Information sheet: NetClock Memory NetClock Models 9483 and 9489 internal memory information The Spectracom NetClock Models 9483 and 9489 contain internal memory, as listed below: 1) Compact Flash Card (in a socket on the Main Board): Non-Volatile Memory (Stores the logs, configurations and main operating software) A) Starting in Archive software version 4.8.7 (as reported in the Tools -> Versions page of the web browser), the entire contents of the Compact Flash card can be sanitized by performing a “Restore Factory Configuration” (leaving only the necessary operating software and factory default configuration files). With Archive software versions 4.8.7 or higher already installed, a checkbox for “Restore Factory Configuration” will be displayed (as shown below) during the software update process to enable this function. For the software upgrade process, a newer version of Archive software (if available) can be applied. Or, the same version of software currently installed can be re-installed by selecting “Force Update”, in addition to selecting “Update System” and “Restore Factory Configuration” during the Update process. Note: The only way to wipe this component in versions prior to Archive software version 4.8.7 is to remove and replace the original Compact Flash card with a new Compact Flash card from Spectracom. If the current Archive software is prior to version 4.8.7, please visit us at: http://www.spectracomcorp.com/Support/HowCanWeHelpYou/Software/tabid/61/Default. aspx#NetClock to download the latest version of software, the software update instructions and the software update Release Notes. B) The user can restore the Spectracom configuration settings, but not the network settings, from the “Tools” -> “Upgrade/Backup” page of the web browser (in the “Configuration” tab, set the “Restore Configuration” field to “Enabled” and press Submit). C) The user can manually reset the network settings, if desired, by hand (via the front panel keypad/LCD window or using the available front panel SERIAL port by issuing network configuration commands). www.spectracomcorp.com Rev A 20 May 2013 1 | NetClock memory information D) The GPS position can be cleared (reset to all zeroes) using the “Setup” -> “Inputs” -> “GPS” page of the web browser. Either change the “Position Clear” field to Enabled and press Submit, or manually change the “Longitude Setup” and “Latitude Setup” fields to all 0s (or to desired values). The GPS position can also be cleared and the user configurations reset to factory default using either the “Clean Configuration” or “Clean/Halt” fields (via the “Tools” -> “Upgrade/Backup” page of the web browser). Note: “Clean Configuration” resets the configurations back to factory default, but leaves the unit running, while “Clean/Halt” resets the configuration and shuts down the system. A power cycle is then required to restore operation). The unit can also be reset to factory configurations via either the “Home” -> “System” -> “Cmd” menus (using the front panel keypad/LCD window), or via the front panel DB9 SERIAL port (connected to a PC running terminal emulation software, such as HyperTerminal). The “clean” command restores all configurations to factory default, while the “cleanhalt” command also shuts down the system (a power cycle is required to restart the system). 2) ETX microprocessor memory A) ETX RAM - Volatile Memory 1) Cleared on power loss. B) ETX BIOS - Volatile Memory Note: The ETX BIOS is not accessible from any external interface or connection, and is not modified by any software running in the NetClock. 1) Backed up by an on-board battery. 2) The BIOS time/date is LOST when the battery is removed. 3) BIOS data is required for system operation. 3) Timing System memory A few persistent memory devices exist for the Timing System. There is an 8 KB EEPROM, an 8MB Flash, an 8MB RAM (volatile) an internal 32KB SRAM (Volatile) in addition to an internal 512KB Flash in the microcontroller. The 8MB Flash contains run-time and default firmware and FPGA images; this memory is utilized to store new images during normal operation. Note: There is no sanitization procedure available for the 8MB flash, but no user data is stored in this memory. It is only utilized to store the Software and FPGA images. The internal 512KB flash in the microcontroller contains the boot loader firmware and a compressed FPGA image. This is not accessible during normal operation. www.spectracomcorp.com 2 | NetClock Information Note The 8KB EEPROM contains configuration data, which write the following during normal operation: Status flags for the images stored in the 8MB Flash, these are updated during the upgrade process. An uptime counter, which tracks the powered-on time of the board. The user input reference table is also saved through power cycles. This stored table can be either overwritten by the user or will be automatically cleared when reset to factory default using the Setting Management screen of the web (Refer to Compact Flash card above). Oscillator DAC (Digital to Analog conversion value) and calibration data. GPS mode on startup. 