Tektronix MSO 4 Series User manual

4SeriesMSO(MSO44,MSO46)
With Option 4-SEC
Enhanced Security Instrument
Declassification and Security
ZZZ
Instructions
xx
www.tektronix.com
*P077155100*
077-1551-00

Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries or suppliers, and are protected by
national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication supersedes that in all previously published
material. Specifications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
TekSecure is a trademark of Tektronix; Inc.
Contacting Tektronix
Tektronix, Inc.
14150 SW Karl Braun Drive
P.O. Box 500
Beaverton, OR 97077
USA
For product information, sales, service, and technical support:
In North America, call 1-800-833-9200.
Worldwide, visit www.tek.com to find contacts in your area.

Table of Contents
Preface .............................................................................................................................................................. iii
Supported products ........................................................................................................................................... iii
About the 4-SEC option...................................................................................................................................... iv
Terms............................................................................................................................................................ v
Clear and sanitize procedures ....................... ........................ ........................ ........................ ...................................... 1
Nonvolatile, volatile memory device table terminology... .......... .................................. .......... .......................................... 1
Memory devices ............................................................................................................................................... 2
Media and data export devices ............................................................................................................................... 4
How to sanitize a working instrument..... ................ .......................... ................ .......................... .............................. 5
How to sanitize a nonfunctional instrument ... ........................................................ .......... .......... .......... ............................ 7
Processor board removal instructions ....................................................................................................................... 8
Repair charges................................................................................................................................................. 14
4 Series MSO Opt. 4–SEC Declassification and Security Instructions i

Table of Contents
ii 4 Series MSO Opt. 4–SEC Declassification and Security Instructions

Preface
This document helps customers with data security concerns to clear or sanitize 4 Series MSO instruments with
factory-installed Option 4-SEC.
This series of instruments contain a processor system with nonremovable mass storage.
These products have data storage (memory) devices and data export interfaces (USB and Ethernet). These instructions
describe how to clear or sanitize the memory devices and disable the data output interfaces. The instructions also describe
how to sanitize an instrument that is not functioning.
Reference The procedures in this document are written to meet the requirements specified in:
National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22–M, Chapter 8
Defense Security Service Manual for the Certification and Accreditation of Classified Systems under the NISPOM
Supported products
Tektronix 4 Series Mixed Signal Oscilloscope products are covered by this document:
NOTE. Option 4-SEC must be ordered at the same time you purchase an instrument.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions iii

Preface
About the 4-SEC option
Option 4-SEC provides the highest level of instrument security for the products. Option features include:
Oscilloscope hardware is configured to easily declassify the oscilloscope:
There is no user access to the internal storage to store or save any user data to the oscilloscope memory
Data can only be saved to or read from a USB port on the instrument, a mounted network drive, or through the
programmatic interface
Password protection to enable/disable external USB Host, USB Device and Ethernet communication ports
Password protection to enable/disable firmware upgrades or downgrades
Password protection to prevent booting from USB flash devices.
NOTE. Option 4-SEC must be ordered at the same time you order an instrument.
iv 4 Series MSO Opt. 4–SEC Declassification and Security Instructions

Preface
Terms
The following terms may be used in this document:
Clear. This eradicates data on media/memory before reusing it in a secured area. All reusable memory is cleared to
deny access to previously stored information by standard means of access.
Erase. This is equivalent to clear.
Media. Storage/data export device. A device that stores or exports data from the instrument, such as a USB flash
drive or USB port.
Sanitize. This removes the data from media/memory so that the data cannot be recovered using any known technology.
This is typically used when the device is moved (temporarily or permanently) from a secured area to a nonsecured area.
Scrub. This is equivalent to sanitize.
Remove. This is a physical means to clear the data by removing the memory device from the instrument. Instructions
are available in the product service manual.
User-Accessible. The user can directly retrieve the memory device contents.
User-Modifiable. The memory device can be written to by the user during normal instrument operation, using the
instrument user interface or remote control.
Volatile memory. Memory that loses data when the instrument is powered off.
Nonvolatile memory. Memory that retains data when the instrument is powered off.
Power off. Some instruments have a “Standby” mode, in which power is still supplied to the instrument. For clearing
data, putting the instrument in Standby mode does not qualify as powering off. For these products, you must either
push a rear-panel OFF switch or remove the power source from the instrument.
Instrument Declassification. A term that refers to procedures that must be undertaken before an instrument can be
removed from a secure environment. Declassification procedures include memory sanitization, memory removal,
and sometimes both.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions v

