5 and 6B Series MSO Declassification and Security Instructions

Declassification and Security Instructions for MSO54, MSO56, MSO58, MSO54B, MSO56B, MSO58B, MSO64B, MSO66B, MSO68B

This document helps you with data security concerns to sanitize or remove memory devices from their 5 Series B and 6 Series B MSO instrument. The instructions also support 5 Series MSO instruments with a serial number of B020000 and above or C040000 and above.

Dieses Handbuch bezieht sich auf:

MSO64B, MSO66B, MSO68B, MSO56, MSO58, MSO54B, MSO56B, MSO58B

Handbuchtyp: Geheimhaltungsaufhebung
Teilenummer: 077169403

Veröffentlichungsdatum: 19.12.2023

Datei herunterladen

By downloading, you agree to the terms and conditions of the Manuals Download Agreement.

Manuals Download Agreement

ATTENTION: please read the following terms and conditions carefully before downloading any documents from this website. By downloading manuals from Tektronix' website, you agree to the following terms and conditions:

Manuals for Products That Are Currently Supported:

Tektronix hereby grants permission and license to owners of Tektronix instruments to download and reproduce the manuals on this website for their own internal or personal use. Manuals for currently supported products may not be reproduced for distribution to others unless specifically authorized in writing by Tektronix, Inc.

A Tektronix manual may have been revised to reflect changes made to the product during its manufacturing life. Thus, different versions of a manual may exist for any given product. Care should be taken to ensure that one obtains the proper manual version for a specific product serial number.

Manuals for Products That Are No Longer Supported:

Tektronix cannot provide manuals for measurement products that are no longer eligible for long term support. Tektronix hereby grants permission and license for others to reproduce and distribute copies of any Tektronix measurement product manual, including user manuals, operator's manuals, service manuals, and the like, that (a) have a Tektronix Part Number and (b) are for a measurement product that is no longer supported by Tektronix.

A Tektronix manual may be revised to reflect changes made to the product during its manufacturing life. Thus, different versions of a manual may exist for any given product. Care should be taken to ensure that one obtains the proper manual version for a specific product serial number.

This permission and license does not apply to any manual or other publication that is still available from Tektronix, or to any manual or other publication for a video production product or a color printer product.

Disclaimer:

Tektronix does not warrant the accuracy or completeness of the information, text, graphics, schematics, parts lists, or other material contained within any measurement product manual or other publication that is not supplied by Tektronix or that is produced or distributed in accordance with the permission and license set forth above.

Tektronix may make changes to the content of this website or to its products at any time without notice.

Limitation of Liability:

TEKTRONIX SHALL NOT BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, ANY CONSEQUENTIAL OR INCIDENTAL DAMAGES, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION, OR FOR INFRINGEMENT OF INTELLECTUAL PROPERTY) ARISING OUT OF THE USE OF ANY MEASUREMENT PRODUCT MANUAL OR OTHER PUBLICATION PRODUCED OR DISTRIBUTED IN ACCORDANCE WITH THE PERMISSION AND LICENSE SET FORTH ABOVE.

Read Online

5 and 6B Series MSO Declassification and Security Instructions

PREFACE

Preface

CLEAR AND SANITIZE PROCEDURE

Memory devices
Media and data export devices
Option 5/6-SEC for a secure instrument
Overwriting the user password
Clearing or sanitizing SSDs
How to sanitize a non-functional instrument
Repair charges

Preface

This document helps customers with data security concerns to sanitize or remove memory devices from their instrument.

This series of instruments contains an open architecture PC with removable mass storage. You can order additional removable mass storage devices to swap in and out of the instrument as needed for security reasons.

These products have data storage (memory) devices and data export interfaces (USB ports, Ethernet, and eSATA). These instructions describe how to clear or sanitize the memory devices and disable the data output interfaces. The instructions also describe how to declassify an instrument that is not functioning.

Products

The following Tektronix products are covered by this document.

