Tektronix RSA5103A, RSA5106A, RSA6106B, RSA6114B, RSA6120B Declassification

...

Download

RSA6100B Series and RSA5100A Series Real-Time Signal Analyzers

ZZZ

Declassiﬁcation and Security

Instructions

www.tektronix.com

P077052102*

077-0521-02

Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by national copyright laws and international treaty provisions.

Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published material. Speciﬁcations and price change privileges reserved.

TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.

Contacting Tektronix

Tektronix, Inc. 14150 SW Karl Braun Drive P.O. Bo x 5 0 0 Beaverto USA

For product information, sales, service, and technical support:

n, OR 97077

In North America, call 1-800-833-9200. Worl dwid e, visi t www.tektronix.com to ﬁnd contacts in your area.

Table of Contents

Preface .............................................................................................................. iii

Clear and Sanitize Procedures. . ..... . ..... . .... . . .... . ..... . ..... . ..... . ..... ..... . ..... . ..... . ..... . ... . . . .... . .. 1

Memory Devices............................................................................................... 1

Media and Da

Troubleshooting.................................................................................................... 13

How to Clear or Sanitize a Non-Functional Instrument .... . ..... . ..... . ..... . ..... ..... . ..... . ..... . .... 13

Change Log ........................................................................................................ 14

ta Export Devices ............................................................................. 7

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions i

Table of Contents

ii RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Preface

This document helps customers with data security concerns to sanitize or remove memory devices from the RSA6100B Series or RSA5100A Series Real-Time Signal Analy

These products have data storage (memory) devices and data output devices (USB ports). These instructions tell how to clear or sanitize the memory devices and disable the data output devices. The instructions also tell how to declassify an instrument that is not functioning.

zers.

Reference

Products

Terms

The procedures in this document are written to meet the requirements speciﬁed in:

NISPOM, DoD 5220.22–M, Chapter 8

ISFO Process Manual for Certiﬁcation & Accreditation of Classiﬁed Syste ms under NISPOM

The following Tektronix products are covered by this document:

RSA5103A

RSA5106A

RSA5115A

RSA5126A

RSA6106B

RSA6114B

RSA6120B

The following terms may be used in this document:

Clear. This removes data on media/memory before reusing it in a secured area. All reusable memory is cleared to deny access to previously stored information by standard means of access.

Erase. This is equivalent to clear.

Instrument Declassiﬁ cation. A term that refers to procedures that must

be undertaken before an instrument is removed from a secure environment. Declassiﬁcation procedures include memory sanitization and memory removal, and sometimes both.

Media storage/data export device. Any of several devices that can be used to store or export data from the instrument, such as a USB port.

Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For the purpose of clearing data, putting the

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions iii

Preface

instrument in S products, you will need to either press a rear-panel OFF switch o r remove the power source from the instrument.

Remove. Thisisaphysicalmeanstoclearthedatabyremovingthememory device from the instrument. Instructions are available in the product Service Manual.

Sanitize. This eradicates the data from media/memory so that the data cannot be recovered by other means o r technology. This is typically used when the device will be moved (temporarily or permanently) from a secured area to a non-secured area.

Scrub. This is equivalent to sanitize.

User Accessible. User is able to directly retrieve the memory device contents.

User-modiﬁable. The user can write to the memory device during normal

instrument operation, using the instrument interface or remote control.

Volatile memory. Data is lost when the instrument is powered off.

Nonvolatile memory. Data is retained when the instrument is powered off.

tandby mode does not qualify as powering off. For these

iv RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

Memory Device

Terminology

The following tables list the volatile and nonvolatile memory devices in the standard instrument and listed options. Detailed procedures to clear or sanitize these devic

The following terms are used in the tables in this section:

User data – Describes the type of information stored in the device. Refers to waveforms or other measurement data representing signals connected to the instrument by users.

User settings – Describes the type of information stored in the device. Refers to instrument settings that can be changed by the user.

Both – Describes the type of informationstoredinthedevice. Itmeansthat both user data and user settings are stored in the device.

None – Describes the type of information stored in the device. It means that neither user data nor user settings are stored in the device.

Directly – Describes how data is modiﬁed. It means that the user can modify the data.

