series Mixed Signal Oscilloscope products are covered by this document:
NOTE.
Option 4-SEC must be ordered at the same time you purchase an instrument.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions iii
Preface
About the 4-SEC option
Option 4-SEC provides the highest level of instrument security for the products. Option features include:
Oscilloscope hardware is configured to easily declassify the oscilloscope:
There is no user access to the internal storage to store or save any user data to the oscilloscope memory
Data can only be saved to or read from a USB port on the instrument, a mounted network drive, or through the
programmatic interface
Password protection to enable/disable external USB Host, USB Device and Ethernet communication ports
Password protection to enable/disable firmware upgrades or downgrades
Password protection to prevent booting from USB flash devices.
NOTE.
Option 4-SEC must be ordered at the same time you order an instrument.
iv 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
Terms
Preface
The following terms may be used in this document:
Clear.
deny access to previously stored information by standard means of access.
Erase.
Media.
drive or USB port.
Sanitize.
This is typically used when the device is moved (temporarily or permanently) from a secured area to a nonsecured area.
Scrub.
Remove.
are available in the product service manual.
User-Accessible.
User-Modifiable.
instrument user interface or remote control.
Volatile memory.
Nonvolatile memory.
Power off.
data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either
push a rear-panel OFF switch or remove the power source from the instrument.
This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to
This is equivalent to clear.
Storage/data export device. A device that stores or exports data from the instrument, such as a USB flash
This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is equivalent to sanitize.
This is a physical means to clear the data by removing the memory device from the instrument. Instructions
The user can directly retrieve the memory device contents.
The memory device can be written to by the user during normal instrument operation, using the
Memory that loses data when the instrument is powered off.
Memory that retains data when the instrument is powered off.
Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For clearing
Instrument Declassification.
removed from a secure environment. Declassification procedures include memory sanitization, memory removal,
and sometimes both.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions v
A term that refers to procedures that must be undertaken before an instrument can be
Preface
vi 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
Clear and sanitize procedures
Nonvolatile, volatile memory device table terminology
The tables in this section use the following terms:
User data
information representing signals connected to the instrument by users.
User settings
changed by the user.
Both.
stored in the device.
None.
stored in the device.
Directly.
Indirectly.
the user cannot modify the data.
. Describes the type of information stored in the device. Refers to waveforms or other measurement
. Describes the type of information stored in the device. Refers to instrument settings that can be
Describes the type of information stored in the device. It means that both user data and user settings are
Describes the type of information stored in the device. It means that neither user data or user settings are
Describes how data is modified. It means that the user can modify the data.
Describes how data is modified. It means that the instrument system resources modifies the data and that
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 1
Clear and sanitize procedures
Memory devices
Table1: Volatilememorydevices
The following tables list the volatile and nonvolatile memory devices in the instrument1.
Type of user
Type and size Function
SDRAM 4 GB
(All models)
SDRAM
MSO44: 4 GB
MSO46: 8 GB
SDRAM 512`MB
CMOS RAM
7bytes
FPGA <30 MB Interface between
1
These are the memory capacities at the time of publishing this document, but are subject to change.
Host processor
memory
Holds active
acquisition data
Holds video graphics
data
Holds clock and boot
configuration data
compute system and
acquisition system
info stored
User data No Indirectly Written by
User data No Indirectly Application
User data No Indirectly Application
None Yes Indirectly boot
None No None Written by
Backed-up
by battery
Method of
modification
Data input
method Location
processor
system
software
operations
software
operations
operations
processor
system
Processor board No Unplug the instrument
Module socket
(SODIMM) on
the Acquisition
board
Acquisition
board
Processor board No
Acquisition
board
User
accessible To clear To sanitize
for at least 30 seconds
No Unplug the instrument
for at least 30 seconds
No Unplug the instrument
for at least 30 seconds
Cannot be cleared.
No Unplug the instrument
for a minimum of
30 seconds.
Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
Unplug the instrument
for a minimum of
30 seconds.
Unplug the instrument
for a minimum of
30 seconds.
2 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
Clear and sanitize procedures
Table 2: Nonvolatile memory devices
Type and size Function
Primary e.MMC
32 GB
Secondary e.MMC
32 GB
EEPROM
2Kbit
EEPROM
1Kb
Two to four pieces
depending on model
Flash Memory
32 KB
Flash Memory
64 KB
1
These are the memory capacities at the time of publishing this document, but are subject to change.
