Tektronix 6 series User manual

6SeriesLowProfile Digitizer (LPD64)
With Factory Option 6-SEC
Enhanced Security Instrument
Declassification and Security
ZZZ
Instructions
xx
www.tektronix.com
*P077157000*
077-1570-00

Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by
national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published
material. Specifications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
TekSecure is a trademark of Tektronix; Inc.
Contacting Tektronix
Tektronix, Inc.
14150 SW Karl Braun Drive
P.O. Box 500
Beaverton, OR 97077
USA
For product information, sales, service, and technical support:
In North America, call 1-800-833-9200.
Worldwide, visit www.tek.com to find contacts in your area.

Table of Contents
Preface .............................................................................................................................................................. iii
Supported products ........................................................................................................................................... iii
About option 6-SEC.......................................................................................................................................... iv
Terms............................................................................................................................................................ v
Memory device clear and sanitize procedures................................................................................................................... 1
Nonvolatile, volatile memory device table terminology..................... ................................ .. ............................................ 1
Nonvolatile, volatile memory devices: information and clearing/sanitizing ...... ... ... .......... ... ... ... ... ........ ... ... ............ ................ 2
Media and data export devices ............................................................................................................................... 6
Resetting the instrument CMOS ............................................................................................................................. 7
Resetting the instrument clock ............................................................................................................................... 8
How to sanitize a working instrument...... .. ............................................ .. ..................................................................... 10
How to sanitize a nonfunctional instrument ................................. ........................................ .. ......................................... 12
Repair charges................................................................................................................................................. 14
LPD64 Declassification and Security Instructions i

Table of Contents
ii LPD64 Declassification and Security Instructions

Preface
This document helps customers with data security concerns to clear orsanitize aTektronix 6 Series Low Profile Digitizer
(LPD64) instrument with factory installed option 6-SEC.
The instrument has data storage devices (memory and a removable mass storage drive) and data export interfaces (USB and
Ethernet). These instructions describe how to clear or sanitize the memory devices and disable the data export interfaces.
The instructions also describe how to sanitize an instrument that is not functioning.
Reference The procedures in this document are written to meet the requirements specified in:
National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22–M, Chapter 8
Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM
Supported products
This document covers the Tektronix 6 Series Low Profile Digitizer (LPD64) product with factory option 6-SEC installed.
NOTE. Option 6-SEC must be ordered at the same time you order an instrument.
LPD64 Declassification and Security Instructions iii

Preface
About option 6-SEC
NOTE. Option 6-SEC must be ordered at the same time you order an instrument.
Option 6-SEC provides the highest level of instrument security for the LPD64. Option features include:
Instrument hardware that is configured to easily declassify the instrument:
The main system memory is easily removed without disassembling the instrument
Data can only be saved to or read from a USB port on the instrument, a mounted network drive, or through the
programmatic interface
Password protection to enable/disable external USB Host and Device ports
Password protection to enable/disable firmware upgrades or downgrades
PasswordprotectiontopreventBIOSmodification and booting from USB flash devices.
iv LPD64 Declassification and Security Instructions

Preface
Terms
The following terms may be used in this document:
Clear. This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to
deny access to previously stored information by standard means of access.
Erase. This is equivalent to clear.
Media. Storage/data export device. A device that stores or exports data from the instrument, such as a USB flash
drive or USB port.
Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is typically used when the device is moved (temporarily or permanently) from a secured area to a nonsecured area.
Scrub. This is equivalent to sanitize.
Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions
are available in the product service manual.
User-Accessible. The user can directly retrieve the memory device contents.
User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the
instrument user interface or remote control.
Volatile memory. Memory that loses data when the instrument is powered off.
Nonvolatile memory. Memory that retains data when the instrument is powered off.
Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For clearing
data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either
push a rear-panel OFF switch or remove the power source from the instrument.
Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be
removed from a secure environment. Declassification procedures include memory sanitization, memory removal,
and sometimes both.
LPD64 Declassification and Security Instructions v