Indirectly – Describes how data is modiﬁed. It means that the instrument system resources modify the data and that the user cannot modify the data.

es, if any, are shown following eac h table.

le 1: Volatile memory devices

Tab

eand

Typ min. size Function

SDRAM 1GB(std) 4GB (Opt. 53)

SDRAM 4GB)

SRAM 2 MB Power PC

Holds active acquisition data

Microprocessor system memory

system memory

Typ of user

inf stored

User data

User data, user settings

None No Indirect Firmware

Backed-up by battery

No Indirectly Firmware

No Direct Written

Method of modiﬁcation

Data

Inp method Location

operations

by processor system

operations

Digital Interface board

Slot-PC board

Digital Interface board

Use accessible To clear

No Remove power

Yes Remove power

No Remove power

from the instrument for at least 20 seconds.

cess to

Pro sanitize

Remove power from the instrument for at least 20 seconds.

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 1

Clear and Sanitize Procedures

Table 1: Volatile memory devices (cont.)

Typ e

Type and min. size Function

ZBT SRAM 2MB

SRAM, 1 MB

QDR SRAM 20 MB (Option 200)

Holds active DPX acquisition data

Unused None No None None DPX

Holds active DPX acquisition data

of user info stored

User data

Backed-up by battery

No Indirect Firmware

Method of modiﬁcation

Data Input method Location

ons

DPX board

board

DPX board

operations

operati

User accessible To clear

No Remove power

No Remove pow

No Remove power

from the instrument for at least 20 seconds.

from the instrument for at least 20 second

from the for at least 20 seconds.

instrument

Process to sanitize

Remove power from the instrument for at least 20 seconds.

Remove pow from the instrument for at lea 20 seconds.

Remove power from the instrument for at least 20 secon

ds.

2 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

Table 2: Nonvol

atile memory devices

Type an d min. size Function

Fixed Hard Drive (Part of Option 59)

Removable Hard Dri (Option 56)

Fla 16 Mbytes

EEPROM 1Mbit

Option 110)

(

EEPROM, 8KB

Holds instrument operating system and application software. Holds all user-storable data such as waveforms, measurement results, a instrument settings.

Holds

ent

instrum operating system and

ation

applic software. Holds all

storable

userdata such as waveforms,

rement

measu results, and instrument

ings.

sett

Hol instrument calibration

ta, serial

da number, and Option key.

lds

Ho data buffer ﬁrmware

Unused (for future software enhancements)

Typ e of user info stored

User data, user settings

Non

None None None Digital

Method of modiﬁcation

Indirect Firmware

Ind

irect

Data Input method Location

operations, user input

operati user input

Fir operations

Fa conﬁguration

mware

ctory

ons,

User accessible To clear To sanitize

Internal Yes

Front panel. Additional drives can be purchased from

onix,

Tektr Inc.

ital

Dig Interface board

deband

Wi Acquisition board

Interface board

Yes

No Not

No No

No Not applicable. Does

Acquire a full memory length acquis noise (no signal attached to the input). Eras hard drive with commercial erasure software. R Microsoft Windows using the OS Restore procedure Quick Start User Manual. Reinstall the instrume using the supplied recovery di sk. See

Clearin Drives.

Acquire length acquisition of noise (no signal attache input). Erase the hard drive with commer software. Reinstall Microsoft Windows using procedure in the Quick Start User Manu instrument software using the supplied reco

Clearing Hard Disk Drives.

not contain user data or settings.

earing would

Cl disable instrument functionality.

t applicable, does not contain user data or settings.

learing would

C disable instrument functionality.

not contain user data or settings. Not used by the system.

ition of

ethe

einstall

in the

nt software

gHardDisk

a full memory

dtothe

cial erasure

the OS Restore

al. Reinstall the

very disk. See

applicable, does

Remove the hard drive. Store the removed hard inasecurearea or destroy it. (See page 5, Fixed H

Drive Removal Procedure.) When

the hard dri removed, no user data remains in the instrumen

Remove the hard drive. S removed hard drive in a secure area or it. (See page 6,

Removable Hard Drive

When the hard drive is removed, no user data r instrument.

applicable, does

Not not contain user data or settings.

nitizing would

Sa disable instrument functionality.

t applicable, does

No not contain user data or settings.

anitizing would

S disable instrument functionality.

