Attachment 9 - COMDTINST_M2241.6_TEMPEST_Manual.pdf

FOR OFFICIAL USE ONLY

Public Availability to be Determined Under 5 U.S.C. 552

U.S. COAST GUARD

TEMPEST PROGRAM

COMDTINST M2241.6

December 2009

Public availability to be Determined Under 5 USC 552

RECORD OF CHANGES

CHANGE

NUMBER

DATE OF

CHANGE

DATE

ENTERED

BY

WHOM ENTERED

FOR OFFICIAL USE ONLY COMDTINST M2241.6

i

TABLE OF CONTENTS

CHAPTER 1 INTRODUCTION TO THE TEMPEST PROGRAM 1-1

A. General 1-1 B. Procedures 1-1 C. References 1-2 D. Approved and Endorsed Equipment and Systems 1-4 E. Definitions and Terms 1-5

CHAPTER 2 TEMPEST PROGRAM OVERVIEW 2-1

A. General 2-1 B. Roles and Responsibilities 2-1 C. Procedures 2-4

CHAPTER 3 GENERAL INSTALLATION REQUIREMENTS 3-1

A. General 3-1 B. Detailed Requirements 3-5 C. CRYPTO Installation Guidance 3-11

CHAPTER 4 VISUAL TEMPEST INSPECTION AND REPORTING

PROGRAM 4-1

A. Discussion 4-1 B. Procedures 4-1 C. Field Technical Authority Program 4-2

CHAPTER 5 COAST GUARD AVIATION TEMPEST APPLICABILITY 5-1

A. Authority 5-1 B. Responsibility 5-1 C. Aircraft TEMPEST Inspections 5-1

CHAPTER 6 TEMPEST COUNTERMEASURES 6-1

A. General 6-1 B. Process 6-1 C. Waivers 6-3

ENCLOSURES (1) Sample TEMPEST Visual Inspection Report Memo

(2) Sample TEMPEST Discrepancy List

COMDTINST M2241.6 FOR OFFICIAL USE ONLY

ii

(3) RED/BLACK Installation checklist

(4) U.S. Coast Guard Aviation TEMPEST Requirements Questionnaire

(TRQ) Modifications to Existing Aircraft

FOR OFFICIAL USE ONLY COMDTINST

M2241.6

CHAPTER 1. INTRODUCTION

A. General. TEMPEST is not an acronym but rather an unclassified cover term used to identify anything relating to the study of unintentional compromising emanations. As such, any use of the term TEMPEST throughout this Manual is referring to the study of unintentional compromising emanations (CE) including all applicable or related policies. This instruction implements Committee on National Security Systems (CNSS) Policy No. 300, National Policy on the Control of Compromising Emanations dated April 2004. CNSS 300 directs government departments and agencies to plan, program, fund, implement and manage a single compromising emanations control program. The National Security Telecommunications and Information Systems Security Advisory Memorandum (NSTISSAM) TEMPEST/2-95, RED/BLACK Installation Guidance specifies RED/BLACK equipment/system installation guidance to consider during the design of secure processing systems equipment and facilities and for subsequent installation of equipment and systems that receive, transmit, manipulate, graph, store, archive, calculate, generate, print or in some manner process national security information (NSI). This instruction establishes minimum installation standards for all Coast Guard aircraft, cutters, and shore facilities that process NSI. This instruction establishes the Visual TEMPEST Inspection (VTI) Reporting Program and applies as well to the applicable aviation portions of the TEMPEST Program. Procedures instituted by this instruction are meant to be preventative in nature.

B. Procedures. The basic design, modification and installation criteria to achieve TEMPEST integrity of national security information processing equipment and systems contained in this instruction shall be followed. This instruction applies to all Coast Guard Facilities, Cutters, and Aircraft. The Coast Guard TEMPEST Program Manager shall maintain a current TEMPEST profile for all Coast Guard Facilities, Cutters and Aircraft, which will include an Instrumented TEMPEST Survey and all Visual TEMPEST Inspections (VTI). Modifications or changes to any Secure Electrical Information Processing System (SEIPS) installed aboard Coast Guard Facilities and Cutters shall be made only with prior approval from the Coast Guard TEMPEST Program Manager or C4IT-SC TEMPEST Coordinator. Modifications or changes to any SEIPS installed aboard CG Aircraft shall be made only with prior approval from the Aviation Logistics Center (ALC) TEMPEST Control Officer. An Instrumented TEMPEST Survey (ITS) by a National Security Agency (NSA) certified TEMPEST test services facility is required for all new Communication Security (COMSEC) equipment and systems. Certified NSA TEMPEST test services POCs can be found at http://www.nsa.gov/ia/guidance/index.shtml. An ITS may be required for any equipment installed in a secure processing area, space, airframe, or facility to be determined by the TEMPEST Program manager. Each Field Technical Authority (FTA) shall review this instruction in its entirety prior to conducting a VTI. Installations certified using MIL-STD-1680(series) shall remain valid until installations have been removed or modified to conform to this instruction. Department of Navy (DON) Information Assurance (IA) Pub 5239-31 contains references to installations prior to 1997.