Preface
vi LPD64 Declassification and Security Instructions

Memory device clear and sanitize procedures
Nonvolatile, volatile memory device table terminology
The tables in this section use the following terms:
User data. Describes the type of information stored in the device. Refers to waveforms or other measurement
information representing signals connected to the instrument by users.
User settings. Describes the type of information stored in the device. Refers to instrument settings that can be
changed by the user.
Both. Describes the type of information stored in the device. It means that both user data and user settings are
stored in the device.
None. Describes the type of information stored in the device. It means that neither user data or user settings are
stored in the device.
Directly. Describes how data is modified. It means that the user can modify the data.
Indirectly. Describes how data is modified. It means that the instrument system resources modifies the data and that
the user cannot modify the data.
LPD64 Declassification and Security Instructions 1

Memory device clear and sanitize procedures
Nonvolatile, volatile memory devices: information and clearing/sanitizing
The following tables list the volatile and nonvolatile memory devices in the instrument 1.
Table1:Volatilememorydevices
Type and size Function
Type of user
info stored
Backed-up
by battery
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
SDRAM 16 GB Host processor
memory
User data No Indirectly Written by
processor
system
Module socket
(SODIMM)
on the carrier
interface
assembly
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
SDRAM
16 GB
Holds active
acquisition data
User data No Indirectly Application
software
operations
Module socket
(SODIMM) on
the acquisition
board
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
SDRAM 4 GB Holds video graphics
data
User data No Indirectly Application
software
operations
Acquisition
board
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
CMOS RAM 256
bytes
Holds clock and BIOS
configuration data
None Yes Indirectly BIOS
operations
Carrier interface
assembly
Yes Unplug the instrument
for at least
30 seconds.
Push the CMOS
clear button on
the bottom of the
instrument for at least
30 seconds. (See
page 8, Resetting the
instrument clock.)
Unplug the instrument
for at least
30 seconds.
Push the CMOS
clear button on
the bottom of the
instrument for at least
30 seconds. (See
page 8, Resetting the
instrument clock.)
FPGA <30 MB Interface between
compute system and
acquisition system
None No None Written by
processor
system
Acquisition
board
No Unplug the instrument
for at least
30 seconds.
Unplug the instrument
for at least
30 seconds.
1These are the memory capacities at the time of publishing this document, but are subject to change.
2LPD64 Declassification and Security Instructions

Memory device clear and sanitize procedures
Table 2: Nonvolatile memory devices 2
Type and size Function
Type of user
info stored
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
Linux m.2 Solid
State Drive Card
≤512 GB
Host instrument operating
system, application
software, and Ethernet
IP and related settings
Instrument
settings including
analog channel,
digital channel,
AFG, DVM, etc.
AFG waveform
information.
User-saved
waveforms, screen
shots, and settings
files.
Directly settable
from UI or
by using PI
commands
Written by
processor
system,
software
operations
Socket (m.2)
on the carrier
interface
assembly
Yes (See page 10, How
to sanitize a working
instrument.)
(See page 10, How to sanitize
a working instrument.)
EEPROM
2Kbit
Stores factory data,
maintenance data
None Indirect Factory
operations
Acquisition
board
Yes Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Clearing would disable
instrument functionality.
EEPROM
2Kbit
Holds AFG calibration
data, USB/Ethernet port
access password
Port access
password
User Password:
Allows user to
specify a string in
the About menu
and lock it with
password
Directly settable
from UI or
by using PI
commands
Factory
operations
AFG riser
board
No (See page 10, How
to sanitize a working
instrument.)
(See page 10, How to sanitize
a working instrument.)
EEPROM
64 Kbit
Holds the front panel USB
configuration
None None Factory
operations
Front panel
LED board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
LPD64 Declassification and Security Instructions 3

