14
Agilent U1091AK12 (PP 512) Security Features and Certificate of Volatility

U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Embed Size (px)

Citation preview

Page 1: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Agilent U1091AK12 (PP 512)

Security Features andCertificate of Volatility

Page 2: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Notices© Agilent Technologies, Inc. 2011

No part of this manual may be reproduced inany form or by any means (including elec-tronic storage and retrieval or translationinto a foreign language) without prior agree-ment and written consent from Agilent Tech-nologies, Inc. as governed by United Statesand international copyright laws.

Manual Part NumberU1091-90002

EditionEdition 1.0, October 2011Agilent Technologies, Inc.

Sales and Technical SupportTo contact Agilent for sales and technicalsupport, refer to the “support” links on thefollowing Agilent web resources:

n (product-specific information and sup-port, software and documentationupdates)

n www.agilent.com/find/Digitizersn www.agilent.com/find/assist

(worldwide contact information forrepair and service)

WarrantyThe material contained in this document isprovided “as is,” and is subject to beingchanged, without notice, in future editions.Further, to the maximum extent permitted byapplicable law, Agilent disclaims all war-ranties, either express or implied, withregard to this manual and any informationcontained herein, including but not limited tothe implied warranties of merchantabilityand fitness for a particular purpose. Agilentshall not be liable for errors or for incidentalor consequential damages in connection withthe furnishing, use, or performance of thisdocument or of any informationcontained herein. Should Agilent and theuser have a separate written agreement withwarranty terms covering the material in thisdocument that conflict with these terms, thewarranty terms in the separate agreementshall control.

Safety NoticesRefer to the saftey notices included in thespecific product StartUp Guide or User Man-ual.

Front and Rear Panel Symbols:

The CE mark is a registered trade-mark of the European Community.

The C-Tick mark is a registeredtrademark of the Australian Spectrum Man-agement Agency.

This symbol indicatesproduct compliance

with the Canadian Interference-CausingEquipment Standard (ICES-001). It also iden-tifies the product is an Industrial Scientificand Medical Group 1 Class A product (CISPR11, Clause 4).

This symbol indicates separate col-lection for electrical and electronicequipment, mandated under EU law

as of August 13, 2005. All electric and elec-tronic equipment are required to be sep-arated from normal waste for disposal(Reference WEEE Directive, 2002/96/EC).

This symbol on an instrumentmeans caution, risk of danger. You

should refer to the operating instructionslocated in the user documentation in allcases where the symbol is marked on theinstrument.

This symbol indicates the timeperiod during which no hazardousor toxic substance elements are

expected to leak or deteriorate during nor-mal use. Forty years is the expected usefullife of the product.

This symbol indicates the instru-ment is sensitive to electrostaticdischarge (ESD). ESD can dam-

age the highly sensitive components in yourinstrument. ESD damage is most likely tooccur as the module is being installed orwhen cables are connected or disconnected.Protect the circuits from ESD damage by wea-ring a grounding strap that provides a highresistance path to ground. Alternatively,ground yourself to discharge any built-upstatic charge by touching the outer shell ofany grounded instrument chassis beforetouching the port connectors.

Page 3: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Table of ContentsIntroduction 4Terms and Definitions 4U1091AK12 Volatile memory locations 5U1091AK12Non-Volatile memory locations 7U1091AK12Non-Volatile Bulk Storage 10

Removal Instructions 11Sanitization Procedure 12

Volatile Memories 12Non-volatile Memories 12Non-volatile Bulk Storage Devices (HDD) 12

References 13

Page 4: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

IntroductionThis document describes each of the memory locations or devices contained within the U1091AK12 Embedded Com-pactPCI Processor (PP 512) and any security features that apply to that product. It also provides a statement regardingthe volatility of all memory types, and specifies the steps requires to declassify instrument through memory clearing,sanitization, or removal.For additional information please visit : www.agilent.com/find/security

Terms and Definitions

Clearing

As defined in Section 8-301a of DoD 5220.22-M, “National Industrial Security ProgramOperating Manual (NISPOM)”, clearing is the process of eradicating the data on mediabefore reusing the media so that the data can no longer be retrieved using the standardinterfaces on the instrument. Clearing is typically used when the instrument is toremain in an environment with an acceptable level of protection.

Instrument Declassification

A term that refers to procedures that must be undertaken before an instrument can beremoved from a secure environment, such as is the case when the instrument isreturned for calibration. Declassification procedures include memory sanitization ormemory removal, or both. Agilent declassification procedures are designed to meet therequirements specified in DoD 5220.22-M, “National Industrial Security Program Oper-ating Manual (NISPOM)”, Chapter 8.

