ESA-Series Spectrum Analyzers EMC Analyzers NFA Series Noise Figure Analyzers. Security Features

Size: px

Start display at page:

Download "ESA-Series Spectrum Analyzers EMC Analyzers NFA Series Noise Figure Analyzers. Security Features"

Florence Harrington
5 years ago
Views:

1 ESA-Series Spectrum Analyzers EMC Analyzers NFA Series Noise Figure Analyzers Security Features Part Number: E Supersedes: E Printed in USA October 2018 Copyright Keysight Technologies, Inc

2 Table of Contents Contacting Agilent Sales and Service Offices...3 Products Covered by this Document..4 Terms and Definitions...5 Instrument....7 Clearing, Sanitization and/or Removal Procedures Summary of Declassification Procedures..13 Recovering from Clearing the Instrument s 14 User and Remote Interface Security Measures...15 Procedure for Declassifying a Faulty Instrument

3 Contacting Agilent Sales and Service Offices Assistance with test and measurements needs and information on finding a local Agilent office is available on the Internet at, If you do not have access to the Internet, please contact your field engineer. Note: In any correspondence or telephone conversation, refer to the instrument by its model number and full serial number. With this information, the Agilent representative can determine whether your unit is still within its warranty period. 3

4 Products Covered by this Document Model Numbers: ESA-E Series ESA-L Series EMC Analyzers E4401B E4403B E7401A E4402B E4408B E7402A E4404B E4411B E7403A E4405B E7404A E4407B E7405A NFA Series N8972A N8973A N8974A N8975A These models were sold with either Agilent or Hewlett-Packard branding. Product Name: ESA-Series Spectrum Analyzers and EMC Analyzers Product Family Name: ESA-E Series Spectrum Analyzers, ESA-L Series Spectrum Analyzers, and EMC Analyzers, and NFA Series Noise Figure Analyzers This document describes instrument security features and the steps to declassify an instrument through memory sanitization. For additional information, please go to: Note: Be sure that all information stored by the user in the instrument that needs to be saved is properly backed up before attempting to clear any of the instrument memory. Agilent Technologies cannot be held responsible for any lost files or data resulting from the clearing of memory. Be sure to read this document entirely before proceeding with any file deletion or memory clearing. 4

5 Terms and Definitions Definitions: Clearing Clearing is the process of eradicating the data on media before reusing the media so that the data can no longer be retrieved using the standard interfaces on the instrument. Clearing is typically used when the instrument is to remain in an environment with an acceptable level of protection. Sanitization Sanitization is the process of removing or eradicating stored data so that the data cannot be recovered using any known technology. Instrument sanitization is typically required when an instrument is moved from a secure to a non-secure environment such as when it is returned to the factory for calibration. (The instrument is declassified) Agilent memory sanitization procedures are designed for customers who need to meet the requirements specified by the US Defense Security Service (DSS). These requirements are outlined in the Clearing and Sanitization Matrix issued by the Cognizant Security Agency (CSA) and referenced in National Industrial Security Program Operating Manual (NISPOM) DoD M ISL 01L-1 section Security erase Security erase is a term that is used to refer to either the clearing or sanitization features of Agilent instruments. Instrument declassification A term that refers to procedures that must be undertaken before an instrument can be removed from a secure environment such as is the case when the instrument is returned for calibration. Declassification procedures will include memory sanitization and or memory removal. Agilent declassification procedures are designed to meet the requirements specified by the DSS NISPOM security document (DoD M chapter 8). 5

6 6

7 Instrument This section contains information on the types of memory available in your instrument. It explains the size of memory, how it is used, its location, volatility, and the sanitization procedure. Table 1. Summary of Instrument - Base Instrument Type and Size (Size is in bits) Writable During Normal Operation? Data Retained When Powered Off? Purpose/Contents Data Input Method Location in Instrument and Remarks Sanitization Procedure Main (Flash) 64 M (w/o Opt B72) 128 M (w Opt B72) Boot ROM (Flash) 1 M Yes Yes Firmware operating system, installed measurement personalities (ESA-E only), option license keys, loaded user limit lines, loaded user amplitude correction factors, user preset data; also contains user C: drive, instrument states and setups, trace data, limit line files, screen images, amplitude correction files, reports (EMC only), signal lists (EMC only) No Yes Boot loader for the instrument s CPU Programmed before installed and also by user Programmed before installed A4 Processor See Table 6 A4 Processor No user data See Table 6 Battery-backed System Information (SRAM) 256 k Operations (DRAM) 128 M (w/o Opt B72) 256 M (w Opt B72) Video (DRAM) 1 M Yes Yes Self alignment data, current time and date, remote interface configuration, printer setup information, last state settings, miscellaneous instrument system information Yes No Firmware operating memory; also provides R: drive for user input Yes No Used to store trace information before displayed on screen Firmware operations and user Firmware operations and user Firmware operations during instrument usage A4 Processor The battery cannot easily be removed. See Table 5 A4 Processor Volatile memory. Data is cleared when the instrument is turned off. A4 Processor Cycle power Press Instrument Preset or cycle power 7