1-1 http://www.nsa.gov/ia/guidance/index.shtml

1-2

C. References.

1. Publications. The following references contain information that supplements the information contained herein. Persons responsible for the engineering or installation of equipment and systems that process national security information should review the effective editions of these references as applicable.

a. Committee on National Security Systems Policy CNSS Policy No. 300, (FOUO) National Policy on Control of Compromising Emanations dated April 2004

b. National Security Telecommunications and Information Systems Security Instruction (NSTISSI) No. 7000, (C) TEMPEST Countermeasures for Facilities, dated 29 November

c. NSTISSI No. 7001, (S) NONSTOP Countermeasures, dated 13 June 1994

d. CNSS AM TEMPEST 01-02 (C-NF) NONSTOP Evaluation Standard

e. National Security Telecommunications and Information Systems Security Advisory Memorandum (NSTISSAM) TEMPEST/1-92, (C) Compromising Emanations Laboratory Test Requirements Electromagnetics

f. NSTISSAM TEMPEST/2-92 (FOUO) Procedures for TEMPEST Zoning

g. NSTISSAM TEMPEST/1-93 (C) Compromising Emanations Field Test Requirements

h. NSTISSAM TEMPEST/1-95 (C) Shielded Enclosures

i. NSTISSAM TEMPEST/2-95 (FOUO) RED/BLACK Installation Guidance (with Amendment NSTISSAM 2-95A dated 03 February 2000)

j. NSTISSI 7003 Protective Distribution Systems (PDS)

k. DON IA Pub 5239-31, Information Assurance Shipboard RED/BLACK Installation Publication, dated July 2007

l. DON IA Pub 5239-22, Information Assurance Protective Distribution Publication, dated October 2003

m. MIL-STD-1397, Input/Output Interfaces, Standard Digital Data, Navy Systems Telephone Security Group

Public Availability to be Determined Under 5 U.S.C. 552

n. COMDTINST M13020.1 (series), Aeronautical Engineering Maintenance Management Manual

o. CGTO PG-85-00-110, Aeronautical Engineering Maintenance Management Process Guide

p. NSTISSAM TEMPEST/1-00, Maintenance and Disposition of TEMPEST Equipment, dated December 2000

q. COMDTINST M5500.13 (series), Information Assurance Manual

r. Department of Defense Information Assurance Certification and Accreditation Process

(DIACAP)

2. Government Specifications and standards. The following documents in effect on date of invitation for bids or request for proposal form a part of this standard to the extent specified herein:

a. MIL-C-17: Cable, Radio Frequency, Flexible and Semi-rigid, General Specification for

b. MIL-C-915: Cable and Cord, Electrical, For Shipboard Use, General Specification for

c. MIL-C-5541: Chemical Conversion Coatings on Aluminum and Aluminum Alloys

d. MIL-C-24640: Cable, Lightweight, Electric, Low Smoke, for Shipboard Use, General Specification for

e. MIL-C-24643: Cable and Cord, Electric, Low Smoke, for Shipboard Use, General Specification for

f. MIL-STD-188-124: Grounding, Bonding, and Shielding for Common Long Haul/Tactical Communications Systems Including Ground Based Communications, Electronics Facilities, and Equipment

g. MIL-HDBK-419: Grounding, Bonding, and Shielding for Electronic Equipment and Facilities, Volumes 1 & 2

h. MIL-STD-188-114: Electrical Characteristics of Digital Interface Circuits

i. MIL-STD-220: Methods of Insertion Loss Measurement

j. MIL-STD-1680: Installation Criteria for Shipboard Secure Electrical Information Processing Systems. This document was superseded by DON IA Pub-5239-31 and is included as a reference solely for installations made prior to June 2000.

1-3

1-4

k. MIL-STD-1310: Shipboard Bonding, Grounding, and Other Techniques for Electromagnetic Compatibility and Safety

l. MIL-STD-461: Requirements for the Control of Electromagnetic Interference Characteristics of Subsystems and Equipment

m. MIL-STD-464: Electromagnetic Environmental Effects Requirements for Systems

n. MIL-C-5541E: Chemical Conversion Coatings on Aluminum and Aluminum Alloys

3. Non-Government publications. The following documents form a part of this document to the extent specified herein. Unless otherwise specified, the issue of this document is that currently listed in the applicable publication index:

a. American Society for Testing and Materials (ASTM). ASTM B 152: Standard Specification for Copper Sheet, Strip, Plate, and Rolled Bar. (DOD adopted)

b. Telecommunications Industries Association (TIA) EIA-RS-232: Interface between Data and Data Circuit-terminating Equipment employing Serial Binary Data Interchange

c. National Fire Protection Association, Inc (NFPA) NFPA No. 70-1994, National Electric Code Section 250

4. Order of precedence. In the event of a conflict between the text of this document and the references cited herein, the text of this document shall take precedence. Nothing in this document, however, supersedes applicable laws and regulations unless a specific exemption has been obtained in writing.

D. Approved and Endorsed Equipment and Systems.

1. Point of Contact (POC). Telecommunication Information Systems Command (TISCOM) (tis-332) is the POC for an approved list of TEMPEST equipment. The National Security Agency (NSA) maintains a list of equipment at http://www.nsa.gov/ia/guidance/index.shtml.

Equipment on the Certified TEMPEST Products List (CTPL) has been tested by an NSA approved testing facility. The three categories of TEMPEST equipment are listed below:

a. Level I. TEMPEST suppressed equipment designed for use in any ship or shore environment.

http://www.nsa.gov/applications/ia/tempest/TEMPESTLevel1.cfm.

b. Level II. This equipment is designed for use in a facility that has an inspectable space between 20 and 100 meters.

http://www.nsa.gov/applications/ia/tempest/TEMPESTLevel2.cfm http://www.nsa.gov/ia/guidance/index.shtml http://www.nsa.gov/applications/ia/tempest/TEMPESTLevel1.cfm http://www.nsa.gov/applications/ia/tempest/TEMPESTLevel2.cfm

Public Availability to be Determined Under 5 U.S.C. 552

c. Level III. This equipment is best suited for a facility that has an inspectable space greater than 100 meters or in shipboard applications where the equipment is only used at sea.

http://www.nsa.gov/applications/ia/tempest/zonedEquipment.cfm

2. Approved IT Configurations. Approved computer configurations for use in Coast Guard facilities:

a. TISCOM supported Coast Guard Standard Workstation III (CGSW-III) Shipboard Telecommunication Computer System (STCS) configurations.

b. TISCOM supported Satellite Data Exchange (SDX) configurations.

c. CGSW-III in a standalone configuration following the guidelines contained herein.