4) GPS receiver memory Contains 32MB of SRAM and 4MB of Non-Volatile Flash memory The GPS receiver in the NetClock contains both 32MB of SRAM (Volatile) and 4MB Flash (NonVolatile) memory. The Ephemeris and Almanac data that is downloaded from the GPS satellites is stored in SRAM. The flash memory is used for software upgrades to be applied directly to the GPS receiver, storing GPS position data communication protocol settings and the GPS receiver mode configuration (Stationary, mobile or single satellite modes). The only values that persist in the GPS receiver’s flash memory during a power cycle are the GPS position, the GPS receiver mode of operation and the communication protocols that allow the GPS receiver to communicate with the NetClock platform. No other run-time information (time, user configuration) is persisted across power-cycles. The SRAM memory (which stores the Ephemeris data) is cleared upon power cycle. Though the flash memory cannot be completely wiped (which would render the GPS receiver no longer useable in the equipment because communication protocol configurations must remain configured in order for the GPS receiver to continue working with the rest of the unit), the current GPS position information can be cleared and/or the GPS receiver mode can be manually changed to a different value via the NetClock’s web browser (“Setup” -> “Inputs” -> “GPS” page). To clear the GPS Position information for the GPS receiver, navigate to the Setup -> Inputs -> GPS page of the web browser. In the “GPS Input Setup” table, change the “Position Clear” drop-down to “Enabled” and press the “Submit” Button. Note that after the position data is cleared and after the next time the NetClock is power cycled, a new GPS survey will be performed to determine the current GPS position. Note the position can also be cleared by performing a “clean” or “cleanhalt” command issued via either the “Home” -> “System” -> “Cmd” menus (using the front panel keypad/LCD window), or via the front panel DB9 SERIAL port (using a serial cable, pinned straight-thru, connected to a PC running terminal emulation software, such as HyperTerminal). The “clean” command restores all configurations to factory default, while the “cleanhalt” command also shuts down the system (a power cycle is required to restart the system). www.spectracomcorp.com 3 | NetClock Information Note To manually change the GPS receiver mode (for example, it was initially set to mobile mode, but it’s desired to reset it back to stationary mode), navigate to the Setup -> Inputs -> GPS page of the web browser. In the “GPS Input Setup” table, change the “Receiver Mode” and “Dynamics Mode” dropdowns to the desired values. Then press the “Submit” Button. Note: Manually changing the GPS Mode between “mobile” and “stationary” modes via the web browser performs a factory reset of the GPS receiver, as a normal part of this process. 3) Memory (if any) contained in the available NetClock Model 9483’s standard RS232, RS-485, IRIG and alarm relay outputs and Options, as listed below (Not applicable to the Model 9489): Note: Each of the NetClock’s standard outputs and available Options with an associated FPGA (as listed below) uses an 8Mbit serial flash to store a primary and backup FPGA image for that particular output. These images are field upgradeable by the user. No other information is stored or accessible in this memory. There is no way to sanitize the output’s memory, but installed cards can be removed from the NetClock in the field, as desired. Standard outputs: A) (ASCII time code, RS-485/Alarm relays): Contains local 8Mbit SPI flash used to hold the FPGA programming images. B) (ASCII time code, RS-232): Contains local 8Mbit SPI flash used to hold the FPGA programming images. C) (IRIG In/out, AM or DCLS): Contains local 8Mbit SPI flash used to hold the FPGA programming images. Available Options: A) Option 04: (Rubidium Oscillator): N/A B) Option 05: (OCXO Oscillator): N/A C) Option 12 (PTP Input/Output): This particular installed/dedicated card does have its own separate EEPROM (with user settings) that