Tektronix TBS2000 Declassification and Security Instructions

TBS2000 Series
Oscilloscope

Declassification

*P077115100*

077-1151-00

TBS2000 Series
Oscilloscope

Declassification

Warning

The servicing instructions are for use by qualified personnel only. To avoid
personal injury, do not perform any servicing unless you are qualified to do
so. Refer to all safety summaries prior to performing service.

Supports Product Firmware V1.0 and above

www.tek.com

077-1151-00

Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are
protected by national copyright laws and international treaty provisions. Tektronix products are covered by U.S. and foreign patents, issued
and pending. Information in this publication supersedes that in all previously published material. Specifications and price change privileges
reserved.

TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.

Contacting Tektronix

Tektronix, Inc.

14150 SW Karl Braun Drive
P.O. Box 500
Beaverton, OR 97077
USA

For product information, sales, service, and technical support:

■

In North America, call 1-800-833-9200.

■

Worldwide, visit www.tek.com to find contacts in your area.

Table of Contents

Preface ................................................................................................................................................................ iii

Clear and sanitize procedures

Main board ..................................................................................................................................................... 1

USB flash drive .............................................................................................................................................. 1

Charges .......................................................................................................................................................... 1

TekSecure ...................................................................................................................................................... 1

Memory devices ............................................................................................................................................. 2

Terminology ................................................................................................................................................... 2

Clear NAND Flash data using TekSecure ...................................................................................................... 3

Media and data export devices ...................................................................................................................... 4

Change log

TBS2000 Series Declassification and Security Instructions i

Table of Contents

ii TBS2000 Series Declassification and Security Instructions

Preface

This document helps customers with data security concerns to sanitize or remove memory devices from their instrument.

This series of instruments contains an open architecture PC with removable mass storage. You can order additional removable
mass storage devices to swap in and out of the instrument as needed for security reasons.

These products have data storage (memory) devices and data export interfaces (USB ports, Ethernet, and eSATA). These
instructions describe how to clear or sanitize the memory devices and disable the data output interfaces. The instructions also
describe how to declassify an instrument that is not functioning.

Products

The following Tektronix products are covered by this document:

■

TBS2072

■

TBS2102

■

TBS2074

■

TBS2104

Terms

The following terms may be used in this document:

■

■

■

■

■

■

■

■

■

■

This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to deny

Clear.

access to previously stored information by standard means of access.

Erase.

This is equivalent to clear.

Media. Storage/data export device. A device that is used to store or export data from the instrument, such as a USB port/
USB flash drive.

Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is typically used when the device will be moved (temporarily or permanently) from a secured area to a nonsecured
area.

Scrub. This is equivalent to sanitize.

Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions are

available in the product service manual.

User Accessible. User is able to directly retrieve the memory device contents.

User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the

instrument user interface or remote control.

Volatile memory. Data is lost when the instrument is powered off.

Nonvolatile memory. Data is retained when the instrument is powered off.

TBS2000 Series Declassification and Security Instructions iii

Preface

■

Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For the purpose of
clearing data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either
press a rear-panel OFF switch or remove the power source from the instrument.

■

Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be
removed from a secure environment. Declassification procedures include memory sanitization and memory removal, and
sometimes both.

iv TBS2000 Series Declassification and Security Instructions

Clear and sanitize procedures

If your instrument is not functioning and you need to clear or sanitize it, proceed as follows:

Main board

Remove the Main board and return the product to Tektronix. A new main board will be installed, and the instrument will be
repaired and adjusted as necessary.

For removal instructions, refer to the TBS2000 Series Digital Storage Oscilloscope Service Manual , part number 077-1150-XX,
available on the Tektronix Web site at www.tek.com/manuals.

After removal of the main board, refer to your company's internal policies regarding storage or disposal of the board.

USB flash drive

Remove the USB flash drive and return the instrument to Tektronix for repair.

After removal of the USB flash drive, refer to your organization's internal policies regarding handling or disposal of the flash drive.

Charges

Replacement of any missing hardware will be charged according to the rate at the time of replacement.

TekSecure

TekSecure™ capability is present in TBS2000 oscilloscopes. Pressing TekSecure erases and overwrites all of the waveform and
setup memories. The waveform memories, stored in nonvolatile memory, are overwritten with an "empty," all zeros pattern. The
setup memories, stored in nonvolatile memory, are overwritten with the factory default front-panel setup. The current front-panel
setup is also overwritten with the default factory setup.

Using TekSecure will not affect calibration of the instrument because the calibration constants are stored in another nonvolatile
memory completely separate from any acquisition data. This allows complete erasure/removal of any secure data without
affecting the oscilloscope calibration. It also allows the oscilloscope to be calibrated in a non-secure site and then used in a
secure area without the need for recalibration.

