ID05180024_Section_J_Attach_3_-_Stingray_Baseband_O&M_Manual.pdf

Stingray Baseband Operations and Maintenance Manual

AISR-TRNG-027 v1.0

The Stingray version of this Baseband Operations and Maintenance Manual was derived from a previous version that had been developed by the Space and Naval

Warfare (SPAWAR) Systems Center Atlantic.

DISTRIBUTION STATEMENT C: Distribution authorized to U.S. Government agencies and their contractors for operational use as of April 2012. Other requests for this document shall be referred to Sigma Defense, 500 Corporate Pointe Warner Robins, GA. 31088.

DESTRUCTION NOTICE: Comply with distribution statement and destroy by any method that will prevent disclosure of contents or reconstruction of the document.

JULY 2017

RECORD OF CHANGES

Section J Attachment 3 - Stingray Baseband O&M Manual **Provided for INFORMATIONAL PURPOSES ONLY**

Unclassified // For Official Use Only Front Matter

Unclassified // For Official Use Only ii

The following changes are applicable to the Stingray Baseband Operations and Maintenance Manual date July 2017.

.BRIEF DESCRIPTION OF CHANGE SECTION/PAGE STINGRAY POC

Reporting Errors and Recommending Improvements You can help improve this manual. To identify mistakes or make improvements to the procedures in this manual, please contact us at the address below:

Sigma Defense Systems 500 Corporate Pointe Warner Robins, GA. 31088 (844)-575-2732

Unclassified // For Official Use Only iii

Points of Contact

Technical Support

Use the following information to contact Sigma Defense Technical Support:

Address: Sigma Defense Systems 500 Corporate Pointe

Warner Robins, GA 31088

Commercial Telephone: (844)-575-2732

E-Mail: ASEC@sigdef.com

Training Department

Use the following information to contact Sigma Defense Technical Support:

Address: Sigma Defense Systems 500 Corporate Pointe

Warner Robins, GA 31088

Commercial Telephone: (844)-575-2732 E-Mail: ASEC@sigdef.com

Node Activation

Non-SOCOM Users: Contact the appropriate unit planning/engineering cell for activation assistance as required by local policy.

SOCOM USERS: Use the following information to contact SATOPS for STINGRAY system node activation:

Address: MacDill Air Force Base, FL

Unclassified SATOPS: (813) 826-9229

Classified SATOPS: (706) 299-4400

DSN: (312) 299-9229

GBS Troubleshooting

Use the following information to contact the Global Broadcast System (GBS) Help Desk for GBS operation issues:

GBS Commercial Telephone: (719) 567-4271 Option (1) mailto:ASEC@sigdef.com mailto:ASEC@sigdef.com

Unclassified // For Official Use Only iv

Document Conventions The following conventions are used throughout this manual to enable users to locate and interpret information more efficiently.

Bold text highlights specific pieces of equipment, proper system names and

Bold Text software elements.

For example: The Control Panel window displays.

Courier text is used for system responses and other examples of specific

Courier Text text displayed on screen.

For example: The Router> prompt displays.

<Angle

Angle brackets enclose text to be entered by a user. When typing, include only the text and do not include the angle brackets.

Brackets> For example: Type <yes> at the prompt.

Square brackets enclose text referring to Node-specific information, such

[Square as IP addresses and passwords. When typing, substitute the appropriate

Brackets] information or value for the Node and do not include the square brackets.

For example: In the IP Address field, type <[IP Address from Cutsheet]>.

On first use, abbreviations and acronyms appear in parentheses behind

Abbreviations & their definition.

Subsequent uses include only the abbreviation or acronym.

Acronyms For example: Antenna Control Unit (ACU).

Appendix B defines all abbreviations and acronyms used in this manual.

Unclassified // For Official Use Only v

Trademark Attributions The following trademarks are used throughout this manual to identify products. STINGRAY components are Commercial Off-the-Shelf (COTS) products. All trademarked names are officially registered and legally restricted by the owner or manufacturer.

• AcceleNet, AltaSec, KG-250, KG-250X, KG-255, ViaSat, and xPEP are a registered trademarks of ViaSat, Inc.

• AMP1 and Wohler are registered trademarks of Wohler Technologies, Inc.

• Apt, Enhanced apt-X, Worldcast Eclipse and WorldNet Oslo are registered trademarks of Audio Processing

Technology Worldcast Systems Group.

• AT&T and Trimline are registered trademarks of Advanced American Telephones.

• Avaya is a registered trademark of Avaya, Inc.

• AvL and Roto-Lok are registered trademarks of AvL Technologies, Inc.

• Belkin is a registered trademark of Belkin International, Inc.

• Ben-Tronics is a registered trademark of Ben-Tronics, Inc.

• Brunton and SurveyMaster are registered trademarks of Brunton Outdoor Group.

• Cable ToGo is a registered trademark of Cable To Go, Lastar, Inc.

• Catalyst, Cisco and SCCP are registered trademarks of Cisco Systems, Inc.

• Cheetah, Hawkeye III, Panther and TALON are registered trademarks of L-3 Communications.

• CoolMAX is a registered trademark of CoolMax Technology, Inc.

• Cortelco is a registered trademark of Cortelco.

• Dashboard and EXPLORER are registered trademarks of Thrane & Thrane Aktieselskab (A/S).

• Dell Latitude, PowerEdge and PowerVault are registered trademarks of Dell.

• DTS is a registered trademark of DTS, Inc.

• EVOLUTION, iBuilder, iConnex, iDirect, iDS, iDX, iMonitor, iSite and iVantage are registered trademarks of iDirect.

• FedEx is a registered trademark of FedEx Corporation.

• FSV is a registered trademark of Rohde & Schwarz.

• GATR is a registered trademark of GATR Technologies.

• Gen-Pro and Kleen Power are registered trademarks of Gillette Generators, Inc.

• Garmin is a registered trademark of Garmin, Ltd.

• HAIPE is a registered trademark of National Security Agency.

• HyperTerminal is a registered trademark of Hilgraeve, Inc.

