Tektronix RSA5100B Series User manual

xx

RSA5100B Series Real-Time Signal Analyzers

ZZZ

Declassiﬁcation and Security

Instructions

www.tektronix.com

*P077090200*

077-0902-00

Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by national copyright laws and international treaty provisions.

Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published material. Speciﬁcations and price change privileges reserved.

TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.

Contacting Tektronix

Tektronix, Inc. 14150 SW Karl Braun Drive P.O. Box 5 0 0 Beaverton, OR 97077 USA

For product information, sales, service, and technical support:

In North America, call 1-800-833-9200. Worl dwi de, v isit www.tektronix.com to ﬁnd contacts in your area.

Table of Contents

Preface ........... ................................ .................................. ................................ ................................................. iii

Clear and Sanitize Procedures. . ..... . ..... ..... . ..... . ..... . .... . . .... . ..... . ..... . ..... ..... . ..... . ..... . .... . . .... . ..... . ..... . ........................... ...... 1

Memory Devices..................................... .................................. ................................ ........................................ 1

Media and Data Export Devices ....................... ................................ .................................. .................................... 7

Troubleshooting................................. ................................ .................................. ................................................. 11

How to Clear or Sanitize a Non-Functional Instrument ............. .................................. ................................ ................... 11

Change Log ....................... .................................. ................................ ............................................................... 12

RSA5100B Series Declassiﬁcation and Security Instructions i

Table of Contents

ii RSA5100B Series Declassiﬁcation and Security Instructions

Preface

This document helps customers with data security concerns to sanitize or remove memory devices from the RSA5100B Series Real-Time Signal Analyzers.

These products have data storage (memory) devices and data output devices (USB ports). These instructions tell how to clear or sanitize the memory devices and disable the data output devices. The instructions also tell how to declassify an instrument that is not functioning.

Reference

Products

Terms

The procedures in this document are written to meet the requirements speciﬁed in:

NISPOM, DoD 5220.22–M, Chapter 8

ISFO Process Manual for Certiﬁcation & Accreditation of Classiﬁed Systems under NISPOM

The following Tektronix products are covered by this document:

RSA5103B

RSA5106B

RSA5115B

RSA5126B

The following terms may be used in this document:

Clear.

deny access to previously stored information by standard means of access.

Erase.

Instrument Declassiﬁcation.

removed from a secure environment. Declassiﬁcation procedures include memory sanitization and memory removal, and sometimes both.

This removes data on media/memory before reusing it in a secured area. All reusable memory is cleared to

This is equivalent to clear.

A term that refers to procedures that must be undertaken before an instrument is

RSA5100B Series Declassiﬁcation and Security Instructions iii

Preface

Media storage/data export device.

Any of several devices that can be used to store or export data from the

instrument, such as a USB port.

Power off.

Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For the purpose of clearing data, putting the instrument in Standby mode does not qualify as powering off. For these products, you will need to either press a rear-panel OFF switch or remove the power source from the instrument.

Remove.

This is a physical means to clear the data by removing the memory device from the instrument. Instructions

are available in the product Service Manual.

Sanitize.

This eradicates the data from media/memory so that the data cannot be recovered by other means or technology. This is typically used when the device will be moved (temporarily or permanently) from a secured area to a non-secured area.

Scrub.

User Accessible.

User-modiﬁable.

This is equivalent to sanitize.

User is able to directly retrieve the memory device contents.

The user can write to the memory device during normal instrument operation, using the instrument

interface or remote control.

Volatile memory.

Nonvolatile memory.

Data is lost when the instrument is powered off.

Data is retained when the instrument is powered off.

iv RSA5100B Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

Memory Devices

The following tables list the volatile and nonvolatile memory devices in the standard instrument and listed options. Detailed procedures to clear or sanitize these devices, if any, are shown following each table.

Terminology

The following terms are used in the tables in this section:

User data – Describes the type of information stored in the device. Refers to waveforms or other measurement data representing signals connected to the instrument by users.

User settings – Describes the type of information stored in the device. Refers to instrument settings that can be changed by the user.

Both – Describes the type o f information stored in the device. It means that both user data and user settings are stored in the device.

None – Describes the type of information stored in the device. It means that neither user data nor user settings are stored in the device.

Directly – Describes how data is modiﬁed. It means that the user can modify the data.