8 Type and Size (Size is in bits) Writable During Normal Operation? Data Retained When Powered Off? Purpose/Contents Data Input Method Location in Instrument and Remarks Sanitization Procedure Configuration (EEPROM) 20 k Config & Cal (EEPROM) 20 k No Yes Used to identify the instrument. No user data No Yes Used to identify the assembly and store calibration data. No user data Programmed before installed or by calibration procedure (factory or service center) Programmed before installed or by calibration procedure (factory or service center) A7A4 Frequency Extension A8 1.5 GHz RF See Table 7 See Table 7 Config & Cal (EEPROM) 20 k No Yes Used to identify the assembly and store calibration data. No user data Programmed before installed or by calibration procedure (factory or service center) A8A1A2 3 GHz Front End / LO See Table 7 8

9 Table 2. Summary of Additional Instrument - With Option AYX Type and Size (Size is in bits) Writable during normal operation? Data Retained when powered off? Purpose/Contents Data Input Method Location in Instrument and Remarks Sanitization Procedure ADC Capture (SRAM) 512 k Config & Cal (EEPROM) 4096 Yes No Used to capture ADC data Firmware operations No Yes Used to identify the assembly and store calibration data. No user data Programmed before installed or by calibration procedure (factory or service center) A7A5 Fast ADC (20 MHz Sampler) Volatile memory. Data is cleared when the instrument is turned off. A7A5 Fast ADC (20 MHz Sampler) Cycle power See Table 7 Table 3. Summary of Additional Instrument - With Option B7D Type and Size (Size is in bits) Writable during normal operation? Data Retained when powered off? Purpose/Contents Data Input Method Location in Instrument and Remarks Sanitization Procedure DSP Program (Flash) 64 M ADC Capture (SRAM) 16 M DSP Boot ROM (Flash) 1 M Yes Yes Stores DSP (digital signal processing) programs Firmware operations Yes No Used to capture ADC data Firmware operations No Yes Boot loader for DSP system Programmed before installed A7A7 Digital Demod DSP (40 MHz Sampler) Contains no user data A7A7 Digital Demod DSP (40 MHz Sampler) Volatile memory. Data is cleared when the instrument is turned off. A7A7 Digital Demod DSP (40 MHz Sampler) No user data See Table 6 Cycle power See Table 6 9

10 Table 4. Summary of Additional Instrument - With Option 1DN Type and Size (Size is in bits) Writable during normal operation? Data Retained when powered off? Purpose/Contents Data Input Method Location in Instrument and Remarks Sanitization Procedure Config & Cal (EEPROM) 4096 Config & Cal (EEPROM) 4096 Config & Cal (EEPROM) 4096 No Yes Used to identify the assembly and store calibration data. No user data No Yes Used to identify the assembly and store calibration data. No user data No Yes Used to identify the assembly and store calibration data. No user data Programmed before installed or by calibration procedure (factory or service center) Programmed before installed or by calibration procedure (factory or service center) Programmed before installed or by calibration procedure (factory or service center) A2A1 1.5 GHz Tracking Generator Control A2A1 3 GHz Tracking Generator Driver A2A2 1.5 GHz Tracking Generator RF Board See Table 7 See Table 7 See Table 7 10

11 Clearing, Sanitization and/or Removal Procedures This section explains how to clear and sanitize user accessable memory from your instrument for all memory that can be written to during normal operation and for which the clearing and sanitization procedure is more than trivial, such as rebooting your instrument. Note: Before beginning clearing, you need to make sure that you have the instrument firmware disk set and (for ESA analyzers) all of the measurement personality disk sets. If you need a disk set of the latest instrument firmware, go to: (for ESA analyzers with Option B72, Extended ) or (for ESA analyzers without Option B72) or (for EMC analyzers) (for NFA analyzers) If you need a disk set of the latest measurement personality, go to: You may need to retrieve the license key information using the following remote query: :SYST:LKEY? option number For example: To retrieve the license key for the ESA Phase Noise Measurement Utility (Option 226) use: :SYST:LKEY? 226 This will need to be done for each licensed option that is installed. To obtain a list of the installed licensed options, press [System] {More 1 of 3} {More 2 of 3} {Licensing}{Show License}. License keys will need to be written down and saved for all licensed options listed. If there are any user files on the C: drive that need to be saved, they can be copied to a floppy disk inserted into the A: drive, then restored at a later time. 11