• IBUC is a registered trademark of Terrasat Communications, Inc.

• IEEE is a registered trademark of Institute of Electrical and Electronics Engineers.

• Inmarsat is a registered trademark of Inmarsat, PLC.

• Intelsat is a registered trademark of Intelsat Corporation.

• ITU-R and ITU-T are registered trademarks of International Telecommunication Union.

• Klas and KlasRouter are registered trademarks of Klas Telecom, Inc.

• Kulabyte is a registered trademark of Haivision Network Video.

• LaCie is a registered trademark of LaCie USA.

• Leitch, Panacea, SecNet 54, and Sierra II are registered trademarks of Harris Corporation.

• Logitech and QuickCam are registered trademarks of Logitech.

• Microsoft and Microsoft Windows are registered trademarks of Microsoft Corporation.

• Panasonic and Toughbook are registered trademarks of Panasonic Corporation.

• POLYCOM and PVX are registered trademarks of Polycom.

Unclassified // For Official Use Only vi

• SoundMAX is a registered trademark of SoundMAX.

• SRR is a registered trademark of Quintech.

• Suunto is a registered trademark of Suunto Oy Corporation.

• Targus is a registered trademark of Targus Group International, Inc.

• TracStar is a registered trademark of TracStar Systems.

• TRANZSTOR and ZXL2 are registered trademarks of Z Microsystems, Inc.

• Tripp Lite is a registered trademark of Tripp Lite.

• ULinx is a registered trademark of B&B Electronics Manufacturing Company.

• Ultralife is a registered trademark of Ultralife Corporation.

• UPSI is a registered trademark of DRS Technologies, Inc., A Finmeccanica Company.

• USPS is a registered trademark of United States Postal Service.

• Velcro is a registered trademark of Velcro Industries B.V.

• Via is a registered trademark of VIA Technologies, Inc.

• Vocality is a registered trademark of Vocality International, Ltd.

• Wavestream is a registered trademark of Wavestream Corporation.

• Xicom is a registered trademark of Comtech Xicom Technologies, Inc.