Indirectly – Describes how data is modiﬁed. It means that the instrument system resources modify the data and that the user cannot modify the data.

RSA5100B Series Declassiﬁcation and Security Instructions 1

Clear and Sanitize Procedures

Table1: Volatilememorydevices

Typ e of Typ e and min. size Function

SDRAM 1GB(std) 4GB (Opt. 53)

SDRAM 4GB)

SRAM 2 MB Power PC

ZBT SRAM 2MB

SRAM, 1 MB

QDR SRAM 20 MB (Option 200)

Holds active acquisition data

Microprocessor system memory

system memory

Holds active DPX acquisition data

Unused None No None None DPX board No

Holds active DPX acquisition data

user info

stored

User data No Indirectly Firmware

User data,

user settings

None No Indirect Firmware

User data No Indirect Firmware

Backed-up by battery

No Direct Written by

Method of modiﬁcation

Data Input method Location

operations

processor system

operations

User accessible To clear Process to sanitize

Digital Interface board

Slot-PC board

Digital Interface board

DPX board No

No

Yes

No

Remove power from the instrument for at least 20 seconds.

2 RSA5100B Series Declassiﬁcation and Security Instructions

Table 2: Nonvolatile memory devices

Type of Typ e and min. size Function

Fixed Hard Drive (Part of Option 59)

Removable Hard Drive (Option 56)

Flash 16 Mbytes

EEPROM 16Mbit

EEPROM, 8KB

Holds instrument operating system and application software. Holds all user-storable data such as waveforms, measurement results, and instrument settings.

Holds instrument calibration data, serial number, and Option key.

Holds data buffer ﬁrmware

Holds board interface ﬁrmware.

Unused (for future software enhancements)

user info

stored

User data,

user settings

User data,

user settings

None Indirect Firmware

None None Factory

None None None

Method of modiﬁcation

Indirect Firmware

Data Input method Location

operations, user input

operations

conﬁguration

User accessible To clear To sanitize

Internal Yes

Front panel. Additional drives can be purchased from Tektronix, Inc.

Digital Interface board

Acquisition Board

Digital Interface board

Yes

No Not applicable, does not contain

No Not applicable. Does not contain

Clear and Sanitize Procedures

Acquire a full memory length acquisition of noise (no signal attached to the input). Erase the hard drive with commercial erasure software. Reinstall Microsoft Windows using the OS Restore procedure in the Quick Start User Manual. Reinstall the instrument software using the supplied recovery disk. See

Clearing Hard Disk Drives

Acquire a full memory length acquisition of noise (no signal attached to the input). Erase the hard drive with commercial erasure software. Reinstall Microsoft Windows using the OS Restore procedure in the Quick Start User Manual. Reinstall the instrument software using the supplied recovery disk. See

Clearing Hard Disk Drives

user data or settings. Clearing would disable instrument functionality.

user data or settings. Not used by the system.

.

Removetheharddrive.Store the removed hard drive in a secure area or destroy it. (See page 5,

Removal Procedure

the hard drive is removed, no user data remains in the instrument.

Removetheharddrive. Store the removed hard drive in a secure area or destroy it. (See page 6,

Procedure

drive is removed, no user data remains in the instrument.

Not applicable, does not contain user data or settings. Sanitizing would disable instrument functionality.

Not applicable, does not contain user data or settings. Clearing would disable instrument functionality.

Not applicable, does not contain user data or settings. Not used by the system.

FixedHardDrive

.) When

Removable Hard Drive

.) When the hard

RSA5100B Series Declassiﬁcation and Security Instructions 3

Clear and Sanitize Procedures

Table 2: Nonvolatile memory devices (cont.)

Type of Typ e and min. size Function

EEPROM 16Mbit (Option 65 & 66)

EEPROM, 1Kb

Flash, 1 Mb

Flash, 32 Mb

RSA5115B and RSA5126B only; Flash, 32 Mb

RSA5126B only; Flash, 32 Mb

Holds option board calibration data.

PCI conﬁguration – PLX9056

PCIe conﬁguration –PEX8311

Unused (for future software enhancements)

Holds calibration data

user info

stored

None None Factory

None None None RFI board No Not applicable, does not contain

None None Factory

Method of modiﬁcation

Data Input method Location

conﬁguration

Zero-Span Output/Digital IQ Output option board.

