
How to use Surface UEFI - Microsoft Support
Learn about Unified Extensible Firmware Interface (UEFI) features and how to access them on Surface Pro 4, Surface Book, and Surface Studio.
Windows 11 and Secure Boot - Microsoft Support
While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot …
Enable TPM 2.0 on your PC - Microsoft Support
Oct 14, 2025 · If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & …
Windows Secure Boot certificate expiration and CA updates
Jun 26, 2025 · As an industry standard, UEFI Secure Boot defines how platform firmware manages the certificates, authenticates firmware, and how the operating system (OS) interfaces with this process.
Surface Secure Boot Certificates - Microsoft Support
The table below shows which devices have the updated certificates already present in UEFI (and as of which version, if applicable) and updated recovery image status.
كيفية استخدام Surface UEFI - دعم Microsoft
تعرّف على ميزات الواجهة الموحدة للبرامج الثابتة الموسعة (UEFI) وكيفية الوصول إليها على Surface Pro 4 وSurface Book وSurface Studio.
How do I use the BIOS/UEFI on Surface Pro 3 and earlier devices
Oct 14, 2025 · Learn about Unified Extensible Firmware Interface (UEFI) features and how to access them on Surface Pro models and Surface 3.
Secure Boot DB and DBX variable update events - Microsoft Support
Jun 15, 2022 · This event is logged when the Microsoft UEFI CA 2023 certificate is added to the DB variable. The DB variable is used to add trust for Secure Boot components and is typically used to …
Forgot UEFI password for Surface - Microsoft Support
If you forgot your UEFI password, here's what you can do. Check with your IT administrator for the password If your device is managed by someone else, such as your IT department or a different …
Registry key updates for Secure Boot: Windows devices with IT …
Oct 14, 2025 · How these keys work together IT admins configure the AvailableUpdates registry value to 0x5944, which signals Windows to execute the Secure Boot key update and installation on the …