Tektronix 6 series Installation and maintenance instructions

6 Series Low Profile Digitizer (LPD64)
With Factory Opt. 6-SEC Enhanced Security Instrument
Declassification and Security Instructions
Register now!
Click the following link to protect your product.
www.tek.com/register
077-1570-01

Table of Contents
Preface..........................................................................................................................................................................................4
Supported products................................................................................................................................................................4
About option 6-SEC............................................................................................................................................................... 4
Memory device clear and sanitize procedures..............................................................................................................................6
Nonvolatile, volatile memory device table terminology.......................................................................................................... 6
Nonvolatile, volatile memory devices: information and clearing/sanitizing.............................................................................6
Media and data export devices............................................................................................................................................ 10
Resetting the instrument CMOS...........................................................................................................................................11
Resetting the instrument clock............................................................................................................................................. 11
How to sanitize a working instrument..........................................................................................................................................13
How to sanitize a nonfunctional instrument.................................................................................................................................14
Repair charges.....................................................................................................................................................................15
Table of Contents
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 3

Preface
This document helps customers with data security concerns to clear or sanitize a Tektronix 6 Series Low Profile Digitizer (LPD64)
instrument with factory installed option 6-SEC.
The instrument has data storage devices (memory and a removable mass storage drive) and data export interfaces (USB and Ethernet).
These instructions describe how to clear or sanitize the memory devices and disable the data export interfaces. The instructions also
describe how to sanitize an instrument that is not functioning.
Reference
The procedures in this document are written to meet the requirements specified in:
• National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22–M, Chapter 8
• Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM
Terms
The following terms may be used in this document:
•Clear. This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to deny access to
previously stored information by standard means of access.
•Erase. This is equivalent to clear.
•Media. Storage/data export device. A device that stores or exports data from the instrument, such as a USB flash drive or USB port.
•Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology. This is
typically used when the device is moved (temporarily or permanently) from a secured area to a nonsecured area.
•Scrub. This is equivalent to sanitize.
•Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions are available in
the product service manual.
•User Accessible. The user can directly retrieve the memory device contents.
•User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the instrument user
interface or remote control.
•Volatile memory. Memory that loses data when the instrument is powered off.
•Nonvolatile memory. Memory that retains data when the instrument is powered off.
•Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For clearing data, putting the
instrument in Standby mode does not qualify as powering off. For these products, you must either push a rear-panel OFF switch or
remove the power source from the instrument.
•Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be removed from a
secure environment. Declassification procedures include memory sanitization, memory removal, and sometimes both.
Supported products
This document covers the Tektronix 6 Series Low Profile Digitizer (LPD64) product with factory option 6-SEC installed.
Note: Option 6-SEC must be ordered at the same time you order an instrument.
About option 6-SEC
Note: Option 6-SEC must be ordered at the same time you order an instrument.
Option 6-SEC provides the highest level of instrument security for the LPD64. Option features include:
• Instrument hardware that is configured to easily declassify the instrument:
Preface
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 4

• The main system memory is easily removed without disassembling the instrument.
• Data can only be saved to or read from a USB port on the instrument, a mounted network drive, or through the programmatic
interface.
• Password protection to enable/disable external USB Host and Device ports.
• Password protection to enable/disable firmware upgrades or downgrades.
• Password protection to prevent BIOS modification and booting from USB flash devices.
Preface
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 5