Sanitization

As defined in Section 8-301b of DoD 5220.22-M, “National Industrial Security ProgramOperating Manual (NISPOM)”, sanitization is the process of removing or eradicatingstored data so that the data cannot be recovered using any known technology. Instru-ment sanitization is typically required when an instrument is moved from a secure to anon-secure environment, such as when it is returned to the factory for calibration. Agi-lent memory sanitization procedures are designed for customers who need to meet therequirements specified by the US Defense Security Service (DSS). These requirementsare specified in the “Clearing and SanitizationMatrix” in Appendix O of the ODAA Proc-ess Guide for C&A of Classified Systems under NISPOM.

Secure EraseSecure Erase is a term that is used to refer to either the clearing or sanitization featuresof Agilent instruments.

4

Page 5: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

U1091AK12 Volatile memory locationsThe following tables list the volatile memory locations of the U1091AK12 product.

Description MainMemoryPurpose System memoryTechnology DDR3 SDRAMSize 8 GB (maximum)Written by Normal operationCleared by Power removalWrite protected NoNon-volatile NoComments -

Description CPU L1 CachePurpose Level one cacheTechnology SRAMSize 32 KBWritten by Normal OperationCleared by Power removalWrite protected NoNon-volatile NoComments -

Description CPU L2 CachePurpose Level two cacheTechnology SRAMSize 6 MBWritten by Normal operationCleared by Power removalWrite protected NoNon-volatile NoComments -

5

Page 6: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Description Video MemoryPurpose Video frame bufferTechnology DDR3 SDRAMSize 64 MB (max)Written by Normal operationCleared by Power removalWrite protected NoNon-volatile NoComments Reserved region of MainMemory, only accessible via Graphics Controller

6

Page 7: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

U1091AK12 Non-Volatile memory locationsThe following tables list the non-volatile memory locations of the U1091AK11 product.

Description Firmware MemoryPurpose Holds BIOS firmware and configuration dataTechnology SPI Flash EPROMSize 4 MBWritten by Vendor supplied programming utility and BIOS operationsCleared by Overwriting contentsWrite protected By chipset and device registersNon-volatile Yes

CommentsThe BIOS writes configuration changes to dedicated device sectors; otherwise, loadingfirmware memory requires an OEM-provided firmware file and loader program.

Description CMOS MemoryPurpose Holds the time and date plus BIOS configuration parametersTechnology Battery backed SRAMSize 256 BytesWritten by Normal operationCleared by Simultaneous power and battery removalWrite protected NoNon-volatile Yes, when battery fitted

CommentsCertain locations are defined for use by operating systems or stand-alone user pro-grams. Other locations are protected by a CRC and will be re-written by the BIOS ifloaded with arbitrary data and the CRC check fails.

Description BIOS NV2 MemoryPurpose Holds additional BIOS settingsTechnology Serial EEPROMSize 8 KBWritten by BIOS setup screensCleared by Vendor supplied programming utilityWrite protected NoNon-volatile Yes

CommentsNot accessed by operating systems or user programs. The contents are protected by aCRC.

7

Page 8: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Description Ethernet Controller Configuration EEPROM (x3)Purpose HoldsMAC address and device configuration dataTechnology SPI EEPROMSize 8 KBWritten by Vendor supplied programming utilityCleared by Vendor supplied programming utilityWrite protected NoNon-volatile YesComments Three devices are fitted: one for the 82541 and one each for the two 82574 controllers.

Description PCIe Switch Configuration EEPROMPurpose Holds power-on configuration data for the PCIe switch.Technology SPI EEPROMSize 8 KBWritten by Vendor supplied programming utilityCleared by Vendor supplied programming utilityWrite protected NoNon-volatile YesComments -

Description IPMI Microcontroller - Internal MemoryPurpose Storage and workspace for microcontroller IPMI programTechnology Flash EPROM / SRAMSize 64 KB flash / 4352 bytes RAMWritten by Vendor supplied programming utilityCleared by Vendor supplied programming utilityWrite protected NoNon-volatile Yes (flash EPROM)Comments Memory is internal and not accessible by external devices

8

Page 9: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Description IPMI Non-volatile MemoryPurpose Holds IPMI SPD, SEL, FRU and configuration dataTechnology Serial EEPROMSize 8 KBWritten by IPMI commandsCleared by IPMI commandsWrite protected NoNon-volatile YesComments -

Description IPMB1 Microcontroller - Internal MemoryPurpose Storage and workspace for microcontroller IPMB1 programTechnology Flash EPROM / SRAMSize 8 KB flash / 768 bytes RAMWritten by Vendor supplied programming utilityCleared by Vendor supplied programming utilityWrite protected NoNon-volatile Yes (flash EPROM)Comments Memory is internal and not accessible by external devices

9

Page 10: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

U1091AK12 Non-Volatile Bulk StorageThe U1091AK12 includes an EIDE interface to which a 2.5" bulk storage device (Hard Disk Drive) may be fitted. Inorder to declassify the instrument the bulk storage device must be removed and sanitized or disposed of.The following section details the procedure for removal of this device.