Digital I nterface board

LO board

MFC LO board

26 GHz module

User accessible To clear To sanitize

No Not applicable, does not contain

user data or settings. Clearing would disable Zero Span Output functionality

No Not applicable, does not contain

user data or settings. Clearing would disable instrument functionality.

No Not applicable, does not contain

user data or settings. Clearing would disable instrument functionality.

user data or settings. Not used by the system

No Not applicable, does not contain

user data or settings.

No Not applicable, does not contain

user data or settings. Clearing would disable instrument functionality.

No Not applicable, does not contain

user data or settings. Clearing would disable instrument functionality.

Not applicable, does not contain user data or settings. Clearing would disable Zero Span Output functionality.

Not applicable, does not contain user data or settings. Sanitizing would disable instrument functionality.

Not applicable, does not contain user data or settings. Not used by the system

Not applicable, does not contain user data or settings.

Not applicable, does not contain user data or settings. Clearing would disable instrument functionality.

NOTE.

The following procedure covers only Tektronix installed software.

4 RSA5100B Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

Clearing Hard Disk Drives

Fixed Hard Drive Removal

Procedure

If your organization's security protocols allow the use of software to purge or sanitize hard drives, you can use commercial software to erase free space on the hard drive before sending the instrument out for upgrades or repair. Follow the instructions that come with the software to ensure that the erasure of sensitive data from the hard drive complies with your organization's security protocols.

Sequence for clearing secure data from a hard drive:

1.

Delete all stored signals and instrument settings ﬁles (all ﬁles stored with a

2.

Acquire several full memory-length acquisitions of noise (no signal attached to the input).

Without Option 53, acquire a full-length acquisition 4 times.

With Option 53, acquire a full-length acquisition 16 times.

3.

Close the RSA5100B application and erase the free space on the hard disk using commercial software.

The following procedure applies to instruments with Option 59 (Fixed Hard Disk Drive) installed. This procedure is an overview of the removal process. For detailed removal and replacement procedures, see the RSA5100B Series Real-Time Signal Analyzers Service Manual, Tektronix part number 077-0903-XX.

WAR NI NG .

General Safety Summary in the RSA5100B Series Real-Time Signal Analyzers Service Manual before performing this procedure.

Only qualiﬁed service personnel should perform this procedure. Read the Service Safety Summary and the

tiq,csv

,or

Setup

extension).

WAR NI NG .

could cause serious injury or death.

CAUTION.

electro-static discharge controls in place.

RSA5100B Series Declassiﬁcation and Security Instructions 5

Before performing this procedure, disconnect the power cord from the line voltage source. Failure to do so

To avoid damaging the hard drive, perform the following procedure in a static-safe environment with proper

Clear and Sanitize Procedures

1.

Remove the front cover (if installed), the front panel trim, and the cabinet top.

2.

Remove the top EMI cover.

3.

Remove the hard drive and support bracket.

4.

Unplug the SATA cable from the hard drive.

5.

Remove the hard drive from the support bracket.

6.

Reinstall the support bracket.

7.

Reinstall the top EMI cover.

8.

Reinstall the cabinet top, the front panel trim, and front cover (if removed).

Removable Hard Drive

Procedure

The following procedure applies to instruments with Option 56 (Removable Hard Disk Drive) installed. For detailed information on removing parts from the instrument, see the RSA5100B Series Real-Time Signal Analyzers Service Manual, Tektronix part number 077-0903-XX.

WARNING.

cause serious injury or death.

CAUTION.

electro-static discharge controls in place.

1.

Loosen the thumbscrews on the removable drive panel.

2.

Pull the removable drive out from the instrument.

Before doing this procedure, disconnect the power cord from the line voltage source. Failure to do so could

To avoid damaging the hard drive, perform the following procedure in a static-safe environment with proper

6 RSA5100B Series Declassiﬁcation and Security Instructions

Media and Data Export Devices

Table 3: Media and data export devices

Clear and Sanitize Procedures

Typ e a nd min. size

USB device ports Supports removable USB

LAN Ethernet Connection

GPIB connector Supports remote control and

Disabling the USB Ports

Function

ﬂash drive. User storage of reference waveforms, screen images, and instrument setups.

