Sanitizing The Unit - Safran VersaSync User Manual

4.8 Resetting the Unit to Factory Configuration
Feature
HTTPS
SNMP
NTP
Daytime
Protocol
Time Pro-
tocol
Telnet
SSH
SCP
SFTP
* Safran recommends that secure clients use only SNMPv3 with authentication
for secure installations.
4.8.4

Sanitizing the Unit

The concept of sanitizing a VersaSync unit refers to erasing usage data that may
be stored in volatile and/or non-volatile memory, i.e. permanently eliminating any
data that could be used to trace the unit's former usage. This data may include –
but is not limited to – logs, configuration settings, IP addresses, passwords, GNSS
geographic positioning data, and network-specific usage data.
The VersaSync has a built-in process to sanitize all usage data. This process lever-
ages the upgrade process in order to execute the following functions:
300
Default Setting
Enabled (using customer-generated certificate and key or default
Spectracom self-signed certificate and common public/private key
SSH/SCP/SFTP enabled with unit unique 1024-bit keys)
Enabled
Enabled (with no keys specified) Enabled (use authentication with
Disabled
Disabled
Disabled
Enabled (default private keys
provided)
Available
Available
Performing simultaneous "clean" upgrades on both software partitions,
rewriting all software to the uploaded version and erasing all user data,
logs, and configurations.
The GNSS receiver's location data is deleted via a cold reset, and is pre-
vented from obtaining more information until electrically power cycled.
Rewriting all eMMC data in two wipes and two confirmations and two
upgrades total.
Recommended Setting
Disabled or Enabled (with SNMP
v3 w/ encryption*)
user-defined keys)
Disabled
Disabled
Command Line Interface
Disabled (use SSH instead)
Enabled (with user-defined keys)
File Transfer
Enabled
Enabled
CHAPTER
Where to
Configure
Web UI
Web UI
Web UI
Web UI
Web UI
Web UI
Web UI
Web UI
Web UI
•
4 VersaSync User Manual Rev. 12