Rohde & Schwarz ZNH User manual

R&S®ZNH
Handheld Vector Network Analyzer
Instrument Security Procedures
1334600002
Version 01
(=RÊ02)

This document describes the types of memory and their usage in the R&S®ZNH Handheld Vector Network
Analyzer.
© 2021 Rohde & Schwarz GmbH & Co. KG
Mühldorfstr. 15, 81671 München, Germany
Phone: [phone] - 0
Email: [email protected]
Internet: www.rohde-schwarz.com
Subject to change – data without tolerance limits is not binding.
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG.
Trade names are trademarks of the owners.
1334.6000.02 | Version 01 | R&S®ZNH
Throughout this document, products from Rohde & Schwarz are indicated without the ® symbol , e.g. R&S®ZNH is indicated as
R&S ZNH.

Contents
R&S®ZNH
3Instrument Security Procedures 1334.6000.02 ─ 01
Contents
1 Overview................................................................................................. 5
2 Instrument Models Covered..................................................................6
3 Security Terms and Definitions............................................................ 7
4 Statement of Volatility............................................................................9
4.1 Volatile Memory............................................................................................................. 9
4.2 Non-Volatile Memory.....................................................................................................9
4.3 Media............................................................................................................................ 10
5 Instrument Sanitization Procedure.....................................................11
5.1 Volatile Memory........................................................................................................... 11
5.2 Non-volatile Memory................................................................................................... 11
6 Validity of Instrument Calibration after Sanitization.........................13
Glossary: Terminology for Instrument Security Procedures...........14
Index......................................................................................................15

Contents
R&S®ZNH
4Instrument Security Procedures 1334.6000.02 ─ 01

Overview
R&S®ZNH
5Instrument Security Procedures 1334.6000.02 ─ 01
1 Overview
Securing important information is crucial in many applications.
In many cases, it is imperative that the R&S ZNH instruments are used in a secured
environment. Generally, highly secured environments do not allow any test equipment
to leave the area unless it can be proven that no user information leaves with the test
equipment, e.g. to be calibrated.
"Regarding sanitization, the principal concern is ensuring that data is not unintention-
ally released" [1].
This document provides a statement regarding the volatility of the memory types used
and specifies the steps required to sanitize an instrument.
The procedures in this document follow "NIST Special Publication 800-88: Guidelines
for Media Sanitization" [1].
In addition, recommendations are provided to safeguard information on the R&S ZNH.
References
See the following literature for further information.
[1] Kissel Richard L. [et al.] Guidelines for Media Sanitization = Special Publication (NIST SP) =
NIST SP - 800-88 Rev 1. - Gaithersburg : [s.n.], December 17, 2014.
[2] National Industrial Security Program Authorization Office Defense Security Service (DSS)
Assessment and Authorization Process Manual (DAAPM). - May 6, 2019.
[3] ACSC Australian Cyber Security Centre Australian Government Information Security Manual,
January 2020.

Instrument Models Covered
R&S®ZNH
6Instrument Security Procedures 1334.6000.02 ─ 01
2 Instrument Models Covered
Table 2-1: R&S ZNH models
Product name Order number
R&S ZNH4 1321.1611.04
R&S ZNH8 1321.1611.08
R&S ZNH18 1321.1611.18
R&S ZNH26 1321.1611.26
R&S ZNH4 1321.1611.54, equivalent to 1321.1611.04
R&S ZNH8 1321.1611.58, equivalent to 1321.1611.08
R&S ZNH18 1321.1611.68, equivalent to 1321.1611.18
R&S ZNH26 1321.1611.76, equivalent to 1321.1611.26