3. Command and Control Accreditation. Command and Control systems shall be installed and accredited following the guidelines contained in NSTISSAM 2-95, DON IA Pub 5239-31, DON IA Pub 5239-22, DIACAP and Information Assurance Manual, COMDTINST M5500.13 (series).

Note: Classified LAN systems shall be reviewed and approved individually. Classified LAN systems that also connect to a classified WAN system (e. g. SIPRNET, etc.) may require additional installation requirements. The Designated Approval Authority (DAA) shall be consulted prior to any installation.

E. Definitions and Terms. The definitions and terms used in this document are defined in FED-STD1037, JCS Pub 1, NCSC-3, Committee on National Security Systems (CNSS) 4009 and MIL-STD-1310. For the purposes of this document, definitions are provided for the following terms, some of which have been repeated from the forgoing publications for the convenience of the reader.

1. Acceptable Hazard. A designation applied to a cutter, facility, or aircraft indicating although an ITS has determined that CE are present outside the secure processing facility, the TEMPEST signal exploitation vulnerability is minimal since the emanations are within the inspectable space or within acceptable limits. Therefore correction of the TEMPEST problem is not required.

2. Acceptable Risk. As determined by the Certified TEMPEST Technical Authority (CTTA) or DAA, a category assigned to a cutter, facility, or aircraft that has not had an ITS to determine its overall TEMPEST posture but meets RED/BLACK requirements. This does not apply to first of class platforms. Other systems will be considered on a case by case basis.

3. Armor. A braid of metallic material placed around an insulated conductor or cable for physical protection but also used to reduce interaction and mutual coupling between RED and BLACK cables. (Note: This use does not imply equivalence between armored and shielded cable.)

1-5

FOR OFFICIAL USE ONLY

http://www.nsa.gov/applications/ia/tempest/zonedEquipment.cfm

1-6

4. Assembled Equipment. Equipment delivered as an entity, requiring only mounting and connection to external interfaces.

5. BLACK Equipment. A term applied to equipment that processes only unclassified and/or encrypted information.

6. BLACK Information. Any encrypted or non-NSI (National Security Information).

7. Bond-Bonding (electrical). An electrical bond is a conductive (electrical current) path between two metallic surfaces established by welding, bolting/clamping, or addition of a bond strap.

Bonding is the act of creating the bond.

8. Bond Classification. The electrical bonding methods specified herein are classified as follows:

a. Class A - Metallic surfaces bonded by welding or brazing.

b. Class B - Metallic surfaces bonded by bolting or clamping.

c. Class C - Metallic surfaces bonded by bridging them with a metallic (conductive) bond strap.

9. Bonding of resilient mounted equipment or cabinets. Resilient mounted equipment or cabinets shall be bonded to ground with a flexible Class C bond strap.

10. Bonding of non-resilient mounted equipment. Non-resilient mounted equipment in their original cabinets, except cryptographic equipment, shall be bonded to ground with a Class B bond or Class C bond strap as determined by TISCOM (tis-332).

11. Bond Resistance. The direct current (DC) resistance across bonded surfaces (not using the bolt, clamp or bond strap as one of the surfaces) must be 0.1 ohms or less.

12. Bond Strap. A device used to establish a class C bond. Bond straps are classified, according to construction, into four types:

a. Type I – Corrosion Resistant Steel (CRES) 316, 1/4-inch wire rope with lugs of CRES 316L SCHED 80S pipe. (Note: Separately acquired mounting equipment is required to install Type I bond straps.

b. Type II - Flat CRES 316 with mounting holes in each end.

c. Type III - Flat copper with mounting holes in each end.

d. Type IV - Flat copper braid with mounting holes in each end.

Public Availability to be Determined Under 5 U.S.C. 552

Note: Bonding surface preparation is the cleaning of any paint, grease, rust, corrosion or other foreign material from a metal surface thereby exposing the basic metal in a clean or bright condition.

13. Certified TEMPEST Technical Authority. An experienced, technically qualified U.S.

Government employee who has met established certification requirements in accordance with the Committee on National Security Systems (CNSS) approved criteria and has been appointed by a U.S. Government Department or Agency to fulfill CTTA responsibilities.

14. Cipher Language. Information that has been processed by a NSA approved cryptographic equipment and is in an encrypted unintelligible form, regardless of the original language form.

15. Classified Information Processing System(s) (CLIPS). Any equipment, device or system that is electrically powered and processes, converts, reproduces, or otherwise manipulates any form of classified information. The following types of equipment are typical: electrical or electronic typewriters; non-photographic copiers; word processors; composing and editing equipment;

video displays; automated data processing (ADP); telecommunications equipment and systems including the teletypewriter, facsimile and cryptographic equipment and all interfaces, power sources and interconnecting paths which are part of the system or equipment. CLIPS is a subsystem of SEIPS.

16. Collateral Information. All national security information classified under the provisions of an executive order, for which special commonality compartmented systems [e.g., non-Special Compartmented Information (non-SCI), General Services Classified Information (GENSER)] are not formally established.

17. Commercial-off-the-Shelf (COTS). Commercially manufactured equipment that have no TEMPEST countermeasures intentionally built into them. Any equipment that has not been laboratory tested is considered COTS.

