CNSSAM TEMPEST_01_13.pdf

UNCLASSIFIED//FOR OFFICIAL USE ONLY

(U) RED/BLACK

Installation Guidance

This document prescribes guidance to be used by a CTTA to determine the required standards for their department or agency.

CNSSAM TEMPEST/1-13

17 January 2014

FA2823-20-Q-A013

Attachment 4

CNSSAM TEMPEST/01-13

CNSS Secretariat (IE32)

National Security Agency * 9800 Savage Road * Suite 6716 * Ft Meade MD 20755-6716 cnss@nsa.gov

(U) FOREWORD

1. (U) Committee on National Security Systems Advisory Memorandum (CNSSAM)

TEMPEST/01-13, RED/BLACK Installation Guidance, provides criteria for the installation of electronic equipment, cabling, and facility support for the processing of secure information. This publication supersedes NSTISSAM TEMPEST/ 2-95 and the TEMPEST/2-95 Addendum of February 2000.

2. (U) TEMPEST security is a function of the TEMPEST characteristics of the processing equipment, the way the equipment is installed, the electromagnetic and physical characteristics of the facility, and the geographical environment of the facility location.

3. (U) The guidance identified herein will be considered by a Certified TEMPEST Technical

Authority (CTTA) as part of the potential solution for facilities, system, and equipment that have been identified as requiring TEMPEST countermeasures. Only those specific criteria identified by the CTTA will be implemented. When this document is implemented by direction or instruction, U.S. Government

Agencies and Departments should contact their CTTA to obtain the applicable installation criteria. When implemented by contract, U.S. Government contractors should contact their appropriate government

Contracting Office Technical Representative (COTR) for the applicable CTTA requirements.

4. (U) Committee on National Security Systems (CNSS) Representatives may obtain additional copies of this policy from the address below. U.S. Government contractors should contact their appropriate government Contracting Officer regarding further distribution and dissemination of this document.

FOR THE NATIONAL MANAGER

/s/

DEBORA A. PLUNKETT

CNSS Secretariat (IE32)

National Security Agency * 9800 Savage Road * Suite 6716 * Ft Meade MD 20755-6716 cnss@nsa.gov

(U) TABLE OF CONTENTS

SECTION 1 – (U) INTRODUCTION

1.1. (U) General

1.2. (U) Scope

1.3. (U) Policy

1.4. (U) Applicability

1.5. (U) References

1.5.1. (U) Committee on National Systems Security (CNSS)

1.5.2. (U) Intelligence Community Standard (ICS)

1.5.3. (U) National Telecommunications Security Working Group (NTSWG)

1.5.4. (U) Other Government Publications

SECTION 2 – (U) DEFINITIONS AND ABBREVIATIONS

2.1. (U) Definitions

SECTION 3 – (U) GENERAL REQUIREMENTS

3.1. (U) Introduction

3.2. (U) Protected Distribution System

3.3. (U) Cable Identification

3.4. (U) Electrical Isolation

3.5. (U) Commercial Cable TV (CATV) and Satellite TV Isolation

3.6. (U) RF Transmitter Separation

3.6.1. (U) Stationary Transmitters

3.6.2. (U) Non-Stationary Transmitters

3.6.3. (U) Special Use Transmitters

3.6.4. (U) Remote Radio Head

3.7. (U) RED Equipment and BLACK Wireline Physical Separation

3.8. (U) RED Wireline and BLACK Wireline Physical Separation

3.9. (U) Distribution and Patching Systems

3.10. (U) Communications Security (COMSEC) Equipment

3.11. (U) TEMPEST Certified Equipment

3.12. (U) Fortuitous Conductors

3.13. (U) Shielded Cable

3.14. (U) Grounding

SECTION 4 – (U) FACILITIES

4.1. (U) Introduction

4.2. (U) Design Philosophy

4.3. (U) Applicability

4.4. (U) RED/BLACK Requirements Matrix

4.5. (U) Level I RED/BLACK Requirement

4.5.1. (U) Physical Separation

4.5.2. (U) Cables

4.5.3. (U) Electrical Isolation

4.5.4. (U) Power

4.6. (U) Level II RED/BLACK Requirement

4.6.1. (U) Physical Separation

4.6.2. (U) Cables

4.6.3. (U) Electrical Isolation

4.6.4. (U) Power

4.7. (U) Level III RED/BLACK Requirement

4.7.1. (U) Physical Separation

4.7.2. (U) Cables

4.7.3. (U) Electrical Isolation

4.7.4. (U) Power

SECTION 5 – (U) AIRCRAFT

5.1. (U) Introduction

5.2. (U) Physical Separation

5.3. (U) Cables

5.4. (U) Electrical Isolation

5.5. (U) Power

5.6. (U) Grounding and Bonding

SECTION 6 – (U) SHIPS

6.1. (U) Introduction

6.2. (U) Physical Separation

6.3. (U) Cables

6.4. (U) Electrical Isolation

6.5. (U) Power

6.6. (U) Grounding and Bonding

SECTION 7 – (U) TRANSPORTABLES

7.1. (U) Introduction

7.2. (U) Physical Separation

7.3. (U) Cables

7.4. (U) Electrical Isolation

7.5. (U) Power

7.6. (U) Grounding and Bonding

SECTION 8 – (U) SPECIAL CATEGORY FACILITIES

8.1. (U) Introduction

8.2. (U) Cables

8.3. (U) Distribution and Patching Systems

8.4. (U) Multiple Circuit Equipment

8.5. (U) Power

SECTION 9 – (U) GENERAL GUIDANCE

9.1. (U) Introduction

9.2. (U) TEMPEST Basics

9.3. (U) RED/BLACK Basics

9.4. (U) Signal Cables

9.5. (U) Signal Distribution

9.6. (U) Signal Line Isolators and Filters

9.7. (U) Power Distribution

9.8. (U) Grounding System

9.9. (U) Administrative Support Equipment

9.10. (U) Other Considerations

(U) Tables

Table 1 – (U//FOUO) Cable Color Scheme Table 2 – (U//FOUO) Electrical Isolation Level Table 3 – (U//FOUO) RF Transmitter Separation Requirements Table 4 – (U//FOUO) RED/BLACK Requirements Level Matrix Table 5 – (U//FOUO) Summary of Facility RED/BLACK Isolation Requirements Table 6 – (U//FOUO) Special Category Electrical Isolation Level

SECTION 1 – (U) INTRODUCTION

1.1. (U) General

(U) This section contains introductory, applicability, and administrative information associated with this document.

1.2. (U) Scope

(U) This document defines the guidance for the design of facilities and the installation of equipment and systems that receive, transmit, route, switch, manipulate, graph, store, archive, calculate, generate, print, scan, or in any other manner process or transfer National Security Information (NSI). This guidance is part of the potential solution for facilities, systems and equipment identified as requiring TEMPEST countermeasures. Additional TEMPEST countermeasures, including facility and/or equipment shielding may also be a part of a potential solution, but is beyond the scope of this document.

1.3. (U) Policy

(U) The National Policy on the Control of Compromising Emanations (CNSSP 300) and its implementing instructions, TEMPEST Countermeasures for Facilities (CNSSI 7000), and NONSTOP Countermeasures

(NSTISSI 7001), establish the policy that certain systems and facilities that process NSI must be reviewed by a Certified TEMPEST Technical Authority (CTTA). If such a review is required and the review determines that TEMPEST countermeasures are required, the CTTA will consider a variety of methods that can be applied to the system/facility to achieve TEMPEST security. The RED/BLACK guidance contained in this document will be considered by the CTTA along with other countermeasures, such as

TEMPEST suppressed equipment, filtering, and shielding, to determine the most cost-effective countermeasures to achieve TEMPEST security. Only those specific criteria identified by the CTTA will be implemented. The authority to issue this Advisory Memorandum derives from National Security

Directive 42, which outlines the roles and responsibilities for securing national security systems, consistent with applicable law, E.O. 12333, as amended, and other Presidential directives. Nothing in this Advisory Memorandum shall alter or supersede the authorities of the Director of National

Intelligence.

1.4. (U) Applicability

(U) The guidance contained herein, when specified by a CTTA, is applicable to U.S. Government departments, agencies, and contractors. When this document is to be specified by U.S. Government contract, either in part or in its entirety, the Government Contract Officer will contact the CTTA for applicable requirements.

1.5. (U) References

(U) The following references contain information that supplements the requirements contained herein.

The most current edition of any of these documents should be used.

1.5.1. (U) Committee on National Systems Security (CNSS)

CNSSP No. 300 (U) National Policy on Control of Compromising Emanations (U)

CNSSI No. 7000 (U) TEMPEST Countermeasures for Facilities (C)

NSTISSI No. 7001 (U) NONSTOP Countermeasures (S)

CNSSI No. 7003 (U) Protected Distribution Systems (U)

NSTISSAM TEMPEST/1-92 (U) Compromising Emanations Laboratory Test Requirements, Electromagnetics (C)

NSTISSAM TEMPEST/1-93 (U) Compromising Emanations Field Test Requirements, Electromagnetics (C)

CNSSAM TEMPEST/01-02 (U) NONSTOP Evaluation Standard (C)

NTISSI No. 4002 (U) Classification Guide for COMSEC Information (S)

CNSSI No. 4009 (U) National Information Assurance (IA) Glossary (U)

1.5.2. (U) Intelligence Community Standard (ICS)

ICD 705 (U) Sensitive Compartmented Information Facilities

ICS 705-1 (U) Physical and Technical Security Standards For Sensitive

Compartmented Information Facilities (U)

ICS 705-2 (U) Standards for the Accreditation and Reciprocal Use of Sensitive

Compartmented Information Facilities (U)

IC Tech Spec for ICD/ICS 705 (U) Technical Specifications for Construction and Management of

Sensitive Compartmented Information Facilities (U)

1.5.3. (U) National Telecommunications Security Working Group (NTSWG)

TSG STANDARD 1 (U) Introduction to Telephone Security (U)

TSG STANDARD 2 (U) TSG Guidelines for Computerized Telephone Systems, CNSSI No. 5000 (U) Guidelines for Voice Over Internet Protocol (VoIP) Computer

Telephony (U)

CNSSI No. 5006 (U) National Instruction for Approved Telephone Equipment (U)

1.5.4. (U) Other Government Publications

MIL-HDBK-232 (U) RED/BLACK Engineering-Installation Guidelines

MIL-HDBK-411 (U) Power and the Environment for Sensitive DoD Electronic

Equipment

MIL-HDBK-419 (U) Grounding, Bonding, and Shielding for Electronic Equipment and Facilities (U)

MIL_PRF-15733 (U) General Specification for Filters and Capacitors, Radio

Frequency Interference

FED-STD-1037 (U) Glossary of Telecommunications Terms (U)

MIL-STD-220 (U) Method of Insertion Loss Measurement

MIL-STD-188-124 (U) Grounding, Bonding, and Shielding for Common Long-

Haul/Tactical Communication systems, including Ground Based

Communication Electronics Facilities and Equipment (U)

MIL-STD-1310 (U) Shipboard Bonding, Grounding, and Other Techniques for

Electromagnetic Compatibility and Safety. (U)

SECTION 2 – (U) DEFINITIONS AND ABBREVIATIONS

2.1. (U) Definitions

(U) For the purposes of this document, the following definitions are provided. Some have been repeated from CNSSI No. 4009 for the convenience of the reader.