Stores Host instrument
Linux operating system,
application software, and
instrument settings
Stores user data including
waveforms, measurement
results and instrument
settings
Stores factory data,
maintenance data
Stores the SODIMM
memory configuration data
(SPD)
Stores power management
controller firmware
Stores analog board
microcontroller firmware
1
Type of user
info stored
None Indirect Written by
Waveforms,
measurement
results, instrument
settings
None Indirect Factory
None None Factory
None Indirect Application
None Indirect Application
Method of
modification
Direct Application
Data input
method Location
processor
system,
software
operations
software
operations and
file operations
operations
operations
software
operations
software
operations
Processor
board
Processor
board
Acquisition
board
Module
socket
(SODIMM)
on acquisition
board
Internal to
the MC9S08
microcontroller
on the
acquisition
board
Internal to the
KL14
microcontroller
on the
Acquisition
board
User
accessible To clear To sanitize
No Not applicable, does
Yes
Yes Not applicable, does
No Not applicable, does
No Not applicable, does
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Run TekSecure Run TekSecure
not contain user
data or settings.
Clearing would
disable instrument
functionality.
not contain user
data or settings.
Clearing would
disable instrument
functionality.
not contain user
data or settings.
Clearing would
disable instrument
functionality.
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Clearing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
Clearing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 3
Clear and sanitize procedures
Media and data export devices
The following table lists the data export devices in the instrument.
Table 3: Media and data export devices
Type Function
USB Host ports User storage and recall of
reference waveforms, screen
images, and instrument
setups, and installation of
firmware updates using
removable USB flash drives
USB Device port
Ethernet
Remote control and data
transfer to a PC
Transfer data and remote
control of instrument.
Method of
modification
Directly User writeable
Directly Remote control
Directly Remote control
Data input
method Location User accessible To disable
using USBTMC
using LXI, VISA,
or Socket Server
Three USB Host
ports on front of
the instrument;
two USB Host
ports on the back
of the instrument
USB Device port
on back of the
instrument
Ethernet port on
back of instrument
Yes
Yes
Yes
Use the
to disable all USB ports (Host and
Device). Requires a password
(user-created when first disabled)
Use the
to disable all USB ports (Host and
Device). Requires a password
(user-created when first disabled)
Use the
to disable the Ethernet LAN port.
Requires a password (user-created
when first disabled)
Utility > Security
Utility > Security
Utility > Security
menu
menu
menu
4 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
How to sanitize a working instrument
Sanitize means that all data in nonvolatile memory is changed or overwritten such that the original data is no longer in
memory, and that the data cannot be recovered using any known technology. You typically do a sanitize operation when you:
Turn the instrument over to another person or department
Move an instrument (temporarily or permanently) from a secured area to a nonsecured area
Send an instrument to Tektronix for calibration and/or repair
Sanitizing is done through commands on the instrument. To sanitize the instrument:
1.
Remove any USB memory devices from the instrument, and store or destroy the USB memory devices in accordance
with your organization’s guidelines.
2.
Clear the Network Configuration password (if set):
a.
Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
Clear and sanitize procedures
b.
Click the
c.
Click
3.
Clear the network mDNS Hostname and description:
a.
Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b.
Click the
c.
Delete any existing text in both of the Host Settings fields.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 5
Security for Network Config
Submit
If a password was set for this function, you are requested to enter the password. If the password is accepted, the
password is set to blank (the default setting of the access password fields).
If a password was not set for this function, the screen displays the message that the password was s uccessfully
changed (to a blank password).
:
Network Configuration
link on the left side of the screen.
link on the left side of the screen.
Clear and sanitize procedures
d.
Click the Host Settings
the original factory default value.
e.
ClickOK. The message closes and the fields are restored to their original factory settings.
4.
Clear the Ethernet port settings:
a.
Disconnect the Ethernet cable from the instrument.
b.
Open the
c.
Clear all information from the
d.
Click the Network Address
e.
Manually change the
information to
f.
Tap
g.
Tapoutsidethemenutoclosethemenu.
NOTE.
instrument to your network, enter the instrument’s IP address into a Web browser on a PC that is connected to the same
network as the instrument, click the
Mode box, clear all information from all fields, and click the
You can also clear the instrument Address settings by accessing the instrument’s web-based interface. Connect the
Utility > I/O
00.00.00.00
Apply Changes
Submit
menu.
Instrument IP Address,Subnet Mask,Gateway IP Address
. It will take several moments for the changes to take effect.
button. A message appears stating that the field is empty, and will be configured to
Host Name,Domain Name
Manual
.
Network Configuration
button.
link on the left side of the screen, select the Manual TCP/IP
Submit
Service Name
,and
button for the Address Settings.
fields.
DNS IP Address
,and
5.
Open the
See the Help system for information on the Security menu functions.
6.
Tap
7.
Push the
6 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
Utility > Security
TekSecure Erase Memory
Default Setup
menu and clear the password used to access enabling/disabling ports and software updates.
button before powering off the instrument.
to clear/reset internal m emory.
How to sanitize a nonfunctional instrument
Do the following to sanitize your instrument if it is not functioning and must be returned to Tektronix for repair:
1.
Remove all external USB memory devices and store or destroy the USB memory devices in accordance with your
organization’s guidelines.