Unclassified // For Official Use Only vii

Table of Contents

1.1 Safety Information Throughout This Manual

1.1.1 Warning and Caution Statements

1.1.2 System Hazard Overview

1.2 Electrical Precautions

1.2.1 Guidelines for Operating Electrical Equipment

1.2.2 Handling ESDS Equipment

1.2.3 Helping Victims of Electrical Shock

1.2.4 Resuscitation by Certified Personnel

1.2.5 Guidelines for Servicing Electrical Equipment

1.3 Grounding Equipment

1.4 Power Precautions

1.5 Site Precautions

1.6 Lift Precautions

1.7 Radio Frequency (RF) Hazards

2.1 Data Security Requirements

2.2 Security Information

2.3 Security Policy

2.4 Cybersecurity Defined

2.5 Common Threat Sources

2.6 Common Tactical Network Violations

2.7 Cyber Threat Risk Reduction

2.7.1 Access Control (AC)

2.7.2 Awareness and Training (AT)

2.7.3 Configuration Management (CM)

2.7.4 Contingency Planning (CP)

2.7.5 Identification and Authentication (IA)

2.7.6 Incident Response (IR)

2.7.7 Maintenance (MA)

2.7.8 Media Protection (MP)

2.7.9 Physical and Environmental (PE) Protection Physical Access

2.7.10 Planning (PL)

2.7.11 Personnel Security (PS)

2.7.12 Risk Assessment

2.7.13 System and Services Acquisition (SA)

2.8 Security Guidance for Shipment of Equipment

2.9 Security Patches and Antivirus Updates

2.10 Security Assistance Contact List

Unclassified // For Official Use Only viii

3.1 Stingray Baseband Overview

3.2 Stingray Signal and Data Flow

3.3 Transmit Signal and Data Flow

3.3.1 Receive Signal and Data Flow

3.4 Infrastructure

3.5 Environmental Factors

3.6 Preparation for Storage or Shipment

3.7 Destruction of Material to Prevent Enemy Use

3.8 Stingray Capabilities and Features

3.8.1 Stingray Baseband Transit Cases

3.8.2 Baseband Support Case

3.9 Baseband Transit Case

3.9.1 Getac S410 Hard Drives

3.9.2 DTECH M3-SE3

3.9.3 Cisco Console Cable

3.9.4 KG-250X Encryption Device

3.9.5 KG-250X Power Cable

3.9.6 KG-250X USB Cable

3.9.7 Baseband AC Power Cable

3.10 Stingray Software

4.1 Pre-Deployment Coordination

4.1.1 45 Days Prior to Mission

4.1.2 One Month Prior to Mission

4.1.3 Two Weeks Prior to Mission

4.1.4 One Week Prior to Mission

4.1.5 Three Days Prior to Mission

4.1.6 Mission Checklist

4.2 Preparing the Stingray Baseband for Operations

4.2.1 Cable and Power on the Transport Baseband

4.2.2 Configure the Transport M3-SE3 Router

4.2.3 Open a HyperTerminal Session

4.2.4 Configure the Transport Baseband M3-SE3 Switch

4.2.5 Cable and Power ON the Red Baseband

4.2.6 Configure the Red Baseband MS-SE3 Router

4.2.7 Configure the Red Baseband M3-SE3 Switch

4.2.8 Configure the Red Laptop for Operations

4.3 Configuring the KG-250X for Operations

4.3.1 Configure the Red KG-250X

4.4 Configuring the Unified Video (UV) Server for Operations

4.4.1 Cabling the Unified Video (UV) Server

4.4.2 Configure the Red laptop for a Static IP Address

Unclassified // For Official Use Only ix

4.4.3 Configure a Static IP Address on the UV Server

4.4.4 Set a Static IP Address on the Red Laptop

4.4.5 Operate the UV Server

4.5 Configuring the Extensor Encoder for Operations

4.5.1 Cable and Power ON the Extensor Encoder

4.5.2 Configure the Extensor

4.5.3 Set the Extensor Resolution

4.5.4 Analyze an Incoming Video Stream

4.5.5 Preview Incoming Video

4.6 Configuring the ACE Encoder for Operations

4.6.1 Cable the Encoder

4.6.2 Configure the Red Laptop for a Static IP Address

4.6.3 Program the ACE Encoder

4.6.4 Configure the Red Laptop for a Static IP Address

4.7 Configuring the Kraken CR for Operation

4.7.1 Cable the Kraken CR

4.7.2 Configure the Red Laptop for a Static IP Address

4.7.3 Programming the Kraken CR

4.7.4 Configure the Red Laptop for a Static IP Address

4.8 End of Mission Operations

4.8.1 Restore the Kraken CR to Pre-Deployment Settings

4.8.2 Restore the ACE to Factory Default Settings

4.8.3 Restore the KG-250X Factory Defaults

5.1 Preventative Maintenance

5.1.1 Maintenance and Repairs

5.1.2 References

5.1.3 Receiving a System

5.1.4 PMCS Tasks

5.1.5 Encryption Device Maintenance

5.1.6 Cable PMCS Procedures

5.1.7 Packaging, Handling, Storage & Transportation (PHS&T)

5.1.8 Standard Hardware Procedures

5.1.9 Theater-to-SPAWAR Shipping

5.1.10 Backup Network Access for UV Server

Unclassified // For Official Use Only x

LIST OF FIGURES

Figure 1 Stingray Baseband Overview Figure 2 Stingray Signal and Data Flow Figure 3 Stingray Transit Cases Figure 4 Baseband Support Case Contents Figure 5 DTECH M3-SE-SVR Controls and Indicators Figure 6 DTECH M3-SE3 Controls and Indicators Figure 7 DTECH M3-SE-PA2-P Controls and Indicators Figure 8 Getac S410 Laptop Controls and Indicators Figure 9 Laptop Power Supply Connectors Figure 10 Getac S410 Hard Drive Components Figure 11 Extensor Controls and Indicators Figure 12 Extensor AC Cable and International Adapters Figure 13 ACE Encoder Controls and Indicators Figure 14 ACE Encoder Ver. 1 Controls and Indicators Figure 15 ACE Encoder Power Supply Connectors Figure 16 Kraken CR Controls and Indicators Figure 17 Kraken CR AC Power Cable Connectors Figure 18 SDI (Female to Female) Adapter Connectors Figure 19 Cisco Console Cable Connectors Figure 20 BNC T Adapter Connectors Figure 21 Baseband Transit Case Contents Figure 22 KG-250X Controls and Indicators Figure 23 KG-250X Power Cable Connectors Figure 24 USB Cable Connectors Figure 25 Baseband AC Power Cable Connectors Figure 26 LAN Cable (100ft) Connections Figure 27 LAN Cable (100ft) Connections Figure 28 Baseband AC Power Cable Connection Figure 29 Cisco Console Cable Connections Figure 30 HyperTerminal Icon Figure 31 HyperTerminal Window Figure 32 New Connection Selection Figure 33 Connection Description Window Figure 34 Connect To Window Figure 35 COM# Properties Window Figure 36 HyperTerminal Window Figure 37 Properties Window Figure 38 Properties Settings Page Figure 39 ASCII Setup Window Figure 40 Router Configuration Screen Figure 41 Cisco Console Cable Connections Figure 42 Transport M3-SE3 Switch Configuration Window Figure 43 Green 3ft Ethernet Cable Connections Figure 44 Transport M3-SE3 to KG CT Connection Figure 45 Red 1ft Ethernet Cable Connections Figure 46 KG-250X Power Cable Connections Figure 47 Red 3ft Ethernet Cable Connections Figure 48 Inserting the UV Hard Drive Figure 49 Cisco Console Cable Connections Figure 50 Cisco Console Cable Connections Figure 51 Red M3-SE3 Switch Configuration Menu Figure 52 Network Window Figure 53 Network and Sharing Center Window Figure 54 Network Connections Window Figure 55 Local Area Connection Window Figure 56 Internet Protocol Version 4 (TCP/IPv4) Properties Window

Unclassified // For Official Use Only xi

Figure 57 CIK Connection Figure 58 USB Cable Connections Figure 59 KG-250X Console Application.exe Icon Figure 60 KG-250X USB Console Application Configuration Window Figure 61 KG-250X USB Console Application Window - Login Commands Figure 62 KG-250X Console Application - Main Menu Figure 63 KG-250X USB Console Application Window - Basic Config Menu Figure 64 KG-250X Console Application Window - Set Red IP Address Figure 65 KG-250X Console Application Window - Set Black IP Address Figure 66 KG-250X Console Application Configuration Window - Set Red Default Gateway Figure 67 KG-250X Console Application Configuration Window - Reset Command Figure 68 Warning Windows Figure 69 ViaSat Login Page Figure 70 ViaSat KG-250X INE Web Administration Page Figure 71 IP Interfaces Page Figure 72 System Alert: Reset Required Message Figure 73 ICMP/Neighbor Discovery Page Figure 74 ICMP Settings Message Figure 75 Initial Remote Routes Page Figure 76 Security Associations Page Figure 77 Tunnel SAs Table Figure 78 Add Remote Route Figure 79 CIKs Page Figure 80 Choose File to Upload Window Figure 81 Image Key File Field Populated Figure 82 Status: Provisioning CIK Message Figure 83 Operational CIKs Section Figure 84 Real Time Clock Page Figure 85 Unassigned PPK List Figure 86 Confirm PPK Assignment Message Figure 87 Assigned PPK Sequences Table Figure 88 Red 3ft Ethernet Cable Connections Figure 89 Network Window Figure 90 Network and Sharing Center Window Figure 91 Network Connections Window Figure 92 Local Area Connection Window Figure 93 Internet Protocol Version 4 (TCP/IPv4) Properties Window Figure 94 UV Server Main Window Figure 95 DOD Warning Window Figure 96 UV Server Main Window Figure 97 Admin Webpage Figure 98 Appliance Webpage Figure 99 Edit ENIC Settings Window Figure 100 Edit ENIC Settings Window Figure 101 Cable Right Server Port Figure 102 Network Window Figure 103 Network and Sharing Center Window Figure 104 Network Connections Window Figure 105 Local Area Connection Window Figure 106 Internet Protocol Version 4 (TCP/IPv4) Properties Window Figure 107 Static IP Baseband Cabling Figure 108 DOD Warning Window Figure 109 Admin Webpage Figure 110 ADD a Feed Figure 111 ADD a Feed Webpage Figure 112 Feeds Webpage Figure 113 Feed Stream Video Window Figure 114 AC Power Cable Connection Figure 115 SDI Cable Connections

