Keysight Technologies N8920A Manual Download Page 11

 

11 

 

 

 

User and Remote Interface Security Measures

 

Administrative Password 

To reset an instrument’s administrative password, follow the procedure in the 

N8900 

Operating and Service Guide 

. This involves removing power and other connections to 

the instrument, removing the instrument cover (requires tools), changing a switch 
position, and cycling power. The calibration count will increment when the password is 
reset using this method. 
 
The password never expires. 
 
This instrument does not track or report invalid password attempts, nor does it lock-out 
password entry following a number of invalid password entries. 

 

 

Remote Access Interfaces 

The user is responsible for providing security for the I/O ports for remote access by 
controlling physical access to the I/O ports.  The I/O ports must be controlled because 
they provide access to all user settings, user states and the display image. The I/O ports 
include USB, GPIB, and LAN. 
 
The LAN port provides the following services, which can be selectively disabled: 

a)

 

VXI-11 

b)

 

Sockets 

c)

 

Telnet 

d)

 

Web instrument control 

e)

 

mDNS 

 

To disable LAN services: 
On the front panel press the Menu key, then System\IO\LAN\Modify\Services 
 
To disable USB or GPIB: 
On the front panel press the Menu key, then System\Admin\ IO 

 

Controlling the front panel display 

The front panel display can be turned off from the remote interface by sending the 
command:   

DISPlay off 

The display is enabled when power is cycled. 

 
Calibration regulation 

The instrument requires a password to allow calibration.  The instrument’s calibration 
count will increment each time calibration is saved. 

 
Firmware update regulation 

The instrument may be configured to require a password to allow updating the firmware.  
On the front panel press the Menu key, then System\Admin\Login 

Summary of Contents for N8920A

Page 1: ...owinginstruments N8920A N8921A N8923A N8924A N8925A N8926A N8928A N8929A N8930A N8931A N8932A N8934A N8935A N8937A N8937APV N8940A N8941A N8943A N8944A N8945A N8946A N8948A N8949A N8950A N8951A N8952A N8954A N8955A N8957A N8957APV Declassification and Security Document ...

Page 2: ...ribed in this document are furnished under a license and may be used or copied only inaccordance with the terms of such license Restricted Rights Legend If software is for use in the performance of a U S Government prime contract or subcontract Software is delivered and licensed as Commercial computer software as defined in DFAR 252 227 7014 June 1995 or as a commercial item as defined in FAR 2 10...

Page 3: ... Keysight Technologies from another country Buyer shall pay all shipping charges duties and taxes Where to Find the Latest Information Documentation is updated periodically For the latest information about these products including instrument software upgrades application information and product information use the following URL http www keysight com Then type in the model number to search for To r...

Page 4: ...Products Covered by this Document 6 Security Terms and Definitions 7 Instrument Memory 8 Summary of Memory Declassification Procedures 10 User and Remote Interface Security Measures 11 Memory Sanitization Procedures For Declassifying a Faulty Instrument 13 References 14 ...

Page 5: ...the Internet at http www keysight com find assist If you do not have access to the Internet please contact your field engineer In any correspondence or telephone conversation refer to the instrument by its model number and full serial number With this information the Keysight representative can determine whether your unit is still within its warranty period ...

Page 6: ...5KW N8937APV N8957APV This document describes instrument security features and the steps to declassify an instrument through memory clearing sanitization or removal For additional information go to http www keysight com find security Be sure that all information stored by the user in the instrument that needs to be saved is properly backed up before attempting to clear any of the instrument memory...

Page 7: ...or both Keysight declassification procedures are designed to meet the requirements specified in DoD 5220 22 M Chapter 8 Sanitization As defined in Section 8 301b of DoD 5220 22 M sanitization is the process of removing or eradicating stored data so that the data cannot be recovered using any known technology Instrument sanitization is typically required when an instrument is moved from a secure to...

Page 8: ... Remarks Sanitization Procedure System Flash NAND Flash 42 MB No Yes Yes Contains the operating system and instrument firwmare Factory Install Firmware Upgrade IO board No method not user accessible and contains no application specific information User Flash NAND Flash Agilent Flash 79 MB Yes Yes Yes saved instrument states calibration and web password User saved data IO board same chip as firmwar...

Page 9: ... method not user accessible Memory Type and Size Is Memory user accessible as a mass storage device Writable During Normal Operation Data Retained When Powered Off Purpose Contents Data Input Method Location in Instrument and Remarks Sanitization Procedure 4kB EEPROM No Yes Yes Analog interface calibration Model number serial number nominal values firmware and hardware version Factory Service Only...

Page 10: ...and instrument states Size 79 MB Memory clearing See Memory Sanitization Memory sanitization On the remote interface send SYSTem SECurity IMMediate This procedure clears all instrument memory except for the instrument s firmware MAC address and serial number and calibration data and then reboots the instrument to the new memory state This routine writes all zeros to memory and then performs a full...

Page 11: ...st be controlled because they provide access to all user settings user states and the display image The I O ports include USB GPIB and LAN The LAN port provides the following services which can be selectively disabled a VXI 11 b Sockets c Telnet d Web instrument control e mDNS To disable LAN services On the front panel press the Menu key then System IO LAN Modify Services To disable USB or GPIB On...

Page 12: ...n with the administrative password Navigate to System Admin Update and check the box Must log in as admin to allow firmware update The instrument s calibration count will increment with each successful update ...

Page 13: ...uide for disassembly instructions Once this assembly is removed destroy the IO board and send the instrument to a repair facility If the repair facility determines that a new IO board fixes the problem and the instrument is still under warranty you will not be charged for the new board If they determine that the failure was caused by something other than the IO board you will be charged for the ne...

Page 14: ... States Department of Defense Revised May 18 2016 May be downloaded in Acrobat PDF format from http www dss mil isp fac_clear download_nispom html 2 ISFO Process Manual for the Certification and Accreditation of Classified Systems under the NISPOM Defense Security Service http www dss mil documents ...

Reviews: