How to use Surface UEFI - Microsoft Support
Learn about Unified Extensible Firmware Interface (UEFI) features and how to access them on Surface Pro 4, Surface Book, and Surface Studio.
Windows 11 and Secure Boot - Microsoft Support
While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or …
Windows Secure Boot certificate expiration and CA updates
Jun 26, 2025 · As an industry standard, UEFI Secure Boot defines how platform firmware manages the certificates, authenticates firmware, and how the operating system (OS) …
KB5036210: Deploying Windows UEFI CA 2023 certificate to …
Introduction Windows updates released on and after February 13, 2024 include the ability to apply the Windows UEFI CA 2023 certificate to UEFI Secure Boot Allowed Signature Database …
Updating Windows bootable media to use the PCA2023 signed …
Feb 4, 2025 · The PowerShell script described in this article can be used to update Windows bootable media so that the media can be used on systems that trust the “Windows UEFI CA …
Forgot UEFI password for Surface - Microsoft Support
If you forgot your UEFI password, here's what you can do. Check with your IT administrator for the password If your device is managed by someone else, such as your IT department or a …
Enable TPM 2.0 on your PC - Microsoft Support
If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & …
Enterprise Deployment Guidance for CVE-2023-24932 - Microsoft …
Feb 13, 2025 · This document describes the deployment of the protections against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked …
Surface help & learning - support.microsoft.com
Oct 14, 2025 · Choose from a variety of Surface devices and accessories to get help.
Enable Virtualization on Windows - Microsoft Support
Oct 14, 2025 · Learn how to enable virtualization through the UEFI (or BIOS) of your PC to run the Windows Subsystem for Android or Windows Subsystem for Linux.