Unclassified // For Official Use Only xii

Figure 116 Generator Icon Figure 117 Pattern Icon Figure 118 Pattern Menu Figure 119 Generic Pattern Menu Figure 120 Standard Options Menu Figure 121 Inputs/Outputs Selection Menu Figure 122 Extensor to Video Device Cable Connections Figure 123 Extensor Main Menu Figure 124 SDI Analyzer Page Figure 125 Preview Page Figure 126 ACE Version 2 Power Supply Connections Figure 127 ACE Version 1 Power Supply Connections Figure 128 ACE Ethernet Cable Connections Figure 129 SDI Cable Connections Figure 130 SDI Cable Connections Figure 131 There is a Problem Figure 132 Login Page Figure 133 MGW ACE Main Menu Figure 134 System Main Menu Figure 135 Warning Pop-Up Window Figure 136 Red 3ft Ethernet Cable Connections Figure 137 ACE Logn Page Figure 138 ACE Main Menu Figure 139 Channels menu Figure 140 ACE Main Menu Figure 141 AC Power Cable Connection Figure 142 Red 3ft Ethernet Cable Connections Figure 143 Kraken CR Login Page Figure 144 Streams Main Menu Figure 145 Kraken CR Administration Page Figure 146 Network Administration Page Figure 147 Inputs Menu Figure 148 Inputs Page Figure 149 Transcoders Tab Figure 150 Transcoders Input Page Figure 151 Outputs Name Page Figure 152 Outputs Page Figure 153 Metadata Add Page Figure 154 Metadata Page Figure 155 Streams Page Figure 156 Add Streams Page Figure 157 Streams Status is Active Figure 158 Warning Windows Figure 159 ViaSat Login Page Figure 160 Status Page Figure 161 Firefox Dialog Box Figure 162 Resetting INE Message Figure 163 Warning Windows Figure 164 ViaSat LogOn Page Figure 165 Status Page Figure 166 Firefox Dialog Box Figure 167 Resetting INE Message Figure 168 UV Server Main Window Figure 169 Admin Webpage Figure 170 Appliance Webpage Figure 171 Edit NIC Settings Window Figure 172 Network Settings Window Figure 173 DA Form 2028-2 Page One Figure 174 DA Form 2028-2 Page Two

Unclassified // For Official Use Only xiii

LIST OF TABLES

Table 1 Lift Precaution Guidelines Table 2 RF Radiation Hazard Boundary Calculations Table 3 GNCC CND Watch Contact Information Table 4 Reportable Incidents Table 5 Security Assistance Contact List Table 6 Stingray Transit Case Weights and Measurements Table 7 Media Transit Case Contents Table 8 DTECH M3-SE-SVR Controls and Indicators Table 9 DTECH M3-SE3 Controls and Indicators Table 10 DTECH M3-SE-PA2-P Controls and Indicators Table 11 Getac S410 Controls and Indicators Table 12 Laptop Power Supply Connectors Table 13 Getac S410 Hard Drive Components Table 14 Extensor Controls and Indicators Table 15 Extensor AC Power Cable and international Adapters Table 16 ACE Encoder Controls and Indicators Table 17 ACE Encoder Ver. 1 Controls and Indicators Table 18 ACE Encoder Power Supply Connectors Table 19 Kraken CR Controls and Indicators Table 20 Kraken CR AC Power Cable Connectors Table 21 SDI (Female to Female Adapter Connectors Table 22 Cisco Console Cable Connectors Table 23 BNC T Adapter Connectors Table 24 Baseband Transit Case Contents Table 25 KG-250X Controls and Indicators Table 26 KG-250X Power Cable Connectors Table 27 USB Cable Connectors Table 28 Baseband AC Power Cable Connectors Table 29 Subnet Masks Table 30 H.264 Common Video Encoding Settings Table 31 H.265 Common Video Encoding Settings Table 32 Baseband Module PMCS Tasks Table 33 Encryption Device PMCS Tasks Table 34 Abbreviations/Acronyms and Definitions Table 35 Units of Measure

Unclassified // For Official Use Only SECTION 1 SAFETY

Unclassified // For Official Use Only 1

SECTION 1: Safety SECTION 1: Safety instructs the user and operating personnel on safety regulations which must be observed at all times. The following information identifies general safety requirements applicable to anyone performing the procedures included in this O&M manual. Equipment of this nature has inherent hazards. Only trained operators and service personnel should work on or operate this equipment.

Unclassified // For Official Use Only 2

1.1 Safety Information Throughout This Manual

It is important to understand and follow all safety information throughout this manual:

• The safety information throughout this manual instructs the user and operating personnel on safety regulations, which must be observed at all times. The following information identifies general safety requirements applicable to anyone performing the procedures included in the system Operations and Maintenance Manual. Equipment of this nature has inherent hazards. Only trained Operators and Service Personnel should work on or operate this equipment.

• DO NOT service or adjust equipment alone. Under no circumstances should any person attempt to service or adjust equipment except in the presence of someone who is capable of rendering aid.

Warnings and cautions are used throughout this manual to alert the user to special conditions regarding safety or correct performance of a particular step or steps. They are placed immediately prior to the procedural step that they apply to or immediately prior to the procedure itself if they apply to the entire procedure.