(U) BLACK. Designation applied to information systems, and to associated areas, circuits, components, and equipment, in which national security information is encrypted or is not processed.

(U) BLACK Line. An optical fiber or a metallic wire that carries a BLACK signal or that originates/terminates in a BLACK equipment or system.

(U) BLACK Optical Fiber Line. An optical fiber that carries a BLACK signal or that originates/terminates in a BLACK equipment or system.

(U) BLACK Signal. Any signal (e.g., control signal or enciphered signal) which would not divulge national security information if intercepted.

(U) BLACK Wireline. A metallic wire that carries a BLACK signal or that originates/terminates in a

BLACK equipment or system.

(U) Certified TEMPEST Technical Authority (CTTA). An experienced, technically qualified U.S.

Government employee who has met established certification requirements in accordance with CNSS approved criteria and has been appointed by a U.S. Government department or agency to fulfill CTTA responsibilities.

(U) Collateral. All national security information classified under the provisions of an executive order, for which special community systems of compartmentation [e.g.; non-Special Compartmented

Information (non-SCI), General Service Classified Information (GENSER)] are not formally established.

(U) Commercial-off-the-Shelf (COTS). Commercially manufactured equipment that have no

TEMPEST countermeasures intentionally built into them.

(U) Compromising Emanations (CE). Unintentional signals that, if intercepted and analyzed, would disclose the information transmitted, received, handled, or otherwise processed by telecommunications or automated information systems equipment.

(U) Direct BLACK Wireline. A BLACK metallic wireline that directly leaves the inspectable space in a continuous electrical path with no signal interruption or isolation. Continuous wirelines may be patched or spliced. Examples of wirelines that directly leave the inspectable space are analog telephone lines, commercial television cables, and alarm lines. Wirelines that do not directly leave the inspectable space are wirelines that pass though a digital switch or converter that reestablishes the signal level or reformats the signaling. Examples of BLACK wirelines that do not directly leave the inspectable space are telephone lines that connect to digital telephone switches, Ethernet lines that connect to digital network routers, and alarm lines that connect to an alarm panel.

(U) High-Power Transmitter. For the purposes of determining separation between RED equipment/lines and RF transmitters, high-power is that which exceeds 100 mWatt (20 dBm) Emitted

Isotropic Radiated Power (EIRP). Also refer to the Low-Power Transmitter definition.

(U) Inspectable Space. The three dimensional space surrounding equipment that processes classified and/or sensitive information within which TEMPEST exploitation is not considered practical or where legal authority to identify and remove a potential TEMPEST exploitation exists and is exercised. CTTAs have the authority to define the inspectable space.

(U) Low-Power Transmitter. For the purposes of determining separation between RED equipment/lines and RF transmitters, low-power is that which is less than or equal to 100 mWatt (20 dBm) EIRP.

Examples of low-power transmitters are wireless devices for local communication that do not need a

Federal Communications Commission (FCC) license, such as some IEEE 802.llX network access points, and portable (but not cellular) telephones.

(U) Meter. A measurement distance under the metric system. For the purposes of meeting the installation requirements herein, the following are considered equivalent between the metric and

U.S. system: 1 Meter and 39 inches; 50 cm and 19 inches; 30 cm and 12 inches; 15 cm and 6 inches; and 5 cm and 2 inches.

(U) National Security Information (NSI). Information that has been determined pursuant to Executive

Order 13526 or any predecessor order to require protection against unauthorized disclosure and is marked to indicate its classified status when in documentary form.

(U) Protected Distribution System (PDS). Wire line or fiber optic system that includes adequate safeguards and/or countermeasures (e.g., acoustic, electric, electromagnetic, and physical) to permit its use for the transmission of unencrypted information through an area of lesser classification or control.

(U) RED. Designation applied to an IS, and associated areas, circuits, components, and equipment in which unencrypted national security information is being processed.

(U) RED/BLACK Concept. Separation of electrical and electronic circuits, components, equipment, and systems that handle national security information (RED), in electrical form, from those that handle non-national security information (BLACK) in the same form.

(U) RED Equipment. A term applied to equipment that processes unencrypted NSI that requires protection during electrical/electronic processing.

(U) RED Optical Fiber Line. An optical fiber that carries a RED signal or that originates/terminates in a

RED equipment or system.

(U) RED Line. An optical fiber or a metallic wire that carries a RED signal or that originates/terminates in a RED equipment or system.

(U) RED Signal. Any electronic emission (e.g., plain text, key, key stream, subkey stream, initial fill, or control signal) that would divulge national security information if recovered.

(U) RED Wireline. A metallic wire that carries a RED signal or that originates/terminates in a RED equipment or system.

(U) Signaling Rate. The signaling rate of a digital signal is defined as the reciprocal of the bit width

(1/bit width). The Signaling rate is used to determine the frequency range of electrical isolation.

(U) Special Category. Sensitive Compartmented Information (SCI), Special Access Program (SAP) information, or other compartmented information.

(U) Special Access Program (SAP). A program established for a specific class of classified information that imposes safeguarding and access requirements that exceed those normally required for information at the same classification level.

(U) TEMPEST Certified Equipment or System. Equipment or systems that have been certified to meet the applicable level of NSTISSAM TEMPEST/1-92 or previous editions. Typically categorized as Level

I for the highest containment of classified signals; Level II for the moderate containment of classified signals; and Level III for the least containment of classified signals.

SECTION 3 – (U) GENERAL REQUIREMENTS

3.1. (U) Introduction

(U) When specified by a CTTA, the RED/BLACK installation guidance of SECTION 4 shall be used for facilities that are permanent structures and for temporary facilities (such as shelters, trailers, or tents) that are stationary in one location for greater than 90 days. The following paragraphs in this section provide additional guidance and amplifying information that is applicable for all installations. Mobile platforms, such as aircraft, ships, and transportables, shall follow the RED/BLACK installation guidance of

SECTIONS 5, 6 and 7, respectively. Facilities and mobile platforms that process Special Category information, such a Sensitive Compartmented Information Facilities (SCIFs) and Special Access Program

Facilities (SAPFs) shall follow the guidance of SECTION 8.