Memory device clear and sanitize procedures
Nonvolatile, volatile memory device table terminology
The tables in this section use the following terms:
•User data. Describes the type of information stored in the device. Refers to waveforms or other measurement information representing
signals connected to the instrument by users.
•User settings. Describes the type of information stored in the device. Refers to instrument settings that can be changed by the user.
•Both. Describes the type of information stored in the device. It means that both user data and user settings are stored in the device.
•None. Describes the type of information stored in the device. It means that neither user data or user settings are stored in the device.
•Directly. Describes how data is modified. It means that the user can modify the data.
•Indirectly. Describes how data is modified. It means that the instrument system resources modifies the data and that the user cannot
modify the data.
Nonvolatile, volatile memory devices: information and clearing/sanitizing
The following tables list the volatile and nonvolatile memory devices in the instrument 1.
Table 1: Volatile memory devices
Type and
size
Function Type of
user
info
stored
Backed-
up by
battery
Method
of
modific
ation
Data input
method
Location User
accessib
le
To clear To sanitize
SDRAM
16 GB
Host processor
memory
User
data
No Indirectly Written by
processor
system
Module socket
(SODIMM)on the
carrier interface
assembly
No Unplug the
instrument for
at least 30
seconds
Unplug the
instrument for
at least 30
seconds
SDRAM
16 GB
Holds active
acquisition
data
User
data
No Indirectly Application
software
operations
Module socket
(SODIMM) on the
acquisition board
No Unplug the
instrument for
at least 30
seconds
Unplug the
instrument for
at least 30
seconds
SDRAM
4 GB
Holds video
graphics data
User
data
No Indirectly Application
software
operations
Acquisition board No Unplug the
instrument for
at least 30
seconds
Unplug the
instrument for
at least 30
seconds
Table continued…
1These are the memory capacities at the time of publishing this document, but are subject to change.
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 6

Type and
size
Function Type of
user
info
stored
Backed-
up by
battery
Method
of
modific
ation
Data input
method
Location User
accessib
le
To clear To sanitize
CMOS
RAM 256
bytes
Holds clock
and BIOS
configuration
data
None Yes Indirectly BIOS
operations
Carrier interface
assembly
Yes Unplug the
instrument for
at least 30
seconds. Push
the CMOS clear
button on the
bottom of the
instrument for
at least 30
seconds. (Click
here for details
on resetting the
instrument
clock.)
Unplug the
instrument for
at least 30
seconds. Push
the CMOS clear
button on the
bottom of the
instrument for
at least 30
seconds. (Click
here for details
on resetting the
instrument
clock.)
FPGA
<30 MB
Interface
between
compute
system and
acquisition
system
None No None Written by
processor
system
Acquisition board No Unplug the
instrument for
at least 30
seconds.
Unplug the
instrument for
at least 30
seconds.
Table 2: Nonvolatile memory devices 1
Type and
size
Function Type of
user info
stored
Method of
modificatio
n
Data input
method
Location User
access
ible
To clear To sanitize
Linux m.2
Solid State
Drive Card
≤512 GB
Host
instrument
operating
system,
application
software, and
Ethernet IP
and related
settings
None Directly
settable
from UI or
by using PI
commands
Written by
processor
system,software
operations
Socket (m.2)
on the carrier
interface
assembly
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
EEPROM
2 Kbit
Stores factory
data,
maintenance
data
None Indirect Factory operations Acquisition
board
Yes Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Table continued…
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 7

Type and
size
Function Type of
user info
stored
Method of
modificatio
n
Data input
method
Location User
access
ible
To clear To sanitize
EEPROM
2 Kbit
Holds AFG
calibration
data, USB/
Ethernet port
access
password
Port access
password
User
Password:
Allows user
to specify a
string in the
About menu
and lock it
with
password
Directly
settable
from UI or
by using PI
commands
Factory operations AFG riser
board
No Click here for
details on how
to sanitize a
working
instrument.
Click here for
details on how
to sanitize a
working
instrument.
EEPROM
64 Kbit
Holds the front
panel USB
configuration
None None Factory operations Front panel
LED board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
EEPROM
1 Kb
Holds the
SODIMM
memory
configuration
data (SPD)
None None Factory operations Module socket
(SODIMM) on
the carrier
interface
assembly and
module socket
(SODIMM) on
acquisition
board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Flash
Memory 16
Mbit
Two pieces
Holds a part of
the Acquisition
FPGA
configuration
None Indirect Application
software
operations
Acquisition
board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Table continued…
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 8