Warnings emphasize information or procedures that relate to personnel:

Warning Statements

This table denotes a WARNING in a procedural step. A WARNING is used whenever personnel could be harmed as a result of the procedure not being correctly followed.

Cautions emphasize information or procedures that relate to equipment:

Caution Statements

This table denotes a CAUTION in a procedural step. A CAUTION is used whenever equipment could be damaged as a result of the procedure not being correctly followed.

Warning and caution statements are constructed in three parts: the hazard, the correct action to be performed, and the result of failing to comply with the action.

Systems of this nature have inherent hazards. Operators should be familiar with the following potential hazards and should exercise caution and vigilance when operating the systems:

1.1.1 Warning and Caution Statements

1.1.2 System Hazard Overview

Unclassified // For Official Use Only 3

Electrical Shock Hazard

When working on system equipment, operators should follow necessary precautions to reduce the chances of electrical shock. Refer to 1.2 Electrical Precautions for more information on specific guidelines.

Electrostatic Discharge Sensitive (ESDS) Material Hazard

Specific cautions should be used when handling and operating ESDS materials. Refer to 1.2.2 Handling ESDS Equipment for more information on specific guidelines.

Heavy Lifting Warning

Always use common sense when lifting and carrying equipment and equipment cases. Never lift heavy equipment alone. Transit cases and components may be heavy or contain heavy objects. Care should be taken when lifting heavy objects. Many objects require more than one person to lift them. Refer to

1.6 Lift Precautions for more information on specific guidelines.

Fire Hazard

DO NOT operate the generators if a fire extinguisher is not present. During refueling of the generators, ensure engine is OFF and another team member stands by with a fire extinguisher. Fuel vapors can be ignited by an arc induced by a strong Radio Frequency (RF) field. RF energy can induce currents into any metal object. Personnel must be constantly alert to the fact that electronic transmitting equipment can cause hazardous voltages to be induced in various equipment and metal objects. For maximum safety, all transmitting devices should be off during refueling operations. DO NOT overfill fuel tanks.

Wipe up spilled fuel immediately with rags and spread dry sweep or sand on a spill area. Leaking oil and electrolyte are fire hazards that can cause injury or death. Upon detection of a leak, operators or maintenance personnel should stand by with a portable fire extinguisher until the problem is corrected.

Battery Warning

The system uses components that require the use of batteries. Care should be taken to ensure batteries are not leaking any type of fluid prior to working on these components.

Cuts and Punctures Warning

Frayed wire cables may cut or puncture unprotected skin. Wear leather gloves when handling winch-wire rope. DO NOT handle wire rope with bare hands.

Trip Hazard

Caution should be taken when setting up and operating systems using cords, cables, and outrigger legs that can present tripping hazards.

Explosive Material Warning

Explosive/flammable materials are a fire hazard. Store explosive/flammable materials in authorized areas only, and do NOT store aerosol cans, cleaning solvents, etc., near system equipment.

Unclassified // For Official Use Only 4

Hazardous Vapors Warning

Cleaning agents, aerosols, gases under pressure or various liquids may produce vapors that can cause sickness, injury or death. DO NOT expose yourself to prolonged contact with hazardous vapors.

Hearing Protection Warning

Wear hearing protection when working in close proximity to equipment producing high levels of noise.

Hearing protection includes earplugs, earmuffs, or headsets. Failure to wear hearing protection may result in temporary or permanent hearing loss.

Eye Protection Warning

Wear eye protection when exposed to areas that contain flying debris or other potentially hazardous conditions that may result in eye injury.

1.2 Electrical Precautions

High voltage is used in the operation of this equipment. Never work on electronic equipment unless there is another person nearby who is familiar with the operation and hazards of the equipment and who is competent in administering first aid. When technicians are aided by operators, they must be warned about the dangerous area.

Whenever possible, the power supply to the equipment must be turned off before beginning work on the equipment.

Take particular care to ground every capacitor likely to hold a dangerous potential. When working inside the equipment, after the power has been turned off, always ground every part before touching it.

Repair of electronic equipment is normally accomplished with the circuit de-energized. If at all possible, avoid making repairs to energized equipment. Repairs shall not be made on energized electronic equipment unless using approved procedures or permission to perform such a repair has been granted by the commanding officer. In such an emergency, the repair of energized circuits shall be accomplished by trained personnel and supervised by an experienced technician or officer. Every care shall be taken to observe the safety precautions.

Operating personnel must observe all safety regulations at all times. DO NOT replace components or make adjustments inside the equipment when high voltage is being supplied to the system. Under certain conditions, dangerous potentials may still exist even when the main power supply is turned off. Capacitors retain extremely high charges even when power is not being supplied to them. To avoid casualties, always disable power, and discharge and ground any circuit before touching it.

Be careful not to contact high-voltage connections or 115 VAC input connectors when installing or operating this equipment. Whenever the nature of the operation permits, keep one hand away from the equipment to reduce the hazard of current flowing through the body. Do not be misled by the term “low voltage.” Potentials as low as 50V may cause death under adverse conditions.

Certain assemblies and components will be damaged by seemingly undetectable electrostatic discharge. Care must be exercised when handling, repairing, or working on equipment associated with these items. Use ESDS precautionary procedures in accordance with Military Standard 1686 (MIL-STD-1686), Military Standard:

Electrostatic Discharge Control Program for Protection of Electrical and Electronic Parts, Assemblies, and Equipment.

Electrostatic charges are generated by the relative motion between materials or by flow of liquids, vapors, or gases.

Common ESDS sources include personnel, items made of plain plastics, and processing equipment. ESDS parts

1.2.1 Guidelines for Operating Electrical Equipment

1.2.2 Handling ESDS Equipment

Unclassified // For Official Use Only 5 can be damaged by direct contact with a charged source; they can also be damaged by charges induced by an electrostatic field. ESDS parts include microcircuits, discrete semiconductors, thick and thin film resistors, integrated circuit chips, and hybrid devices.