Not applicable, does not contain user data or settings. Not used by the system.

drive

ard

ve is

tore the

destroy

Procedure.)

emains in the

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 3

Clear and Sanitize Procedures

Table 2: Nonvolatile memory devices (cont.)

Typ e of

user Type an d min. size Function

EEPROM, 1Kb

RSA5100A only: Flash, 1 Mb

RSA5100A only: Flash, 32 Mb

RSA5115A and RSA5126A only; Flash, 32 Mb

RSA5126A only; Flash, 32 Mb

PCI conﬁguration – PLX9056

PCIe conﬁguration –PEX8311

Unused (for future software enhancements)

Holds calibration data

info

stored

None None Factory

None None None RFI

None None Factory

Method of modiﬁcation

Data Input method Location

conﬁguration

Digital Interface board

board

LO board

MFC LO board

26 GHz module

User accessible To clear To sanitize

No Not applicable, does

not contain user data or settings. Clearing would disable instrument functionality.

No Not applicable, does

not contain user data or settings. Clearing would disable instrument functionality.

No Not applicable, does

not contain user data or settings. Not used by the system

No Not applicable, does

not contain user data or settings.

No Not applicable, does

not contain user data or settings. Clearing would disable instrument functionality.

No Not applicable, does

not contain user data or settings. Clearing would disable instrument functionality.

Not applicable, does not contain user data or settings. Sanitizing would disable instrument functionality.

Not applicable, does not contain user data or settings. Not used by the system

Not applicable, does not contain user data or settings.

Not applicable, does not contain user data or settings. Clearing would disable instrument functionality.

NOTE. The following procedure covers only Tektronix installed software.

learing Hard Disk Drives

If your organization's security protocols allow the use of software to purge or sanitize hard drives, you can use commercial software to erase free space on the hard drive before sending the instrument out for upgrades or repair. Follow the instructions that come with the software to ensure that the erasure of sensitive data from the hard drive complies with your organization's security protocols.

4 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

Fixed Hard Drive Removal

Procedure

Sequence for cl

1. Delete all stored signals and instrument settings ﬁles (all ﬁles stored with a tiq, csv,orSe

2. Acquire several full memory-length acquisitions of noise (no signal attached

to the input

Without Option 53, acquire a full-length acquisition 4 times.

With Option 53, acquire a full-length acquisition 16 times.

3. Close the RSA5100A or RSA6100B application a nd erase the free space on the hard disk using commercial software.

The following procedure applies to instruments that have Option 57 (DVD-RW drive) installed. If your instrument has a DVD drive, it has a ﬁxed hard drive. This procedure is an overview of the removal process. For detailed removal and replacement procedures, see the RSA6100B Series Real-Time Signal

ers Service Manual, Tektronix part number 077-0648-XX, or RSA5100A

Analyz Series Real-Time Signal Analyzers Service Manual, Tektronix part number

077-0522-XX.

WAR NI NG . Only qualiﬁ ed service personnel should perform this procedure. Read

the Service Safety Summary and the General Safety Summary in the RSA6100B Series Real-Time Signal Analyzers Service Manual or RSA5100A Series Real-Time

nal Analyzers Service Manual before performing this procedure.

Sig

earing secure data from a hard drive:

tup extension).

WAR NI NG . Before performing this procedure, disconnect the power cord from the

ne voltage source. Failure to do so could cause serious injury or death.

CAUTION. To avoid damaging the hard drive, perform the following procedure in

static-safe environment with proper electro-static discharge controls in place.

1. Remove the front cover (if installed), the front panel trim, and the cabinet top.

2. Remove the top EMI cover.

3. Remove the hard drive and support bracket.

4. Unplug the SATA cable from the hard drive.

5. Remove the hard drive from the support bracket.

6. Reinstall the support bracket.

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 5

Clear and Sanitize Procedures

Removable Har

Procedure

dDrive

7. Reinstall the t

8. Reinstall the cabinet top, the front panel trim, and front cover (if removed).

The following procedure applies to instruments with Option 56 (Removable Hard Disk Drive) installed. For detailed information on removing parts from the instrument, see the RSA6100B Series Real-Time Signal Analyzers Service Manual, Tektroni x p Analyzers Service Manual, Tektronix part number 077-0522-XX.

WARNING. Before doing this procedure, disconnect the power cord from the line

voltage source. Failure to do so could cause serious injury or death.