5 Series MSO Instruments (MSO54, MSO56, MSO58) with a serial number of B020000 and above or C040000 and above
5 Series B MSO instruments (MSO54B, MSO56B, MSO58B)
6 Series B MSO Instruments (MSO64B, MSO66B, MSO68B)

Terms

The following terms may be used in this document:

Clear. This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to deny access to previously stored information by standard means of access.
Erase. This is equivalent to clear.
Media. Storage/data export device. A device that is used to store or export data from the instrument, such as a USB port/USB flash drive.
Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology. This is typically used when the device will be moved (temporarily or permanently) from a secured area to a nonsecured area.
Scrub. This is equivalent to sanitize.
Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions are available in the product service manual.
User Accessible. User is able to directly retrieve the memory device contents.
User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the instrument user interface or remote control.
Volatile memory. Data is lost when the instrument is powered off.
Non-user-accessible memory. Data is retained when the instrument is powered off.
Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For the purpose of clearing data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must remove the power source from the instrument.
Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be removed from a secure environment. Declassification procedures include memory sanitization and memory removal, and sometimes both.

Clear and sanitize procedure

The memory device tables list the volatile and nonvolatile memory devices in the standard instrument and listed options. Procedures to clear or sanitize these devices, if any, are given in each table.

Terms

The following terms are used in the tables in this section:

User data. Describes the type of information stored in the device. Refers to waveforms or other measurement data representing signals connected to the instrument by users.
User settings. Describes the type of information stored in the device. Refers to instrument settings that can be changed by the user.
Both. Describes the type of information stored in the device. It means that both user data and user settings are stored in the device.
None. Describes the type of information stored in the device. It means that neither user data or user settings are stored in the device.
Directly. Describes how data is modified. It means that the user can modify the data.
Indirectly. Describes how data is modified. It means that the instrument system resources modify the data and that the user cannot modify the data.

Memory devices

The following tables list the memory devices in the instrument.

Table 1. Volatile memory
Type & min. size	Function	Type of user info stored	Backed up by battery	Method of modification	Data Input method	Location	User access	Clear
SDRAM ≥ 32 GB	Host processor memory	Both	No	Directly	Written by processor system	Module socket (SODIMM) on processor module board	Yes	Remove power from the instrument for a minimum of 30 seconds.
SDRAM ≥4 GB	Holds active acquisition data	User data	No	Indirectly	Application software operations	Module socket (SODIMM) on acquisition board	No	Remove power from the instrument for a minimum of 30 seconds.
SDRAM ≥512 MB	Holds video graphics data	User data	No	Indirectly	Application software operations	Acquisition board	No	Remove power from the instrument for a minimum of 30 seconds.
CMOS RAM ≥256 Bytes	Holds clock and BIOS configuration data	None	Yes	Indirectly	BIOS operations	Processor module board	Yes	Remove power from the instrument and press the CMOS clear button for a minimum of 30 seconds.