is used by the PTP microcontroller. D) Option 13 (T1/E1 outputs): Contains a one-time only programmable logic controller E) Option 14 DC redundancy (12vdc): N/A F) Option 15 DC redundancy (24-48vdc): N/A G) Option 16 (Multi-port Ethernet): This available Option Card contains no FPGAs. Instead, this Option Card contains three network processor ICs (one for each network port). Each network processor has dedicated, non user-accessible 1MB SPI Flash memory which stores www.spectracomcorp.com 4 | NetClock Information Note the associated MAC address for each network port. The MAC address for each port is preprogrammed at the factory. The MAC address cannot be erased without rendering the Option Card inoperable. FAQs: Q. How can the FPGA EEPROM be updated by the customer? A. New FPGA images are included in the NetClock update bundles, and are applied when the customer initiates a Software Update. Q. What is the communication protocol used to update the firmware? A. The Update Bundle is copied to the NetClock, normally via the Web Interface. Then, when the customer initiates the update, the NetClock uncompresses the bundle and validates it, and applies all software updates that are required for the unit. The protocol for applying these updates is proprietary to Spectracom. The only control a customer has over the process is to initiate an upgrade using an upgrade bundle provided by Spectracom. Q. Is the memory inside the FPGA logic or is this another IC on the board? A. Our FPGA’s are SRAM-based. Each Option Card that has an FPGA has one NVRAM IC (separate from the FPGA) that contains the FPGA image. Q. Is there any method available to verify the Compact Flash card memory has been cleared? A. The NetClock configurations can be “cleaned” (reset to factory default settings) via the web browser. However, there is no method to verify all of the configurations have been cleaned, other than observing the settings in each of the web browser pages. Q. Are the NetClock Option Cards removable? A. Yes. All of the Option Cards can be removed from the NetClock. However, the SPI flash memory that is in Option Cards that do have FPGAs installed (not all Option Cards contain processors and memory) do not have any user data stored in them. They are only utilized to store the FPGA images. Q. When a factory-reset (Clean command) is performed, does this completely reset the /dev/hda1 device back to its original state, including any certificates, authorized keys, or other files that might have been uploaded? Could any traces of the contents be left behind? A. The “Clean Configuration” action does restore user configurations (network settings, SNMP, NTP, passwords etc) and deletes GPS position (latitude/longitude/antenna height), user-accounts, all unit logs, SSH/HTTPS certificates and keys. However, the user could upload, for example with FTP, a file that the application does not know about, and that file would not be removed by “Clean Configuration”. The upgrade process actually wipes the CF card clean and recreates every file, so a customer who wanted to clean both expected and unexpected files could do a “Clean Configuration” and a forced upgrade (to the same version) to ensure that no files survive. (Note that the upgrade alone will not wipe configuration.) www.spectracomcorp.com 5 | NetClock Information Note The same process, “Clean Configuration”, then wipe and rewrite the disk by doing an upgrade will also remove any traces of erased certificates and keys. Obviously removing the CF is an even better way of ensuring that it is wiped. Q. The root, spfactory, and spui accounts have a valid shell, but I don't seem to be able to find a way to read /etc/shadow they may want to confirm that factory-default accounts are locked out. A. The restrictions on viewing /etc/shadow is part of the security, it is not intended to be readable. root – The root account is not externally accessible. The only way to get at the root account is to log in as another user, then switch to root. spfactory – This account can be removed using the “Security” tab of the Tools -> Users page of the browser (“Remove Factory Account” checkbox at the bottom of the page). spui – This account is disabled for login, it is only used by the web UI. USA | 1565 Jefferson Road | Rochester, NY 14623 | +1.585.321.5800 | sales@spectracomcorp.com FRANCE | 3 Avenue du Canada | 91974 Les Ulis, Cedex | +33 (0)1 64 53 39 80 | sales@spectracom.fr UK | 6A Beechwood | Chineham Park | Basingstoke, Hants, RG24 8WA | +44 (0)1256 303630 | info@spectracom.co.uk www.spectracomcorp.com 6 | NetClock Information Note