18. Common Wall Facility. A facility that shares a building, wall, floor or ceiling within the inspectable areas.

19. Compromising Emanations. Unintentional signals that, if intercepted and analyzed, would disclose the information transmitted, received, handled, or otherwise processed by telecommunications or automated information systems equipment.

20. Control Lines. The conductor(s) through which a processing equipment is controlled or receives synchronizing signals (for shipboard examples, clock, clutch, control, and stepping).

21. Controlled Space (CS). The three-dimensional secure area surrounding equipment which processes plain text classified information. The CS is managed at the highest security level of information processed.

1-7

1-8

22. Designated Approval Authority. An official with the authority to formally assume responsibility for operating a system at an acceptable level of risk. The DAA for TEMPEST is Commandant (CG-65).

23. Distribution System (DS). The metallic wire and/or fiber optic cables that provide interconnection between the equipment and the protected Distribution System (PDS). The DS is internal to the Controlled Space and connects into the PDS where the cable path traverses the Controlled Space boundary and continues through an uncontrolled access area to enter another Controlled Space to again become a DS.

24. Electromagnetic Interference (EMI). Electrical or electronic voltages or currents which cause an equipment to operate at less than its maximum design capabilities. EMI may result from intentional and proper operation of equipment, or it may be unintentionally generated. For shipboard application, EMI is categorized as mild, medium, and severe depending upon the reaction of subject equipment (see MIL-STD-461E and MIL-STD 464). Equipment that meets EMI requirements does not necessarily correlate to TEMPEST zone requirements. The equipment shall be treated as TEMPEST zoned equipment.

25. Enclosure. Any housing such as a cabinet or case which provides physical protection and support to equipment, parts, or subassemblies. Enclosures may also provide shielding and contain cooling for equipment installed therein.

26. Electronic Equipment. Any equipment whose primary function is to generate, transmit, convey, receive, store, process, or otherwise use electronic signals. Examples are transmitters, receivers, amplifiers, computers, fire control equipment, and associated test equipment.

27. Equipment TEMPEST Zone (ETZ). A required secure distance (Zone) assigned an equipment based on the TEMPEST Electric field radiation characteristics of an equipment compared to the limits of NSTISSAM TEMPEST/1-92 (Zone A < or = Level I; Zone B < or = Level II; Zone C < or = Level III; Zone D > Level III).

28. Fabricated Equipment. Equipment requiring on-site assembly to form a unitized (physical or electrical) whole. The prime example of fabricated equipment is a rack or console composed of assembled equipment. Equipment not receiving prior scrutiny through the full range of applicable military specifications.

29. Facility. Any shore unit that processes NSI.

30. Facility TEMPEST Zone (FTZ). A space assignment based on the measured ability of the facility structure to meet the limits of NSTISSAM TEMPEST/1-92.

Public Availability to be Determined Under 5 U.S.C. 552

31. Field Technical Authority (FTA). A person trained by a FTA and certified by TISCOM (tis-332) to conduct visual TEMPEST inspections aboard a cutter or facility. A person trained by an ALC FTA and certified by the Naval Air Warfare Center Aircraft Division (NAWCAD) TEMPEST Branch to conduct visual TEMPEST and CLIPS certification inspections aboard aircraft. The Coast Guard Aeronautical Engineering Maintenance Manual, COMDTINST M13020.1 (series), prescribes the aircraft CLIPS certification process and the role of the FTA.

32. Ground (electronic ground). An electrical reference point of zero potential with respect to all other points of electrical potential in an electrical distribution system. On metallic-hull ships, the ship hull shall be considered ground potential. Bulkheads, decks, and overheads, which are welded or bonded to the ship hull; electronic equipment mounting racks and foundations or other metallic objects which are welded or bonded to the ship hull; and electronic equipment mounting racks, equipment cases, and foundations or other metallic objects which are welded or bonded to these decks, overheads, or bulkheads, shall be considered as an extension of the ship hull. On non-metallic hull ships, the electronic branch ground bus which connects to the main ground bus shall be considered ground potential.

33. Ground (ground potential). A point, plane, or surface used as a common reference point by electrical or electronic equipment or system and has an arbitrary reference of zero potential.

34. Ground, Earth. Resistance of the earth that is less than 10 ohms when measured by fall of potential test method.

35. Ground Loop. More than one ground path between an equipment or system and a common ground connection or ground point; normally caused by multipoint grounding.

36. Ground, Personnel Safety. The establishment of a contact resistance of 0.1 ohms or less between an equipment housing and ground potential. This contact can be established by any class bond strap or by the installation of a ground wire.

37. Ground, Radio Frequency. Unless otherwise specified, is the ground established in a class A, B, or C bond.

38. Ground System. The aggregate of all conductors used to provide a common ground reference point.

39. Grounding. The process of establishing an electrical current path of 0.1 ohms or less DC resistance between an item or equipment and ground. The term "grounded" means such a path exists.

40. Hardened Cable Path. A material, container or facility that provides physical protection for the cable and causes a delay to a perpetrator attempting unauthorized penetration or intrusion [e.g., a Protected Distribution System (PDS)].

1-9

1-10

41. Inspectable Space (IS). The three-dimensional space surrounding equipment that process classified and/or sensitive information within which TEMPEST exploitation is not considered practical or legal authority to identify and remove a potential exploitation exists. The IS for cutters is the ships hull; the IS for aircraft is the skin of the aircraft.

42. Instrumented TEMPEST Survey (ITS). The testing of an electrical/electromechanical data processor to determine if CE egresses the hull of the cutter, inspectable space of the facility or beyond the skin of an aircraft.