Type and
size
Function Type of
user info
stored
Method of
modificatio
n
Data input
method
Location User
access
ible
To clear To sanitize
Flash
Memory
128 Mbit
Stores
processor
BIOS
firmware,
BIOS
configuration,
and embedded
controller
firmware. The
Ethernet MAC
address is
stored in this
device.
None Indirect BIOS operations,
operating system
operations and
factory operations
Processor
module board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Flash
Memory 32
Kbit
Three
pieces
Stores power
supply
configuration
data
None Indirect Application
software
operations
Internal to the
UCD9248
power supply
controller on
the acquisition
board and
carrier
interface
assembly
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Flash
Memory 32
KB
Stores power
management
controller
firmware
None Indirect Application
software
operations
Internal to the
MC9S08
microcontroller
on the
acquisition
board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Flash
Memory 64
KB
1 piece
Stores analog
board
microcontroller
firmware
None Indirect Application
software
operations
Internal to the
MKL14
microcontroller
on the analog
board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Flash
Memory 43
KB
Four
pieces
Stores analog
board
microcontroller
firmware
None Indirect Application
software
operations
Internal to the
MKL02
microcontroller
on the analog
board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Table continued…
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 9

Type and
size
Function Type of
user info
stored
Method of
modificatio
n
Data input
method
Location User
access
ible
To clear To sanitize
Flash
Memory
0.33 Mbit
Stores the
processor
carrier FPGA
configuration
None None Factory operations Internal to the
LCMXO2
FPGA on the
carrier
interface
assembly
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
eMMC
Flash
Memory 4
GB
Stores
calibration
data and
option licenses
Option
licenses.
SPC 2
Indirect Application
software
operations
Front panel
board
No Not applicable,
does not contain
user data or
settings.
Clearing would
disable
instrument
functionality.
Not applicable,
does not contain
user data or
settings.
Sanitizing would
disable
instrument
functionality.
Media and data export devices
The following table lists the data export devices in the instrument.
Table 3: Media and data export devices
Type Function Method of
modification
Data input
method
Location User
accessible
To disable
USB Host ports User storage and
recall of reference
waveforms,
screen images,
and instrument
setups, and
installation of
firmware updates
using removable
USB flash drives
Directly User writeable Three USB Host
ports on front of
the instrument;
four USB Host
ports on the back
of the instrument
Yes Use the Utility > Security
menu to disable all USB
ports (Host and Device).
Requires a password
(user-created when first
disabled)
USB Device port Remote control
and data transfer
to a PC
Directly Remote control
using USBTMC
USB Device port
on back of the
instrument
Yes Use the Utility > Security
menu to disable all USB
ports (Host and Device).
Requires a password
(user-created when first
disabled)
Ethernet Transfer data and
remote control of
instrument.
Directly Remote control
using LXI, VISA,
or Socket Server
Ethernet port on
back of the
instrument
Yes The Ethernet LAN port
cannot be disabled.
2SPC (signal path compensation) information is stored on the 4 GB eMMC flash memory. SPC does not contain any user settings.
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 10

Resetting the instrument CMOS
Resetting the CMOS device resets clock and BIOS configuration data.
Do the following steps to reset the instrument CMOS device:
1. Disconnect the instrument power cord.
2. Disconnect all probes and cables.
3. Turn the instrument over so the bottom faces up.
4. Using a small, non sharp tool, push and hold the indented CMOS reset button for 30 seconds.
5. Turn the instrument over.
6. Connect the instrument power cord, a monitor, and keyboard.
7. Set the instrument clock. (Click here for details on resetting the instrument clock.)
Resetting the instrument clock
Do the following steps to reset the instrument clock in case the instrument date and time are incorrect, or after a CMOS reset:
1. Connect a keyboard and monitor to the instrument.
2. Power on the instrument.
3. While the instrument is powering on, continuously press the F2 or Delete key until the BIOS Login screen appears.
4. Enter the password (yours or the default password). If you are logging in for the first time, the factory installed password is Tektronix.
Once you have logged in using the factory default BIOS password, create and enter a new password in accordance with your
organization’s policies.
Warning: Make sure that you keep a record of the instrument BIOS password in your organization’s records. There is no
way for Tektronix to gain access to the instrument BIOS settings once the password is changed from the factory default
value. If you need to return the instrument to Tektronix for service, you must reset the BIOS password back to the factory
default value Tektronix before sending to the Tektronix Service Center.
5. The Please select a boot device screen appears.
6. Use the down arrow key to select Enter Setup and press Enter.
7. In the Main tab (default), use the down arrow to select System Date. If the date is not current, use the keys as described on the
screen to select and enter correct information in the date fields.
8. In the Main tab (default), use the down arrow to select System Time. If the time is not current, use the keys as described on the
screen to select and enter correct Coordinated Universal Time (UTC) information in the date fields. Use the Web to determine the
current UTC time.
Note: Do not enter your local time.
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 11