CAUTION. To avoid damaging the hard drive, perform the following procedure in

a static-safe environment with proper electro-static discharge controls in place.

1. Loosen the thumbscrews on the removable drive panel.

2. Pull the removable drive out from the instrument.

op EMI cover.

art number 077-0648-XX. or RSA5100A Series Real-Time Signal

6 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Media and Data Export Devices

Table 3: Media and data export devices

Clear and Sanitize Procedures

Type and m in.

Function

size

DVD+/-RW (Option 57 only)

USB device ports Supports

ernet

LAN Eth Connection

GPIB connector Supports remote

User storage of reference waveforms, screen images, and instrument and installation of software.

removable USB ﬂash drive User storage of reference waveform images, and instrument setups.

Supports remote control and data trans

contr transfer

setups

s, screen

fer

ol and data

Method of

Data Input method Location Process to disable

modiﬁcation

Directly

Directly Directly b

Direct

Directly

System resou and directly by user

resources

System resources

rces

y system

Front panel Remove all DVDs. Rewriteable DVDs

Front and r panels

Rear pa

Rear panel

ear

nel

canbeformat area, or destroyed. Non-rewriteable DVDs can either be stored or destroyed.

Remove all USB memory devices. USB devices can be formatted, stored in a secure

The USB ports can be disabled. (See page 7, Disabling the RSA6100B

Series US Disabling the RSA5100A Series USB Ports.)

You ca n s prevent changes to the BIOS. (See page 9, Setting the RSA5100A Series

BIOS Pa Setting the RSA6100B Series BIOS Password.)

Disconnect from Network cable

N/A

ted, stored in a secure

area, or destroyed.

BPorts.) .(See page 8,

et a BIOS password to

ssword.) (See page 8,

Disabling the RSA6100B

Series USB Ports

Use the following procedure to disable the front and rear panel USB ports.

TION. When the USB ports are disabled, no mouse input is accepted. The

CAU

PS2 connector on the rear panel does not support a mouse.

CAUTION. To avoid disabling the instrument, perform this procedure exactly as

ated. A misconﬁgured BIOS can make the instrument unusable and require that

st it be returned to Tektronix for servicing.

eboot the instrument and press the Delete key to access the BIOS settings

1.R

screen.

2. Select Chipset.

3. Select South Bridge.

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 7

Clear and Sanitize Procedures

Disabling t

Series USB Ports

he RSA5100A

4. Select USB Conﬁ

5. From the list, select which USB ports to enable or disable. USB Ports 1 and 2

route to the fr

6. Save the BIOS settings and exit.

Use the following procedure to disable the front and rear panel USB ports.

CAUTION. Disabling the USB ports will disable the front panel and touch screen.

When the US on the rear panel does not support a mouse. When the USB ports are disabled, the only way to control the instrument is through the GPIB/LAN programmatic interface.

CAUTION. To avoid disabling the instrument, be sure to perform this procedure

exactly as stated. A misconﬁgured BIOS can make the instrument unusable and require that it be returned to Tektronix for servicing.

B ports are disabled, no mouse input is accepted. The PS2 connector

guration.

ont panel. USB Ports 4 and 5 route to the rear panel.

Setting the RSA6100B Series BIOS Password

1. Reboot instrument and press the Delete key to access the BIOS settings screen.

2. Select Integrated Peripherals.

3. Select USB Device Setting.

4. Chan

5. Sav

Use the following procedure to set a BIO S password that will prevent others from changing the BIOS settings.

stated. A misconﬁgured BIOS can make the instrument unusable and require that it be returned to Tektronix for servicing.

1. Reboot the instrument and press the Delete key to access the BIOS settings

2. Select Security.

ge USB 1.0 Controller from Enable to Disable. Change USB 2.0

Controller from Enable to Disable.

e the BIOS settings and exit.

UTION. To avoid disabling the instrument, perform this procedure exactly as

screen.

3. Select Administrative Password.

8 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

Setting the RSA5100A Series BIOS Password

4. Choose a BIOS pa

5. Conﬁrm the new BIOS pass word.

6. Save the BIOS settings and exit.

Use the following procedure to set a BIOS password that will prevent others from changing the BIOS settings.

