How to use Surface UEFI - Microsoft Support
Learn about Unified Extensible Firmware Interface (UEFI) features and how to access them on Surface Pro 4, Surface Book, and Surface Studio.
Windows 11 and Secure Boot - Microsoft Support
While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot …
Windows Secure Boot certificate expiration and CA updates
Jun 26, 2025 · As an industry standard, UEFI Secure Boot defines how platform firmware manages the certificates, authenticates firmware, and how the operating system (OS) interfaces with this process. …
KB5036210: Deploying Windows UEFI CA 2023 certificate to Secure …
Introduction Windows updates released on and after February 13, 2024 include the ability to apply the Windows UEFI CA 2023 certificate to UEFI Secure Boot Allowed Signature Database (DB). Updating …
Updating Windows bootable media to use the PCA2023 signed boot …
Feb 4, 2025 · The PowerShell script described in this article can be used to update Windows bootable media so that the media can be used on systems that trust the “Windows UEFI CA 2023” certificate.
Forgot UEFI password for Surface - Microsoft Support
If you forgot your UEFI password, here's what you can do. Check with your IT administrator for the password If your device is managed by someone else, such as your IT department or a different …
Enable TPM 2.0 on your PC - Microsoft Support
If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & Security > …
Registry key updates for Secure Boot: Windows devices with IT …
Oct 14, 2025 · How these keys work together IT admins configure the AvailableUpdates registry value to 0x5944, which signals Windows to execute the Secure Boot key update and installation on the …
Surface help & learning - support.microsoft.com
Oct 14, 2025 · Choose from a variety of Surface devices and accessories to get help.
Enterprise Deployment Guidance for CVE-2023-24932 - Microsoft …
Feb 13, 2025 · This document describes the deployment of the protections against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked by CVE-2023 …