(U) Except as delineated in SECTION 8, RED to RED isolation is not required between classification levels or compartments of U.S. NSI, such as between Collateral Secret, Top Secret, and Special Category.

RED wirelines that carry information for foreign release and that is distributed to U.S. spaces shared with foreign nationals shall be considered BLACK for separation purposes.

(U) The separation requirements between RED equipment/wirelines and BLACK wirelines delineated herein are dependent on whether the BLACK lines directly leave the inspectable space or are electrically isolated before they leave the inspectable space. A BLACK metallic wireline that directly leaves the inspectable space provides a continuous electrical path with no signal interruption or isolation.

Continuous wirelines may be patched or spliced. Examples of wirelines that directly leave the inspectable space are analog telephone lines, commercial television cables, and alarm lines. Wirelines that do not directly leave the inspectable space are wirelines that pass though a digital switch or converter that reestablishes the signal level or reformats the signaling. Examples of BLACK wirelines that do not directly leave the inspectable space are telephone lines that connect to digital telephone switches, Ethernet lines that connect to digital network routers, and alarm lines that connect to an alarm panel.

3.2. (U) Protected Distribution System

(U) RED fiber or wirelines that traverse an area that is controlled to a lower level of classification or access control shall be installed in a Protected Distribution System (PDS) in accordance with CNSSI No.

7003. BLACK wirelines shall not be installed in the PDS unless authorized by a CTTA.

3.3. (U) Cable Identification

(U) Cables carrying NSI shall have a prominently displayed distinguishing label, marking, or color that indicates the classification level and/or compartmentalization of the data. The cable identification shall be located at both ends and at sufficient intervals as determined by the CTTA or the entire cable may be the distinguishing color. Table 1 provides a recommended cable color scheme.

Table 1 – (U//FOUO) Cable Color Scheme

CLASSIFICATION

LEVEL

CABLE

COLOR

Unclassified Green

Collateral Confidential Blue

Collateral Secret Red

Collateral Top Secret Orange

Special Category Yellow

3.4. (U) Electrical Isolation

(U) In addition to the physical separation between RED equipment/lines and BLACK equipment/lines, electrical separation must be provided between RED and BLACK circuits within the same equipment.

Examples are equipment and systems that process both RED and BLACK information, such as KVM switches, secure voice switches, Video Teleconferencing (VTC) switches, video matrix switches, cross domain firewalls/guards, and encryption devices. Table 2 provides the isolation level and the minimum frequency range for the isolation that is required for the type of signaling. The isolation is defined as the ratio of the RED signal level on a RED line to the level of the same RED signal on a BLACK line.

(U) Equipment that processes both RED and BLACK information may also require certification for other information assurance disciplines. Electrical isolation does not imply TEMPEST certification nor other information assurance certification and vice-versa.

Table 2 – (U//FOUO) Electrical Isolation Level

RED SIGNAL TYPE ISOLATION LEVEL FREQUENCY RANGE

Analog Voice 100 dB 100 Hz to 5 KHz

Analog signaling, including analog video 80 dB

Lowest signaling rate to maximum signaling rate

Digital Signaling 60 dB Lowest signaling rate to 10 times the maximum signaling rate

(U//FOUO) Note: the analog voice signaling rate may be reduced to 3 KHz for systems where the analog signal is filtered with a cut-off frequency below 5 KHz for digital conversion.

3.5. (U) Commercial Cable TV (CATV) and Satellite TV Isolation

(U) CATV and satellite television cables that traverse spaces processing NSI shall be isolated before the cables leave the inspectable space. For SCIFs and SAPFs, the isolation shall be at the inside boundary of the SCIF or SAPF. The isolation may be achieved by converting the CATV or satellite television wireline cable to fiber optic cable and then back to wireline; or the isolation may be achieved with the combination of a 12 dB minimum gain one-way Radio Frequency (RF) amplifier and a 12 dB minimum loss RF attenuator inline with the cable. Isolation is not required for receive-only systems that are entirely contained within inspectable space, such as satellite television systems with antennas located inside the inspectable space. Receive-only systems do not transmit account or channel authorization requests back to the service provider. CATV and satellite television cables that connect to audio/visual systems that also display NSI must meet SECTION 3.4 or will require additional isolation specified by a CTTA.

3.6. (U) RF Transmitter Separation

(U) For the purposes of separation between RED equipment/lines and RF transmitters, two transmitter power levels are defined: (1) high transmitter power is that which exceeds 100 mWatt (20 dBm) EIRP;

and (2) low transmitter power is that which is less than or equal to 100 mWatt (20 dBm) EIRP. Examples of low-power transmitters are wireless devices for local communication that do not need a Federal

Communications Commission (FCC) license, such as some IEEE 802.11X network access points, and portable (but not cellular) telephones. The RED/BLACK installation guidance provided herein reduces the TEMPEST vulnerabilities associated with RF transmitters. However, the installation of wireless devices and RF transmitters in spaces that process NSI presents other information assurance vulnerabilities and requires additional approval from the cognizant accrediting authority. Bluetooth, IEEE802.11X and other standards for emerging wireless technologies may increase the power levels and become high power transmitters in future operating modes.

3.6.1. (U) Stationary Transmitters

(U) A separation distance of 3 meters shall be provided between RED equipment and stationary (i.e., docked or permanently installed) high-power RF transmitters. A separation distance of 1 meter shall be provided between RED equipment and stationary low-power RF transmitters.

