xx MSO4000B and DPO4000B Series Oscilloscopes and

Application Modules
Declassification and Security
ZZZ

Instructions

www.tektronix.com
*P077051101*
077-0511-01
Copyright © Tektronix. All rights reserved. Licensed software products are owned by Tektronix or its subsidiaries
or suppliers, and are protected by national copyright laws and international treaty provisions.
Tektronix products are covered by U.S. and foreign patents, issued and pending. Information in this publication
supersedes that in all previously published material. Specifications and price change privileges reserved.
TEKTRONIX and TEK are registered trademarks of Tektronix, Inc.
TekSecure is a trademark of Tektronix, Inc.

Contacting Tektronix
Tektronix, Inc.
14150 SW Karl Braun Drive
P.O. Box 500
Beaverton, OR 97077
USA

For product information, sales, service, and technical support:

In North America, call 1-800-833-9200.
Worldwide, visit www.tektronix.com to find contacts in your area.
Table of Contents
Preface .............................................................................................................. iii
Clear and Sanitize Procedures..................................................................................... 1
Memory Devices............................................................................................... 2
Data Export Devices........................................................................................... 4
Sanitizing an Application Module ........................................................................... 5
Built-In Security Features ......................................................................................... 7
Disable the LAN Port and Clear LAN Ethernet Settings.................................................. 8
Disable the USB Device Port................................................................................. 9
Clear and Sanitize a Nonfunctional Instrument ................................................................ 11

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions i

Table of Contents

ii MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

Preface
If you have data security concerns, this document helps you to sanitize or remove
memory devices from the Tektronix MSO4000B Series and DPO4000B Series
Digital Phosphor Oscilloscopes and Application Modules.
The MSO4000B Series and DPO4000B Series products have data storage
(memory) devices and data output devices (USB ports). These instructions
tell you how to clear or sanitize the memory devices, and also tell you how to
declassify an instrument that is not functioning.
Instrument code and calibration settings reside in nonvolatile flash memory.
Instrument setups and reference waveforms may also be stored in flash memory or
on USB drives connected to the instrument.
If you have any questions, contact the Tektronix Technical Support Center at
www.tektronix.com/support.

Reference The procedures in this document are written to meet the requirements specified in:
NISPOM, DoD 5220.22–M, Chapter 8
ISFO Process Manual for Certification & Accreditation of Classified Systems
under NISPOM

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions iii

Preface

Products The following Tektronix products are covered by this document:

Oscilloscopes:
MSO4104B
MSO4104B-L
MSO4102B
MSO4054B
MSO4034B
MSO4014B
DPO4104B
DPO4104B-L
DPO4102B
DPO4054B
DPO4034B
DPO4014B
Application Modules:
DPO4AERO
DPO4AUDIO
DPO4AUTO
DPO4AUTOMAX
DPO4COMP
DPO4ENET
DPO4LMT
DPO4PWR
DPO4USB
DPO4VID

Related Documents The Tektronix MSO4000B and DPO4000B Series Digital Phosphor Oscilloscopes
Service Manual, part number 077-0512-XX, is available on the Tektronix Web
site at www.tektronix.com/manuals.

iv MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

 Preface

Terms The following terms may be used in this document:

Clear. This removes data on media/memory before reusing it in a secured
area. All reusable memory is cleared to deny access to previously stored
information by standard means of access.
Erase. This is equivalent to clear.
Instrument Declassification. A term that refers to procedures that must be
undertaken before an instrument can be removed from a secure environment.
Declassification procedures include memory sanitization and memory
removal, and sometimes both.
Media storage/data export device. Any of several devices that can be used
to store or export data from the instrument, such as a USB port.
Nonvolatile memory. Data is retained when the instrument is powered off.
Power off. Some instruments have a “Standby” mode, in which power is
still supplied to the instrument. For the purpose of clearing data, putting the
instrument in Standby mode does not qualify as powering off. For these
products, you will need to either push a rear-panel OFF switch or remove the
power source from the instrument.
Remove. This is a physical means to clear the data by removing the memory
device from the instrument. Instructions are available in the product Service
Manual.
Sanitize. This eradicates the data from media/memory so that the data cannot
be recovered by other means or technology. This is typically used when the
device will be moved (temporarily or permanently) from a secured area to a
nonsecured area.
Scrub. The user is able to directly retrieve the memory device contents.
User-modifiable. The user can write to the memory device during normal
instrument operation, using the instrument interface or remote control.
Volatile memory. Data is lost when the instrument is powered off.

