Surface Unified Extensible Firmware Interface (UEFI) replaces the standard basic input/output system (BIOS) with new features including faster startup and improved security. You can use Surface UEFI to manage the firmware features on your Surface.

How to enable TPM. If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & Security > Recovery > Restart now. From the next screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart to make the changes.

Use the latest firmware interface, the Unified Extensible Firmware Interface (UEFI). UEFI offers new features including faster startup and improved security. It replaces BIOS (basic input/output system). More recent Surface devices use a new UEFI called Surface UEFI.

Windows help & learning. Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.

Summary. This update resolves potential security vulnerabilities, including those discussed in Microsoft security advisory 180002, in Surface Pro devices.

UEFI MAT. Your device meets the requirements for enhanced hardware security. This means that in addition to meeting all the requirements of standard hardware security, your device also has memory integrity turned on. Your device has all Secured-core PC features enabled.

If you forgot your UEFI password, here's what you can do. Check with your IT administrator for the password. If your device is managed by someone else, such as your IT department or a different owner, check with them for the password. . Still having issues? There's one last step you can take.

Learn how to enable virtualization through the UEFI (or BIOS) of your PC to run the Windows Subsystem for Android or Windows Subsystem for Linux.

How to open PC Health Check. In Windows, use Search on the taskbar to search for “PC Health Check,” then select it from the list of results. If a PC Health Check update is available, you can quickly install it for the latest version.

Select the Start button, then select Settings > System > Activation . Open Activation settings. If you're not activated, complete the activation process with the steps you see on the Activation page. If you experience an error while activating, see Get help with Windows activation errors.