Preface
vi 4 Series MSO Opt. 4–SEC Declassification and Security Instructions

Clear and sanitize procedures
Nonvolatile, volatile memory device table terminology
The tables in this section use the following terms:
User data. Describes the type of information stored in the device. Refers to waveforms or other measurement
information representing signals connected to the instrument by users.
User settings. Describes the type of information stored in the device. Refers to instrument settings that can be
changed by the user.
Both. Describes the type of information stored in the device. It means that both user data and user settings are
stored in the device.
None. Describes the type of information stored in the device. It means that neither user data or user settings are
stored in the device.
Directly. Describes how data is modified. It means that the user can modify the data.
Indirectly. Describes how data is modified. It means that the instrument system resources modifies the data and that
the user cannot modify the data.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 1

Clear and sanitize procedures
Memory devices
The following tables list the volatile and nonvolatile memory devices in the instrument 1.
Table1:Volatilememorydevices
Type and size Function
Type of user
info stored
Backed-up
by battery
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
SDRAM 4 GB
(All models)
Host processor
memory
User data No Indirectly Written by
processor
system
Processor board No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
SDRAM
MSO44: 4 GB
MSO46: 8 GB
Holds active
acquisition data
User data No Indirectly Application
software
operations
Module socket
(SODIMM) on
the Acquisition
board
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
SDRAM 512`MB Holds video graphics
data
User data No Indirectly Application
software
operations
Acquisition
board
No Unplug the instrument
for at least 30 seconds
Unplug the instrument
for at least 30 seconds
CMOS RAM
7bytes
Holds clock and boot
configuration data
None Yes Indirectly boot
operations
Processor board No Cannot be cleared. Unplug the instrument
for a minimum of
30 seconds.
FPGA <30 MB Interface between
compute system and
acquisition system
None No None Written by
processor
system
Acquisition
board
No Unplug the instrument
for a minimum of
30 seconds.
Unplug the instrument
for a minimum of
30 seconds.
1These are the memory capacities at the time of publishing this document, but are subject to change.
24 Series MSO Opt. 4–SEC Declassification and Security Instructions

Clear and sanitize procedures
Table 2: Nonvolatile memory devices 1
Type and size Function
Type of user
info stored
Method of
modification
Data input
method Location
User
accessible To clear To sanitize
Primary e.MMC
32 GB
Stores Host instrument
Linux operating system,
application software, and
instrument settings
None Indirect Written by
processor
system,
software
operations
Processor
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Clearing would disable
instrument functionality.
Secondary e.MMC
32 GB
Stores user data including
waveforms, measurement
results and instrument
settings
Waveforms,
measurement
results, instrument
settings
Direct Application
software
operations and
file operations
Processor
board
Yes Run TekSecure Run TekSecure
EEPROM
2Kbit
Stores factory data,
maintenance data
None Indirect Factory
operations
Acquisition
board
Yes Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Clearing would disable
instrument functionality.
EEPROM
1Kb
Two to four pieces
depending on model
Stores the SODIMM
memory configuration data
(SPD)
None None Factory
operations
Module
socket
(SODIMM)
on acquisition
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
32 KB
Stores power management
controller firmware
None Indirect Application
software
operations
Internal to
the MC9S08
microcontroller
on the
acquisition
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
Flash Memory
64 KB
Stores analog board
microcontroller firmware
None Indirect Application
software
operations
Internal to the
KL14
microcontroller
on the
Acquisition
board
No Not applicable, does
not contain user
data or settings.
Clearing would
disable instrument
functionality.
Not applicable, does not
contain user data or settings.
Sanitizing would disable
instrument functionality.
1These are the memory capacities at the time of publishing this document, but are subject to change.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 3

