Windows 7. Windows 8.1. Windows 10 (Then select Download now.) Windows 11 (Then select Download now .) Important: Back up your files before you install or reinstall Windows on your PC. Learn how. To create the installation media, here's what you'll need: A PC with a reliable internet connection.

Microsoft was made aware of a vulnerability with the Windows boot manager that allows an attacker to bypass Secure Boot. The issue in the boot manager was fixed and released as a security update.

Provides guidance for installing a DBX update to fix a vulnerability that exists in some Secure Boot modules if they trust the Microsoft third-party UEFI CA.

This article describes the protection against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked by CVE-2023-24932, how to enable the mitigations, and guidance on bootable media.

The Advanced Boot Options screen lets you start Windows in advanced troubleshooting modes. You can access the menu by turning on your computer and pressing the F8 key before Windows starts. Some options, such as safe mode, start Windows in a limited state, where only the bare essentials are started.

The Secure Boot Forbidden Signature Database (DBX) prevents UEFI modules from loading. This update adds modules to the DBX. A security feature bypass vulnerability exists in secure boot. An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software.

Connect a USB drive to your PC, select it, and then select Next. Select Create. Many files need to be copied to the recovery drive, so this might take a while. If you ever need to use the recovery drive to reinstall Windows 11 on your PC, see Recovery options in Windows for further instructions.

The Secure Boot Forbidden Signature Database (DBX) prevents UEFI modules from loading. This update adds modules to the DBX. A security feature bypass vulnerability exists in secure boot. An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software.

UEFI offers new features including faster startup and improved security. It replaces BIOS (basic input/output system). More recent Surface devices use a new UEFI called Surface UEFI. For more info, including info about which specific devices use it, see How to use Surface UEFI.

Create a USB recovery drive. Boot Surface from a USB device. Forgot UEFI password for Surface. Learn about Unified Extensible Firmware Interface (UEFI) features and how to access them on Surface Pro 4, Surface Book, and Surface Studio.