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions v

Preface

vi MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

Clear and Sanitize Procedures
The following terms are used in the tables in this section:

Type of User Info Stored This column describes the type of user information that is stored in the device:
User data. Waveforms and other measurement data that represent signals
that users connect to the instrument.
User settings. Instrument settings that the user can change.
Both. Both user data and user settings are stored in the device.
None. Neither user data nor user settings are stored in the device.

Method of Modification This column indicates the method of modifying data:

Direct. The user can modify the data.
Indirect. The instrument system resources modify the data. The user cannot
modify the data.

User Accessible This column indicates whether the user can retrieve the device contents:
Yes. The user can directly retrieve the memory device contents.

No. The user cannot retrieve the memory device contents.

To Clear This column tells how to clear data from the media or memory device before
reusing it in a secured area. All reusable memory is cleared to deny access to
previously stored information by standard means of access.

To Sanitize This column tells how to eradicate the data from the media or memory device so
that the data cannot be recovered by other means or technology. This is typically
used when the device will be moved (temporarily or permanently) from a secured
area to a nonsecured area.

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions 1

Clear and Sanitize Procedures

Memory Devices
The following tables list the volatile and nonvolatile memory devices in the
standard instrument and listed options. Detailed procedures to clear or sanitize
these devices, if any, are shown following each table.

Table 1: Volatile memory devices for the MSO4000B and DPO4000B Series
Type
of
user Backed Method
Type and info up by of Data input User To
minimum size Function stored battery modification
method Location accessible To clear sanitize
CMOS, SDRAM, Contains Both No Indirect Front panel Main No Remove Remove
1024Mbit x 8, waveform control and Acquisition power power
8.192Gbits main data oscilloscope input board from the from the
DDR2, 1.8V, during channels instrument instrument
400MHz operation for at least for at least
(Effective 20 seconds 20 seconds
800MHz);
MT47H64M16HR-25E
BGA
CMOS, SDRAM, Contains Both No Indirect Front panel Main No Remove Remove
64Mb x 16, instrument control and acquisition power power
1024 Mb DDR2, code and oscilloscope input board from the from the
1.8 V, 400 MHz data during channels. Data instrument instrument
(Effective operation inputs through for at least for at least
800 MHz); USB port and 20 seconds 20 seconds
MT47H64M16HR-25E Ethernet port.
CMOS, SDRAM, Contains Both No Indirect Front panel Main No Remove Remove
64Mb x 16, display control and acquisition power power
1024 Mb DDR2, images oscilloscope input board from the from the
1.8 V, 400 MHz during channels. instrument instrument
(Effective operation for at least for at least
800 MHz); 20 seconds 20 seconds
MT47H64M16HR-25E

Table 2: Additional volatile memory devices for the MSO4000B Series

Type
of Backed
user up Method
Type and info by of Data input User
minimum size Function stored battery modificationmethod Location accessible To clear To sanitize
CMOS, DRAM; Contains None No Indirect System Main No Remove Remove
4Mb X 32, code for acquisition power power
128 Mb, MSO board from the from the
SDRAM, 3.3 V; processor instrument instrument
MT48LC4M32B2B\5-7, for at least for at least
90-BALL FBGA 20 seconds 20 seconds
(11 MM X
13 MM), DS4
CMOS, DRAM; Contains Both No Indirect Front panel Main No Remove Remove
16Mb x 16, MSO control and digital acquisition power power
256 Mb, acquisition input channels board from the from the
SDRAM, 3.3 V; memory instrument instrument
MT48LC16M16A2TG-8E, for at least for at least
TSOP54 20 seconds 20 seconds

