This article describes the protection against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked by CVE-2023-24932, how to enable the mitigations, and guidance on bootable media.

Windows 7. Windows 8.1. Windows 10 (Then select Download now.) Windows 11 (Then select Download now .) Important: Back up your files before you install or reinstall Windows on your PC. Learn how. To create the installation media, here's what you'll need: A PC with a reliable internet connection.

Summary. When you use the Recovery Environment (Windows RE) to troubleshoot startup issues, first try the Startup Repair option in the System Recovery Options dialog box. If this does not resolve the issue, or if you have to manually troubleshoot additional issues, use the Bootrec.exe tool.

Cause. This issue occurs because the one of the following applications does not clean up all the page table entries for the pages that were freed: The Windows Operating System Loader (Winload.efi) application. The Windows Resume Loader (Winresume.efi) application.

Insert the USB drive into the USB port, and then select Start > Settings > System > Recovery. Under Advanced startup, select Restart Now. On the Choose an option screen, select Use a device > USB Storage. Configure your Surface to start from a USB drive.

Install, uninstall, or run an application. After you restart the computer, you'll have a clean boot environment. Then, do one of the following, as appropriate for your situation: If you couldn't install or uninstall a program or an update before you performed the clean boot, try to install or uninstall the program or update again.

The UEFI settings can be adjusted only during system startup. To load the UEFI firmware settings menu: Shut down your Surface. Press and hold the volume-up button on your Surface and at the same time, press and release the power button. When you see the Surface logo, release the volume-up button. The UEFI menu will display within a few seconds.

Blue Screen errors (also sometimes called black screen errors or STOP code errors) can occur if a serious problem causes Windows to shut down or restart unexpectedly. You might see a message that says, "Windows has been shut down to prevent damage to your computer" or a similar message.

Press the Windows logo key + R. Type msconfig in the Open box and then select OK. Select the Boot tab. Under Boot options, clear the Safe boot checkbox. Find out how to boot into safe mode in Windows from Settings, the sign-in screen, and a black or blank screen.

How to get to the UEFI settings on a Surface. Note: This video is available in English only. You can adjust the UEFI settings only during system startup. To load the UEFI firmware settings menu: Shut down your Surface and wait about 10 seconds to make sure it's off.