Table 2. Non-user accessible memory
Type & min. size	Function	Type of user info stored	Method of modification	Data Input method	Location	User access	Clear
EEPROM ≥2 Kbit	Stores factory data, maintenance data, and user password	User settings User password is settable using PI commands	Indirect	Factory operations and programmatic commands	Acquisition board	Yes	Overwrite user password. (see Overwriting the user password.) Clearing or sanitizing the entire memory device would disable instrument functionality.
EEPROM ≥2 Kbit	Holds AFG calibration data	None	Indirect	Factory operations	AFG riser board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
EEPROM ≥64 Kbit	Holds the front panel USB configuration	None	None	Factory operations	Front panel LED board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
EEPROM ≥1 Kb depending on model	Holds the SODIMM memory configuration data (SPD)	None	None	Factory operations	Module socket (SODIMM) on processor module board and module socket (SODIMM) on acquisition board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
Flash Memory 16 Mbit to 512 Mbit Two pieces	Holds a portion of the Acquisition FPGA configuration	None	Indirect	Application software operations	Acquisition board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
Flash Memory ≥128 Mbit	Stores processor BIOS firmware, BIOS configuration, and embedded controller firmware. The Ethernet MAC address is stored in this device.	None	Indirect	BIOS operations, operating system operations and factory operations	Processor module board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
Flash Memory Unspecified size, three pieces	Stores power supply configuration data	None	Indirect	Application software operations	Internal to the UCD9248 power supply controller on the acquisition board and processor carrier board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
Flash Memory ≥32 KB	Stores power management controller firmware	None	Indirect	Application software operations	Internal to the MC9S08 microcontroller on the acquisition board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
Flash Memory ≥64 KB one piece	Stores analog board microcontroller firmware	None	Indirect	Application software operations	Internal to the MKL14 microcontroller on the analog board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
FLASH Memory on-chip 128KB and 32KB SRAM	Processor drives an EMMC NAND flash part that is 4 GB of memory and stores the factory calibration and licensing information	None	Indirect	Application software operations	MKL27 microcontroller on the front panel board. MKL02 parts on the front-end acquisition board. They each have 32KB on-chip FLASH. There is one MKL02 per channel.	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.
Flash Memory ≥0.33 Mbit	Stores the processor carrier FPGA configuration	None	None	Factory operations	Internal to the LCMXO2 FPGA on the processor carrier board	No	Not applicable, does not contain user data or settings. Clearing or sanitizing would disable instrument functionality.

The following table contains user-accessible memory devices. Only one of the following Solid State Drives may be connected to the instrument at a time.

Table 3. User-accessible memory
Type & min. size	Function	Type of user info stored	Method of modification	Data Input method	Location	User access	Clear	Sanitize
Linux Solid State Drive ≥256 GB (default option)	Host instrument Linux operating system and application software. Holds user-storable data such as waveforms, measurement results, and instrument settings.	Both	Directly	Written by processor system, software operations, user input	2.5" SSD that is removable and is inserted in the socket on the bottom of the instrument.	Yes	There is no Tektronix recommended process for clearing the drive. To clear the Linux Solid State Drive, destroy the SSD and purchase a replacement (SUPx-LNX).	Remove the SSD assembly from the instrument through the trap door in the bottom of the instrument.
Linux Solid State Drive ≥500 GB (SUPx-LNX)		Both	Directly			Yes
Windows 10 Solid State Drive ≥500 GB (x-WIN or SUPx-WIN)	Host instrument Windows operating system and application software. Holds user-storable data such as waveforms, measurement results, and instrument settings.	Both	Directly	Written by processor system, software operations, user input	2.5" SSD that is removable and is inserted in the socket on the bottom of the instrument.	Yes	There is no Tektronix recommended process for clearing the drive. To clear the Windows Solid State Drive, destroy the SSD and purchase a replacement (SUPx-WIN).	Remove the SSD assembly from the instrument through the trap door in the bottom of the instrument.

Media and data export devices

The following table lists the data export devices in the instrument.

Table 1. Media and Data export devices
Type	Function	Method of modification	Data input method	Location	User access	Disable
USB Host port (supports removable USB flash drive)	User storage of reference waveforms, screen images, and instrument setups, and installation of firmware updates	Directly	User writeable	Three USB host ports on front panel of the instrument; four USB host ports on the back panel of the instrument	No	USB Host ports can be disabled for use with USB Storage devices behind password control. This option is available if Option 5/6-SEC is installed.
USB Device port	Supports remote control and data transfer to a PC	Directly	Remote control using USBTMC	USB Device port on back of the instrument	Yes	The USB Device port can be disabled by selecting Utility > I/O > USB DevicePort, and setting USB Device port to Off. This option is available if Option 5/6-SEC is installed
Ethernet	Transfer data and remote control of instrument.	Directly	Remote Control using LXI or Socket Server	Ethernet port on back of instrument	No	Ethernet port can be disabled behind password control. This option is available if Option 5/6-SEC is installed.