2 MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

 Clear and Sanitize Procedures

Table 3: Nonvolatile memory devices

Type
of
user Method
Type and info of Data input User
minimum size Function stored modification method Location accessible To clear To sanitize
IC, Memory; Contains None Indirect System Main No Not applicable - Not applicable -
CMOS, PowerPC acquisition no user data or no user data or
EEPROM; 256 hardware board settings settings
bits x 8, 2048 bits, configuration
Serial; 24C02,
SO8.15
CMOS, FLASH; Contains Both Indirect Front panel Main User can Not applicable Not applicable
C, 512 Mb, the control and acquisition access for calibration for calibration
150 NS, 3 V, instrument oscilloscope board only the constants. constants.
StrataFlash; firmware, input channels. reference Use TekSecure Use TekSecure
PC48F4400P0TB00A, calibration Data inputs part; to clear reference to clear reference
BGA64 constants, through USB not the waveforms waveforms
reference port and program and instrument and instrument
waveforms, Ethernet port. setups. setups.
instrument
setups, (See page 7.) (See page 7.)
and You can disable You can disable
protected the LAN Ethernet the LAN Ethernet
user data and clear and clear
(PUD) information, such information, such
as IP addresses. as IP addresses.
(See page 8.) (See page 8.)
You can disable You can disable
the USB Device the USB Device
port. (See port. (See
page 9.) page 9.)
You can You can
overwrite overwrite
protected user protected user
data (PUD). (See data (PUD). (See
page 7.) page 7.)

Table 4: Nonvolatile memory devices – application modules

Type
of user
Application Type and info Method of Data input User
Module minimum size Function stored modification method accessible To sanitize
DPO4AERO, IC, MEMORY; Option key None Indirect System No Refer to the
DPO4AUDIO, CMOS, EEPROM; procedure, Sanitizing
DPO4AUTO, 256 bits X 8, 2048 an Application
DPO4AUTOMAX, bits; SERIAL; Module. (See
DPO4COMP 24C02, SO8.15 page 5.)
DPO4LMT,
DPO4ENET,
DPO4PWR,
DPO4USB,
DPO4VID

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions 3

Clear and Sanitize Procedures

Data Export Devices

The following table lists the data export devices.

Table 5: Data export devices

Method
of Data input User
Type Function modification method Location accessible To disable
USB host ports Supports the Direct System USB host Yes Files can be deleted or overwritten
removable USB resources ports on the on the instrument or a PC; the USB
flash drive; front and flash drive can be removed and
user storage rear of the destroyed.
of reference instrument The USB host ports cannot be
waveforms, disabled.
screen images,
and instrument
setups
Ethernet User storage Direct System LAN port Yes Disconnect from network cable. The
of reference resources on rear of Ethernet port can be disabled. (See
waveforms, instrument page 8.)
screen images,
and instrument
setups.
USB device port Supports remote Direct Remote USB device No The USB Device port can be
control and data control via port on disabled. (See page 9.)
transfer to a PC USBTMC rear of
instrument

4 MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

 Clear and Sanitize Procedures

Sanitizing an Application Module

To sanitize an application module, follow this procedure to return the module to
the default state.

NOTE. This procedure is for an application module that has its license transferred
to an oscilloscope. If the module license is not installed in an oscilloscope, the
module is already in the default state.

1. With the application module installed in an oscilloscope that contains the

module’s license, push the front-panel oscilloscope Utility button.
2. Use the Multipurpose a knob to select Config.
3. Select Application Module Licenses.
4. Under the Transfer Licenses menu, select to transfer the license to the desired
application module. For example, to sanitize the DPO4AERO module, select:
Transfer DPO4AERO License to Module.

NOTE. If the module cannot be selected in the menu, this indicates that the module
license is not contained in that oscilloscope. Install the module in an oscilloscope
that does contain the module license and then perform step 4.

5. The module is returned to the default state.

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions 5

Clear and Sanitize Procedures

6 MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

Built-In Security Features
You can use the TekSecure function to erase setup and reference waveform data
stored in internal flash memory.
The MSO4000B Series and DPO4000B Series models have four USB host ports
(two on the front and two on the rear panel) and one USB device port on the rear
panel. Any USB devices can be removed and stored or destroyed.

NOTE. TekSecure does not erase or change factory calibration constants, Ethernet
What TekSecure Does settings, Demo setups, or protected user data. To overwrite protected user data,
use the provided procedure. (See page 7, To Overwrite Protected User Data.)

Erases the flash sector containing the reference waveforms and saved setups
(except Demo setups), setting all bytes to the value 0xff.
Replaces all waveforms in all reference waveform memories with the null
sample value of 0x8000.
Replaces the current front-panel setup and all stored setups (except Demo
setups) with the default setup values
Calculates the checksums of all reference waveform memory and setup
memory locations to verify successful completion of waveform and setup
erasure.
Displays a dialog box indicating whether the secure erase was successful
or unsuccessful.

To Use TekSecure 1. Push the front-panel Utility button.

