

The currently configured state of TPM ( Enabled or Disabled) is highlighted.

If you aren’t using a Cover, press the power button. To exit without saving your changes when you’re using a Surface Typing Cover, press Esc and select Yes. To save your changes and exit, select Exit Setup > Yes.Įxit without saving. Organizations that need to protect sensitive information typically use an administrator password. This option lets you create a password to prevent others from changing the UEFI settings. This option displays your Surface’s universally unique identifier (UUID) and serial number. Note: Disabling Wi-Fi also disables the Bluetooth ®. Select Advanced Device Security and select the option you want: For example, you can disable the microSD card reader so no one can use a microSD card to copy data. This option lets you disable ports and features you don’t want anyone to use. To choose the order in which your Surface boots, select Configure Alternate System Boot Order and select one of the following options: If Secure Boot keys aren't installed, you can select Install All Factory Default Keys and select either Windows & 3rd-party UEFI CA (Default) or Windows only. If Secure Boot keys are installed, you can delete them by selecting Delete All Secure Boot Keys. When Secure Boot Control is enabled, you have two additional options: Select Secure Boot Control to enable or disable this feature. Restart your Surface to enter the password again. Note: If you enter the administrator password incorrectly three times, you’ll be locked out of the UEFI. When you’re finished, select Exit Setup > Yes. To delete all of the installed Secure Boot keys, including the default ones that were installed with Windows, select Yes. To change the state, select the other one. The currently configured state of Secure Boot ( Enabled or Disabled) is highlighted. Which UEFI settings you can modify depends on which Surface model you have. The UEFI menu will display within a few seconds. When you see the Surface logo, release the volume-up button. Press and hold the volume-up button on your Surface and at the same time, press and release the power button.

The UEFI settings can be adjusted only during system startup. Note: This video is available in English only.