Option 5/6-SEC for a secure instrument

Option 5/6-SEC provides the highest level of instrument security for 5 Series¹, 5 Series B and 6 Series B MSO products. Option 5/6-SEC features include:

Password protection to enable/disable external communication ports
Password protection to enable/disable firmware upgrades or downgrades
There is also a special BIOS installed that includes a default password ("Tektronix"). Additionally when the CMOS reset is pressed the BIOS password is reset to "Tektronix" instead of being removed.

Note:Option 5/6-SEC must be ordered at the same time as ordering an instrument.

¹ Serial numbers of B020000 and above or C040000 and above.

Overwriting the user password

Use this procedure to change the user password. The user password is not currently functional or accessible in the oscilloscope user interface, but it is accessible from the programmatic interface. The user password is used to protect a "user string" that can be set and displayed in the UI. This functionality is a legacy functionality and while the user password does exist through the programmatic interface, there is no function to display the user string in the user interface on this instrument.

Connect a PC to the oscilloscope (Ethernet or USB Device port).
Use a Windows remote terminal or similar program to communicate with the oscilloscope. Tap the Utility > I/O menu on the oscilloscope to see the current instrument settings.
Send the following commands to the oscilloscope:
1. :PASSWORD "XYZZY"
  (or current password if changed from the default of "XYZZY")
2. :NEWPASS "NEWPASSWORD"
  (Or other password up to 16 characters)

If you do not have access to a program that supports sending programmatic commands to the instrument, do the following:

Copy the preceding commands to a text file.
Compress the text file into a ZIP archive file that ends in ".set".
Copy the file to a USB drive.
Insert the USB drive into the oscilloscope.
Recall the file from the Recall Setup dialog box (File > Recall > Setup tab).

For more information on using programmatic commands, refer to your product programmer manual, available at www.tek.com/manuals.

Clearing or sanitizing SSDs

Clearing means that all customer-generated data in reusable memory (acquisition records, settings, measurements, screen captures, reports, and so on) is modified such that the data cannot be recovered using standard means of access. Standard means of access includes typical OS file utilities. The data may still be on the memory device, but requires specialized software and/or hardware to recover. You typically clear an instrument when you want to erase files to clear space or turn the instrument over to another person or department.

Sanitizing means that all data in reusable memory is changed or overwritten such that the original data is no longer in memory, and the older data cannot be recovered using any known technology. You typically do a sanitize operation when you move an instrument (temporarily or permanently) from a secured area to a non-secure area.

The instrument does not have any function to clear or sanitize Linux or Windows 10 Solid State Drives (SSD) while maintaining instrument operation. To ensure user data has been sanitized, destroy your current SSD and order a replacement drive with either SUPx-LNX or SUPx-WIN depending on your operating system and scope model.

For instruments where the drive is customer replaceable, reverse the installation steps in the 5/6 Series MSO Option SSD Upgrade Kit Installation Instructions (part number 0713524xx) to remove the drive. All documents are available at tek.com/downloads.

For instruments without customer replaceable drives, please contact Tektronix Calibration & Services to make arrangements.

How to sanitize a non-functional instrument

If your instrument is not functioning, proceed as follows to sanitize the instrument to return to Tektronix for repair:

Remove any attached USB flash drives or external USB drives from your instrument. Refer to your company's internal policies regarding handling or disposal of the flash drives.
Remove the solid state drive from your instrument and destroy it. Refer to your company's internal policies regarding handling or disposal of solid state drives.
Contact Tektronix Calibration and Services to make arrangements to order a new solid state drive and return your instrument. The new solid state drive will be installed and the instrument will be calibrated and returned.

Repair charges

Replacement of any missing hardware will be charged according to the rate at the time of replacement.

Help us improve our technical documentation. Provide feedback on our TekTalk documentation forum.