TBS2000 Series Declassification and Security Instructions 1

Clear and sanitize procedures

Memory devices

The following tables list the volatile and nonvolatile memory devices in the instrument.

Terminology

The following terms are used in the tables in this section:

■

User data – Describes the type of information stored in the device. Refers to waveforms or other measurement data
representing signals connected to the instrument by users.

■

User settings – Describes the type of information stored in the device. Refers to instrument settings that can be changed by
the user.

■

Both – Describes the type of information stored in the device. It means that both user data and user settings are stored in
the device.

■

None – Describes the type of information stored in the device. It means that neither user data or user settings are stored in
the device.

■

Directly – Describes how data is modified. It means that the user can modify the data.

■

Indirectly – Describes how data is modified. It means that the instrument system resources modify the data and that the user
cannot modify the data.

Table 1: Volatile memory devices

Type and
minimum
size

SDRAM
768 MB
(std)

SDRAM
256 MB
(std)

SDRAM
256 MB
(std)

Function Type of

user info
stored

Holds active
acquisition
data

Holds active
acquisition
data

Microproces
sor system
memory

User data No Indirectly Firmware

User data No Indirectly Firmware

User data,
user
settings

Backed-up
by battery

No Directly Written by

Method of
modification

Data input
method

operations

operations

processor
system

Location User

accessible

4ch Main
board

2ch Main
board

Main board Yes Remove

Yes Remove

Yes Remove

To clear To sanitize

power from
the
instrument
for at least
20 seconds

power from
the
instrument
for at least
20 seconds

power from
the
instrument
for at least
20 seconds

Remove
power from
the
instrument
for at least
20 seconds

Remove
power from
the
instrument
for at least
20 seconds

Remove
power from
the
instrument
for at least
20 seconds

2 TBS2000 Series Declassification and Security Instructions

Clear and sanitize procedures

Table 2: Nonvolatile memory devices

Type and
minimum
size

NAND Flash
4 Gbytes

Serial Flash
2 Mbytes

Function Type of user

info stored

Holds
instrument
operating
system and
application
software.
Holds all user­storable data
such as
waveforms,
measurement
results, and
instrument
settings.

Holds
instrument
calibration
data, serial
number, and
Option key

User data and
user settings

None Indirect Firmware

Method of
modification

Indirectly Firmware

Data input
method

operations,
user input

operations

Location User

accessible

Main board Yes Use

Main board No Not

To clear To sanitize

TekSecure to
clear
reference
waveforms
and
instrument
setups.

applicable,
does not
contain user
data or
setting.
Clearing
would disable
instrument
functionality.

Use
TekSecure to
clear
reference
waveforms
and
instrument
setups.

Not
applicable,
does not
contain user
data or
settings.
Sanitizing
would disable
instrument
functionality

Clear NAND Flash data using TekSecure

Procedure:

1. 1. Before doing TekSecure, save your user data into a USB thumb drive. See the following steps:

■

Press Save/Recall on the front panel

■

Select Save Setup (bezel 1) , select Save to USB file (bezel 2), press Save (bezel 5), to save setup to USB.

■

Select Save Waveform (bezel 1), select Save to USB file (bezel 2), press Save (bezel 5), to save waveform to USB.

2. Enter into Utility>Config> Teksecure Erase Memory, press it.

3. There will be a pop up menu of warning showing: "This procedure will erase all nonvolatile RAM, All reference waveforms

and save setups will be erased. Calibration constants will be retained. This will take approximately 3 minutes. Are you sure
you want to erase?"

4. Press Yes. It will begin TekSecure, and after it finishes, it will reboot the instrument.

TBS2000 Series Declassification and Security Instructions 3

Clear and sanitize procedures

Media and data export devices

The following table lists the data export devices in the instrument.

Table 3: Media and Data export devices

Type and
minimum size

USB host port
(supports
removable USB
flash drive)

USB device port Supports remote

LAN Ethernet
connector

Function Method of

User storage of
reference
waveforms, screen
images, and
instrument setups.
Wireless
connection
through USB WiFi
dongles.

control and data
transfer to a PC.

Supports remote
control and data
transfer to a PC.

Data input

modification

Directly User writeable USB host ports on

Directly Remote control via

Directly NA Rear panel Yes N/A

method

USBTMC

Location User accessible To disable

Yes The USB host port
front of instrument:
Just for USB disk
Files can be
deleted or over­written on the
oscilloscope or a
PC, or USB flash
drive can be
removed and
destroyed.
USB host ports on
rear of instrument:
Just for USB WiFi
dongles.

USB device port
on rear of
instrument

Yes The USB device

cannot be
disabled.

port cannot be
disabled.

4 TBS2000 Series Declassification and Security Instructions

Change log

Document part number Revision date Change description

TBS2000 Series Declassification and Security Instructions 5

Change log

6 TBS2000 Series Declassification and Security Instructions