12 Table 5. SRAM Description and purpose Size clearing and sanitization removal Write protecting validation Remarks System information memory used to store self-alignment data, current time and date, remote interface configuration, printer setup information, last state settings, and miscellaneous instrument system information. A4 Processor: 256 kbits (see Table 1), A7A5 Fast ADC: 512 kbits (see Table 2), and A7A7 Digital Demod DSP: 16 Mbits (see Table 3) Note: The three-button procedure, listed in Table 6, fully includes the following twobutton procedure. If the three-button Flash memory clearing and sanitization procedure is performed, the SRAM clearing and sanitation procedure is also executed. Therefore, you can skip this two-button procedure if you plan to also clear and sanitize the Flash memory. This memory can be cleared and sanitized by using the following two-button procedure (or the three-button procedure in Table 6). 1. Turn the instrument off. 2. Turn the instrument back on while holding down both the [ESC] key and the [Return] key on the front panel. Continue to hold these two keys for at least 10 seconds after turning the instrument back on. 3. The instrument will now clear and sanitize the SRAM memory. This procedure complies with the clearing and sanitization requirements specified for SRAM in the Clearing and Sanitization Matrix referenced in DoD M ISL 01L- 1 section as current on 06/27/2005. removal is not necessary for sanitization requirements. N/A When the SRAM is cleared and sanitized, the message, System,Alignments, Align Now, All Required will appear on the display when the instrument is powered on. N/A 12

13 Table 6. Flash Description and purpose Size clearing and sanitization removal Write protecting validation Remarks See Main and Boot ROM in Table 1; DSP Program and DSP Boot ROM in Table 3. Main : 64 or 128 Mbits (See Table 1); Main Boot ROM: 1 Mbit (see Table 1); DSP Boot ROM: 1 Mbit (see Table 3); DSP Program : 64 Mbits The Flash memory can be cleared and sanitized by using the following three-button procedure: 1. Turn the instrument off. 2. Turn the instrument back on while holding down the [ESC] key the [Return] key, and the [View/Trace] key on the front panel. Continue to hold these three keys for at least 10 seconds after turning the instrument back on. 3. The instrument will now clear the Flash memory. Allow at least 10 minutes for this process to complete. There will be no visual indication of when it is done. Unplug the instrument to turn it off; the Standby button will not work because its instructions have been cleared out of memory. This procedure complies with the clearing and sanitization requirements specified for Flash in the Clearing and Sanitization Matrix referenced in DoD M ISL 01L-1 section as current on 06/27/2005. removal is not necessary for sanitization requirements N/A Persistent white screen when instrument is powered on. See Recovering from Clearing the Instrument s following this section. Table 7. EEPROM Description and Configuration and calibration memory used to store the configuration and calibration purpose data, including serial and model number. Size A7A4, A8, and A8A1A2: 20 kbits each; Options AYX (Table 2) and 1DN (Table 4): 4096 bits each clearing Since this memory contains instrument configuration and calibration data, there is no way for the user to clear it without destroying the integrity of the instrument. Since this information does not contain User information, sanitization is not required. sanitization This memory need not be sanitized per compliance with the sanitization requirements specified for EEPROM in the Clearing and Sanitization Matrix referenced in DoD M ISL 01L-1 section as current on 06/27/2005 removal removal is not necessary for sanitization requirements Write protecting N/A validation N/A Remarks N/A 13

