What is BIOS?

Published Aug 13, 2026

← All glossary terms Jump to B

BIOS (Basic Input/Output System) is the firmware that initializes a computer’s hardware and starts the boot process before an operating system loads. It tests core components, locates a bootable device, and hands off to the boot loader – running independently of any software installed on the machine.

Key takeaways

  • Firmware that runs before any operating system finishes loading.
  • Controls boot order, hardware checks, and setup-menu access.
  • Independent of the OS and reachable via physical console access.
  • Versa CSG appliances run UEFI firmware, still called “BIOS.”
  • Setting a BIOS password is a core hardening step for appliances.

On this page: Why it mattersHow it worksTypesBIOS & VersaFAQ

Why is BIOS important?

BIOS matters because it is the first code that runs on a device, before any operating system or security agent is active – foundational, and uniquely exposed. Every trust decision the OS later makes, from secure boot to driver signing, rests on the integrity of the firmware that ran before it.

On physical appliances such as Versa’s Cloud Services Gateways, this is concrete: BIOS operates independently of VOS, Director credentials, and OS-level authentication. Anyone with physical or serial console access can reach BIOS setup no matter how locked-down the software above it is. Without a BIOS password, an attacker can change the boot device or implant firmware-level malware that survives an OS reinstall – a baseline hardening step, not an optional extra.

What is BIOS?

BIOS is low-level firmware stored on a motherboard chip, separate from any disk-based operating system. When a device powers on, BIOS runs the Power-On Self-Test (POST) to confirm that core hardware – CPU, memory, storage – is present, then locates a bootable device and hands control to its boot loader.

Because it runs before the OS, BIOS owns settings no OS-level tool can override: boot device order, whether USB media can boot at all, and, on hardened systems, a password gate on setup itself. Most hardware shipped in the last decade actually runs UEFI (Unified Extensible Firmware Interface), a capable successor with graphical setup and Secure Boot; “BIOS” persists as the everyday name, which is why Versa’s own CSG documentation still calls its UEFI setup menu “BIOS.”

Types of BIOS

Two generations exist in practice. Legacy BIOS is the original 16-bit firmware interface: a text-mode setup screen, an MBR boot process, and a roughly 2.2 TB limit on boot-disk size. UEFI is the modern successor: graphical setup, GPT partitioning for larger disks, faster boot, and Secure Boot, which verifies the boot loader cryptographically before running it. Most current hardware runs UEFI but exposes a “Legacy” or “CSM” mode emulating the old boot path.

Versa CSG appliances run AMI Aptio UEFI firmware, but the setup screen and docs still call it “BIOS” – a naming convention carried over from the legacy era. During a bare-metal Versa headend install, the setup utility exposes a boot-mode choice between BIOS (legacy) and UEFI, selecting legacy mode when booting from a USB image formatted for it. Install on bare metal covers that choice as part of a full headend build.

BIOS & Versa

On Versa CSG appliances, BIOS is a security boundary Versa treats as separate from, and prior to, every other credential in the stack: not VOS authentication, not Director access, not any OS login – and reachable by anyone with physical or serial console access. Versa’s hardening guidance treats a BIOS password as foundational at initial deployment, before the appliance carries production traffic.

CSG platforms support an administrator password, a user password, or both, and each combination changes boot behavior: an administrator-only password gates only entry into BIOS setup, while a user password is enforced at every power-on. Set the BIOS password on CSG platforms documents the exact setup steps over a serial console. There is no self-service recovery for a forgotten password – a lost one requires contacting Versa Networks support.

Frequently asked questions

What does BIOS stand for?

BIOS stands for Basic Input/Output System – firmware that initializes a device’s hardware and starts the boot process before any operating system loads. The name predates UEFI, which is why the newer firmware standard is still widely called “BIOS” in everyday use.

What is the difference between BIOS and UEFI?

BIOS is the original text-mode firmware interface, with an MBR boot process and a roughly 2.2 TB disk limit. UEFI is its modern successor: graphical setup, GPT partitioning for larger disks, faster boot, and Secure Boot. Most current hardware runs UEFI but is still commonly called “BIOS.”

Why does a Versa CSG appliance need a BIOS password?

Because BIOS operates independently of VOS, Director credentials, and OS-level authentication, anyone with physical or console access can reach it. Without a password, an attacker can change the boot device or implant firmware-level malware – so a BIOS password is a baseline hardening step.

What happens if a CSG’s BIOS password is forgotten?

There is no self-service recovery option. A forgotten administrator or user password requires contacting Versa Networks support directly, since it gates firmware settings that no software-level credential – including VOS or Director – can reset on its own. Record and store BIOS passwords deliberately.

Can a BIOS-level compromise survive an operating system reinstall?

Yes. A bootkit or rootkit that modifies the boot loader or firmware itself runs before the OS loads and operates below its visibility, so firmware-level implants can persist through a full reinstallation – exactly what a BIOS password is meant to prevent.

More on BIOS

If you want to learn more, these are sources we trust.

NIST Computer Security Resource Center
NIST’s security-standards hub, home to its firmware-integrity guidance for enterprise hardware and networking gear.

If you’re reading about BIOS, these are worth looking at next.

Appliance Branch Secure Access Service Edge
The physical or virtual VOS device that BIOS firmware runs on – a branch, hub, gateway, or Controller node. A network site running a VOS device – often the appliance whose BIOS needs hardening against console access. The converged SD-WAN and security architecture that Versa appliances, and the BIOS protecting them, support.