Applies to

Surface Pro, Surface Pro 2, Surface Pro 3,Windows 8.1.


How do I use the BIOS/UEFI?

Surface Pro, Surface Pro 2 and Surface Pro 3 use the latest firmware interface, called the Unified Extensible Firmware Interface (UEFI).


UEFI offers new features such as faster startup and improved security and was designed to replace BIOS (basic input/output system).

Important
Under normal circumstances, there is no need for you to change UEFI settings. If you change these settings, you risk the security of your Surface. But, if you ever need access to Surface firmware features, here's basic info:

What firmware features can I use?

You can access the following firmware features on any Surface Pro model:

  • Secure Boot Control. Secure Boot technology blocks the loading of uncertified bootloaders and drives.

  • Trusted Platform Module (TPM). TPM technology provides major advancement over BIOS in the area of hardware-based security features.

How do I get to the UEFI settings?

The UEFI settings can only be adjusted during system startup. To load the UEFI firmware settings menu:

Step 1: Shut down (power off) Surface.
Step 2: Press and hold the volume-up button on your Surface.
Step 3: Press and release the power button on your Surface, then release the volume-up button.
The UEFI menu will display within a few seconds.

UEFI menu options

The UEFI settings that you can modify depends on which Surface Pro model you have.

Surface Pro or Surface Pro 2

  • Trusted Platform Module (TPM)
    The currently configured state of TPM (Enabled or Disabled) is highlighted. To change the state, tap the other one, then confirm on exit.

  • Secure Boot Control
    The currently configured state of Secure Boot (Enabled or Disabled) is highlighted. To change the state, tap the other one, then confirm on exit.

  • Delete All Secure Boot keys
    To delete all of the installed Secure Boot keys (including the default ones that were installed with Windows), tap Yes, then confirm on exit.

    Note
    With the keys deleted, Windows displays a red screen during startup.
  • Install Default Secure Boot Keys
    To reinstall all of the Secure Boot keys that were originally installed with Windows (and only those), tap Yes, then confirm on exit.

Surface Pro 3

  • Trusted Platform Module (TPM)
    The currently configured state of TPM (Enabled or Disabled) is highlighted. To change the state, tap the other one, then confirm on exit.

  • Secure Boot Control
    Tap Secure Boot Control to enable or disable this feature. While Secure Boot Control is enabled, you have the following additional options:

    • If secure boot keys are installed, you can delete them by tapping Delete All Secure Boot Keys.
    • If secure boot keys are not installed, you can tap Install All Factory Default Keys and then tap either Windows & 3rd-party UEFI CA (Default) or Windows only.

  • Configure External Ports
    This allows you to disable ports you don’t want anyone to use. For example, you can disable the USB and microSD ports to ensure that no one can use a USB drive or microSD card to copy data. It will be as though the port doesn’t exist, which means that if you disable the USB drive, you won’t be able to use USB devices.

    The current setting appears in bold. Tap Configure External Ports, then tap the option you want:

    • All ports enabled
    • Enable USB & microSD/Disable Docking Port
    • Enable Docking Port/Disable USB & microSD
    • All ports disabled

  • Device Information
    This allows you to view the system UUID and the serial number.

  • Administrator Password
    Administrators can create a password to prevent others from changing the UEFI settings. This is typically used in organisations that need to protect sensitive information.

Warning

If you set a password for the UEFI, record it in a safe place. If you forget the password you will not be able to access the UEFI settings. There is no way to reset this password except from within UEFI.

Note
If you enter the UEFI administrator password incorrectly, you’ll be locked out after three tries. Restart Surface to get another three tries.

Contact us

Need personal assistance? Surface Support agents are available to help.
Get Started


Need further assistance?

Ask the Community