Learn how to update your security processor or TPM firmware to protect Windows 10 and your device from attacks by malicious software.

Update Surface devices and Windows. Download the latest drivers and firmware updates to keep your Surface devices performing their best.

Your Surface comes with Windows recovery info that you can use to refresh your Surface or reset it to its factory condition. Always try to do that first before downloading a recovery image. To learn more, see the links below.

If you are having issues installing or updating Gaming Services on your PC, or if you are noticing that the Xbox app for PC is launching with missing content, you may want to download and run the Gaming Services Repair Tool for PC.

Using the Xbox Accessories thumbstick recalibration tool. If you're experiencing minor issues with the thumbsticks on your controller, or if you are performing a self-repair of your controller and need to recalibrate the thumbsticks, you can use a self-calibration tool in the Xbox Accessories app.

If some Windows functions aren't working or Windows crashes, use the System File Checker to scan Windows and restore your files. Though the steps below might look complicated at first glance, just follow them in order, step-by-step, and we’ll try to get you back on track.

We will begin with eligible devices running Windows 11, version 22H2 and 23H2 for those who have opted in to be amongst the first to experience new enhancements. All Surface devices that are compatible with Windows 11 will eventually receive the 2024 Update.

How to enable TPM. If you need to enable TPM, these settings are managed via the UEFI BIOS (PC firmware) and vary based on your device. You can access these settings by choosing: Settings > Update & Security > Recovery > Restart now. From the next screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart to make the changes.

This article describes the protection against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked by CVE-2023-24932, how to enable the mitigations, and guidance on bootable media.

We recommend you install the latest update for your device as it contains important improvements and issue resolutions, including this one. After a fresh install or an In-place upgrade to Windows 11, version 24H2, you might face issues with connecting via DirectAccess.