3.6.2. (U) Non-Stationary Transmitters

(U) A separation distance of 1 meter shall be provided between RED equipment and non-stationary (i.e., hand held and not docked) high-power RF transmitters, such as mobile cellular telephones. There is no separation distance between RED equipment and non-stationary low-power RF transmitters, such as

Bluetooth devices. There are no separation requirements for non-stationary transmitter devices while they are in transit (i.e., being carried through a space).

3.6.3. (U) Special Use Transmitters

(U) Consult a CTTA for the separation requirements for passive and active Radio Frequency

Identification (RF ID) tags, proximity badges, and other RF radio query-response devices. Unless otherwise directed, the RF device readers are considered RF transmitters for separation purposes.

Guidance for the installation of wireless repeaters, wireless fire alarm, and wireless intrusion detection systems should be provided by a CTTA.

3.6.4. (U) Remote Radio Head

(U) Generally, a remote radio head describes an operator radio control panel that connects to a remote radio transceiver via electrical or wireless interface. This remote radio head requires only standard

RED/BLACK separation and not the 3 or 1 meter separation required for radios.

Table 3 – (U//FOUO) RF Transmitter Separation Requirements

TRANSMITTER

TYPE

SEPARATION FROM

RED EQUIPMENT

Stationary (docked or permanently installed) high-power RF transmitters 3 meters

Stationary (docked or permanently installed) low-power RF transmitters 1 meter

Mobile (hand held and not docked) high-power RF transmitters 1 meter

Radio transmitters that are carried through a space None

RF ID, proximity badges and other query response RF devices Consult CTTA

3.7. (U) RED Equipment and BLACK Wireline Physical Separation

(U) The physical separation distance between RED equipment and BLACK wirelines is provided in

SECTIONS 4 through 8. The separation is applicable to BLACK wirelines that connect to RF transmitters or that directly leave the inspectable space, such as telephone lines, alarm lines, and unclassified network data lines. These lines may be exposed or hidden in adjacent walls. In some cases, a reduced separation is allowed if the wirelines are connected to outside of the inspectable space through

BLACK switching equipment (e.g., network switches, network routers, or telephone switches) that is contained within the inspectable space.

(U) The BLACK wireline separation is not applicable to the following:

(1) (U) Fiber optic lines that do not have a metallic strengthener or armor in the fiber cable; or

(2) (U) Wirelines that are fiber optically isolated or filtered before leaving the inspectable space.

3.8. (U) RED Wireline and BLACK Wireline Physical Separation

(U) The physical separation distance between RED wirelines and BLACK wirelines is provided in

SECTIONS 4 through 8. Unless specifically excepted herein or excepted by a CTTA, RED, and BLACK wirelines shall be installed in separate distribution systems or pathways.

1131302939E Highlight

(U) The BLACK wireline separation is not applicable to the following:

(1) (U) BLACK fiber optic lines that do not have a metallic strengthener or armor in the fiber cable;

or

(2) (U) BLACK wirelines that are fiber optically isolated or filtered before leaving the inspectable space.

(U) RED fiber lines may be installed in the same distribution system as BLACK fiber lines provided that the BLACK fiber lines are in a separate cable or fiber tube for identification. If authorized by a CTTA, RED and BLACK fiber lines may be in the same fiber bundle provided the fibers have an opaque sheath and a cable identification scheme.

3.9. (U) Distribution and Patching Systems

(U) RED and BLACK distribution panels shall be separate units and shall be separated by a minimum of

5 cm. If the RED distribution panel contains active electronic components (such as a network switch), then the separation distances for RED equipment and BLACK wirelines delineated in SECTIONS 4 through 8 shall be used. A separate distribution panel shall be provided for each classification level of

NSI and for each compartment of Special Category of NSI.

(U) The distribution panels shall have a distinguishing label, marking, or color that indicates the classification level and/or compartmentalization of the data and that matches the cable identification scheme. If available, a system of keyed or mutually exclusive jacks and connectors should be used for different classification levels, unclassified levels, and compartments of data.

(U) RED and BLACK wall jacks for patching to equipment, such as network drops, shall be in separate outlet boxes. RED and BLACK wall jacks connecting to wirelines shall be separated by 5 cm. The wall jacks shall provide the same distinguishing label, marking, or color scheme that is used for cables. If available, a system of keyed or mutually exclusive jacks and connectors should be used for different classification levels, unclassified levels, and compartments of data. Except as delineated in SECTION 8, RED to RED separation is not required in the RED wall jacks between classification levels or compartments of NSI, such as between Collateral Secret and Special Category Top Secret.

3.10. (U) Communications Security (COMSEC) Equipment

(U) The RED plain text cable and BLACK cipher text cables connected to COMSEC equipment shall be separated as soon as feasible. When COMSEC equipment is installed in a RED rack cabinet, the BLACK cipher text cable shall be shielded if it cannot meet the separation requirements from RED equipment as specified herein. When the COMSEC equipment is a Level 1 TEMPEST certified equipment, it may be installed in a BLACK rack without additional separation requirements. When COMSEC equipment is not a Level 1 TEMPEST certified equipment, then it shall be treated as RED equipment for installation purposes. Note that NSA "Type 1" certification does not guarantee Level 1 TEMPEST certification.

3.11. (U) TEMPEST Certified Equipment

(U) When a separation distance is required between RED equipment and BLACK equipment/lines, and the RED equipment is Level 1 TEMPEST Certified, the separation distance may be reduced using the following criteria: (1) 1 meter separation distances may be reduced to 30 cm; (2) 50 cm separation distances may be reduced to 15 cm; and 30 cm separation distances may be reduced to 10 cm. The reduction in the separation distances does not apply to RF transmitters or BLACK lines to RF

1131302939E Highlight

1131302939E Highlight

1131302939E Highlight

1131302939E Highlight transmitters. If required by the manufacturer's installation specification or compliance with TEMPEST certification, then optical or shielded wire cables shall be connected to TEMPEST certified equipment.

