R&S NGL200 series Manual

PAD-T-M: 3574.3288.02/03.00/CI/1/EN
R&S®NGM/NGL
Power Supply
Instrument Security Procedures
3662.9729.02 -01
Instrument Security Procedures

R&S® NGM/NGL Contents
Instrument Security Procedures 3662.9729.02 2
Contents
Overview.....................................................................3
Instrument Models Covered......................................3
Security Terms and Definitions ................................3
Types of Memory and Information Storage.............4
4.1 Volatile Memory.................................................................. 4
4.2 Non-Volatile Memory ......................................................... 5
Secure Erase Procedure ...........................................6
Instrument Declassification......................................6

R&S® NGM/NGL Overview
Instrument Security Procedures 3662.9729.02 3
Overview
In many cases, it is imperative that the R&S NGM/NGL Power Supplies are used in a
secured environment. Generally, these highly secured environments do not allow any
test equipment to leave the area unless it can be proven that no user information
leaves with the test equipment. Security concerns can arise when devices need to
leave a secured area e.g. to be calibrated or serviced. This document describes the
types of memory and their usage in the R&S NGM/NGL series. It provides a statement
regarding the volatility of all memory types and specifies the steps required to
declassify an instrument through memory clearing or sanitization procedures. These
sanitization procedures are designed for customers who need to meet the
requirements specified by the US Defense Security Service (DSS).
Instrument Models Covered
Table 2-1: Power Supply models
Model
Order number
R&S NGL201
3638.3376.02
R&S NGL202
3638.3376.03
R&S NGM201
3638.4472.02
R&S NGM202
3638.4472.03
Security Terms and Definitions
Clearing - The term "clearing" is defined in Section 8-301a of DoD 5220.22-M,
"National Industrial Security Program Operating Manual (NISPOM)". Clearing is the
process of eradicating the data on media so that the data can no longer be retrieved
using the standard interfaces on the instrument. Therefore, clearing is typically used
when the instrument is to remain in an environment with an acceptable level of
protection.
Sanitization - The term "sanitization" is defined in Section 8-301b of DoD 5220.22-M,
"National Industrial Security Program Operating Manual (NISPOM)". Sanitization is the
process of removing or eradicating stored data so that the data cannot be recovered
using any known technology. Instrument sanitization is typically required when an
instrument is moved from a secure to a non-secure environment, such as when it is
returned for service of calibration. The memory sanitization procedures described in
this document are designed for customers who need to meet the requirements
specified by the US Defense Security Service (DSS). These requirements are specified
in the "Clearing and Sanitization Matrix" in Section 14.1.16 of the ISFO "Manual for the
Certification and Accreditation of Classified Systems under the NISPOM".
Instrument declassification - The term "instrument declassification" refers to
procedures that must be undertaken before an instrument can be removed from a
secure environment, for example when the instrument is returned for calibration.
Declassification procedures include memory sanitization or memory removal, or both.

R&S® NGM/NGL Types of Memory and Information Storage
Instrument Security Procedures 3662.9729.02 4
The declassification procedures described in this document are designed to meet the
requirements specified in DoD 5220.22-M, "National Industrial Security Program
Operating Manual (NISPOM)", Chapter 8.
Types of Memory and Information Storage
The NGM/NGL Power Supplies contain various memory components. The following
table provides an overview of the memory components that are part of your instrument.
For a detailed description regarding type, size, usage and location, refer to the
subsequent sections.
Table 4-1: Memory types
Memory type
Size
Content
Volatility
User
Data
Sanitization
procedure
Main Processor
Internal Caches and
Memory
-
Startup and
operating
instructions,
operating data and
states
Volatile
Yes
Power Off
DDR3 SDRAM
2 x 2Gb
Operating
instructions, user
and program data
Volatile
Yes
Power Off
eMMC NAND Flash
4GB
Board and device
IDs, instrument
firmware, calibration
data, instrument
settings, state and
user data
Non-volatile
Yes
Secure Erase
MCU Internal Flash
256+3KB per chip
R&S NGL201 x1
R&S NGM201 x1
R&S NGL202 x2
R&S NGM202 x2
Channel control
firmware and
calibration data
Non-volatile
No
Not required
MCU Internal SRAM
32 KB per chip
R&S NGL201 x1
R&S NGM201 x1
R&S NGL202 x2
R&S NGM202 x2
Channel operating
data
Volatile
No
Power Off
EEPROM
32Kbit
Calibration and
production data
Non-volatile
No
Not required
4.1 Volatile Memory
The volatile memory in the instrument loses its contents as soon as power is removed
from the instrument. The volatile memory is not a security concern. Removing power

