Security & Endpoint Protection: Surface for Business and Microsoft security

Protect your business with Microsoft security and Surface

Stay secure and maintain control, from chip to cloud, with security from Microsoft. Mount proactive defenses with security built in, and manage through the cloud wherever employees work.

A woman writes with Surface Pen on a Surface tablet.

Peace of mind at the chip level

Be reassured that updates are pushed out automatically to your organization. The UEFI on Surface devices¹ is developed and maintained proactively by Microsoft.

LEARN MORE

a Surface Book 3 sits connected to a Surface Dock 2

Resist physical tampering and malicious software with TPM

Quickly and easily encrypt your data, enabling access only by authorized individuals, with a physical Trusted Platform Module (TPM)² on Surface devices.

GET AN OVERVIEW OF TPM

A woman works on her Surface Pro in a warehouse

Protect external ports with DMA Protect

If a Surface removable SSD⁴ is tampered with, the device will shutoff power. The resulting reboot causes UEFI to wipe memory, to erase any residual data.

LEARN MORE ABOUT DMA PROTECT

A man uses the touchscreen on his Surface Pro 7 in his office

Prevent rootkit malware from running with Secure Boot

Malware can find a backdoor into firmware and survive OS re-installs. Keep the door closed when Secure Boot runs in conjunction with the Surface UEFI.

FIND OUT HOW TO SUPPORT SECURE BOOT

A Surface Pro 7 sits on a table with a Surface Pro Signature Type Cover, Surface Arc Mouse, and Surface Pen in poppy red

Zero-touch deployment with security protocols in place

Reduce IT complexity and eliminate time-consuming re-imaging by shipping and deploying straight to employees. Surface is built for the Windows Autopilot experience.³

LEARN MORE ABOUT AUTOPILOT ON SURFACE

A woman holds her Surface Laptop in her left hand while she types with her right hand

Defend data with removable SSD

The removable SSD⁴ on Surface Pro X and Surface Laptop 3 streamlines data retention with advanced features like pre-boot DMA remapping protection.

LEARN MORE ABOUT DMA PROTECT

Working on an external monitor while working on Surface Book

Securely wipe all data when you re-deploy

When it’s time to re-deploy, you can remove sensitive data from a compatible Surface device with Microsoft Surface Data Eraser, a tool that boots easily from a USB stick.

LEARN MORE ABOUT SURFACE DATA ERASER

Defend data with removable SSD

The removable SSD⁴ on Surface Pro X and Surface Laptop 3 streamlines data retention with advanced features like pre-boot DMA remapping protection.

LEARN MORE ABOUT DMA PROTECT

Securely wipe all data when you re-deploy

When it’s time to re-deploy, you can remove sensitive data from a compatible Surface device with Microsoft Surface Data Eraser, a tool that boots easily from a USB stick.

LEARN MORE ABOUT SURFACE DATA ERASER

Zero-touch deployment with security protocols in place

Reduce IT complexity and eliminate time-consuming re-imaging by shipping and deploying straight to employees. Surface is built for the Windows Autopilot experience.³

LEARN MORE ABOUT AUTOPILOT ON SURFACE

Securely wipe all data when you re-deploy

When it’s time to re-deploy, you can remove sensitive data from a compatible Surface device with Microsoft Surface Data Eraser, a tool that boots easily from a USB stick.

LEARN MORE ABOUT SURFACE DATA ERASER

Zero-touch deployment with security protocols in place

Reduce IT complexity and eliminate time-consuming re-imaging by shipping and deploying straight to employees. Surface is built for the Windows Autopilot experience.³

LEARN MORE ABOUT AUTOPILOT ON SURFACE

Defend data with removable SSD

The removable SSD⁴ on Surface Pro X and Surface Laptop 3 streamlines data retention with advanced features like pre-boot DMA remapping protection.

LEARN MORE ABOUT DMA PROTECT

Modernize your endpoint security strategy

It’s more important than ever to protect your organization’s endpoint devices, securing data and systems wherever they are. Learn how today’s IT and security teams are working proactively to move mobile device management into the cloud.

READ THE GUIDE

Prevent, detect, and respond to threats

Protect against known global threats in real time and get automatic updates at scale with Microsoft Defender ATP.