When handling ESDS items, a skin-contact wrist, leg or ankle ground strap should be worn. In addition, a long-sleeve protective shirt and close fitting, short-sleeve shirts or blouses should be worn. The wrist and foot straps dissipate static charges and equalize static levels with work surface static levels.

When handling ESDS parts, take the following precautions:

• Before touching an ESDS item, attach a personnel wrist, leg or ankle ground strap and connect the other end to an equipment or chassis ground.

• After removing an ESDS item, immediately place the item in an ESD protective envelope or package.

• Before opening an ESD protective package, ground the package to the equipment chassis to dissipate any accumulated charge on the package.

• Open the package at the connector end of the enclosed item, if possible.

• Remove the ESDS item from the ESD protective package and install the item into the equipment without touching parts, electrical terminals, and circuitry.

• Perform all other required actions before removing the personnel ground strap, including tightening of fasteners and replacement of covers. If the ground strap is not worn, touch the grounded equipment chassis before each action.

When an adult is the victim of electrical shock, the following steps should be performed:

STEP 1 DO NOT try to pull or grab the individual.

STEP 2 Send for help as soon as possible.

STEP 3 If possible, turn off the electrical power.

STEP 4 If you cannot turn off the electrical power, pull, push or lift the person to safety using a wooden pole, rope or some nonconductive material.

STEP 5 After the injured person is free of contact with the source of electrical shock, move the person a short distance away and immediately start necessary first aid procedures.

Personnel working with or near high voltages should be familiar with modern methods of resuscitation. When an adult stops breathing, check the victim for responsiveness. If there is no response, call 911 or local medical authorities and return to the victim. In most locations, the emergency dispatcher can assist you with Cardiopulmonary Resuscitation (CPR) instructions.

Performance of these techniques by uncertified personnel could result in further injury or death to the victim.

1.2.3 Helping Victims of Electrical Shock

1.2.4 Resuscitation by Certified Personnel

Unclassified // For Official Use Only 6

Follow these electronic guidelines during operation and maintenance of the equipment to ensure personnel safety and health and to protect equipment from damage:

• Provide warning signs and suitable guards to prevent personnel from coming into accidental contact with dangerous voltages.

• Only reach into or enter energized electronics equipment enclosures for the purpose of servicing or adjusting when prescribed by applicable technical manuals or other approved documentation. This can only be accomplished with the immediate presence of another person capable of securing power and rendering adequate aid in the event of an emergency.

• Removal of a unit or part from the normal location within an assembly and the energizing of the unit or part while it is outside the normal enclosures, removes the protection features such as interlocks, grounds, and enclosures.

Since these safety features no longer exist, take special precautions and safety measures.

• Ground the chassis and frame of all units removed for servicing. Ground all circuits normally grounded in operation whenever power is applied to the unit.

• Adhere to all Lock Out/Tag Out requirements. DO NOT energize any equipment that is tagged-out. Properly clear the Tag Out first.

• Use insulated rubber mats and rubber gloves when performing preventive or corrective maintenance on energized electronic equipment.

• Only perform preventive or corrective maintenance on energized electronic equipment when duty-authorized personnel are available.

• Before touching a conductor or electronic component, verify that it has been de-energized by using a voltage tester or an approved shorting probe.

• Never defeat an interlock or built-in safety device. Modify such safeguard circuits only as authorized by the cognizant Systems Command.

• Perform periodic preventive maintenance tests and inspections to ensure proper operation of these devices/circuits.

• Personnel working with or near dangerous voltages must be trained in modern methods of resuscitation.

• Only operate the components from the type of power source indicated on the unit or as specified in the operating instructions.

• Never touch non-insulated wires or terminals unless they have been disconnected.

• Under no circumstances will a person operate or maintain equipment without the immediate presence or assistance of another person capable of rendering aid.

• Be careful not to contact high-voltage connections or 115 Volts Alternating Current (VAC) input connections when installing or operating this equipment.

• Whenever the nature of the operation permits, keep one hand away from the equipment to reduce the hazard of current flowing through the body.

1.2.5 Guidelines for Servicing Electrical Equipment

Unclassified // For Official Use Only 7

1.3 Grounding Equipment

Contact local authorities to ensure no underground obstruction, such as buried electrical cables and/or water pipes, are in the area prior to digging or driving electrical grounding rods into the ground.

Eye protection should be worn when driving grounding rods. Failure to observe this warning could result in eye injury from metal splinters that may break away from the striking plate.

To prevent injury to personnel and damage to equipment, the equipment must be grounded to a suitable ground in a fixed structure. The impedance of the ground must not exceed 10 Mega-Ohms. Normal grounding-braid wire must be connected between each module and then to a ground rod or suitable facility ground.

The system contains static-sensitive electronics. Grounding straps and/or grounding rods provided with the system are the preferred method for grounding. If the system does not come with grounding equipment, use the local grounding system. This grounding method should be compliant to MIL-STD 188-124B, Grounding, Bonding, and Shielding. For safety, periodically check the resistance value of the anti-static strap, which should be between 1 to 10 Mega-Ohms. Also, ensure the work area is properly grounded. To minimize component damage by electrostatic discharge, handle modules only after properly discharging static electricity.

1.4 Power Precautions

When working with or near power, take the following precautions:

• The system will use available military and/or commercial power. In general, at forward-deployed locations, local power is most desirable, if available and stable. Otherwise, generator power should be used.

• DO NOT service or adjust equipment alone. Under no circumstances should any person attempt to service or adjust equipment except in the presence of someone who is capable of rendering aid.

1.5 Site Precautions

When selecting a site, take the following precautions:

• The baseband must be set up within a building or shelter that provides adequate space and environmental protection.

• To avoid the danger of system failure, the baseband should not be exposed to extreme environmental conditions such as blowing dirt or sand, rain, snow, etc.

• Refer to the Site Selection section of this O&M manual for additional site precautions.