3.12. (U) Fortuitous Conductors

(U) As an additional TEMPEST countermeasures requirement, a CTTA may require the isolation of fortuitous conductors that traverse a space that processes NSI. If required by a CTTA, then all pipes, conduits, ducts, and other metallic distribution systems that leave the inspectable space shall be grounded or isolated at the inside boundary of the inspectable space. Non-conductive sections shall be inserted in each fortuitous conductor, or each conductor shall be grounded. The ground must be contained within the inspectable space. Unused wireline cables that leave the inspectable space shall be removed or shortened to be contained within the inspectable space. Fortuitous conductors may also have a requirement for a non-conductive section for acoustic isolation.

3.13. (U) Shielded Cable

(U) When shielded cable is required, the wireline pairs or wireline bundles shall be individually shielded or shall have a minimum of one overall shield, and the cable shall have an outside non-conductive sheath.

Screened cable is another term used for a cable with one overall shield. The shield shall be a non-ferrous metallic foil shield with an uninsulated and tinned drain wire or shall be a braided metallic shield with a minimum of 85 percent coverage. Except for coaxial cables, the shield shall not be used as a signal return or a signal carrying conductor.

(U) Unless grounding at only one end of the cable is required for system operation (i.e., to prevent ground loops), the cable shields shall be grounded at both ends. The overall shield should have 360-degree termination with a metal connector. If an equipment jack does not allow the use of a connector with a direct bond to the cable shield, the shield may be grounded to the equipment with a "pigtail" that is as short as feasible, but no greater than 2.5 cm. The pigtail shall not be secured to the connector using screws that compress a cable strain relief clamp.

(U) Metallic distribution, such as conduit or enclosed cable tray, may be used for shielding in lieu of cabling shields when it is difficult to use shielded cable. All metallic distribution shall be electrically continuous and installed in accordance with the National Electric Code. Electrical Metallic Tubing

(EMT) used in lieu of shielded cable shall utilize compression fittings.

3.14. (U) Grounding

(U) A separate RED and BLACK grounding system is desirable but is not required for TEMPEST unless directed by a CTTA. When power filters or signal filters are required-, or when a ground is required for fortuitous conductors, a grounding system is required. The facility grounding system may be used provided that the grounding system is a multi-point equipotential plane or that the grounding system is single point ground that is contained within the inspectable space. Consult a CTTA for guidance on grounding. All grounding shall be installed in accordance with the National Electric Code.

SECTION 4 – (U) FACILITIES

4.1. (U) Introduction

(U) Facilities are permanent structures or are temporary structures (such as shelters, trailers, or tents) that are stationary in one location for greater than 90 days. The guidance of this section provides countermeasures to isolate RED signals from BLACK signal paths that leave the inspectable space. The inspectable space is defined by the cognizant CTTA for the facility.

4.2. (U) Design Philosophy

(U) The RED/BLACK facility design philosophy is to provide sufficient attenuation or isolation between

RED equipment/lines and BLACK equipment/lines that leave the inspectable space. The level of attenuation or isolation is dependent on the size of the inspectable space. For simplification, the sizes of inspectable space are categorized by three distances: (1) less than 20 meters; (2) greater than or equal to

20 meters but less than 100 meters; and (3) equal to or greater than 100 meters. Three levels of

RED/BLACK isolation requirements are defined, which approximately correspond to the three size categories of the inspectable space. The requirement levels are Level I, Level II, and Level III. Level I is the most stringent and Level III is the least stringent.

4.3. (U) Applicability

(U) When a CTTA has determined that a facility has a RED/BLACK TEMPEST countermeasures requirement, the RED/BLACK installation guidance of this section shall be used. The CTTA will determine the applicable RED/BLACK requirements level from Table 4. The inspectable space distance is defined by the CTTA. A summary of the RED/BLACK separation requirements is provided in Table 5.

4.4. (U) RED/BLACK Requirements Matrix

(U) The RED/BLACK Requirements Matrix, Table 4, is used to select the minimum requirements level.

The first column corresponds to whether the facility is located within the U.S. (or its trusts and territories), or whether the facility is located outside the U.S. The second column corresponds to the highest classification level of NSI processed in the facility. The third column is the size of the inspectable space. The fourth column is the RED/BLACK minimum requirements level that should be used.

(U) The RED/BLACK requirements levels (e.g., I, II, III) correspond to the level of protection need to contain compromising emanations within the inspectable space. The levels are based upon the installation of Commercial-Off-The-Shelf (COTS) equipment within a standard commercially built office building. As a part of risk management, the requirements level is less stringent for lower classification levels of information processed within the U.S., and is more stringent for higher classification levels of information processed outside the U.S. The CTTA may specify a RED/BLACK requirements level that is more or less stringent based on the details of a specific site.

Table 4 – (U//FOUO) RED/BLACK Requirements Level Matrix

LOCATION CLASSIFICATION

LEVEL

INSPECTABLE

SPACE (IS)

LEVEL

Within the US Collateral Secret and below < 20 meters

II

Within the US

Collateral Secret and below

≥ 20 meters but

< 100 meters

III

≥ 100 meters III

Special Category and Top Secret

I and Top Secret

≥ 20 meters but

Outside the US and below

≥ 20 meters but and Top Secret

≥ 20 meters but

≥ 100 meters II

(U) Note: Consult CTTA or CNSSI No. 7000 for more information on determining the location and classification criteria.

(U) Note: Consult CTTA for site specific requirements at locations outside the US.

4.5. (U) Level I RED/BLACK Requirement

4.5.1. (U) Physical Separation

(U) A separation distance of 1 meter shall be provided between RED Equipment and:

(1) (U) BLACK wirelines that directly leave the inspectable space; and

(2) (U) BLACK wirelines that connect to RF transmitters; and

(3) (U) BLACK equipment with lines that leave the inspectable space; and

(4) (U) BLACK equipment with lines that connect to RF transmitters.