2. Push the Utility Page lower-bezel button and use the Multipurpose a knob
to select Config.
3. Push the TekSecure Erase Memory lower-bezel button.
4. Push the OK Erase Setup and Ref Memory side-bezel button. Wait for the
“TekSecure operation complete” dialog box to display.
5. Push the Menu Off front-panel button to close the dialog box.

To Reset the Instrument 1. Power off the instrument.

RAM 2. Power on the instrument.

To Overwrite Protected This procedure overwrites everything that is stored in the protected user data area.
User Data Send the following commands to the oscilloscope:

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions 7

Built-In Security Features

:PASSWORD “XYZZY” (or current password if changed from the default of

“XYZZY”)
:NEWPASS “ANYTHING”

:PASSWORD “ANYTHING”

*PUD #3300xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx[repeat
for a total of 300 x’s]

NOTE. If you do not have access to a program that supports sending programmatic
commands to the instrument, copy the preceding commands to a text file that ends
in “.set” and recall the file from the Recall Setup menu.
For more information on using programming commands, refer to your product
programmer manual, available at www.tektronix.com/manuals.

Disable the LAN Port and Clear LAN Ethernet Settings

To disable the LAN port and clear LAN Ethernet settings, such as IP addresses,
follow these steps:

CAUTION. Write down all setting values before clearing them, to enable you
to restore network connectivity later.

1. Remove the network cable from the LAN port on the rear of the instrument.
2. Push the front-panel Utility button.
3. Push the Utility Page lower-bezel button and use the Multipurpose a knob
to select I/O.
4. Clear the passwords as follows:
a. Push the Ethernet & LXI lower-bezel button.
b. Go to page 2 of the menu.
c. Push the e*Scope Password right-bezel button.
d. Use the Multipurpose a knob to select Disabled.
e. Push the Change e*Scope & LXI Password right-bezel button.
f. Push the Clear lower-bezel button.
g. Push the OK Accept right-bezel button.

8 MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

 Built-In Security Features

5. Clear the IP addresses as follows:

a. Push the Network Configuration lower-bezel button.
b. Push the Set IP Addresses Manually size-bezel button.
c. Select the Instrument IP Address by pushing the ↑ or ↓ arrow side-bezel
button, and then push the Clear lower-bezel button.
d. Select and clear the remaining addresses (Gateway IP, Subnet Mask,
and DNS IP Address).
e. Push the OK Accept right-bezel button.
6. Clear the user and domain names as follows:
a. Push the Ethernet & LXI lower-bezel button.
b. Push the Change Names right-bezel button.
c. Clear the Host Name and Domain Name using the same method that
you used to clear the IP addresses.
d. Push the OK Accept right-bezel button. The LAN system is disabled and
no longer allows data traffic in or out. The relevant LAN Ethernet settings
are also cleared.

Disable the USB Device Port

To disable the USB device port, follow these steps:
1. Remove any USB cable or device from the USB device port on the rear of the
instrument.
2. Push the front-panel Utility button.
3. Push the Utility Page lower-bezel button and use the Multipurpose a knob
to select I/O.
4. Push the USB lower-bezel button.
5. Push the Disabled (Off Bus) side-bezel button to disable the USB device
port. The USB lower-bezel button shows “Disabled.” The USB device port is
disabled and no longer allows data traffic in or out.

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions 9

Built-In Security Features

10 MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions

Clear and Sanitize a Nonfunctional Instrument
If your instrument is not functioning and you need to clear or sanitize it, proceed
as follows:

Main Board Remove the Main board and return the product to Tektronix. A new Main board
will be installed, and the instrument will be repaired and adjusted as necessary.

NOTE. The Analog board must be calibrated with the Main board by Tektronix.
Please contact Tektronix before returning these boards.

For removal instructions, refer to the Tektronix MSO4000B and DPO4000B Series
Digital Phosphor Oscilloscopes Service Manual, part number 077-0512-XX,
which is available on the Tektronix Web site at www.tektronix.com/manuals.
After removal of the Main board, refer to your company's internal policies
regarding handling or disposal of the board.

USB Flash Drive Remove the USB flash drive and return the instrument to Tektronix for repair.
After removal of the USB flash drive, refer to your company's internal policies
regarding handling or disposal of the flash drive.

Charges Replacement of any missing hardware will be charged according to the rate at
the time of replacement.

MSO/DPO4000B Series Oscilloscopes and App. Modules Declassification/Security Instructions 11