R&S®FPL1000 Spectrum Analyzer Instrument Security Procedures (;ÜÒ:2) 1178681002 Version 05
Contents R&S®FPL1000 Contents 1 Overview................................................................................................. 2 2 Instrument models covered.................................................................. 3 3 Security terms and definitions..............................................................3 4 Statement of volatility............................................................................4 5 Instrument sanitization procedure........................................
Instrument models covered R&S®FPL1000 [1] Kissel Richard L. [et al.] Guidelines for Media Sanitization = Special Publication (NIST SP) = NIST SP - 800-88 Rev 1. - Gaithersburg : [s.n.], December 17, 2014. [2] National Industrial Security Program Authorization Office Defense Security Service (DSS) Assessment and Authorization Process Manual (DAAPM). - May 6, 2019. [3] ACSC Australian Cyber Security Centre Australian Government Information Security Manual, January 2020.
Statement of volatility R&S®FPL1000 Control of media Another option to secure sensitive information is to keep physical media within the classified area, see [1], paragraph 4.4. Volatile memory "Memory components that do not retain data after removal of all electrical power sources, and when reinserted into a similarly configured system, are considered volatile memory components." [2] The volatile memory in the instrument does not have battery backup.
Statement of volatility R&S®FPL1000 Media 4.1 Volatile memory Volatile memory modules are considered as non-accessible internal storage devices, as described in Security terms and definitions > Volatile memory. Table 4-1: Types of volatile memory Memory type Location Size Content / Function User modifiable SDRAM PC board 4 GByte or 8 GByte Temporary information storage for operating system and instrument firmware Yes 4.
Statement of volatility R&S®FPL1000 Media Table 4-3: Types of media memory modules Memory type Location Size Content / Function User modifiable SSD PC board ≥ 32 GByte ● ● ● ● ● ● ● Yes Instrument Security Procedures 1178.6810.
Instrument sanitization procedure R&S®FPL1000 Media 5 Instrument sanitization procedure 5.1 Volatile memory You can purge the volatile memory by following the procedure below. The sanitizing procedure complies to the definition of NIST [1], see "Terms defined in Guidelines for Media Sanitization" on page 3. To turn off and remove power 1. Turn off the R&S FPL1000. 2. Disconnect the power plug. 3. Remove the battery.
Operability outside the secured area R&S®FPL1000 Figure 5-1: Location of the PC board for R&S FPL1000 3. Unscrew the two knurled screws. 4. Remove the solid-state drive from the R&S FPL1000. 5. Keep the solid-state drive under organizational control. 6 Operability outside the secured area As the solid-state drive holds the operating system, the R&S FPL1000 cannot be operated without the solid-state drive.
Validity of instrument calibration after sanitization R&S®FPL1000 Considerations for USB interfaces 7 Validity of instrument calibration after sanitization The EEPROM is the only memory type used to hold permanent adjustment values required to maintain the validity of the R&S FPL1000's calibration. Therefore, the sanitizing procedure does not affect the validity of the instrument’s calibration.
Glossary R&S®FPL1000 To disable the write capability, copy the utility software to the R&S FPL1000 and run it once. After a reboot of the instrument, the write capability to any USB memory device is disabled. Glossary C D H M S CFast: Compact Fast - compact flash mass memory device. DRAM: Dynamic Random Access Memory. HDD: Hard disk drive. microSD: Micro Solid-state Drive - memory card. SD: Solid-state drive - memory card. SSD: ATA Solid-state drives (including PATA, SATA, eSATA, mSATA,...).
Index R&S®FPL1000 M Media Memory types ............................................................................................................................................ 5 Remove ......................................................................................................................................................7 Sanitization procedure ...............................................................................................................................
Index R&S®FPL1000 V Volatile memory Instrument sanitization ............................................................................................................................... 7 Memory types ............................................................................................................................................ 5 Terms and definitions .................................................................................................................................