CAUTION. To avoid disabling the instrument, be sure to perform this procedure

exactly as stated. A misconﬁgured BIOS can make the instrument unusable and require th

1. Reboot the instrument and press the Delete key to access the BIOS settings

2. Select Set Password.

3. Choose a BIOS password.

4. Conﬁrm the new BIOS pass word.

5. Save the BIOS settings and exit.

at it be returned to Tektronix for servicing.

screen.

ssword.

Enabling the RSA6100B

Series USB Ports

e following procedure to enable the front and rear panel USB ports.

Use th

CAUTION. To avoid disabling the instrument, perform this procedure exactly as

stated. A misconﬁgured BIOS can make the instrument unusable and require that it be returned to Tektronix for servicing.

1. Reboot the instrument and press the Delete key to access the BIOS settings screen.

2. Select Chipset.

3. Select South Bridge.

4. Change USB Conﬁguration.

rom the list, select which USB ports to enable or disable. USB Ports 1 and 2

5.F

route to the front panel. USB Ports 4 and 5 route to the rear panel.

6. Save the BIOS settings and exit.

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 9

Clear and Sanitize Procedures

Enabling the RSA5100A

Series USB Ports

Disabling the RSA6100B

Series BIOS Password

Use the followi

CAUTION. To avoid disabling the instrument, be sure to perform this procedure

exactly as stated. A misconﬁgured BIOS can make the instrument unusable and require that it be returned to Tektronix for servicing.

1. Reboot instrument and press the Delete key to access the BIOS settings screen.

2. Select Integrated Peripherals.

3. Select USB Device Settings.

4. Change USB 1.0 Controller from Disable to Enable.ChangeUSB 2.0 Controller from Disable to Enable.

5. Save the BIOS settings and exit.

Use the following procedure to disable the BIOS password

CAUTION. To avoid disabling the instrument, perform this procedure exactly as

stated. A misconﬁgured BIOS can make the instrument unusable and require that it be returned to Tektronix for servicing.

ng procedure to enable the front and rear panel USB ports.

Disabling the RSA5100A

Series BIOS Password

1. Reboot the instrument and press the Delete key to access the BIOS settings screen.

2. Enter the current BIOS password.

3. Select Security.

4. Select Administrative Password.

5. Press the Enter key.

6. Press the Enter key again to conﬁrm disabling the BIOS password.

7. Save the BIOS settings and exit.

Use the following procedure to disable the BIOS password.

CAUTION. To avoid disabling the instrument, be sure to perform this procedure

exactly as stated. A misconﬁgured BIOS can make the instrument unusable and require that it be returned to Tektronix for servicing.

10 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Clear and Sanitize Procedures

1. Reboot instrum

2. Enter the current BIOS password.

3. Select Set Password.

4. Press the Enter key.

5. Press the Enter key again to conﬁrm disabling the BIOS password.

6. Save the BIOS settings and exit.

ent and press the Delete key to access the BIOS settings screen.

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 11

Clear and Sanitize Procedures

12 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Troubleshooting

How to Clear or Sanitize a Non-Functional Instrum ent

If your instrument is not functioning, perform the following actions and return the instrument for Tektronix for repair. Describe the initial problem with the product. Tektronix will install replacement parts and then repair and return the instrument.

Hard Disk Drives

DVDs

External Memory Devices

Charges

Remove the internal hard disk (Option 59) or removable hard disk (Option 56) using the procedures in this document.

Remove any DVDs from the instrument. If the instrument does not power up, you can insert a small paper clip into the hole next to the DVD drawer latch to release the drawer and remove discs.

Remove any USB ﬂash drives or external hard drives from the instrument.

o your company’s internal policies regarding handling o r disposal of the

Refer t external memory device.

Replacement of any missing hardware will be charged according to the rate at

ime of replacement.

the t

RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions 13

Change Log

Document part number

077-0521-00 1-10-2011 First release.

077-0521-01 4-2-2012

077-0521-02 12-11-2012

Revision date Change description

Revised to include RSA6100B Series.

Revised to include RSA5115A and RSA5126A.

14 RSA6100B Series and RSA5100A Series Declassiﬁcation and Security Instructions

Tektronix RSA5103A, RSA5106A, RSA6106B, RSA6114B, RSA6120B Declassification

Specifications and Main Features

Frequently Asked Questions

User Manual