9. Once the time is set, press the F4 key to save this value and exit the setup screen. The instrument powers on to the normal
instrument UI view.
10. Double-tap the Date and Time badge in the lower right of the screen.
11. Tap the Time Zone field and select the correct time zone for your instrument location.
12. Enable the Automatically adjust clock for Daylight Savings Time function if used in your time zone.
13. Tap outside the menu to close the time zone setting.
Memory device clear and sanitize procedures
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 12

How to sanitize a working instrument
1. Remove any USB memory devices from the instrument, and store or destroy the USB memory devices in accordance with your
organization’s guidelines.
2. Clear the Ethernet port settings:
a. Disconnect the Ethernet cable from the instrument.
b. Open the Utility > I/O menu.
c. Clear all information from the Host Name, Domain Name, and Service Name fields.
d. Click the Network Address Manual button.
e. Manually change the Instrument IP Address, Subnet Mask, Gateway IP Address, and DNS IP Address information to
00.00.00.00.
f. Tap Apply Changes. It will take several moments for the changes to take effect.
g. Tap outside the menu to close the menu.
Note: You can also clear the instrument Address settings by accessing the instrument’s web-based interface. Connect the
instrument to your network, enter the instrument’s IP address into a Web browser on a PC that is connected to the same
network as the instrument, click the Network Configuration link on the left side of the screen, select the Manual TCP/IP
Mode box, clear all information from all fields, and click the Submit button for the Address Settings.
3. Open the Utility > Security menu and clear the password used to access enabling/disabling ports and software updates.
4. Clear the Network Configuration password:
a. Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b. Click the Security for Network Config link on the left side of the screen.
c. Click Submit:
• If a password was set for this function, you are requested to enter the password. If the password is accepted, the password is
set to blank (the default setting of the access password fields).
• If a password was not set for this function, the screen displays the message that the password was successfully changed (to a
blank password).
5. Clear the network mDNS Hostname and description:
a. Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b. Click the Network Configuration link on the left side of the screen.
c. Delete any existing text in both of the Host Settings fields.
d. Click the Host Settings Submit button. A message appears stating that the field is empty, and will be configured to the original
factory default value.
e. Click OK. The message closes and the fields are restored to their original factory settings.
6. Tap TekSecure Erase Memory to clear/reset internal memory.
7. Push the Default Setup button before powering off the instrument.
How to sanitize a working instrument
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 13

How to sanitize a nonfunctional instrument
Do the following to clear or sanitize your instrument if it is not functioning and must be returned to Tektronix for repair:
CAUTION: To avoid damaging other circuits in the instrument, perform the following procedure in a static-safe environment with
proper electrostatic discharge controls in place (such as a grounded workbench mat and antistatic wrist strap).
1. Disconnect the instrument power cord.
2. Disconnect all probes and cables.
3. Remove all external USB memory devices. Store or destroy the USB memory devices in accordance with your organization’s
guidelines.
4. Turn the instrument over so that the bottom is facing up.
5. Use a T-10 Torx screwdriver to remove the three screws on the Sold State Drive cover.
6. Use a T-10 Torx screwdriver to remove the screw from the end of the memory card. The end of the memory card lifts upward as you
remove the screw.
How to sanitize a nonfunctional instrument
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 14

7. Hold the edges of the raised end of the card and pull to remove the memory card.
8. Store or destroy the memory card in accordance with your organization’s guidelines.
9. Reattach the drive cover.
10. Package the instrument for shipping. Contact Tektronix for guidelines on correct packaging to best protect your instrument during
shipping.
11. Send the instrument to a Tektronix Service Center. The instrument will then be repaired, calibrated as necessary, and returned to
you.
In North America, contact the Tektronix Customer Care Center (1-800-833-9200) for assistance with returning the instrument to a service
center. Worldwide, visit www.tektronix.com to find contacts in your area.
Repair charges
Replacement of damaged and missing hardware is charged according to the rate at the time of replacement.
How to sanitize a nonfunctional instrument
6 Series Low Profile Digitizer (LPD64) With Factory Opt. 6-SEC Enhanced Security Instrument Declassification and Security Instructions 15