Rohde & Schwarz FSUP8 User manual

R&S®FSUP
Signal Source Analyzer
Instrument Security Procedures
Instrument Security Procedures
1171.5702.52 ─ 02
(;ÕÇ2Â)

Contents
R&S®FSUP
2Instrument Security Procedures 1171.5702.52 ─ 02
Contents
1 Overview................................................................................................. 2
2 Instrument Models Covered..................................................................2
3 Security Terms and Definitions............................................................ 3
4 Types of Memory and Information Storage in the R&S FSUP........... 3
5 Instrument Declassification.................................................................. 5
6 Special Considerations for USB Ports.................................................7
1 Overview
In many cases, it is imperative that the R&S FSUP Signal Source Analyzers are used
in a secured environment. Generally these highly secured environments do not allow
any test equipment to leave the area unless it can be proven that no user information
leaves with the test equipment. Security concerns can arise when devices need to
leave a secured area e.g. to be calibrated or serviced.
This document describes the types of memory and their usage in the R&S FSUP. It
provides a statement regarding the volatility of all memory types and specifies the
steps required to declassify an instrument through memory clearing or sanitization pro-
cedures. These sanitization procedures are designed for customers who need to meet
the requirements specified by the US Defense Security Service (DSS).
2 Instrument Models Covered
Table 2-1: Signal Source Analyzer models
Product name Order number
R&S FSUP8 1166.3505.09
R&S FSUP26 1166.3505.27
R&S FSUP50 1166.3505.51

Security Terms and Definitions
R&S®FSUP
3Instrument Security Procedures 1171.5702.52 ─ 02
3 Security Terms and Definitions
Clearing:
As defined in Section 8-301a of DoD 5220.22-M, "National Industrial Security Program
Operating Manual (NISPOM)", clearing is the process of eradicating the data on media
so that the data can no longer be retrieved using the standard interfaces on the instru-
ment. Hence, clearing is typically used when the instrument is to remain in an environ-
ment with an acceptable level of protection.
Sanitization:
As defined in Section 8-301b of DoD 5220.22-M, "National Industrial Security Program
Operating Manual (NISPOM)", sanitization is the process of removing or eradicating
stored data so that the data cannot be recovered using any known technology. Instru-
ment sanitization is typically required when an instrument is moved from a secure to a
non-secure environment, such as when it is returned for service of calibration.
The memory sanitization procedures described in this document are designed for cus-
tomers who need to meet the requirements specified by the US Defense Security Ser-
vice (DSS). These requirements are specified in the "Clearing and Sanitization Matrix"
in Section 14.1.16 of the ISFO Process Manual for the Certification and Accreditation
of Classified Systems under the NISPOM.
Instrument declassification:
A term that refers to procedures that must be undertaken before an instrument can be
removed from a secure environment, such as is the case when the instrument is
returned for calibration. Declassification procedures include memory sanitization or
memory removal, or both. The declassification procedures described in this document
are designed to meet the requirements specified in DoD 5220.22-M, "National Indus-
trial Security Program Operating Manual (NISPOM)", Chapter 8.
4 Types of Memory and Information Storage
in the R&S FSUP
The Signal Source Analyzer contains various memory components.
The following table provides an overview of the memory components that are part of
your instrument. For a detailed description regarding type, size, usage and location,
refer to the subsequent sections.

Types of Memory and Information Storage in the R&S FSUP
R&S®FSUP
4Instrument Security Procedures 1171.5702.52 ─ 02
Memory type Size Content Volatility User
data
Sanitization
procedure
SDRAM (CPU
board)
256 Mbyte Temporary information storage
for operating system and
instrument firmware
Volatile Yes Turn off instru-
ment power
EEPROM
(board assem-
bly)
256 bytes up
to 32 kbyte
Hardware information:
●Serial number
●Product options
●Calibration correction data
Non-volatile No None required
(no user data)
Flash (CPU
board)
512 kbyte BIOS Non-volatile No None required
(no user data)
Compact flash
(removable)
4 Gbyte ●Operating system
●Instrument firmware
●Instrument states and set-
ups
●Limit lines and transducer
tables
●Trace data
●Measurement results and
screen images
Non-volatile Yes Remove com-
pact flash mem-
ory from instru-
ment
4.1 Volatile Memory
The volatile memory in the instrument does not have battery backup. It loses its con-
tents as soon as power is removed from the instrument. The volatile memory is not a
security concern.
Removing power from this memory meets the memory sanitization requirements speci-
fied in the "Clearing and Sanitization Matrix" in section 5.2.5.5.5 of the ISFO Process
Manual for the Certification and Accreditation of Classified Systems under the NIS-
POM.
SDRAM
The SDRAM on the CPU board has a size of 256 Mbyte and contains temporary infor-
mation storage for operating system and instrument firmware. The SDRAM loses its
memory as soon as power is removed.
Sanitization procedure: Turn off instrument power
4.2 Non-Volatile Memory
The R&S FSUP contains various non-volatile memories. Out of these, only the remov-
able compact flash memory contains user data. The compact flash memory can be
physically removed from the R&S FSUP and left in the secure area.
All non-volatile memories of the R&S FSUP are not a security concern.
Non-Volatile Memory