Supports remote control and data transfer

data transfer

Use the following procedure to disable the front and rear panel USB ports.

CAUTION.

mouse input is accepted. The PS2 connector on the rear panel does not support a mouse. When the USB ports are disabled, the only way to control the instrument is through the GPIB/LAN programmatic interface.

CAUTION.

can make the instrument unusable and require that it be returned to Tektronix for servicing.

Method of modiﬁcation

Directly Directly by system resources Front and rear panels

Directly

Data Input method Location Process to disable

Remove all USB memory devices. USB devices can be formatted, stored in a secure area, or destroyed.

The USB ports can be disabled. .(See page 7,

System resources

Rear panel

the USB Ports

You can set a BIOS password to prevent changes to the BIOS. (See page 8,

Disconnect from Network cable

N/A

.)

Setting the BIOS Password

Disabling the USB ports will disable the front panel and touch screen. When the USB ports are disabled, no

To avoid disabling the instrument, be sure to perform this procedure exactly as stated. A misconﬁgured BIOS

Disabling

.)

1.

Reboot instrument and press the

2.

3.

Integrated Peripherals

Select

USB Device Setting

Select

Delete

key to access the BIOS settings screen.

.

RSA5100B Series Declassiﬁcation and Security Instructions 7

Clear and Sanitize Procedures

Setting the BIOS Password

Enabling the USB Ports

4.

Change

5.

Save the BIOS settings and exit.

Use the following procedure to set a BIOS password that will prevent others from c hanging the BIOS settings.

CAUTION.

can make the instrument unusable and require that it be returned to Tektronix for servicing.

1.

Reboot the instrument and press the

2.

Select

3.

Choose a BIOS password.

4.

Conﬁrm the new BIOS password.

5.

Save the BIOS settings and exit.

Use the following procedure to enable the front and rear panel USB p orts.

USB 1.0 Controller

To avoid disabling the instrument, be sure to perform this procedure exactly as stated. A misconﬁgured BIOS

Set Password

.

EnabletoDisable

from

Delete

. Change

key to access the BIOS settings screen.

USB 2.0 Controller

EnabletoDisable

from

.

CAUTION.

can make the instrument unusable and require that it be returned to Tektronix for servicing.

1.

Reboot instrument and press the

2.

Select

3.

Select

8 RSA5100B Series Declassiﬁcation and Security Instructions

To avoid disabling the instrument, be sure to perform this procedure exactly as stated. A misconﬁgured BIOS

Integrated Peripherals

USB Device Settings

.

Delete

.

key to access the BIOS settings screen.

Clear and Sanitize Procedures

Disabling the BIOS

Password

4.

Change

5.

Save the BIOS settings and exit.

Use the following procedure to disable the BIOS password.

CAUTION.

can make the instrument unusable and require that it be returned to Tektronix for servicing.

1.

Reboot instrument and press the

2.

Enter the current BIOS password.

3.

Select

4.

Press the

5.

Press the

6.

Save the BIOS settings and exit.

USB 1.0 Controller

To avoid disabling the instrument, be sure to perform this procedure exactly as stated. A misconﬁgured BIOS

Set Password

Enter

.

key.

key again to conﬁrm disabling the BIOS password.

DisabletoEnable

from

Delete

. Change

key to access the BIOS settings screen.

USB 2.0 Controller

from

DisabletoEnable

.

RSA5100B Series Declassiﬁcation and Security Instructions 9

Clear and Sanitize Procedures

10 RSA5100B Series Declassiﬁcation and Security Instructions

Troubleshooting

How to Clear or Sanitize a Non-Functional Instrument

If your instrument is not functioning, perform the following actions and return the instrument to Tektronix for repair. Describe the initial problem with the product. Tektronix w ill install replacement parts and then repair and return the instrument.

Hard Disk Drives

External Memory Devices

Charges

Remove the internal hard disk (Option 59) or removable hard disk (Option 56) using the procedures in this document.

Remove any USB ﬂash drives or external hard drives from the instrument.

Refer to your company’s internal policies regarding handling or disposal of the external memory device.

Replacement of any missing hardware will be charged according to the rate at the time of replacement.

RSA5100B Series Declassiﬁcation and Security Instructions 11

Tektronix RSA5100B Series User manual

Specifications and Main Features

Frequently Asked Questions

User Manual