联系我们

与泰克代表实时聊天。 工作时间:上午 9:00 - 下午 5:00(太平洋标准时间)。

电话

致电我们

工作时间:上午9:00-下午5:00(太平洋标准时间)

下载

下载手册、产品技术资料、软件等:

下载类型
型号或关键字

反馈

DPO70000SX Series Declassification and Security Instructions

Declassification and Security

This document helps customers with data security concerns to sanitize or removememory devices from the DPO70000SX Series instruments.


此手册适用于:

DPO77002SX, DPO75902SX, DPO75002SX, DPO71604SX, DPO71304SX, DPO72504SX, DPO72004SX, DPO73304SX, DPO72304SX

  • 手册类型: 解密
  • 部件号: 077104202
  • 发布日期:
  • Revision: Rev A

By downloading, you agree to the terms and conditions of the Manuals Download Agreement.

Manuals Download Agreement

ATTENTION: please read the following terms and conditions carefully before downloading any documents from this website. By downloading manuals from Tektronix' website, you agree to the following terms and conditions:

Manuals for Products That Are Currently Supported:

Tektronix hereby grants permission and license to owners of Tektronix instruments to download and reproduce the manuals on this website for their own internal or personal use. Manuals for currently supported products may not be reproduced for distribution to others unless specifically authorized in writing by Tektronix, Inc.

A Tektronix manual may have been revised to reflect changes made to the product during its manufacturing life. Thus, different versions of a manual may exist for any given product. Care should be taken to ensure that one obtains the proper manual version for a specific product serial number.

Manuals for Products That Are No Longer Supported:

Tektronix cannot provide manuals for measurement products that are no longer eligible for long term support. Tektronix hereby grants permission and license for others to reproduce and distribute copies of any Tektronix measurement product manual, including user manuals, operator's manuals, service manuals, and the like, that (a) have a Tektronix Part Number and (b) are for a measurement product that is no longer supported by Tektronix.

A Tektronix manual may be revised to reflect changes made to the product during its manufacturing life. Thus, different versions of a manual may exist for any given product. Care should be taken to ensure that one obtains the proper manual version for a specific product serial number.

This permission and license does not apply to any manual or other publication that is still available from Tektronix, or to any manual or other publication for a video production product or a color printer product.

Disclaimer:

Tektronix does not warrant the accuracy or completeness of the information, text, graphics, schematics, parts lists, or other material contained within any measurement product manual or other publication that is not supplied by Tektronix or that is produced or distributed in accordance with the permission and license set forth above.

Tektronix may make changes to the content of this website or to its products at any time without notice.

Limitation of Liability:

TEKTRONIX SHALL NOT BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, ANY CONSEQUENTIAL OR INCIDENTAL DAMAGES, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION, OR FOR INFRINGEMENT OF INTELLECTUAL PROPERTY) ARISING OUT OF THE USE OF ANY MEASUREMENT PRODUCT MANUAL OR OTHER PUBLICATION PRODUCED OR DISTRIBUTED IN ACCORDANCE WITH THE PERMISSION AND LICENSE SET FORTH ABOVE.

 

Read Online

Preface

This document helps customers with data security concerns to sanitize or remove memory devices from their instrument.

This series of instruments contains an open architecture PC with removable mass storage. You can order additional removable mass storage devices to swap in and out of the instrument as needed for security reasons.

These products have data storage (memory) devices and data export interfaces (USB ports, Ethernet, and eSATA). These instructions describe how to clear or sanitize the memory devices and disable the data output interfaces. The instructions also describe how to declassify an instrument that is not functioning.

Reference

The procedures in this document are written to meet the requirements specified in:

  • NISPOM, DoD 5220.22–M, Chapter 8 

  • ISFO Process Manual for Certification & Accreditation of Classified Systems under NISPOM

Products

The following Tektronix products are covered by this document:

  • DPO77002SX
  • DPO75902SX
  • DPO75002SX
  • DPO73304SX
  • DPO72304SX
  • DPO71604SX
  • DPO71304SX

Terms

The following terms may be used in this document:

  • Clear. This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to deny access to previously stored information by standard means of access.

  • Erase. This is equivalent to clear.

  • Media. Storage/data export device. A device that is used to store or export data from the instrument, such as a USB port/USB flash drive.

  • Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology. This is typically used when the device will be moved (temporarily or permanently) from a secured area to a nonsecured area.

  • Scrub. This is equivalent to sanitize.

  • Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions are available in the product service manual.

  • User Accessible. User is able to directly retrieve the memory device contents.

  • User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the instrument user interface or remote control.