(U) A separation distance of 50 cm shall be provided between RED Equipment and BLACK wirelines that connect to outside the inspectable space through a digital switch (, a computerized telephone switch or network router) that is contained within the inspectable space.

(U) Unless separated by metal distribution system such as conduit or enclosed cable tray, a separation distance of 5 cm (15 cm for parallel cable lengths over 30m) shall be provided between RED wirelines and:

(1) (U) BLACK wirelines that leave the inspectable space; and

(2) (U) BLACK wirelines that connect to RF transmitters.

(U) RED equipment shall be separated from RF transmitters in accordance with SECTION 3.6.

4.5.2. (U) Cables

(U) RED wirelines shall have a minimum of one overall metallic shield.

(U) RED lines shall have a distinguishing label or color coding that identifies the classification level of the NSI conveyed. Suggested color coding schemes can be found in Table 1.

(U) RF wirelines (such as RF antenna, CATV, and satellite television cables) that leave the inspectable space shall be isolated in accordance with SECTION 3.5.

4.5.3. (U) Electrical Isolation

(U) BLACK lines connected to RED equipment (such as KVM, VTC, secure voice, or video matrix switches) shall be electrically isolated from RED signals. The level of isolation is provided in Table 2.

4.5.4. (U) Power

(U) The requirement for RED power shall be determined by a CTTA. If power filters are required, the filter attenuation shall be 100 dB over the frequency range of 14 KHz to 1 GHz.

(U) RF transmitters shall not be powered from the same circuit as RED equipment. The RF transmitter power should be from a separate circuit breaker in a power distribution panel or from a separate AC-DC-

AC direct conversion Uninterruptible Power Supply (UPS) than RED equipment. The use of an UPS does not negate CTTA requirements for facility BLACK power isolation.

4.6. (U) Level II RED/BLACK Requirement

4.6.1. (U) Physical Separation

(U) A separation distance of 1 meter shall be provided between RED equipment and:

(1) (U) BLACK wirelines that connect to RF transmitters and

(2) (U) BLACK equipment with lines that connect to RF transmitters

(U) A separation distance of 50 cm shall be provided between RED Equipment and BLACK wirelines that directly leave the inspectable space.

(U) A separation distance of 15 cm shall be provided between RED Equipment and BLACK wirelines that connect to outside the inspectable space through a digital switch (such as a computerized telephone switch, or network router) that is contained within the inspectable space.

(U) Unless separated by a metal distribution system such as conduit or enclosed cable tray, a separation distance of 5 cm (15 cm for parallel cable lengths over 30m) shall be provided between RED wirelines and:

(1) (U) BLACK wirelines that leave the inspectable space; and

4.6.2. (U) Cables

(U) RED lines shall have a distinguishing label or color coding that identifies the classification level of

(U) RF wirelines (such as RF antenna, CATV, and satellite television cables) that leave the inspectable

4.6.3. (U) Electrical Isolation switches) shall be electrically isolated from RED signals. The level of isolation is provided in Table 2

4.6.4. (U) Power

(U) The requirement for RED power shall be determined by a CTTA. If power filters are required, the level of attenuation will be determined by the CTTA.

power should be from a separate circuit breaker in a power distribution panel or from a separate AC-DC-

AC direct conversion UPS than RED equipment. The use of an UPS does not negate CTTA requirements for facility BLACK power isolation.

4.7. (U) Level III RED/BLACK Requirement

4.7.1. (U) Physical Separation

(U) A separation distance of 1 meter shall be provided between RED equipment and:

(1) (U) BLACK wirelines that connect to RF transmitters; and

(2) (U) BLACK equipment with lines that connect to RF transmitters.

(U) A separation distance of 30 cm shall be provided between RED Equipment and BLACK wirelines that directly leave the inspectable space.

(U) A separation distance of 5 cm shall be provided between RED Equipment and BLACK wirelines that connect to outside the inspectable space through a digital switch (such as a computerized telephone switch or network router) that is contained within the inspectable space.

(U) Unless separated by a metal distribution system such as conduit or enclosed cable tray, a separation distance of 5 cm (15 cm for parallel cable lengths over 30 meters) shall be provided between RED wirelines and:

(1) (U) BLACK wirelines that directly leave the inspectable space; and

4.7.2. (U) Cables

(U) RED lines shall have a distinguishing label or color coding that identifies the classification level of

(U) RF wirelines (such as RF antenna, CATV, and satellite television cables) that leave the inspectable

4.7.3. (U) Electrical Isolation switches) shall be electrically isolated from RED signals. The level of isolation is provided in Table 2

4.7.4. (U) Power

(U) The requirement for RED power shall be determined by a CTTA.

power should be from a separate circuit breaker in a power distribution panel or from a separate AC-DC-

AC direct conversion UPS than RED equipment. The use of an UPS does not negate CTTA requirements for facility BLACK power isolation.

Table 5 – (U//FOUO) Summary of Facility RED/BLACK Isolation Requirements

REQUIREMENT LEVEL I LEVEL II LEVEL III

RED Equipment to BLACK wirelines that connect to a transmitter 1 m 1 m 1 m

RED Equipment to BLACK wirelines that directly leave IS 1 m 50 cm 30 cm

RED Equipment to BLACK Equipment with lines that leave IS 1 m none none

RED Equipment to BLACK wirelines that leave

IS through digital switch 50 cm 15 cm 5 cm

RED Equipment to BLACK Equipment with lines that connect to RF transmitter 50 cm 50 cm 50 cm

RED wirelines to BLACK wirelines that leave the IS or connect to RF transmitters (Note 1)

5 cm /

15 cm

5 cm /

15 cm

5 cm /

15 cm

RED wire lines are shielded Yes none none

RED lines have distinguishing marking or color coding for identification Yes Yes Yes

RF wirelines such as CATV and satellite television isolated within the IS Yes Yes Yes

Electrical Isolation between BLACK lines connected to RED Equipment Yes Yes Yes

CTTA determines requirement for RED Power

(See Note 2)

CTTA

or 100 dB

CTTA

CTTA

RF transmitters not powered on same circuit as RED equipment Yes Yes Yes

(U) Notes:

(1) (U) The separation distance increased from 5 cm to 15 cm for parallel runs over 30 meters.

