NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Release of NIST SP 800-147B, BIOS Protection Guidelines for Servers

Published

Author(s)

Andrew R. Regenscheid, Larry Feldman, Gregory A. Witte

Abstract

Modern computers rely on fundamental system firmware, commonly known as the Basic Input/Output System (BIOS), to enable system components to communicate and work together. The BIOS is typically developed by both original equipment manufacturers (OEMs) and independent BIOS vendors. Manufacturers frequently update system firmware to fix bugs, patch vulnerabilities, and support new hardware, but an unauthorized update constitutes a significant threat because of the BIOS’s unique and privileged position within the computing architecture
Citation
ITL Bulletin -
NIST Pub Series
ITL Bulletin
Pub Type
NIST Pubs

Download Paper

Local Download

Keywords

Basic Input/Output System (BIOS), information security, patch management, server security, firmware, root of trust, root of trust for update
Cybersecurity and privacy

Citation

Regenscheid, A. , Feldman, L. and Witte, G. (2014), Release of NIST SP 800-147B, BIOS Protection Guidelines for Servers, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=917478 (Accessed October 9, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created October 29, 2014, Updated February 19, 2017
Was this page helpful?