LEARN ABOUT DEFENDER ATP

Manage down to the firmware level

Surface is the only manufacturer to have DFCI¹ enabled for modern cloud-based device management through Microsoft Endpoint Manager.⁶

LEARN ABOUT USING DFCI

Stay secure with biometric authentication

Passwords and hardware tokens are no guarantee. Eliminate the need for passwords with Windows Hello.⁵

LEARN ABOUT WINDOWS HELLO

Keep data secure with conditional access

Grant access only when a device meets specific criteria with Microsoft 365 Conditional Access.

LEARN ABOUT CONDITIONAL ACCESS

NEW
Surface Laptop 4

A perfect balance of performance and style in two sizes: 13.5” and 15”.

LEARN MORE
Surface Pro 7+

Our classic 2-in-1 is more powerful, with optional LTE Advanced.

LEARN MORE
Surface Laptop Go

A thin, lightweight 12.4” laptop that powers your essential everyday experiences.

LEARN MORE
Surface Go 2

Our lightest 2-in-1 laptop is faster than before and has a larger display in the same compact size.

LEARN MORE
Surface Book 3

Our most powerful laptop pairs performance and versatility, and comes in two sizes: 13.5” and 15”.

LEARN MORE
Surface Pro X

Sleek design and always-connected Gigabit LTE in our thinnest 2-in-1 ever.

LEARN MORE
Surface Duo

Two touchscreens open for dual-screen apps and phone calls.

LEARN MORE
Surface Studio 2

Our all-in-one desktop computer with blazing graphics and powerful processors.

LEARN MORE
Surface Hub 2S

Our all-in-one digital whiteboard, meetings platform, and collaborative computing device.

LEARN MORE
NEW
Surface Headphones 2+

Certified for Microsoft Teams for high-quality calls.

LEARN MORE

A man working from home works with Surface Pen on his Surface Pro 7

Surface is designed for remote work

Find remote work solutions for your employees wherever they work. Stay secure and get it all done with Surface devices.

LEARN MORE ABOUT REMOTE WORK SOLUTIONS

A person works on their Surface device in an office space

Simple deployment and unified management

Improve IT efficiency and reduce overhead and support costs with devices that optimize Microsoft software in the environments your apps are deployed.

LEARN ABOUT DEVICE MANAGEMENT WITH SURFACE

A man works on a Surface device at his desk

IT Pro resources

Learn how to plan, deploy, and manage Microsoft Surface and Surface Hub devices.

LEARN MORE

A worker in a warehouse writes with Surface Pen on her Surface device

Microsoft Protection Plans

Maximize your investment in Surface with Microsoft Protection Plans. Explore Surface warranty details, extended coverage, and support options.

LEARN MORE

Sign up to keep pace with workplace innovation

The workplace is changing fast. Surface is changing with it. Let us help you keep pace with the latest tech and research findings from leaders in the field.

¹ Surface Go and Surface Go 2 use a third-party UEFI and do not support DFCI. DFCI is currently available for Surface Pro 7+, Surface Laptop Go, Surface Book 3, Surface Laptop 3, Surface Pro 7, and Surface Pro X. Find out more about managing Surface UEFI settings.

² Surface Pro X uses a firmware TPM.

³ Surface Hub 2S is not enabled for Windows Autopilot.

⁴ Hard drive is not user removable. Hard drive is only removable by skilled technician following Microsoft provided instructions.

⁵ Windows Hello works on Surface devices with Windows 10.

⁶ Sold separately.

Protect your business with Microsoft security and Surface

Microsoft security built in at every layer

Peace of mind at the chip level

Resist physical tampering and malicious software with TPM

Protect external ports with DMA Protect

Prevent rootkit malware from running with Secure Boot

Secure from deployment to decommission

Zero-touch deployment with security protocols in place

Defend data with removable SSD

Securely wipe all data when you re-deploy

Defend data with removable SSD

Securely wipe all data when you re-deploy

Zero-touch deployment with security protocols in place

Securely wipe all data when you re-deploy

Zero-touch deployment with security protocols in place

Defend data with removable SSD

Modernize your endpoint security strategy

Maintain secure control of every device

Prevent, detect, and respond to threats

Manage down to the firmware level

Stay secure with biometric authentication

Keep data secure with conditional access

Sign up to stay on top of security and IT innovation

Designed for the modern workplace

Surface Laptop 4

Surface Pro 7+

Surface Laptop Go

Surface Go 2

Surface Book 3

Surface Pro X

Surface Duo

Surface Studio 2

Surface Hub 2S

Surface Headphones 2+

Surface is designed for remote work

Simple deployment and unified management

IT Pro resources

Microsoft Protection Plans

Sign up to keep pace with workplace innovation