A host with an operating system installation that has never been accessed by end users, such as a host freshly built from a fully-patched security baseline image.
Sources:
NIST SP 800-167