Unclassified // For Official Use Only 8

1.6 Lift Precautions

In accordance with MIL-STD-1472F, DOD Design Criteria Standard: Human Engineering, equipment, and equipment cases must be lifted following the guidelines outlined below:

Table 1 Lift Precaution Guidelines

LIFT ONLY LIFT AND CARRY

LIFT-TO HEIGHT

ABOVE

MAXIMUM

WEIGHT

LIFT-TO

HEIGHT ABOVE

MAXIMUM

WEIGHT

MAX

DISTANCE

Lift Teams – Male and Female * One-Person Lift 3 ft.

5 ft.

44 lbs.

37 lbs.

3 ft.

42 lbs.

33 ft.

Two-Person Lift 3 ft.

88 lbs.

74 lbs.

84 lbs.

Three-Person Lift 3 ft.

121 lbs.

101 lbs.

115 lbs.

Lift Teams–Male Only

One-Man Lift 3 ft.

87 lbs.

56 lbs.

82 lbs.

Two-Man Lift 3 ft.

174 lbs.

112 lbs.

164 lbs.

Three-Man Lift 3 ft.

239 lbs.

154 lbs.

225 lbs.

* To calculate the Maximum Weight to be lifted for Lift Teams of more than three people:

Example: Four-Person Lift to 3 feet: (44 x 0.75) + 121 = 154 lbs.

1. Multiply the Maximum Weight Lifted for the One-Person (One-Man) Lift for the appropriate Lift-To Height Above Floor by 0.75. (44 x 0.75 = 33)

2. Multiply the result by the number of additional people. (33 x 1 = 33)

3. Add the result to the Maximum Weight Lifted for the Three-Person (or Three-Man) Lift for the appropriate Lift-To Height Above Floor. (33 + 121 = 154)

1.7 Radio Frequency (RF) Hazards

Dangerous RF power levels exist on and around antennas during operation. Therefore, a safety zone should be established around any Satellite Communications (SATCOM) device. RF electromagnetic radiation can cause serious burns and injury.

The RF Warning Sticker located on the antenna contains the table for calculating the Radio Frequency Radiation (RFR) hazard zone boundary by using antenna elevation angles (+degrees) and RFR hazard zone boundary distances. See Table 2.

Unclassified // For Official Use Only 9

Table 2 RF Radiation Hazard Boundary Calculations

Antenna Elevation Angle Hazard Zone Size

≤12º 7.0 m

13º 6.5 m

14º- 15º 5.5 m

16º- 17º 5.0 m

18º- 19º 4.5 m

20º- 21º 4.0 m

22º- 25º 3.5 m

26º- 29º 3.0 m

30º- 34º 2.5 m

>34º 2.0 m

DO NOT stand in the direct path of the antenna when power is on.

DO NOT disconnect, repair or replace the silver Transmit (TX) cable while power is on.

Because of Radio Frequency (RF) Hazards, a safety zone should be established around the antenna. This safety zone should extend beyond the front of the Feed Horn and extend in an arc to 90 degrees of a center line on either side of the Feed Horn. The safety zone should be marked off to prevent others from entering the area. The area exposed to the main antenna beam must be free of elevated structures up to a range of 10m from the antenna.

The hazardous distance that radiation emits from the antenna is determined by the elevation level of the antenna.

The lower the elevation, the further the radiation hazard area extends.

Ensure no power is running to the antenna before working on the antenna or any of the antenna connectors. Do NOT work on antenna cables or waveguides while power is on. Lethal high voltages exist within antenna transmission lines and on exposed transmitter antenna connections.

Transmitter cables should be disconnected, and transmitters should be tagged to prevent operation of the antenna system when performing setup, tear down, or maintenance.

Unclassified // For Official Use Only SECTION 2 SECURITY

Unclassified // For Official Use Only 10

SEC TION 2: Security SECTION 2: Security provides operators with a basic awareness of the minimum security requirements, functions, mechanisms, and practices required to install, operate, and maintain the equipment described in this O&M manual.

Unclassified // For Official Use Only 11

2.1 Data Security Requirements

The following security requirements must be adhered to during the deployment, employment and redeployment of the system, to include installation and operation in a particular facility, surrounding, or environment:

• Department of Defense (DOD) Instruction 8500.01 - Cybersecurity

• DOD Instruction 8510.0 - Risk Management Framework (RMF) For DOD Information Technology (IT)

• DOD Directive 8140.01 – Cyberspace Workforce Management

• DOD Intelligence Information System (DODIIS) Joint Security Implementation Guidance (DJSIG)

• Intelligence Community Directive (ICD) 503 - Intelligence Community Information Technology Systems Security

Risk Management

• (SOCOM Units) United States Special Operations Command (USSOCOM) Manual 380-1 - Information Security

Program

• (SOCOM Units) USSOCOM Manual 380-3 - Cyber Security

• (SOCOM Units) USSOCOM Directive 380-10 - Information Assurance Awareness, Training and Certification

• (SOCOM Units) USSOCOM Cyber Security Field Guide Publication

• Committee on National Security Systems Instruction (CNSSI) No. 1253 - Security Categorization and Control

Selection for National Security Systems

• National Institute of Standards and Technology (NIST) Special Publication 800-53r4 - Security and Privacy

Controls for Federal Information Systems and Organizations

2.2 Security Information

The objective of this section is to provide Cybersecurity guidance to the Stingray administrators, users, and maintainers for the safe and secure installation and operation of the terminal. The guidelines in this section are to ensure the protection of all information, equipment, and material associated with and accessed by the fielding unit.

The terms Black, Red, and Grey identify Unclassified (includes Unclassified/FOUO), classified Secret, and classified Top Secret/SCI classifications, respectively, throughout this manual.

This symbol is used throughout this manual to denote a SECURITY ALERT in a procedural step.

Security Alerts precede the text of any procedure involving a clear risk to security.

2.3 Security Policy

Each Organization that utilizes the STINGRAY or similar systems will have security policies governing their use.

These policies and responsibilities are necessary to ensure adequate protection through a defense-in-depth structure that allows users actively and passively preserve the confidentiality, integrity, and availability of SIE information and information systems. This includes providing for restoration of information systems (IS) by incorporating protection, detection, and reaction capabilities.