Instrument Declassification
R&S®FSUP
5Instrument Security Procedures 1171.5702.52 ─ 02
EEPROM
Each board assembly in the R&S FSUP Signal Source Analyzer has one serial
EEPROM device with a size of 256 bytes up to 32 kbyte. The EEPROM contains infor-
mation related to the installed hardware, such as board serial number, product options
and calibration correction data. The EEPROM does not hold user data nor can the user
access the EEPROM storage.
Sanitization procedure: None required (no user data)
Flash
The CPU board of the R&S FSUP Signal Source Analyzer has one 512 kbyte flash
memory device. It contains the BIOS. The flash memory does not hold user data nor
can the user access the flash memory.
Sanitization procedure: None required (no user data)
Compact flash memory / hard disk
The R&S FSUP Signal Source Analyzer can be equipped with either a non-removable
hard disk or a removable compact flash memory. The hard disk and compact flash
memory hold user data and are non-volatile. Hence, user data is not erased when
power is removed from the instrument.
The compact flash memory (R&S FSUP-B18) can be removed from the Signal Source
Analyzer to make sure that no user data is stored within the Signal Source Analyzer.
The R&S FSUP Signal Source Analyzer, equipped with the removable compact flash
memory (R&S FSUP-B18), addresses the needs of customers working in secured
areas.
Sanitization procedure: Remove compact flash memory from instrument
5 Instrument Declassification
Before you can remove the Signal Source Analyzer from a secured area (for example
to perform service or calibration), all classified user data needs to be removed. You
can declassify the Signal Source Analyzer as follows:
1. Turn off the Signal Source Analyzer. This will sanitize the volatile memory.
2. Remove the classified compact flash memory (containing user data).
Following these steps removes all user data from the Signal Source Analyzer. The Sig-
nal Source Analyzer can now leave the secured area.
These declassification procedures meet the needs of customers working in secured
areas.

Instrument Declassification
R&S®FSUP
6Instrument Security Procedures 1171.5702.52 ─ 02
Once the Signal Source Analyzer is outside the secured area, installing a second non-
classified removable compact flash memory (without any user data) allows the Signal
Source Analyzer to function properly for service or other needs.
Prior to re-entering the secured area, the non-classified removable compact flash
memory (without the user data) is removed. When the Signal Source Analyzer is back
within the secured area, the original classified removable compact flash memory can
be reinstalled.
●To hold classified user data in secure areas, use the removable compact flash
memory (R&S R&S FSUP-B18) which comes with the instrument.
●To hold non-classified user data in non-secure areas, use a second compact flash
memory (R&S R&S FSUP-B19).
Validity of instrument calibration after declassification
The calibration makes sure that measurements comply to government standards.
Rohde & Schwarz recommends that you follow the calibration cycle suggested for your
instrument.
The EEPROM is the only memory type used to hold permanent adjustment values
required to maintain the validity of the R&S FSUP's calibration. Therefore, replacing
one removable compact flash memory with another, does not affect the validity of the
instrument’s calibration.
After an exchange of the removable compact flash memory, the board assembly
EEPROMs need to be registered once:
1. Turn off the instrument.
2. Turn the instrument back on while holding down the decimal point key [.] on the
number keypad on the front panel.
3. Continue to hold this key for 10 seconds after pressing the "On" button.
The instrument recognizes the changes and then powers up.
It is only necessary to perform these steps the first time the Signal Source Analyzer
returns from the service.
After exchanging the removable compact flash memory, perform a self-alignment once:
Note that the instrument has sufficient warm-up time before you perform the self-align-
ment.
1. Select the CAL key.
2. Select the "CAL-TOTAL" softkey.
This function uses the high-stability internal reference generator to produce the tempo-
rary adjustment values. Using the permanent and temporary values, the necessary
adjustment information is then stored on the compact flash memory. Rohde & Schwarz
recommends that you perform the self-alignment function once a week.

Special Considerations for USB Ports
R&S®FSUP
7Instrument Security Procedures 1171.5702.52 ─ 02
6 Special Considerations for USB Ports
USB ports can pose a security risk in high-security locations. Generally, this risk comes
from small USB pen drives, also known as memory sticks or key drives. They can be
easily concealed and can quickly read/write several Gbyte of data.
Disabling USB ports for writing user data
You can disable the write capability on the USB ports of the R&S FSUP via a utility
software. This utility software is available on the R&S FSUP website http://www.rohde-
schwarz.com/product/fsup.html.
To disable the write capability, copy the utility software to the R&S FSUP and run it
once. After a reboot of the instrument, the write capability on any USB memory device
is disabled.
© 2016 Rohde & Schwarz GmbH & Co. KG
Mühldorfstr. 15, 81671 München, Germany
Phone: [phone] - 0
Fax: [phone]
Email: [email protected]
Internet: www.rohde-schwarz.com
Subject to change – Data without tolerance limits is not binding.
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG.
Trade names are trademarks of their owners.
Throughout this manual, products from Rohde & Schwarz are indicated without the ® symbol , e.g.
R&S®FSUP is indicated as R&S FSUP.