Clear and sanitize procedures
Media and data export devices
The following table lists the data export devices in the instrument.
Table 3: Media and data export devices
Type Function
Method of
modification
Data input
method Location User accessible To disable
USB Host ports User storage and recall of
reference waveforms, screen
images, and instrument
setups, and installation of
firmware updates using
removable USB flash drives
Directly User writeable Three USB Host
ports on front of
the instrument;
two USB Host
ports on the back
of the instrument
Yes Use the Utility > Security menu
to disable all USB ports (Host and
Device). Requires a password
(user-created when first disabled)
USB Device port Remote control and data
transfer to a PC
Directly Remote control
using USBTMC
USB Device port
on back of the
instrument
Yes Use the Utility > Security menu
to disable all USB ports (Host and
Device). Requires a password
(user-created when first disabled)
Ethernet Transfer data and remote
control of instrument.
Directly Remote control
using LXI, VISA,
or Socket Server
Ethernet port on
back of instrument
Yes Use the Utility > Security menu
to disable the Ethernet LAN port.
Requires a password (user-created
when first disabled)
44 Series MSO Opt. 4–SEC Declassification and Security Instructions

Clear and sanitize procedures
How to sanitize a working instrument
Sanitize means that all data in nonvolatile memory is changed or overwritten such that the original data is no longer in
memory, and that the data cannot be recovered using any known technology. You typically do a sanitize operation when you:
Turn the instrument over to another person or department
Move an instrument (temporarily or permanently) from a secured area to a nonsecured area
Send an instrument to Tektronix for calibration and/or repair
Sanitizing is done through commands on the instrument. To sanitize the instrument:
1. Remove any USB memory devices from the instrument, and store or destroy the USB memory devices in accordance
with your organization’s guidelines.
2. Clear the Network Configuration password (if set):
a. Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b. Click the Security for Network Configlink on the left side of the screen.
c. Click Submit:
If a password was set for this function, you are requested to enter the password. If the password is accepted, the
password is set to blank (the default setting of the access password fields).
If a password was not set for this function, the screen displays the message that the password was successfully
changed (to a blank password).
3. Clear the network mDNS Hostname and description:
a. Enter the instrument’s IP address into a Web browser on a PC that has network access to the instrument.
b. Click the Network Configuration link on the left side of the screen.
c. Delete any existing text in both of the Host Settings fields.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 5

Clear and sanitize procedures
d. Click the Host Settings Submit button. A message appears stating that the field is empty, and will be configured to
the original factory default value.
e. Click OK. The message closes and the fields are restored to their original factory settings.
4. Clear the Ethernet port settings:
a. Disconnect the Ethernet cable from the instrument.
b. Open the Utility > I/O menu.
c. Clear all information from the Host Name,Domain Name,andService Name fields.
d. Click the Network Address Manual button.
e. Manually change the Instrument IP Address,Subnet Mask,Gateway IP Address,andDNS IP Address
information to 00.00.00.00.
f. Tap Apply Changes. It will take several moments for the changes to take effect.
g. Tapoutsidethemenutoclosethemenu.
NOTE. You can also clear the instrument Address settings by accessing the instrument’s web-based interface. Connect the
instrument to your network, enter the instrument’s IP address into a Web browser on a PC that is connected to the same
network as the instrument, click the Network Configuration link on the left side of the screen, select the Manual TCP/IP
Mode box, clear all information from all fields, and click the Submit button for the Address Settings.
5. Open the Utility > Security menu and clear the password used to access enabling/disabling ports and software updates.
See the Help system for information on the Security menu functions.
6. Tap TekSecure Erase Memory to clear/reset internal memory.
7. Push the Default Setup button before powering off the instrument.
64 Series MSO Opt. 4–SEC Declassification and Security Instructions