43. Inter-Modulation Interference (IMI). An electromagnetic (EM) disturbance resulting from the generation of frequencies equal to the sum or difference of integral multiples of two or more frequency sources when mixed in a nonlinear junction. The interference can be equipment generated or result from energy mixing in corroded junctions of ship's structure or rigging, and to a lesser extent, in ferrous metal parts in the RF path.

44. Keying. The function of generating a pulsed DC signal.

45. Low Level Signaling. Low levels of voltage and current on signal lines that are between the limits of positive or negative 6 volts (V) with wave shaping in accordance with MIL-STD-188-

114. This also includes the digital data signal levels in accordance with MIL-STD-1397 Types A, B, and C, MIL-STD-1553 transformer and direct coupled stubs, and EIA-RS-232.

46. National Security Information (NSI). Information that has been determined, pursuant to Executive Order 12958 or any predecessor order, to require protection against unauthorized disclosure, and that is so designated.

47. Nonlinear Junction. A contact area between two metallic surfaces that exhibits nonlinear voltage-current transfer characteristics when subjected to an RF voltage. Corrosion or other semi-conducting materials in the contact area usually cause this nonlinearly.

48. Non-Resilient Mounted Equipment. Non-resilient mounted equipment in their original cabinets, except cryptographic equipment, shall be bonded to ground with a Class B bond or Class C bond strap as determined by TISCOM (tis-332).

49. On-Line Cryptographic Equipment. An NSA approved processing equipment which encrypts and/or decrypts information simultaneously with its transmission or reception in electrical form.

50. Operating Position. A processing equipment or system where information is inserted, displayed, or reproduced. An operating position may consist of, but is not limited to the following:

a. Microphone or reproducer combinations, including intercommunications unit or consoles, telephone handsets, chest sets, headsets, and voice selector consoles.

Public Availability to be Determined Under 5 U.S.C. 552

b. Teletypewriters (transmit or receive) or combinations thereof.

c. Electronic or other information and data display or processing equipment.

d. Television cameras and receivers.

e. Facsimile transmit or receive combinations.

f. Control/Operator consoles.

g. Data input or output devices. Data recording and reproducing equipment, machine language producing equipment and other devices used with computers and other processing equipment.

Machine language producing equipment includes equipment such as typewriters, word processors, and composing and editing equipment.

51. Plain Text. Intelligible text or signals that have meaning and which can be read or acted upon without the application of any decryption.

52. Power Line. Conductor intended for the transmission of primary alternating current (AC) power.

53. Processing Equipment. Equipment or device that reproduces information from, converts information to, or otherwise operates upon information in electrical form. The following types of equipment are typical; telecommunications equipment, video displays, and systems including the teletypewriter, facsimile, and cryptographic equipment.

54. Processing System. A combination of processing equipment and its associated distribution system.

55. Protected Distribution System (PDS). An approved transmission system to which adequate electromagnetic and physical safeguards have been applied to permit secure transmission of unencrypted NSI. The associated facilities include all equipment and cable lines (wire and fiber optic) to be safeguarded. The major components are:

a. The Distribution System (DS) is the metallic wire and/or fiber optic cables that provide interconnection between the equipment and the protected Distribution System (PDS). The DS is internal to the Controlled Space and connects into the PDS where the cable path traverses the Controlled Space boundary and continues through an uncontrolled access area to enter another Controlled Space to again become a DS. Guidelines can be found in NSTISSI 7003 and DoN IA 5239-22. For further guidance contact TISCOM (tis-322).

b. Subscriber Sets and Terminal Equipment is the complete assembly of equipment, exclusive of interconnecting cables, located on the ends of the DS/PDS. This includes any device that processes NSI.

1-11

1-12

56. RED. Any on-line or off-line device used to process, manipulate, or reproduce NSI. This includes computers, printers, cryptographic equipment (voice and data) Secure Terminal Equipment (STE), etc.

57. RED/BLACK Concept. Separation of electrical and electronic circuits, components, equipment, and systems that handle NSI (RED), in electrical form, from those that handle non-NSI (BLACK) in the same form. (Under this concept, RED and BLACK terminology is used to clarify specific criteria relating to, and to differences between, such items as circuits, components, equipment, systems, etc., and also the areas where they are contained).

58. RED Equipment. A term applied to equipment that processes unencrypted NSI which requires protection during electrical/electronic processing. In ships this designation also applies to primary power circuits, audio and DC signal circuits, control circuits and ground return conductors serving those cryptographic and subscriber terminal equipment, which are designated RED. It is also applied to junction boxes, terminal boxes, distribution frames, conduit, ducts, patching and switching panels, power distribution panels (both AC and DC) and other ancillary devices which serve the aforementioned conductors and equipment.

59. RED Low Level Electrical Signal Distribution System. A system wherein the signal levels comply with the following:

a. RED equipment and systems specifically included for the standard interface (low level) identified in MIL-STD- 188-114.

b. RED balanced audio systems with audio levels that do not exceed 0 decibel (dB) as referenced to 1 milliwatt (dBm).

60. RED Processing Center. The physical room where RED equipment (voice or data) is installed.

61. Secure. Capable of protecting classified information.

62. Secure Electrical Information Processing System. The total combination of classified information processing systems (CLIPS) on board a cutter, facility or aircraft comprises the SEIPS. A cutter, facility or aircraft has only one SEIPS regardless of the number of CLIPS on board.

63. Secure Processing Facility. An area wherein the primary function is the processing and distribution of NSI.

64. Secure Voice. A RED voice system, isolated from other systems in accordance with this standard, which may be operated in the secure or non-secure mode. Such a system includes, but

Public Availability to be Determined Under 5 U.S.C. 552 is not limited to, secure voice and the single audio system using equipment that employ plain/cipher (p/c) option.