R&S® NGM/NGL Types of Memory and Information Storage
Instrument Security Procedures 3662.9729.02 5
from this memory meets the memory sanitization requirements specified in the
"Clearing and Sanitization Matrix" in Section 5.2.5.5.5 of the ISFO Process Manual for
the Certification and Accreditation of Classified Systems under the NISPOM.
Main Processor Internal Caches and Memory
The NGM/NGL series have internal caches and memory in its main processor on the
front controller board. These contain startup and operating instructions, operating data
and states that are critical to device performance and operation. Turning off instrument
power will remove user data in the main processor.
Sanitization procedure: Turn off instrument power
SDRAM
The NGM/NGL series has two DDR3 SDRAM memory devices with 2 Gbit each. They
contain instructions and data for the operating system and device applications,
including measurement and display data, when the power supply is running.
SDRAM loses its memory as soon as power is removed.
Sanitization procedure: Turn off instrument power
SRAM
The NGM/NGL series has up to four 32 KByte SRAM devices which are integrated in
the power supply’s channel microcontrollers. The SRAMs contain the control and
status/operating data of the channel control firmware and loses its memory as soon as
power is removed.
Sanitization procedure: Turn off instrument power
4.2 Non-Volatile Memory
The R&S NGM/NGL series contain non-volatile flash memories. User data can be
removed from these memories with the Secure Erase procedure.
eMMC Flash
The R&S NGM/NGL series has one 4 GByte flash memory on the front controller board
that contains board and device IDs, the instrument firmware and the factory calibration
data. In addition, this flash memory stores all the instrument settings, the instrument
state, and user data. The flash can hold user data and is non-volatile. Hence, user data
is not erased when power is removed from the instrument. The R&S NGM/NGL series
provides a sanitizing procedure that ensures that user data is irretrievably removed
from the instrument.
Sanitization procedure: Secure Erase procedure (see Chapter 5, "Secure Erase
Procedure", on page 5)

R&S® NGM/NGL Secure Erase Procedure
Instrument Security Procedures 3662.9729.02 6
Channel MCU Flash
The NGM/NGL series has up to four microcontrollers each with an integrated 256
KByte flash memory with 3 KByte Boot Flash. The flash memory contains the channel
control firmware as well as calibration data. It does not hold user data nor can the user
access the storage.
Sanitization procedure: None required (no user data)
EEPROM
The R&S NGM/NGL series has one 32Kbit EEPROM used to store production and
calibration data.
Sanitization procedure: None required (no user data)
Secure Erase Procedure
To sanitize the internal flash memory, perform the following steps:
1. Press the menu button to the left of the NGM/NGL series’ LCD Panel.
2. Under the ‘Device’ Tab, scroll down to select ‘Save/Recall Device Settings’.
3. Select ‘Factory Reset’. Tap ‘Yes’ to proceed when prompted to reset all settings to
factory defaults.
4. Tap ‘Yes’ to proceed when prompted to delete all files in ‘/int’.
5. Wait for device to reboot and all user data will be removed and factory default
settings restored.
Do not turn off the instrument during the Secure Erase process!
The Secure Erase procedure meets the memory sanitization requirements specified in
the "Clearing and Sanitization Matrix" in Section 14.1.16 of the ISFO Process Manual
for the Certification and Accreditation of Classified Systems under the NISPOM.
Instrument Declassification
Before you can remove the Power Supply from a secured area (for example to perform
service or calibration), all classified user data needs to be removed. You can declassify
the Power Supply as follows:
1. Sanitize the non-volatile memory as described in Chapter 5, "Secure Erase
Procedure".
2. Turn off the Power Supply. This will sanitize the volatile memory.
Following these steps removes all user data from the Power Supply. The Power
Supply can now leave the secured area. These declassification procedures meet the
needs of customers working in secured areas.

R&S® NGM/NGL Instrument Declassification
Instrument Security Procedures 3662.9729.02 7
Validity of instrument calibration after declassification
The permanent adjustment values required to maintain the validity of the R&S
NGM/NGL series’ calibration are not affected by the Secure Erase procedure.
Therefore, performing the declassification procedure does not affect the validity of the
instrument’s calibration.
© 2020 Rohde & Schwarz GmbH & Co. KG
Mühldorfstr. 15, 81671 München, Germany
Phone: [phone] - 0
Fax: [phone]
Email: [e-mail]
Internet: www.rohde-schwarz.com
Subject to change –Data without tolerance limits is not binding.
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG.
Trade names are trademarks of their owners.
Throughout this manual, products from Rohde & Schwarz are indicated without the ® symbol , e.g.
R&S®NGM/NGL is indicated as R&S NGM/NGL.