  • Volatile memory. Data is lost when the instrument is powered off.

  • Nonvolatile memory. Data is retained when the instrument is powered off.

  • Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For the purpose of clearing data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either press a rear-panel OFF switch or remove the power source from the instrument.

  • Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be removed from a secure environment. Declassification procedures include memory sanitization and memory removal, and sometimes both.

Clear and sanitize procedures for memory devices

The following tables list the volatile and nonvolatile memory devices in the instrument.

Terminology

  • User data – Describes the type of information stored in the device. Refers to waveforms or other measurement data representing signals connected to the instrument by users.

  • User settings – Describes the type of information stored in the device. Refers to instrument settings that can be changed by the user.

  • Both – Describes the type of information stored in the device. It means that both user data and user settings are stored in the device.

  • None – Describes the type of information stored in the device. It means that neither user data or user settings are stored in the device.

  • Directly – Describes how data is modified. It means that the user can modify the data.

  • Indirectly – Describes how data is modified. It means that the instrument system resources modify the data and that the user cannot modify the data.

Volatile memory devices

Type and minimum size

FunctionType of user info stored Backed-up by batteryMethod of modificationData input methodLocationUser accessibleTo clearTo sanitize
SDRAM, 512M X 16 up to 1024M X 64 bits

Acquisition memory for holding and processing waveforms, and processor system RAM

User dataNoIndirectlyWindows UI and TekScope UIAnalog acquisition boardYesRemove power from the instrument for at least 20 secondsRemove power from the instrument for at least 20 seconds

PC RAM

PC motherboardUser dataNoIndirectlyWritten by processor system PC motherboard or COM-E moduleYes
SDRAM, 512M X 16 bits up to 1024M X 16 bitsAcquisition memory for holding and processing digital waveforms User dataNoIndirectlyWritten by processor systemDigital acquisition boardYes

Non-volatile memory devices

Type and minimum size

FunctionType of user info stored Method of modificationData input methodLocationUser accessibleTo clearTo sanitize
Removable hard drive Holds all user-storable data (waveforms and instrument settings) User data and user settingsDirectly and indirectlyWindows UI and TekScope UI Rear panelYesSee Removable solid state drive topic.See Removable solid state drive topic.
EEPROM, 4096 bits PCI/PCIe local bus settings NoneUser cannot modifyProgrammed at factory Acquisition board NoNot applicable, does not contain user data or setting. Clearing would disable instrument functionality. Not applicable, does not contain user data or setting. Sanitizing would disable instrument functionality.
EEPROM, 1024 bits PCI/PCIe local bridge settings NoneUser cannot modifyProgrammed at factoryAcquisition board No
SPI Flash 2 Megabits Option key, event log, serial number, and model number NoneDirectlyProgrammed at factory. Option keys can be input by the user Acquisition board Yes
NVRAM, 16 Megabits Calibration dataNoneUser cannot modifyProgrammed at factoryAcquisition board No
NVRAM, 4 Megabits Motherboard BIOS and BIOS settings NoneDirectlyBIOS UI. User can change BIOS settingsPC motherboardYes

Media and data export devices

The following table lists the data export devices in the instrument.

Type and minimum size FunctionMethod of modificationData input methodLocationUser accessibleTo disable
USB portSupports removable USB flash drive. User storage of reference waveforms, screen images, and instrument setups DirectlyDirectly by system resourcesUSB host ports on front or rear of instrumentYes

Remove all USB memory devices. USB devices can be formatted, stored in a secure area, or destroyed.

USB ports can be disabled (See Disabling USB capability topic)

EthernetUser storage of reference waveforms, screen images, and instrument setups and installation of softwareDirectlySystem resourcesEthernet port on rear of instrumentYesDisconnect from Network cable. Ethernet port can be disabled. (See To disable LAN Ethernet connectivity using the BIOS topic.)

Clearing solid state disk drives

Note:The following procedure covers only Tektronix installed software.

If your organization's security protocols allow the use of software to purge or clear solid state drives, you can use commercial software to erase free space on the drive before sending the instrument out for upgrades or repair. Follow the instructions that come with the software to be sure that the erasure of sensitive data from the drive complies with your organization's security protocols.

On solid state drives, the drive and the operating system work together to reallocate sectors on the drive to even out the wear of the storage cells. Make sure that software you use to purge or clear a solid state drive is approved for solid state drives.

CAUTION:Before clearing the drive to meet security requirements, be sure that an OS-restore disk and product software restore disk are available and that you have the procedures needed to restore the OS and product software.