65. Shield. A solid or braided covering of nonferrous conductive material, preferably copper, used to completely encompass, throughout its length, an insulated conductor or conductors to provide high levels of RF attenuation to potential sources of CE.

66. Signal Distribution System. The combination of patching, switching, cabling, battery, and other circuit facilities less primary power, which connect or control various parts and units of a processing system.

67. Signal Lines. Conductors intended for the transmission of information.

68. Signaling. Signaling is the function of distributing a pulsed DC signal.

69. Space, Electronic. A space used primarily to contain installed units of electronic equipment.

Examples are radar spaces, sonar spaces, electronic countermeasures (ECM) spaces, communications centers, transmitter spaces, and crypto spaces.

70. Separation Requirements. Physical separation of equipment and cables further reduces the risk of CE. See Para 3.B.1, 3.B.2.

71. Subsystem. A subordinate system of the ship's total information processing system which identifies a group of equipment utilized in a particular mode and with certain capabilities.

72. TEMPEST. An unclassified short name referring to investigations and studies of compromising emanations.

73. TEMPEST-Certified Equipment or System. Equipment or systems that have complied with the national requirements of NSTISSAM TEMPEST/l-92 Level I or previous editions. This includes SPAWAR TEMPEST approved equipment such as the following:

a. C-10315/U, Secure Voice Remote Switching Control,

b. TA-970/U, Secure Voice Telephone Set, and

c. TA-980/U, Secure Voice Telephone Set.

Note. Refer questions on SPAWAR TEMPEST approved equipment to TISCOM (tis-322).

74. TEMPEST Protected Space. Shipboard spaces having electromagnetic shielding against radiated emissions in the 10 MHZ to 1000 MHZ frequency range. A nominal of 20 dB measured shielding effectiveness is required. Because of the harsh sea environment, a sustained shielding

1-13

1-14 effectiveness of 20 dB usually requires 40 dB of initial or designed shielding effectiveness.

Refer to IA-5239-31 for additional requirements for a TEMPEST Protected Space.

75. TEMPEST Related Installation Criteria. Those installation measures which serve to diminish the possibility of CE problems.

76. TEMPEST Unprotected Space. Shipboard spaces that do not meet the requirements of TEMPEST Protected Spaces. Examples are bridge, spaces with windows, spaces near sea doors and spaces in non-metal hulled ships.

77. Uncontrolled Access Area (UAA). The space in and around a building over which no personnel access controls are exercised.

78. Visual Tempest Inspection (VTI). Consists of a visual inspection of a facility’s SEIPS installation to determine compliance with this criteria and to document, for evaluation and correction, any discrepancies found.

2-1

CHAPTER 2. TEMPEST PROGRAM OVERVIEW

A. General.

1. The two major source documents for installing classified systems are NSTISSAM TEMPEST/2- 95 and DON IA Pub 5239-31. These documents specify classified plain text (RED) or unclassified (BLACK) equipment/system installation guidance, provide an explanation of the TEMPEST policy concept, and address RED/BLACK considerations for cutters, aircraft, and facilities wherein NSI is processed. It must be noted that the guidance contained in these references is the minimum TEMPEST requirement. The TEMPEST Program Manager (TPM) and/or CTTA may specify additional guidance in the form of countermeasures to mitigate possible TEMPEST hazards. With few exceptions, this instruction does not address physical security, computer security, communications security or the associated administrative functions of classified information, or receipt and transmission of secure communications.

2. Roles and responsibilities of supportive engineering and technical evaluation of past installation and operational experience and data form the basis of this chapter. The following guidelines shall be used during installation and when reviewing cutters, aircraft, and facilities for compliance with RED/BLACK installation criteria.

B. Roles and Responsibilities. This section outlines all the TEMPEST related roles and responsibilities.

1. Commandant (CG-65).

a. Designates CTTA.

b. Promulgates policy.

c. Sole approving authority regarding waivers for non-compliance of an ITS.

d. Sole approving authority for new cables containing Top Secret (TS) information being run outside a space accredited to that level of security.

2. Command, Control, Communications, Computers and Information Technology – Service Center (C4IT-SC). C4IT-SC is responsible for ensuring installing activities provide funding for all TEMPEST inspections required on all installations. These inspections will be completed after every equipment modification, installation or change. The C4IT-SC shall:

a. Act as the Coast Guard’s Technical Authority for the TEMPEST Program.

b. Assign a C4IT-SC TEMPEST Coordinator (TC) to coordinate Visual TEMPEST Inspections and interface with TISCOM TEMPEST Program Manager.

c. Retain copies of all TEMPEST reports.

d. Assign an FTA to every unit requiring a TEMPEST inspection.

e. Review TEMPEST reports with the C4IT-SC (t) type desk for cutters or the shore section chief for shore units.

f. Review discrepancy lists and determine which activity is responsible for correcting said discrepancies. Depending on the extent of the work involved it may be assigned to the following:

(1) Ship’s forces. The unit or ESU Electronics Support personnel are responsible to correct these discrepancies immediately. Such items include Class B and Class C bonding and relocation of equipment that does not require replacement or fabrication of cables.

(2) Industrial Activity. For more extensive work (fabrication of rack panels, Class A bonding, etc.).

g. Forward TEMPEST reports to TISCOM (tis-332) within 30 days of receipt from FTA with estimated dates of completion for all industrial activity work.

