Tektronix 5 Series Installation and maintenance instructions

5SeriesMSOLowProfile
With Option 5-SEC Enhanced Security
Declassification and Security
ZZZ
Instructions
xx
www.tektronix.com
*P077140700*
077-1407-00

Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by
national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published
material. Specifications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
TekSecure is a trademark of Tektronix; Inc.
Contacting Tektronix
Tektronix, Inc.
14150 SW Karl Braun Drive
P.O. Box 500
Beaverton, OR 97077
USA
For product information, sales, service, and technical support:
In North America, call 1-800-833-9200.
Worldwide, visit www.tek.com to find contacts in your area.

Table of Contents
Preface .............................................................................................................................................................. iii
Supported products ........................................................................................................................................... iii
About option 5-SEC.......................................................................................................................................... iv
Terms............................................................................................................................................................ v
Memory device clear and sanitize procedures................................................................................................................... 1
Nonvolatile, volatile memory device table terminology.. ............. .. .. .. ............. ............. .. .. .. .. ............. ............................... 1
Memory devices ............................................................................................................................................... 2
Media and data export devices ............................................................................................................................... 6
Resetting the instrument CMOS ............................................................................................................................. 7
Resetting the instrument clock ............................................................................................................................... 8
How to clear or sanitize a working instrument ... ........... .. .. .. ............. ............. .. .. .. ........... .. ........... .. .. .. ............................... 10
Clear the Network Configuration password................................................................................................................10
Clear the network DNS Hostname and description ....................................................................................................... 10
Clear Ethernet port settings.................................................................................................................................. 11
Delete USB port and software update password .......................................................................................................... 11
Run TekSecure and Default Setup .......................................................................................................................... 12
The Clear/Sanitize process is done ......................................................................................................................... 12
How to sanitize a nonfunctional instrument . ............... .. ............... .. .. .. .. ............... .. .. ............... .. .. .. .. ................................. 13
Repair charges................................................................................................................................................. 15
MSO58LP with Option 5-SEC Declassification and Security Instructions i

Table of Contents
ii MSO58LP with Option 5-SEC Declassification and Security Instructions

Preface
This document helps customers with data security concerns to clear or sanitize a 5 Series MSO Low Profile MSO58LP
instrument that has factory option 5-SEC installed.
The instrument has data storage devices (memory and a removable mass storage drive) and data export interfaces (USB and
Ethernet). These instructions describe how to clear or sanitize the memory devices and disable the data output interfaces.
The instructions also describe how to sanitize an instrument that is not functioning.
Reference The procedures in this document are written to meet the requirements specified in:
National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22–M, Chapter 8
Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM
Supported products
These instructions cover the following instrument:
MSO58LP with factory installed option 5-SEC
NOTE. Option 5-SEC must be ordered at the same time that you order an instrument.
MSO58LP with Option 5-SEC Declassification and Security Instructions iii

Preface
About option 5-SEC
NOTE. Option 5-SEC must be ordered at the same time you order an instrument.
Option 5-SEC provides the highest level of instrument security for 5 Series MSO products. Option 5-SEC features include:
Oscilloscope hardware is configured to easily declassify the oscilloscope:
The main system memory is easily removed without disassembling the instrument
Data can only be saved to or read from a USB port on the instrument, a mounted network drive, or through the
programmatic interface
Password protection to enable/disable external USB Host and Device ports
Password protection to enable/disable firmware upgrades or downgrades
PasswordprotectiontopreventBIOSmodification and booting from USB flash devices.
iv MSO58LP with Option 5-SEC Declassification and Security Instructions

Preface
Terms
The following terms may be used in this document:
Clear. This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to
deny access to previously stored information by standard means of access.
Erase. This is equivalent to clear.
Media. Storage/data export device. A device that stores or exports data from the instrument, such as a USB flash
drive or USB port.
Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is typically used when the device is moved (temporarily or permanently) from a secured area to a nonsecured area.
Scrub. This is equivalent to sanitize.
Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions
are available in the product service manual.
User-Accessible. The user can directly retrieve the memory device contents.
User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the
instrument user interface or remote control.
Volatile memory. Memory that loses data when the instrument is powered off.
Nonvolatile memory. Memory that retains data when the instrument is powered off.
Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For clearing
data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either
push a rear-panel OFF switch or remove the power source from the instrument.
Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be
removed from a secure environment. Declassification procedures include memory sanitization, memory removal,
and sometimes both.
MSO58LP with Option 5-SEC Declassification and Security Instructions v

Preface
vi MSO58LP with Option 5-SEC Declassification and Security Instructions

Memory device clear and sanitize procedures
Nonvolatile, volatile memory device table terminology
The tables in this section use the following terms:
User data. Describes the type of information stored in the device. Refers to waveforms or other measurement
information representing signals connected to the instrument by users.
User settings. Describes the type of information stored in the device. Refers to instrument settings that can be
changed by the user.
Both. Describes the type of information stored in the device. It means that both user data and user settings are
stored in the device.
None. Describes the type of information stored in the device. It means that neither user data or user settings are
stored in the device.
Directly. Describes how data is modified. It means that the user can modify the data.
Indirectly. Describes how data is modified. It means that the instrument system resources modify the data and that
the user cannot modify the data.
MSO58LP with Option 5-SEC Declassification and Security Instructions 1

Memory device clear and sanitize procedures
Memory devices
The following tables list the volatile and nonvolatile memory devices in the instrument.
Table1:Volatilememorydevices
Type and
minimum size Function
Type of user
info stored
Backed-up
by battery
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
SDRAM ≥16 GB
(All models)
Host processor
memory
User data or
user setting
No Indirectly Written by
processor
system
Module socket
(SODIMM)
on the carrier
interface
assembly
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
SDRAM ≥4GB Holds active
acquisition data
User data No Indirectly Application
software
operations
Module socket
(SODIMM)
on the carrier
interface
assembly
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
SDRAM
≥512 MB
Holds video graphics
data
User data No Indirectly Application
software
operations
Acquisition
board
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
CMOS RAM
≥256 Bytes
Holds clock and BIOS
configuration data
None Yes Indirectly BIOS
operations
Carrier interface
assembly
Yes Push the CMOS clear
button on the bottom
of the instrument
for a minimum of
30 seconds. (See
page 7, Resetting the
instrument CMOS.)
Push the CMOS clear
buttononthebottom
of the instrument
for a minimum of
30 seconds. (See
page 7, Resetting the
instrument CMOS.)
2MSO58LP with Option 5-SEC Declassification and Security Instructions