2.
Follow the instructions in section (See page 8, Processor board removal instructions.) to get access to and remove
the Processor b oard, which contains user data and settings. Store or destroy the Processor board in accordance with
your organization’s guidelines. (See page 8.)
3.
Reassemble the instrument w ithout the Processor board and return it to Tektronix. The instrument will then be
repaired and calibrated as necessary.
In North America, contact the Tektronix Customer Care Center (1-800-833-9200) for assistance with returning the
instrument to a repair center. Worldwide, visit www.tektronix.com to find contacts in your area.
How to sanitize a nonfunctional instrument
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 7
How to sanitize a nonfunctional instrument
Processor board removal instructions
Use these procedures to remove the Processor board when you need to sanitize a nonfunctional instrument before returning
the instrument to Tektronix for repair. Refer to your company's internal policies regarding handling or disposal of the
Processor board. A new Processor board is installed and the instrument is repaired and adjusted as necessary.
Access the chassis
WARNING.
cause serious injury or death.
CAUTION.
with proper electrostatic discharge controls in place.
CAUTION.
with the instrument positioned as instructed in the steps. Laying the instrument on its front can damage the controls.
1.
Position the instrument in the normal operating position.
2.
Remove the handle from the instrument:
a.
b.
3.
Remove the metal grill from the rear of the instrument:
a.
b.
Before doing this procedure, disconnect the power cord from the line voltage source. Failure to do so could
To avoid damaging other circuits in the instrument, perform the following procedure in a static-safe environment
Do not lay the instrument on its front while disassembling the instrument. All disassembly steps can be done
Use a Torx T-10 screwdriver to remove two screws from each end of the handle.
Remove the handle, external handle hubs, and screws aside.
Use a Torx T-10 screwdriver to remove the ten (10) screws located on the grill.
Remove the grill.
8 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
4.
Remove the internal handle hubs:
a.
Use a Torx T-10 screwdriver to remove the eight (8) Torx T-10 screws from t he internal hub assemblies (four
screws on each hub).
b.
Remove the internal handle hub assemblies and set aside. Keep the hub assemblies together for each side.
5.
Remove the feet from the bottom of the instrument:
a.
Position the instrument so the bottom is facing up.
b.
Open the feet.
c.
Use a Torx T-10 screwdriver to remove the four (4) Torx T-10 screwdriver to screws from each foot.
How to sanitize a nonfunctional instrument
d.
Remove the feet and set aside.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 9
How to sanitize a nonfunctional instrument
6.
Remove the rear plastic case from the instrument:
a.
Use a Torx T-10 screwdriver to remove the six (6) screws from the back of the instrument case.
b.
Lifttherearplasticcaseoffthebackoftheinstrument,andsetitaside.
7.
Separate the rear metal chassis from the front chassis (with the instrument still in the bottom-up position):
a.
Use a Torx T-10 screwdriver to remove the 25 screws securing t he rear chassis to the front chassis. There are 24
screws around the chassis edges, and one (1) screw beneath the HDMI connector.
b.
Remove the three (3) nuts and washers from the BNC connectors.
c.
Gently pry apart the rear chassis assembly. The rear chassis is held in position mostly by the friction of the
three BNC connectors.
d.
Continue prying the chassis apart until you have the two halves separated and can access the cables.
10 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
e.
Disconnect the two power cable connectors.
f.
Disconnect the smaller cables on the other end of the chassis.
How to sanitize a nonfunctional instrument
g.
Set the rear chassis aside.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 11
How to sanitize a nonfunctional instrument
1.
Remove the Processor
Use a Torx T-10 screwdriver to remove the seven (7) screws from the Processor board.
board
2.
Lift and pull the Processor board away from the chassis. It is still connected with cables, so be careful to not pull it
too far.
3.
Carefully rotate the Processor board 180° counterclockwise to get access to the cable connectors.
4.
Disconnect the small white plastic cable connector.
12 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
How to sanitize a nonfunctional instrument
5.
Position your fingernails so that they are between the edge of the larger-size cable connector and its board connector.
6.
Gently push and rock the cable connector side to side to move the wire connector out of the board connector.
7.
Repeat these steps to disconnect the remaining smaller c able connector.
8.
Remove the Processor board. Secure or dispose of the Processor board as directed by your organization’s internal
policies regarding handling or disposal of secure devices.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 13
How to sanitize a nonfunctional instrument
9.
Reassemble the instrument by using the disassembly steps in reverse order. Tighten the Torx T-10 screws to 0.65
Newton meters.
10.
Package the reassembled instrument, minus the Processor board, and ship to your nearest Tektronix Service Center
for repairs. A new Processor board will be installed
Repair charges
Replacement of damaged and missing hardware is charged according to the rate at the time of replacement.
14 4 Series MSO Opt. 4–SEC Declassification and Security Instructions
Loading...