Security Terms and Definitions
R&S®ZNH
7Instrument Security Procedures 1334.6000.02 ─ 01
3 Security Terms and Definitions
Terms defined in Guidelines for Media Sanitization
NIST Special Publication 800-88 [1]
●Sanitization
"Media sanitization refers to a process that renders access to target data on the
media infeasible for a given level of effort."
●Clear
"Clear applies logical techniques to sanitize data in all user-addressable storage
locations for protection against simple non-invasive data recovery techniques; typi-
cally applied through the standard Read and Write commands to the storage
device, such as by rewriting with a new value or using a menu option to reset the
device to the factory state (where rewriting is not supported)."
●Purge
"Purge applies physical or logical techniques that render Target Data recovery
infeasible using state of the art laboratory techniques."
●Destroy
"Destroy renders Target Data recovery infeasible using state of the art laboratory
techniques and results in the subsequent inability to use the media for storage of
data."
Control of media
Another option is to keep physical media holding sensitive information within the classi-
fied area, see [1], paragraph 4.4.
Volatile memory
"Memory components that do not retain data after removal of all electrical power sour-
ces, and when reinserted into a similarly configured system, are considered volatile
memory components." [2]
The volatile memory in the instrument does not have battery backup. It loses its con-
tents when power is removed from the instrument.
If the instrument is battery operated, e.g. handhelds, it retains data in the volatile mem-
ory as long as the battery is installed.
Typical examples are RAM, e.g. SDRAM.
Non-volatile memory
"Components that retain data when all power sources are discontinued are non-volatile
memory components." [2].
In the context of this document, non-volatile memory components are non-user acces-
sible internal memory types, e.g. EEPROM, Flash, etc.

Security Terms and Definitions
R&S®ZNH
8Instrument Security Procedures 1334.6000.02 ─ 01
Media
Media are types of non-volatile memory components. Media are user-accessible and
retain data when you turn off power.
In the context of this document, media types are Hard Disk Drives (HDD), Solid State
Drives (SSD), Memory Cards, e.g. SD, microSD, CFast, etc., USB removable media,
e.g. Pen Drives, Memory Sticks, Thumb Drives, etc. and similar technologies.

Statement of Volatility
R&S®ZNH
9Instrument Security Procedures 1334.6000.02 ─ 01
4 Statement of Volatility
The R&S ZNH contains various memory components. See the subsequent sections for
a detailed description regarding type, size, usage and location.
Notes on memory sizes
Due to the continuous development of memory components, the listed values of mem-
ory sizes may not represent the current, but the minimal configuration.
4.1 Volatile Memory
Volatile memory modules are considered as non-accessible internal memory devices,
as described in Security Terms and Definitions > Volatile Memory. It requires power to
retain data and when the power is turned off, all data is erased.
Table 4-1: Types of volatile memory
Memory type Location Size Content User
data
Sanitization procedure
SDRAM Mainboard 512 Mbyte Temporary information storage for
operating system and instrument firm-
ware
Yes Turn off instrument power
and remove the battery.
See Instrument Sanitiza-
tion Procedure
SRAM Frontboard
(µController internal)
4 kbyte Temporary information storage for
power-up / power-down firmware.
No
4.2 Non-Volatile Memory
Non-volatile memory modules are considered as non-accessible internal memory devi-
ces, as described in Security Terms and Definitions > Non-volatile Memory. It does not
require power to maintain the stored data.
Table 4-2: Types of non-volatile memory
Memory type Location Size Content User
data
Sanitization procedure
Flash Frontboard
(µController internal)
32 kbyte Power-up / power-down firmware No None required (no user
data)
Flash Mainboard 128 Mbyte ●Operating system
●Instrument firmware
●Boot code
●Calibration correction data,
device options and serial number
●User data and instrument set-
tings
Yes See Instrument Sanitiza-
tion Procedure
Non-Volatile Memory

Statement of Volatility
R&S®ZNH
10Instrument Security Procedures 1334.6000.02 ─ 01
4.3 Media
Media are considered as non-volatile memory devices, as described in Security Terms
and Definitions > Media.
Table 4-3: Types of media memory modules
Memory type Location Size Content User
data
Sanitization procedure
USB Instrument top view n.a. n.a. Yes Remove memory device
and keep it under organi-
zational control. See
Instrument Sanitization
Procedure
microSD Instrument rear view.
Behind the battery
compartment.
n.a. n.a. Yes
Media