(2) (U) Consult CTTA for RED power requirement.

(3) (U) For Level 1 TEMPEST certified RED equipment, the separation distance may be reduced in accordance with SECTION 3.11.

(4) (U) The information provided by the table is not all-inclusive, refer to SECTION 3 for additional requirements for facilities and to SECTIONS 5 though 8 for other installation types.

SECTION 5 – (U) AIRCRAFT

5.1. (U) Introduction

(U) This section provides the RED/BLACK installation guidance for fixed wing, rotary wing, manned, and unmanned air vehicles. The intent is to isolate RED signals from BLACK signal paths that leave the air vehicle during ground operations or while airborne. The application of the RED/BLACK countermeasures must consider weight, size, power consumption, cooling requirements and available space. When the TEMPEST countermeasures described below significantly impact cost or performance, a CTTA may consider other TEMPEST countermeasures, including instrumented TEMPEST tests, to mitigate and evaluate vulnerabilities. Aircraft that process special category information shall also follow the additional guidelines of SECTION 8.

5.2. (U) Physical Separation

(U) A separation distance of 1 meter shall be provided between RED equipment and BLACK wirelines that connect to RF transmitters.

(U) When NSI is processed during ground operations, a separation distance of 30 cm shall be provided between RED Equipment and BLACK wirelines that leave the inspectable space through external connections (e.g., umbilical cable). The inspectable space is defined by the CTTA based on the operations plan and location(s) of the air vehicle(s).

(U) A separation distance of 5 cm shall be provided between RED wirelines and BLACK wirelines that connect to RF transmitters or leave the air vehicle, except when RED and BLACK wirelines pass through the same bulkhead opening.

(U) A separation distance of 1 meter shall be provided between RED equipment and RF transmitters.

(U) The separation requirements of this section may be met by a metallic barrier separating the RED equipment from the BLACK equipment and wirelines (i.e., the RED equipment is located in a separate space). This allows RF transmitter installation in adjacent spaces.

(U) Equipment racks containing RED equipment may be installed adjacent to equipment racks containing

BLACK equipment and BLACK wirelines if metal side panels are installed on the racks. The side panels must extend to all sides of the rack and be bonded to the rack frame. BLACK signal wirelines that are connected to an RF transmitter or that directly leave the inspectable space (i.e., a shore tie) must be wholly contained within the rack or shall be shielded.

(U) If space limitations require the installation of RED and BLACK equipment in the same equipment rack, the RED and BLACK equipment and wirelines shall be separated by a full width and depth metallic barrier (such as a shelf or drawer) that is bonded to the rack, and separated by a distance of 30 centimeters. RED and BLACK wirelines shall be shielded.

(U) If the separation requirements between RED equipment/wirelines and BLACK wirelines cannot be met due to space limitations, then as much separation as feasible shall be provided, and the BLACK wirelines shall be shielded.

5.3. (U) Cables

(U) RED lines shall have a distinguishing label or color coding that identifies the classification level of the NSI conveyed.

5.4. (U) Electrical Isolation switches) shall be electrically isolated from RED signals. The level of isolation is provided in Table 2

When feasible, RED and BLACK cables should use separate equipment connectors.

(U) The electrical isolation requirement for secure voice systems shall be applied to the system as a whole, including the Intercommunication Systems (ICS), headsets/handsets, and any wiring between the system components. Additional shielding or isolation techniques may be required for audio cables that contain BLACK send (microphone) audio and receive RED audio in the same cable.

5.5. (U) Power

(U) When separate power sources are available, such as power converters or UPS, RF transmitters should be powered from separate power sources than RED equipment.

5.6. (U) Grounding and Bonding

(U) The grounding onboard an air vehicle is based on airframe structure and materials, electromagnetic interference, static discharge, TEMPEST and other considerations. When feasible, RED equipment shall be bonded to the air vehicle ground system, either directly through the equipment chassis or through a bond strap with a 5 to 1 length-to-width ratio. Cable shields shall be grounded to the equipment as described in SECTION 3.13.

SECTION 6 – (U) SHIPS

6.1. (U) Introduction

(U) This section provides the RED/BLACK installation guidance for shipboard and submarine systems.

The intent is to isolate RED signals from BLACK signal paths that leave the hull of the ship, which is considered the inspectable space. Due to the limited space onboard ship and the metal structure of ships, the shipboard requirements are different than facility requirements.

6.2. (U) Physical Separation

(1) (U) Unshielded BLACK wirelines that are connected to an RF transmitter; and

(2) (U) Unshielded BLACK wirelines that directly leave the inspectable space (e.g., a shore tie); and

(3) (U) BLACK equipment having a nonmetallic enclosure and signal wirelines that are connected to an RF transmitter or that directly leave the inspectable space (e.g., a shore tie).

(4) (U) RF transmitters that are contained in their original metallic enclosure.

(U) A separation distance of 30 cm shall be provided between RED equipment and BLACK wirelines that connect to a shore tie through a digital switch (such as a computerized telephone switch or network router) that is contained within the inspectable space.

(U) A separation distance of 3 meters shall be provided between RED equipment and stationary (i.e., docked or permanently installed) high-power RF transmitters. Refer to SECTION 3.6 for definitions for transmitter power levels.