10

Page 11: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Removal Instructions1. Remove the (2) mounting screws securing the SATA adaptor to the main board.2. Remove the (4) mounting screws securing the bulk storage device to the main board.3. Supporting both the bulk storage device (HDD) and the adaptor, unplug the adaptor and HDD from the main

board.4. Disconnect the SATA adaptor from the bulk storage device, and remove the support pillars.5. Return the adaptor, support pillars and screws to their positions on the main board.

11

Page 12: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

Sanitization ProcedureThe memory locations summarized belowmay be sanitized by following the steps shown in bold text.

Volatile MemoriesThe volatile memory in the instrument does not retain any information when AC power is removed from the chassis inwhich it is inserted. Therefore no sanitization process is required for the volatile memory locations.

Non-volatile MemoriesAll non-volatile memory locations of the U1091AK12 (PP 512) instrument are either :

o Not accessible by the user or operating system.o Backed up by battery power.

1. Remove the instrument from power sources (chassis).2. Remove the backup battery.

Non-volatile Bulk Storage Devices (HDD)1. Remove the bulk storage device.

12

Page 13: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

References1 DoD 5220.22-M, “National Industrial Security Program Operating Manual (NISPOM)”

United States Department of Defense. Revised February 28, 2006. May be downloaded in Acro-bat (PDF) format from:www.dss.mil/isp/fac_clear/download_nispom.html

2 ODAA Process Guide for C&A of Classified Systems under NISPOMDefense Security Service. DSS-cleared industries may request a copy of this document viaemail, by following the instructions at: http://www.dss.mil/isp/odaa/request.html

4 Technical Reference Manual for PP 512/06x CompactPCI Intel Core 2 Duo Processor Intel-ligent Dual PMC CarrierManual order code 560 0029, Rev 04, June 2009. Concurrent Technologies Inc.

13

Page 14: U1091AK12 Product Volatility Note - Keysightliterature.cdn.keysight.com/litweb/pdf/U1091-90002.pdf · 1 DoD5220.22-M,“NationalIndustrialSecurityProgramOperatingManual(NISPOM)”

The Modu l ar Tang r amThe four-sided geometric symbol that appears in Agilent modularproduct literature is called a tangram. The goal of this seven-piecepuzzle is to create shapes—from simple to complex. As with atangram, the possibilities may seem infinite as you begin to createa new test system. With a set of clearly defined elements—hardware, software—Agilent can help you create the system youneed, from simple to complex.

DISCOVER the Alternatives …… Agilent MODULAR Products

Agilent Advantage Services is committed to yoursuccess throughout your equipment's lifetime.www.agilent.com/find/advantageservices

Agilent Email Updates keep you informed on thelatest product, support and application information.www.agilent.com/find/emailupdates

Agilent Channel Partners provide sales andsolutions support. For details, seewww.agilent.com/find/channelpartners

ISO 9001:2008 certified. For details, seewww.agilent.com/quality

www.pxisa.org

www.axistandard.org

PICMGand the PICMG logo, CompactPCI and the CompactPCI logo,AdvancedTCA and the AdvancedTCA logo are US registered trademarks of thePCI Industrial Computers Manufacturers Group. “PCIe” and “PCI EXPRESS” areregistered trademarks and/or service marks of PC-SIG.Microsoft,Windows,Visual Studio, Visual C++, Visual C#, and Visual Basic are either registeredtrademark or trademarks of Microsoft Corporation.

Product descriptions in this document are subject to change without notice.

© Agilent Technologies, Inc. 2010-2011

www.ag i l e n t .comwww.ag i l e n t .com/ f i nd /modu l arwww.ag i l e n t .com/ f i nd /se cu r i t yFor more information on Agilent Technologies' products,applications or services, please contact your local Agilent office.(For additional listings, go to www.agilent.com/find/assist.)AmericasCanada (877) 894 4414Brazil (11) 4197 3500Mexico 01800 5064 800United States (800) 829 4444

Asia PacificAustralia 1 800 629 485China 800 810 0189Hong Kong 800 938 693India 1 800 112 929Japan 0120 (421) 345Korea 080 769 0800Malaysia 1 800 888 848Singapore 1 800 375 8100Taiwan 0800 047 866Thailand 1 800 226 008

Europe & Middle EastAustria 43 (0) 1 360 277 1571Belgium 32 (0) 2 404 93 40Denmark 45 70 13 15 15Finland 358 (0) 10 855 2100France 0825 010 700 (0.125 €/minute)Germany 49 (0) 7031 464 6333Ireland 1890 924 204Israel 972 3 9288 504 / 544Italy 39 02 92 60 8484Netherlands 31 (0) 20 547 2111Spain 34 (91) 631 3300Sweden 0200 88 22 55Switzerland 0800 80 53 53United Kingdom 44 (0) 118 9276201