Security & Endpoint Protection: Surface for Business and Microsoft security

Protect your business with Microsoft security and Surface

Stay secure and maintain control, from chip to cloud, with security from Microsoft. Mount proactive defences with security built in, and manage through the cloud wherever employees work.

A woman writes with Surface Pen on a Surface tablet.

Peace of mind at the chip level

Be reassured that updates are pushed out automatically to your organisation. The UEFI on Surface devices¹ is developed and maintained proactively by Microsoft.

LEARN MORE

a Surface Book 3 sits connected to a Surface Dock 2

Resist physical tampering and malicious software with TPM

Quickly and easily encrypt your data, enabling access only by authorised individuals, with a physical Trusted Platform Module (TPM)² on Surface devices.

GET AN OVERVIEW OF TPM

A woman works on her Surface Pro in a warehouse

Protect external ports with DMA Protect

If a Surface removable SSD⁴ is tampered with, the device will shut off power. The resulting reboot causes UEFI to wipe memory, to erase any residual data.

LEARN MORE ABOUT DMA PROTECT

A man uses the touchscreen on his Surface Pro 7 in his office

Prevent rootkit malware from running with Secure Boot

Malware can find a back door into firmware and survive OS re-installs. Keep the door closed when Secure Boot runs in conjunction with the Surface UEFI.

FIND OUT HOW TO SUPPORT SECURE BOOT

A Surface Pro 7 sits on a table with a Surface Pro Signature Type Cover, Surface Arc Mouse and Surface Pen in poppy red

Zero-touch deployment with security protocols in place

Reduce IT complexity and eliminate time-consuming re-imaging by shipping and deploying straight to employees. Surface is built for the Windows Autopilot experience.³

LEARN MORE ABOUT AUTOPILOT ON SURFACE

A woman holds her Surface Laptop in her left hand while she types with her right hand

Defend data with removable SSD

The removable SSD⁴ on Surface Pro X and Surface Laptop 3 streamlines data retention with advanced features like pre-boot DMA remapping protection.

LEARN MORE ABOUT DMA PROTECT

Working on an external monitor while working on Surface Book

Securely wipe all data when you re-deploy

When it’s time to re-deploy, you can remove sensitive data from a compatible Surface device with Microsoft Surface Data Eraser, a tool that boots easily from a USB stick.

LEARN MORE ABOUT SURFACE DATA ERASER

Defend data with removable SSD

The removable SSD⁴ on Surface Pro X and Surface Laptop 3 streamlines data retention with advanced features like pre-boot DMA remapping protection.

LEARN MORE ABOUT DMA PROTECT

Securely wipe all data when you re-deploy

When it’s time to re-deploy, you can remove sensitive data from a compatible Surface device with Microsoft Surface Data Eraser, a tool that boots easily from a USB stick.

LEARN MORE ABOUT SURFACE DATA ERASER

Zero-touch deployment with security protocols in place

Reduce IT complexity and eliminate time-consuming re-imaging by shipping and deploying straight to employees. Surface is built for the Windows Autopilot experience.³

LEARN MORE ABOUT AUTOPILOT ON SURFACE

Securely wipe all data when you re-deploy

When it’s time to re-deploy, you can remove sensitive data from a compatible Surface device with Microsoft Surface Data Eraser, a tool that boots easily from a USB stick.

LEARN MORE ABOUT SURFACE DATA ERASER

Zero-touch deployment with security protocols in place

Reduce IT complexity and eliminate time-consuming re-imaging by shipping and deploying straight to employees. Surface is built for the Windows Autopilot experience.³

LEARN MORE ABOUT AUTOPILOT ON SURFACE

Defend data with removable SSD

The removable SSD⁴ on Surface Pro X and Surface Laptop 3 streamlines data retention with advanced features like pre-boot DMA remapping protection.

LEARN MORE ABOUT DMA PROTECT

Prevent, detect and respond to threats

Protect against known global threats in real time and get automatic updates at scale with Microsoft Defender ATP.

LEARN ABOUT DEFENDER ATP

Manage down to the firmware level

Surface is the only manufacturer to have DFCI¹ enabled for modern cloud-based device management through Microsoft Endpoint Manager.^*

LEARN ABOUT USING DFCI

Stay secure with biometric authentication

Passwords and hardware tokens are no guarantee. Eliminate the need for passwords with Windows Hello.⁵

LEARN ABOUT WINDOWS HELLO

Keep data secure with conditional access

Grant access only when a device meets specific criteria with Microsoft 365 Conditional Access.

LEARN ABOUT CONDITIONAL ACCESS

NEW
Surface Pro 7+

Our classic 2-in-1 is more powerful, with optional LTE Advanced.

LEARN MORE
Surface Laptop Go

A thin, lightweight 12.4” laptop that powers your essential everyday experiences.

LEARN MORE
Surface Laptop 3

Our thin, light, perfect everyday laptop is now faster than ever, and available in a 13.5” or 15” display.

LEARN MORE
Surface Go 2

Our lightest 2-in-1 laptop is faster than before and has a larger display in the same compact size.

LEARN MORE
Surface Book 3

Our most powerful laptop pairs performance and versatility, and comes in two sizes: 13.5” and 15”.

LEARN MORE
Surface Pro X

Sleek design and always-connected Gigabit LTE in our thinnest 2-in-1 ever.

LEARN MORE
Surface Studio 2

Our all-in-one desktop computer with blazing graphics and powerful processors.

LEARN MORE
Surface Hub 2S

Our all-in-one digital whiteboard, meetings platform and collaborative computing device.

LEARN MORE

A man works on a Surface device at his desk

IT Pro resources

Learn how to plan, deploy and manage Microsoft Surface and Surface Hub devices.

LEARN MORE

A worker in a warehouse writes with Surface Pen on her Surface device

Microsoft Service Offerings

Maximise your investment in Surface with Microsoft Service Offerings. Explore Surface warranty details, extended coverage and support options.

LEARN MORE

Support for Business

Need some help with your Surface? Surface Support is here around the clock to get you back on track.

LEARN MORE

^* Sold separately.

¹ Surface Go and Surface Go 2 use a third-party UEFI and do not support DFCI. DFCI is currently available for Surface Book 3, Surface Laptop 3, Surface Pro 7 and Surface Pro X. Find out more about managing Surface UEFI settings.

² Surface Pro X uses a firmware TPM.

³ Surface Hub 2S is not enabled for Windows Autopilot.

⁴ Hard drive is not user removable. Hard drive is only removable by skilled technician following Microsoft provided instructions.

⁵ Windows Hello works on Surface devices with Windows 10.

Protect your business with Microsoft security and Surface

Microsoft security built in at every layer

Peace of mind at the chip level

Resist physical tampering and malicious software with TPM

Protect external ports with DMA Protect

Prevent rootkit malware from running with Secure Boot

Secure from deployment to decommission

Zero-touch deployment with security protocols in place

Defend data with removable SSD

Securely wipe all data when you re-deploy

Defend data with removable SSD

Securely wipe all data when you re-deploy

Zero-touch deployment with security protocols in place

Securely wipe all data when you re-deploy

Zero-touch deployment with security protocols in place

Defend data with removable SSD

Maintain secure control of every device

Prevent, detect and respond to threats

Manage down to the firmware level

Stay secure with biometric authentication

Keep data secure with conditional access

Take the next step

Designed for the modern workplace

Surface Pro 7+

Surface Laptop Go

Surface Laptop 3

Surface Go 2

Surface Book 3

Surface Pro X

Surface Studio 2

Surface Hub 2S

IT Pro resources

Microsoft Service Offerings

Support for Business