Sequence for clearing secure data from a drive:

  1. Erase all files with the following extensions:

    • *.png; *.bmp;*.pcx, *.tif, *.jpg – These file types can be screenshots that can contain valuable information.

    • *.msk, *.set, *.wfm, *.csv, *.txt, *.dat – These file types can contain data exported from the instrument (setup, waveforms, measurement results).

  2. Acquire several full memory-length acquisitions of noise (no signal attached to the input).

  3. Close the TekScope application and erase the free space on the hard disk using commercial software.

Removing a removable solid state drive

For detailed information on removing parts from the instrument, see the DPO70000SX Series Service Manual on www.tek.com.

WARNING:Before doing this procedure, disconnect the power cord from the line voltage source. Failure to do so could cause serious injury or death.
CAUTION:To avoid damaging the drive, perform the following procedure in a static-safe environment with proper electro-static discharge controls in place.
  1. Loosen the thumbscrews on the removable drive panel.
  2. Pull the removable drive out from the instrument.

Disabling USB capability

The following instructions describe how to disable the built-in USB capability. Using the BIOS disables the devices for DOS and Windows programs, while the Windows Device Manager disables the devices for Windows programs. These procedures disable USB to prevent its use.

Note:

If you disable the USB and LAN in the following procedures, you cannot write new firmware to the hard drive. To do so, you must enable one of these items.

To disable USB using the BIOS

  1. Press Delete during instrument Boot Up to go to the BIOS configuration menu.

  2. Go to Chipset\PCH-IO Configuration.

  3. Go to USB Configuration.
  4. Set USB Ports Per-Port to Enabled.
  5. Set all ports to Disabled. (To continue using the touchscreen, leave port 9 enabled.)
  6. Hit Esc twice to return to the main BIOS configuration menu.

  7. Go to Security > Administrator Password. Press Enter.

  8. Specify a password. You will be asked to confirm the password by entering it again. Note the password, and store it in a safe place for future use.

  9. Exit Saving Changes by pressing F4, and selecting Yes.

Disabling LAN capability

To disable LAN ethernet connectivity using the BIOS, do the following.

  1. Press Delete during instrument Boot Up to go to the BIOS configuration menu.

  2. Go to Advanced BIOS Settings\Chipset Settings\PCH-IO Configuration.

  3. Set both LAN1 Controller and LAN2 Controller to Disabled.

  4. Press Esc once to return to the main BIOS configuration menu.

    Note:

    If you do not use a BIOS password, the LAN can be reactivated by any user.

  5. Press F4, and select OK to save changes and exit. The LAN system will be disabled and will no longer allow data traffic in or out.

Removable solid state drive

All user-storable data is stored on the removable drive. Sanitize or replace the drive in a manner that meets local and any other security requirements that you have.

Note:

To see the size of the drive, refer to the (C:) local disk properties window.

Note:

Ensure you create OS Restore media before scrubbing the hard drive/solid state drive or moving the instrument into a secure area.

After the drive is sanitized or replaced, the operating system and instrument software can be reinstalled. Following reinstallation of the operating system and product software, you must run the Signal Path Compensation (SPC) procedure in the Utilities menu after a 20-minute warm-up period. This returns the instrument solid state drive to the initial state shipped from the factory.

Scrubbing the drive will not affect calibration of the instrument, since the factory calibration constants are stored on the acquisition board, entirely separate from any acquisition data or user files. You can completely erase or remove any secure data without affecting the calibration of the instrument. You can also calibrate the instrument in a nonsecure site, and then use the instrument in a secure area without recalibration.

PC RAM size

To see the size of the PC RAM in the instrument, refer to the General tab of the Windows System Properties dialog box.

How to clear or sanitize a Non-Functional instrument

If your instrument is not functioning, you may proceed as follows:

Solid state drive

Remove the drive and return the product to Tektronix. A new drive will be installed and the instrument will be repaired and adjusted as necessary. Alternatively you may use the Removable Solid State Drive procedure before returning the product to Tektronix. (See Removeable solid state drive topic.)

For removal instructions, refer to the instrument service manual, available at www.tek.com/manuals.

External memory devices

Remove any attached USB flash drive or external hard drives from the instrument before returning the instrument to Tektronix for repair.

Refer to your company’s internal policies regarding handling or disposal of the external memory device.

Charges

Replacement of any missing hardware will be charged according to the rate at the time of replacement.

How to recover from clearing or removing the instrument memory

After the hard drive/solid state drive is sanitized, the operating system and instrument software must be reinstalled.

Help us improve our technical documentation. Provide feedback on our TekTalk documentation forum.