The calibration data is stored in a couple of SOIC-8 EEPROM chips on the acquisition board.
Would have to check schematics, but probably around the large chip with the circular heatsink. This way the calibration is tied to and follows the acquisition board where is is needed.
Check around there for EEPROM's and they are probably what ypu are looking for.
The UVEPROM on the processor board is the bootloader.
Unlocked options, saved waveforms, and (I still haven't fully figured this out) firmware is stored in the NVRAM's on boards that don't have flash chips, I think....
I believe earlier models (i.e. not C and D models etc, maybe more) don't use flash chips, hence the use of a firmface board on some scopes and the NVRAMS for firmware.
Again, I think this is vaguely correct, but I haven't looked deeply into it. There are a lot of processor board variants across the TDS500/600/700 series scopes....
To dump the EEPROM cal data, there is a floppy tool to do this somewhere on the forum.