Memory device clear and sanitize procedures
Type and size Function
Type of user
info stored
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
EEPROM
1Kb
Holds the SODIMM
memory configuration
data (SPD)
None None Factory
operations
Module
socket
(SODIMM)
on the carrier
interface
assembly
and module
socket
(SODIMM)
on acquisition
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
16 Mbit
Two pieces
Holds a part of the
Acquisition FPGA
configuration
None Indirect Application
software
operations
Acquisition
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
128 Mbit
Stores processor
BIOS firmware, BIOS
configuration, and
embedded controller
firmware. The Ethernet
MAC address is stored in
this device.
None Indirect BIOS
operations,
operating
system
operations
and factory
operations
Processor
module board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
32 Kbit
Three pieces
Stores power supply
configuration data
None Indirect Application
software
operations
Internal to
the UCD9248
power supply
controller
on the
acquisition
board and
carrier
interface
assembly
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
32 KB
Stores power management
controller firmware
None Indirect Application
software
operations
Internal to
the MC9S08
microcontroller
on the
acquisition
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
4LPD64 Declassification and Security Instructions

Memory device clear and sanitize procedures
Type and size Function
Type of user
info stored
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
Flash Memory
64 KB
1piece
Stores analog board
microcontroller firmware
None Indirect Application
software
operations
Internal to the
MKL14
microcontroller
on the analog
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
43 KB
Four pieces
Stores analog board
microcontroller firmware
None Indirect Application
software
operations
Internal to the
MKL02
microcontroller
on the analog
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
0.33 Mbit
Stores the processor
carrier FPGA configuration
None None Factory
operations
Internal to
the LCMXO2
FPGA on
the carrier
interface
assembly
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
eMMC Flash
Memory
4GB
Stores calibration data and
option licenses
Option licenses.
SPC 1
Indirect Application
software
operations
Front panel
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
1SPC (signal path compensation) information is stored on the 4 GB eMMC flash memory. SPC does not contain any user settings.
2These are the memory capacities at the time of publishing this document, but are subject to change.
LPD64 Declassification and Security Instructions 5

Memory device clear and sanitize procedures
Media and data export devices
The following table lists the data export devices in the instrument.
Table 3: Media and data export devices
Type Function
Method of
modification
Data input
method Location User accessible To disable
USB Host ports User storage and recall of
reference waveforms, screen
images, and instrument
setups, and installation of
firmware updates using
removable USB flash drives
Directly User writeable Three USB Host
ports on front of
the instrument;
four USB Host
ports on the back
of the instrument
Yes Use the Utility > Security menu
to disable all USB ports (Host and
Device). Requires a password
(user-created when first disabled)
USB Device port Remote control and data
transfer to a PC
Directly Remote control
using USBTMC
USB Device port
on back of the
instrument
Yes Use the Utility > Security menu
to disable all USB ports (Host and
Device). Requires a password
(user-created when first disabled)
Ethernet Transfer data and remote
control of instrument.
Directly Remote control
using LXI, VISA,
or Socket Server
Ethernet port
on back of the
instrument
Yes The Ethernet LAN port cannot be
disabled.
6LPD64 Declassification and Security Instructions

Memory device clear and sanitize procedures
Resetting the instrument CMOS
Resetting the CMOS device resets clock and BIOS configuration data.
Do the following steps to reset the instrument CMOS device:
1. Disconnect the instrument power cord.
2. Disconnect all probes and cables.
3. Turn the instrument over so the bottom faces up.
4. Using a small, nonsharp tool, push and hold the indented CMOS reset button for 30 seconds.
5. Turn the instrument over.
6. Connect the instrument power cord, a monitor, and keyboard.
7. Set the instrument clock. (See page 8, Resetting the instrument clock.)
LPD64 Declassification and Security Instructions 7