3. TISCOM (tis-332).

a. Field Operations Manager for the U. S. Coast Guard TEMPEST Program.

b. TISCOM (tis-332), as approved by the DAA serves as the CG CTTA and is the sole CG authoritative source for any and all CG TEMPEST certifications including requests for waivers or deviations from any requirement of this Manual.

c. Ensure compliance with this instruction by all Coast Guard activities.

d. Review all TEMPEST inspection reports and provide technical and/or engineering responses as required.

e. Evaluate inspection reports to insure compliance with requirements of this instruction.

f. Maintain TEMPEST files for all Coast Guard Units.

g. Provide funds to C4IT-SC for non-program routine travel.

2-2

Public Availability to be Determined Under 5 U.S.C. 55

2-3

h. Coordinate FTA training and certification.

i. Liaison with NSA, the National TEMPEST School and the Coast Guard Training Quota Center.

j. Coast Guard representative on TEMPEST Advisory Group (TAG), TEMPEST Training Working Group (TTWG).

k. Authorized to grant a waiver for TEMPEST non-compliance on a visual inspection.

4. Commanding Officer /Officer-in-Charge.

a. Ensure compliance with TEMPEST installation requirements

b. Request C4IT-SC provide a Coast Guard FTA to conduct required VTIs for Command Assessment of Readiness Training (CART) requirement.

c. Review all VTI inspection reports and ensure all discrepancies identified are corrected immediately.

d. Commanding Officers and Officers-in-Charge are responsible for requesting a VTI when alterations or modifications are performed to the existing configuration of the SEIPS by own work force or by any other activities (ie. repair ships and shore maintenance activities). This should normally be arranged concurrently with the request to, and approval from, C4IT- SC/TISCOM which is required for any alteration or modification to the existing configuration of the SEIPS. The inspection report shall include amendments to the most recent complete system VTI report including SEIPS configuration plan and elevation drawings. Only a subsystem which has been installed, altered or modified need be inspected. Any discrepancies, however, observed by the FTA during the inspection shall be reported. In the inspection report, the FTA should specifically identify those discrepancies which would normally require the assistance of an industrial activity. Upon receipt of the CTTA-reviewed discrepancy list from C4IT-SC, the initiation of action to correct discrepancies noted is the responsibility of the Commanding Officer of the inspected unit and shall be corrected by authorized unit personnel. Discrepancies that require referral shall immediately be brought to the attention of the appropriate C4IT-SC, ESU or ESD.

5. Installation Activity. The installing agency/activity is responsible for funding and ensuring completion of the necessary TEMPEST testing/inspections to verify compliance of CLIPS equipment and installations with specified criteria and for ensuring that all identified deficiencies are corrected. These required surveys include TEMPEST Zone Surveys, TEMPEST Equipment Laboratory Testing and TEMPEST Field Testing

a. Installation activities (for example, Coast Guard yard, installation teams, and others) are responsible for having the final condition of an installation inspected and reported on by a certified FTA. For minor additions, deletions or modifications, only the subsystem which has been installed, altered or modified need be inspected; however, any discrepancies observed by the FTA shall be reported.

b. A complete system VTI shall be conducted for all ships completing new construction or modernization and when major alterations to the SEIPS are installed. The VTI is part of the installation and chargeable to the same contract, project order or ship alteration. The installing activity is responsible for correction of all discrepancies attributable to installation.

The report of a partial inspection shall be an amendment to the initial complete VTI report and shall include an amendment to the plan and elevation drawings obtained from installing activity.

C. Procedures.

1. Installation criteria guidance. This section sets forth the design and installation criteria applicable to facilities, cutters and aircraft SEIPS.

2. Applicability. This chapter is applicable to the extent specified herein to new installations, new construction, new equipment or system acquisitions, cutters or facilities, alterations of existing systems and active cutter, facility, and aircraft installations in service. New installation requirements are covered by the following circumstances:

a. When installing a new subsystem (for example, a tactical satellite subsystem), all components of the new subsystem shall be installed in accordance with these criteria.

b. When replacing processing equipment in a subsystem (for example, replacement of an obsolete Coast Guard Standard Work Station Two (SWII) with a Coast Guard Standard Workstation Three (SWIII) in a subsystem) the replacement unit and connecting cables shall be installed in accordance with these criteria.

3. TEMPEST-related installation requirements. The installation standards herein shall be implemented as specified to reduce or eliminate inadvertent transmission of CE, to the extent required to conform to applicable criteria established by NSTISSAM TEMPEST/ 2-95 and DON IA Pub 5239-31.

4. Cryptographic equipment in a portable configuration. There are no TEMPEST-related installation requirements for cryptographic equipment in a portable configuration. This includes, but is not limited to: cryptographic attachments to portable radio sets such as hand-held, belt-worn or contained within a protective helmet; vehicular-mounted equipment as used in a flight or hangar deck application; and, cryptographic devices used to load or fill a cryptographic system.

2-4

2-5

5. Unique systems. Unique systems for which this enclosure cannot be applied shall be submitted to TISCOM (tis-332) for development of specialized criteria.

6. Temporary systems. Systems installed for less than 60 days will have no TEMPEST related requirements. Systems installed for more than 60 days shall comply with this instruction. This does not relieve the installing activity from using shielded cable for RED equipment and following RED/BLACK separation criteria where practical. Systems installed for more than 60 days shall comply with this instruction.

7. ITS. The installing activity is responsible for ensuring completion of the necessary TEMPEST testing to verify compliance of CLIPS equipment and installations with specified criteria. The installing activity is also responsible for ensuring that all identified deficiencies are corrected.

These required surveys include TEMPEST Zone Surveys, TEMPEST Equipment Laboratory Testing and TEMPEST Field Testing. The program sponsor or project officer is responsible for funding all testing and deficiency mitigation.

a. TEMPEST Zone Survey. Committee on National Security Systems Instruction (CNSSI) No.