2.4 Cybersecurity Defined

Prevention of damage to as well as protection and restoration of computers, electronic communications systems, electronic communications services, wire communications, and electronic communication, including information

Unclassified // For Official Use Only 12 contained therein, to ensure its Confidentiality, Integrity, and Availability in the Risk Management Framework (RMF) as well as, non-repudiation and authentication.

• Confidentiality: The system allows only authorized persons to gain access to the system and the information received, processed, stored, or published by the system.

• Integrity: The system ensures that information received, processed, stored, or published has not been altered (modified) or destroyed either by defect or malicious tampering.

• Availability: The system ensures that information received, processed, stored, or published is available to authorized users when needed.

• Non-Repudiation: The system ensures that those who gain access to the information received, processed, stored, or published by the system cannot deny having interacted with the system or its information.

• Authentication: The system verifies the identity of a user, process, or device that is requesting access to the information received, processed, stored, or published by the system.

NOTE DOD networks are under constant attack from cybersecurity threats launched from the Internet or from malicious software embedded in e-mail attachments, removable media, or even in the hardware DOD procedures. Every connected device is susceptible to cyber vulnerabilities making cyber threats real and increasingly dangerous every day. Threats to the DOD networks can impact the security of the United States.

2.5 Common Threat Sources

• Directed Denial Of Service Attack: An attempt to make a machine or network resource unavailable for its intended use.

• Botnets: Networks made up of remote-controlled computers, or “bots.” These computers have been infected with malware that allows them to be remotely controlled. Some botnets consist of hundreds of thousands — or even millions —of computers.

• Malicious Software (Malware): Any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

- Virus: When executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data files, or the boot sector of the hard drive; when this replication succeeds, the affected areas are then said to be “infected.”

- Worm: Standalone malware computer program that replicates itself in order to spread to other computers.

- Trojan Horse: Often acts as a back door, contacting a controller which can then have unauthorized access to the affected computer.

- Ransomware: A type of malicious software designed to block access to a computer system until a sum of money is paid.

Unclassified // For Official Use Only 13

• Human

- Insider Threat: Personnel with authorized access who either intentionally or inadvertently disclose classified information, introduce malicious code, logic bombs, or vandalize information systems.

- Phishing: A technique used to gain personal information for purposes of identity theft, using fraudulent e-mail messages that appear to be legitimate. These authentic-looking messages are designed to deceive recipients into divulging personal data such as account numbers, passwords, credit card numbers, and Social Security numbers.

- Pharming: The fraudulent practice of directing Internet users to an unauthorized website, which mimics the appearance of a legitimate one, in order to obtain personal information such as passwords, account numbers, etc.

- User/Operator Error: Unintentional negligent discharge of classified information, cross domain violations, and execution of malicious code.

- Poor Security Practices: Failure to mark and protect Unclassified For Official Use Only, classified media, sharing of passwords, and poor Operations Security (OPSEC) practices.

• Natural Disasters (i.e. hurricanes, tornados, thunderstorms)

2.6 Common Tactical Network Violations

It is important to understand what is authorized on a DOD network prior to deployment. The following list includes examples of the most common violations identified in a deployed environment. (See current version of SOCOM Cyber Security Field guide)

• Category 5 Non-Compliance Activity: Unauthorized Software (i.e. Google chat, Skype, Peer-to-Peer File sharing) – Do not install unapproved software.

• Cross-Domain Violations: Do not use the same laptop to configure each network. Be aware of information classification typed when utilizing information from higher classifications. Ensure files/media transferred between systems of different classifications is accomplished by approved Data Transfer Agents, who will ensure only approved media is transferred.

• Category 7 Malicious Logic: Malicious software installed without consent by adversaries.

• Unauthorized Devices: Do not plug personal hard drives or Personal Electronic Devices (PEDs) (i.e.

smartphones, MP3 players, tablets, digital cameras etc.…) into any Stingray equipment.

• Transferring system configurations: Ensure router and other equipment configuration files are sent on the appropriately classified network. Unclassified//For Official Use Only and black router configurations must be sent with PKI email encryption – even between .mil accounts. Encrypt all U/FOUO files. If you cannot send or receive configuration files due to unavailable PKI constraints, use the AMRDEC website to transfer files – https://safe.amrdec.army.mil/SAFE. Never use or send U/FOUO files to commercial email accounts, such as Yahoo, Gmail, Hotmail, etc.

2.7 Cyber Threat Risk Reduction

Risk Management Framework for Department of Defense Information Technology Systems (RMF) (DODIT) identifies 18 Security Control Families in National Institute of Standards and Technology (NIST) Special Publication 800-53 that represent a broad-based, balanced security program which includes management, operational, and technical controls to help reduce the risk of cyber threats. The CNSSI-1253 provides further guidance for applying the RMF controls for National Security Systems. The CNSS-1253 attachments or overlays currently provide further guidance

Unclassified // For Official Use Only 14 for protecting Classified, Intelligence Systems, Cross Domain Solutions (CDS), Space Systems, and Privacy Act Information. Thirteen of the control families have been briefly addressed to assist with cyber threat risk reduction.

NOTE [Control Families and specific controls listed in brackets are referenced in SP800-53r4.]

2.7.1.1 Account Management

SYSTEM NAME Account Management Standard Operating Procedures (SOP)

Account types:

- The only local accounts on SYSTEM NAME systems will be administrator accounts, i.e., no regular user accounts will be created to access the system.

Requesting an account:

SYSTEM NAME users will complete and sign the Privileged User Account Request and User Agreement form.

Validating Access:

- The fielding unit ISSO/cybersecurity representative responsible for all individual access authorizations will verify that a valid need-to-know has been endorsed by a government supervisor on the account request/user agreement form and that the requesting user is properly cleared to access the system for the intended use.

Training requirements:

- Prior to being granted to the system, the fielding unit ISSO/cybersecurity representative must verify that the user has completed SYSTEM NAME-specific training as well as any additional training required to complete their duties.

Creating accounts:

-…