Memory device clear and sanitize procedures
Resetting the instrument clock
Do the following steps to reset the instrument clock in case the instrument date and time are incorrect, or after a CMOS reset:
1. Connect a keyboard and monitor to the instrument.
2. Power on the instrument.
3. While the instrument is powering on, continuously press the F2 or Delete key until the BIOS Login screen appears.
4. Enter the password (yours or the default password). If you are logging in for the first time, the factory installed
password is Tektronix. Once you have logged in using the factory default BIOS password, create and enter a new
password in accordance with your organization’s policies.
WARNING. MakesurethatyoukeeparecordoftheinstrumentBIOSpassword in your organization’s records. There is no
way for Tektronix to gain access to the instrument BIOS settings once the password is changed from the factory default
value. If you need to return the instrument to Tektronix for service, you must reset the BIOS password back to the factory
default value Tektronix before sending to the Tektronix Service Center.
5. The Please select a boot device screen appears.
6. Use the down arrow key to select Enter Setup and press Enter.
7. In the Main tab (default), use the down arrow to select System Date. If the date is not current, use the keys as
described on the screen to select and enter correct information in the date fields.
8. In the Main tab (default), use the down arrow to select System Time. If the time is not current, use the keys as
described on the screen to select and enter correct Coordinated Universal Time (UTC) information in the date fields.
Use the Web to determine the current UTC time. (note; Do not enter your local time.)
9. Once the time is set, press the F4 key to save this value and exit the setup screen. The instrument powers on to
the normal instrument UI view.
8LPD64 Declassification and Security Instructions

Memory device clear and sanitize procedures
10. Double-tap the Date and Time badge in the lower right of the screen.
11. Tap the Time Zone field and select the correct time zone for your instrument location.
12. Enable the Automatically adjust clock for Daylight Savings Time functionifusedinyourtimezone.
13. Tap outside the menu to close the time zone setting.
LPD64 Declassification and Security Instructions 9

How to sanitize a working instrument
How to sanitize a working instrument
1. Remove any USB memory devices from the instrument, and store or destroy the USB memory devices in accordance
with your organization’s guidelines.
2. Clear the Ethernet port settings:
a. Disconnect the Ethernet cable from the instrument.
b. Open the Utility > I/O menu.
c. Clear all information from the Host Name,Domain Name,andService Name fields.
d. Click the Network Address Manual button.
e. Manually change the Instrument IP Address,Subnet Mask,Gateway IP Address,andDNS IP Address
information to 00.00.00.00.
f. Tap Apply Changes. It will take several moments for the changes to take effect.
g. Tapoutsidethemenutoclosethemenu.
NOTE. You can also clear the instrument Address settings by accessing the instrument’s web-based interface. Connect the
instrument to your network, enter the instrument’s IP address into a Web browser on a PC that is connected to the same
network as the instrument, click the Network Configuration link on the left side of the screen, select the Manual TCP/IP
Mode box, clear all information from all fields, and click the Submit button for the Address Settings.
3. Open the Utility > Security menu and clear the password used to access enabling/disabling ports and software updates.
10 LPD64 Declassification and Security Instructions

How to sanitize a working instrument
4. Clear the Network Configuration password:
a. Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b. Click the Security for Network Configlink on the left side of the screen.
c. Click Submit:
If a password was set for this function, you are requested to enter the password. If the password is accepted, the
password is set to blank (the default setting of the access password fields).
If a password was not set for this function, the screen displays the message that the password was successfully
changed (to a blank password).
5. Clear the network mDNS Hostname and description:
a. Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b. Click the Network Configuration link on the left side of the screen.
c. Delete any existing text in both of the Host Settings fields.
d. Click the Host Settings Submit button. A message appears stating that the field is empty, and will be configured to
the original factory default value.
e. Click OK. The message closes and the fields are restored to their original factory settings.
6. Tap TekSecure Erase Memory to clear/reset internal memory.
7. Push the Default Setup button before powering off the instrument.
LPD64 Declassification and Security Instructions 11

How to sanitize a nonfunctional instrument
How to sanitize a nonfunctional instrument
Do the following to clear or sanitize your instrument if it is not functioning and must be returned to Tektronix for repair:
CAUTION. To avoid damaging other circuits in the instrument, perform the following procedure in a static-safe environment
with proper electrostatic discharge controls in place (such as a grounded workbench mat and antistatic wrist strap).
1. Disconnect the instrument power cord.
2. Disconnect all probes and cables.
3. Remove all external USB memory devices. Store or destroy the USB memory devices in accordance with your
organization’s guidelines.
4. Turn the instrument over so that the bottom is facing up.
5. Use a T-10 Torx screwdriver to remove the three screws on the Sold State Drive cover.
6. Use a T-10 Torx screwdriver to remove the screw from the end of the memory card.
12 LPD64 Declassification and Security Instructions