Enhanced Security Option

Introduction

Increased security of data and communication management in test instrumentation is often required in highly secure environments. This is especially true in the aerospacedefense and automotive industries. Secure Erase, which performs a secure erasure of all non-volatile memory in compliance with NISPOM chapter 8 requirements, is a standard feature in all Keysight InfiniiVision X-Series oscilloscopes. The Enhanced Security option, which is available on Keysight’s InfiniiVision 3000T, 4000, and 6000  X-Series oscilloscopes, adds the following more stringent security features.

• Ability to dismount non-volatile memory causing all user-accessible files to be wiped clean on each power cycle, but otherwise retains all save/recall features while operating the oscilloscope

• Ability to disable communication ports (USB and Ethernet) to prevent data from entering or leaving the oscilloscope 

• Ability to disable firmware upgrades

• Password protection of the above features

Disabling Non-volatile Memory

Disabling non-volatile memory removes the non-volatile (NAND flash) user filesystem of the oscilloscope. When you select to disable non-volatile memory, the user-visible internal filesystem  moves into volatile memory (RAM) space. Although the user can browse and use these temporary/volatile memory registers normally while operating the oscilloscope, including internal save/recall registers (setup files, waveform files, mask files, symbolic decoding files, etc.), the useraccessible filesystem resets on each power cycle making user-created files and data from previous sessions non-persistent/erased (volatile). Each time the oscilloscope is powered on, the instrument is restored to a factory default setup configuration, which is stored in non-user-accessible non-volatile memory. This is also true for all licenses and calibration factors, which are also retained and used by  the oscilloscope, but are not accessible by the user.   

Note that web-based firmware upgrades are also disabled when non-volatile memory has been disabled, even if the oscilloscope’s LAN port is enabled.  

When the non-volatile memory selection is changed (enabled or disabled), a reboot of the oscilloscope is required for the change status to take effect.

Disabling USB and LAN Ports

The Enhanced Security options allows you to independently select to disable the USB host, USB device, and LAN communication ports for increased levels of security. Disabling the LAN port (secure) unbinds the ethernet adapter. Access to SCPI commands and the scope’s web-based user-interface are no longer available when the LAN port has been disabled. Also, the oscilloscope cannot be pinged and is essentially invisible over Ethernet to any device, even if an Ethernet cable is plugged into the scope’s hardware LAN port

When the USB device port is disabled (secure), SCPI connections are not possible. When the USB host port(s) are disabled (secure), external USB storage devices are inaccessible by the user and data is prevented from entering or leaving the oscilloscope.  

When USB and/or LAN port selections are changed (enabled or disabled), a reboot of the oscilloscope is required for the change status to take effect.