How to sanitize a nonfunctional instrument
How to sanitize a nonfunctional instrument
Do the following to sanitize your instrument if it is not functioning and must be returned to Tektronix for repair:
1. Remove all external USB memory devices and store or destroy the USB memory devices in accordance with your
organization’s guidelines.
2. Follow the instructions in section (See page 8, Processor board removal instructions.) to get access to and remove
the Processor board, which contains user data and settings. Store or destroy the Processor board in accordance with
your organization’s guidelines. (See page 8.)
3. Reassemble the instrument without the Processor board and return it to Tektronix. The instrument will then be
repaired and calibrated as necessary.
In North America, contact the Tektronix Customer Care Center (1-800-833-9200) for assistance with returning the
instrument to a repair center. Worldwide, visit www.tektronix.com to find contacts in your area.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 7

How to sanitize a nonfunctional instrument
Processor board removal instructions
Use these procedures to remove the Processor board when you need to sanitize a nonfunctional instrument before returning
the instrument to Tektronix for repair. Refer to your company's internal policies regarding handling or disposal of the
Processor board. A new Processor board is installed and the instrument is repaired and adjusted as necessary.
WARNING. Before doing this procedure, disconnect the power cord from the line voltage source. Failure to do so could
cause serious injury or death.
CAUTION. To avoid damaging other circuits in the instrument, perform the following procedure in a static-safe environment
with proper electrostatic discharge controls in place.
CAUTION. Do not lay the instrument on its front while disassembling the instrument. All disassembly steps can be done
with the instrument positioned as instructed in the steps. Laying the instrument on its front can damage the controls.
Access the chassis 1. Position the instrument in the normal operating position.
2. Remove the handle from the instrument:
a. Use a Torx T-10 screwdriver to remove two screws from each end of the handle.
b. Remove the handle, external handle hubs, and screws aside.
3. Remove the metal grill from the rear of the instrument:
a. Use a Torx T-10 screwdriver to remove the ten (10) screws located on the grill.
b. Remove the grill.
84 Series MSO Opt. 4–SEC Declassification and Security Instructions

How to sanitize a nonfunctional instrument
4. Remove the internal handle hubs:
a. Use a Torx T-10 screwdriver to remove the eight (8) Torx T-10 screws from the internal hub assemblies (four
screws on each hub).
b. Remove the internal handle hub assemblies and set aside. Keep the hub assemblies together for each side.
5. Remove the feet from the bottom of the instrument:
a. Position the instrument so the bottom is facing up.
b. Open the feet.
c. Use a Torx T-10 screwdriver to remove the four (4) Torx T-10 screwdriver to screws from each foot.
d. Remove the feet and set aside.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 9

How to sanitize a nonfunctional instrument
6. Remove the rear plastic case from the instrument:
a. Use a Torx T-10 screwdriver to remove the six (6) screws from the back of the instrument case.
b. Lifttherearplasticcaseoffthebackoftheinstrument,andsetitaside.
7. Separate the rear metal chassis from the front chassis (with the instrument still in the bottom-up position):
a. Use a Torx T-10 screwdriver to remove the 25 screws securing the rear chassis to the front chassis. There are 24
screws around the chassis edges, and one (1) screw beneath the HDMI connector.
b. Remove the three (3) nuts and washers from the BNC connectors.
c. Gently pry apart the rear chassis assembly. The rear chassis is held in position mostly by the friction of the
three BNC connectors.
d. Continue prying the chassis apart until you have the two halves separated and can access the cables.
10 4 Series MSO Opt. 4–SEC Declassification and Security Instructions

How to sanitize a nonfunctional instrument
e. Disconnect the two power cable connectors.
f. Disconnect the smaller cables on the other end of the chassis.
g. Set the rear chassis aside.
4 Series MSO Opt. 4–SEC Declassification and Security Instructions 11

How to sanitize a nonfunctional instrument
Remove the Processor
board
1. Use a Torx T-10 screwdriver to remove the seven (7) screws from the Processor board.
2. Lift and pull the Processor board away from the chassis. It is still connected with cables, so be careful to not pull it
too far.
3. Carefully rotate the Processor board 180°counterclockwise to get access to the cable connectors.
4. Disconnect the small white plastic cable connector.
12 4 Series MSO Opt. 4–SEC Declassification and Security Instructions