Valid

GB/T 39680-2020Information security technology—Technique requirements and evaluation criteria for server security (English PDF)

信息安全技术服务器安全技术要求和测评准则

Preview PDF

This is a limited preview

Buy now to download the full PDF (20 pages)

Need quotation for your management?

Get a formal quotation for GB/T 39680-2020 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 14, 2020

Implementation date

July 1, 2021

Scope

GB/T 39680-2020 is the English-translated version of 信息安全技术服务器安全技术要求和测评准则.

GB/T 39680-2020 is the Chinese standard "Information security technology—Technique requirements and evaluation criteria for server security".

Its scope clause reads: This standard specifies the security technical requirements and evaluation criteria for servers: This standard applies to the development, production, maintenance and evaluation of servers:. Its clauses include terms, definitions and abbreviations.

Found what you need?

Document preview — GB/T 39680-2020

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80
Replacing: GB/T 21028-2007

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

1 Scope1
2 Normative references1
3 Terms, definitions and abbreviations1
4 Overview2
5 Safety technical requirements2
5:1 Safety function requirements2
5:1:1 Device label2
5:1:2 Hardware interface security2
5:1:3 Firmware Security2
5:1:4 Driver Security3
5:1:5 Reliable operation support3
5:1:6 Self-safety management3
5:2 Safety assurance requirements4
5:2:1 Development4
5:2:2 Guidance Document4
5:2:3 Life Cycle Support5
5:2:4 Test5
5:2:5 Vulnerability assessment6
5:2:6 Maintenance6
6 Security Evaluation Criteria6
6:1 Test environment6
6:2 Evaluation of safety function requirements7
6:2:1 Device label7
6:2:2 Hardware interface security7
6:2:3 Firmware Security8
6:2:4 Driver Security9
6:2:5 Reliable operation support9
6:2:6 Self-security management10
6:3 Evaluation of safety assurance requirements12
6:3:1 Development12
6:3:2 Guidance documents13
6:3:3 Life Cycle Support13
6:3:4 Test15
6:3:5 Vulnerability assessment17
6:3:6 Maintenance17
Appendix A (informative appendix) Server operating system security requirements18
Appendix B (Informative Appendix) Server Security Technical Requirements Classification Table19

1 Scope

This standard specifies the security technical requirements and evaluation criteria for servers:

This standard applies to the development, production, maintenance and evaluation of servers:

2 Normative references

The following documents are indispensable for the application of this document: For dated reference documents, only the dated version applies to this article

Pieces: For undated references, the latest version (including all amendments) applies to this document:

GB/T 9813:3-2017 Computer General Specification Part 3: Server

GB/T 20272 Information Security Technology Operating System Security Technical Requirements

GB/T 25069 Information Security Technical Terms

3 Terms, definitions and abbreviations

3:1 Terms and definitions

The following terms and definitions defined in GB/T 9813:3-2017, GB/T 20272 and GB/T 25069 apply to this document:

3:1:1

Server

A computer system that provides specific application services to client computers in a network environment:

Note 1: Computer system refers to server hardware system, which mainly includes independent computing unit, storage unit, network transmission unit, monitoring management unit, power supply unit and

Drivers, etc:

Note 2: Rewrite GB/T 9813:3-2017, definition 3:1:

3:1:2

Server boot firmware serverbootfirmware

Responsible for the initialization and configuration of the server chipset, collecting and summarizing hardware resource information and booting the program into the operating system:

3:1:3

Out-of-bandmanagementmodule

An independent management unit that controls, manages and maintains the server through a dedicated physical channel:

Note: For example, the baseboard management controller of the x86 platform:

3:1:4

Out-of-bandmanagementmodulefirmware

A program that exists in the out-of-band management module to realize its functions:

3:1:5

Driverprogram

Provides software programs for operating or controlling specific devices in the server for operating systems or applications:

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 20 pages — is available in the English PDF.

Referenced standards

Cited by

Similar standards

GB/T 18805-2026|GB/T 32915-2026|GB/T 42382.2-2026|GB/T 42382.3-2026|GB/T 47277-2026|GB/T 47312-2026

Editions of GB/T 39680

Edition	Title	Revision	Status
GB/T 39680-2020	Information security technology—Technique requirements and evaluation criteria for server security	current edition	Current
GB/T 21028-2007	Information security technology—Technique requirements and evaluation criteria for server security	previous edition	Superseded

This page sells the current edition, GB/T 39680-2020. Earlier editions are listed for reference only.

How to Download GB/T 39680-2020

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.