7000 defines alternative TEMPEST Countermeasures. TEMPEST zoning is an effective method of achieving TEMPEST security in most instances. TEMPEST zoning test requirements and procedures are specified in NSTISSAM TEMPEST/2-92 dated 30 Dec.

1992.

b. TEMPEST Equipment Laboratory Test. TEMPEST laboratory tests are required to identify the conducted emanations and electromagnetic radiation emanation characteristics of individual equipment in a laboratory environment. NSTISSAM TEMPEST/1-92 specifies TEMPEST test requirements and procedures for equipment.

c. TEMPEST Field Test. TEMPEST field tests are required to identify the possible conducted emanations and electromagnetic radiation emanation characteristics of installed equipment or system on board shore sites, cutters or aircraft. NSTISSAM TEMPEST/1-93 specifies TEMPEST test requirements and procedures for the tests.

8. TEMPEST Survey Responsibility. TISCOM (tis-332) is responsible for ensuring that all TEMPEST surveys are completed on all Coast Guard facilities and cutter installations. IAW the Memorandum of Agreement (MOA) between TISCOM (tis-332) and the ALC, the ALC is responsible for ensuring that all TEMPEST surveys are completed on all Coast Guard Aircraft.

These surveys occur after every major equipment modification, installation or change.

2-6

This Page Intentionally Left Blank

CHAPTER 3. GENERAL INSTALLATION REQUIREMENTS

A. General.

1. Bonding, Grounding, Shielding. Bonding, grounding, shielding and separation of equipment and interconnecting cables are the key factors used in both RED and BLACK communications systems for the control of Radio Frequency Interference (RFI) and Electromagnetic Interference (EMI). Laboratory and field tests have shown that poor installation practices can cause compromise of national security information through the detection of emanated signals. In order to maintain good engineering and installation practices and to prevent compromising emanations, the specific guidelines contained in this chapter shall be adhered to during installation. They shall also be used when reviewing facilities for compliance with RED/BLACK installation criteria.

2. Bonding. This chapter covers a limited portion of the bonding requirements for electrical and electronic communications equipment and systems. The reader shall review and incorporate the applicable bonding requirements of MIL-HDBK-419A and MIL-STD-188-124 and MIL-STD- 1310.

3. Types of Bonds. A bond is defined as an electrical current path between two metallic surfaces established by welding (Class A bond), bolting or clamping (Class B bond), or the addition of a bond strap (Class C bond).

a. Class A bond. A bond achieved by joining of two metallic items or surfaces through the process of brazing or welding (e. g. welding of equipment mounting foundations to the cutter’s hull, brazing of junctions in a radial ground systems, etc.).

b. Class B bond. A Class B bond is a bond inherent in the installation of an item or equipment by mounting hardware or other areas of metal-to-metal contact (bolting or clamping). The clamping method is generally used only on shore facilities. The bolting method is the preferred method of a class B bond. A class B bond shall have both mating surfaces clean and free of paint, dirt, and grease or a clean anodized surface. All mounting holes provided in equipment shall be used and screws torqued IAW installation guidance or instructions. The use of pre-drilled and tapped rails or clip nuts with no less than 10/32 mounting hardware is authorized. The use of spring clips with sheet metal type screws is not authorized for use as a class B bond.

c. Class C bond. A bond achieved by bridging two metallic surfaces with a solid metallic bond strap or flexible braided wire. Solid bond straps shall be copper, at least 0.020-inch thick, and at least 3/4-inch wide. The length of the bond strap shall be no greater then five times the width and shall be as short as practical. Punch or cut out mounting holes for 5/16-inch hardware with normal clearance tolerances where practical. Flexible braided wire shall be used only on resilient mounted or movable equipment. Flexible bond straps shall be

3-1 fabricated from 1-inch flat braided wire, and lugs fabricated from 0.0840-inch diameter tubing or commercial copper lug with a barrel large enough to accommodate the 1-inch braid without trimming. The length shall be as short as practical. Drill mounting holes for 5/16-inch hardware with normal tolerances.

Note: All mounting hardware shall be 5/16-inch nut, bolt, washer, and lock washer. Bolts, nuts and washers shall be zinc-plated steel or CRES Series 300. The hardware shall be arranged so that the bond strap is between the flat washer and metal bonding surface.

4. Bond Strap Installation. Bond straps shall be installed using methods that permit inspection and removal and reinstallation or replacement when required. They shall be installed such that:

vibration, expansion, contraction, or relative movement incident to normal service shall not break or loosen the bond strap connection.

a. Topside installation. Type I and II bond straps only shall be installed topside. Refer to MIL- STD 1310 paragraph 3.4 for additional information on Type I – Type 4 bond straps.

b. Below deck installation. Type III and IV bond straps shall be installed in below deck locations.

c. Structural integrity and motion. Installations of bond straps shall not affect the integrity of equipment cases, cabinets or enclosures. They shall not:

(1) Weaken any structure or item to which a bond strap is attached, or

(2) Restrict the movement of any hinged or movable item.

5. Mounting Studs, Bolts and Holes. When available and in good condition, existing studs, bolts, or threaded holes shall be used for Type II, III and IV bond strap installation.

6. Bond Strap Exceptions. Some equipment (computer, printer, etc.) have external ground lugs.

These are normally 8-32 or 10-32 screws. A Class C flexible bond strap can be fabricated using a minimum 3/8-inch flat braid wire with a number 10 soldered on terminal lug on one end and appropriate termination hardware on the other end. If the other end has a terminal lug then it shall also be soldered.

Note: Grounding of shielded LAN cables should be done at both ends of the cable (e.g. jack fields and wall jacks).