14 Recovering from Clearing the Instrument s Flash: At this point, the instrument will not function. It has no operating system installed. To install the firmware/operating system and return the instrument to operating condition, perform the following steps: 1. Insert the firmware loader disk into the floppy drive and power the instrument on. 2. Follow the on-screen prompts to install the firmware and measurement suite. 3. When the installation is complete, press [System]{More 1 of 3}{Restore Sys Defaults}{Restore Sys Defaults}. The System, Alignments, Align Now, All Required message will be displayed on the screen. 4. You will need to manually perform an instrument alignment using the front-panel keys. Follow the key press sequence in the on-screen message. Be sure to connect the AMPTD REF OUT (if available) to the RF INPUT. Refer to the Getting Started Guide for your instrument if further instructions are required. 5. If optional measurement personalities were installed (ESA-E analyzers only), you will need to re-install them and their license keys. Refer to the User s Guides for these measurement personalities for detailed instructions on how this is done. Before reinstalling any measurement personalities, visit the Agilent Web site to verify that the latest versions are being used. To find a listing of the latest versions, go to: The latest measurement personalities can be downloaded from the following Web site: SRAM: Cycle the power to load all of the installed measurements. The System, Alignments, Align Now, All Required message will be displayed on the screen. You will need to manually perform an instrument alignment using the front-panel keys. Follow the key press sequence in the on-screen message. Be sure to connect the AMPTD REF OUT (if available) to the RF INPUT. Refer to the Getting Started Guide for your instrument if further instructions are required. 14

15 User and Remote Interface Security Measures Deleting User Information without Clearing Entire The following list shows possible types and locations of user-stored information: Saved user files on the C: drive Loaded amplitude correction data Loaded limit line data User Preset Last state settings Trace registers Segmented Sweep settings (ESA-E analyzers only) Signal List (EMC analyzers only) Clearing the individual types of user information: Saved user files on the C: drive: Press [File]{Delete}, then select and delete all of the following types of files: SET instrument setup STA instrument state TRC trace and state CSV trace and state LIM limit line GIF screen image BMP screen image ANT antenna corrections CBL cable corrections OTH other corrections AMP user corrections LIS signal list (EMC analyzers only) HTM report (EMC analyzers only) Loaded amplitude correction data: Press [Amplitude]{More 1of 3}{Corrections}{More 1 of 2}{Delete All Corrections} {Delete All Corrections} Loaded limit line data: Press [Display]{Limits}{Delete All Limits}{Delete All Limits} 15

16 User Preset: Press [Preset]{Factory Preset (if displayed)}[system] {Power On / Preset}{Save User Preset} Last state settings: Press [Preset][Preset] Trace registers: Cycling the power will clear all three trace registers. Segmented Sweep settings (ESA-E analyzers only): Press [Sweep]{Segmented}{Modify}{Delete}{Delete} Signal List (EMC analyzers only): Press [Measure]{More 1 of 2}{Signal List}{Delete Signals}{Delete All}{Yes} Screen and Annotation Blanking Table 8. Disabling display parameters Function Key Sequence Remote Command Annotations [Display]{Preferences}{Annotation On Off} :DISP:WIND:TRAC:ANN OFF 0 Graticule [Display]{Preferences}{Graticule On Off} :DISP:WIND:GRAT:GRID OFF 0 Display Line [Display]{Display Line On Off} :DISP:WIND:TRAC:DLIN:STAT OFF 0 Trace [View/Trace]{Blank 1}, {Blank 2}, or {Blank 3} :TRAC:1 2 3:MODE BLAN Softkeys [Display]{Full Screen} :DISP:MENU:STAT OFF Time/Date [System]{Time/Date}{Time/Date Off} :DISP:ANN:CLOC OFF 0 Executing all of the above sequences can totally blank the display. The blanking can be reversed by similar key sequences or by pressing [PRESET]. You can also blank the screen of the analyzer using the SCPI command :DISP:ENAB OFF 0, and turn it back on using :DISP:ENAB On 1. Consult your User s Guide for complete information on the proper use of these commands. Some of them may affect program operation. In addition, the GPIB command LLO (local lockout) can be sent by the controller to prevent front-panel keyboard access. Remote Access Interfaces 16 The user is responsible for providing security for the I/O port for remote access by controlling physical access to the I/O ports. The I/O ports must be controlled because they provide access to most user settings, user states, and the display memory. The I/O ports used in the ESA/EMC-Series are GPIB plus parallel or RS232 plus parallel.

17 Procedure for Declassifying a Faulty Instrument If the instrument is not able to power on, the user information cannot be cleared using the front panel or the remote interface. The only choice in this situation is to take manual steps to remove any user information that may be present. This includes removing the A4 Processor and the A7A7 Digital Demod DSP (if Option B7D is installed). Refer to the Service Guide for your instrument for removal procedures. 17

18 This information is subject to change without notice. Keysight Technologies Edition 1, October 2018 E

8560E/EC-Series Spectrum Analyzers. Security Features and Volatility

8560E/EC-Series Spectrum Analyzers Security Features and Volatility Table of Contents Contacting Agilent Sales and Service Offices... 3 Products Covered by this Document... 4 Security Terms and Definitions...