If some Windows functions aren't working or Windows crashes, use the System File Checker to scan Windows and restore your files. Though the steps below might look complicated at first glance, just follow them in order, step-by-step, and we’ll try to get you back on track. Run the System File Checker tool (SFC.exe)

A BitLocker recovery key is needed when BitLocker can’t automatically unlock an encrypted drive in Windows. This key, which is a 48-digit number, is used to regain access to the drive. You might be prompted for the BitLocker recovery key during startup, due to a security risk or hardware change:

Go to Start > Settings > Update & Security > Windows Security > Device security . Under Security processor, select Security processor details. Select Security processor troubleshooting, and then under Clear TPM, select Clear TPM. You'll need to restart your device to complete the process.

You can quickly check the health of your Surface drivers and firmware using the Surface app. Open the Surface app. In the Surface app, expand Help & support to check the update status. If there are updates available, select the Check for updates button to open Windows Update and install the available updates.

The Program Install and Uninstall troubleshooter helps you automatically repair issues when you're blocked from installing or removing programs. It also fixes corrupted registry keys. First, you'll need to download the troubleshooter. Download troubleshooter.

You can use installation media (a USB flash drive or DVD) to install a new copy of Windows, perform a clean installation, or reinstall Windows. To create installation media, go to the software download website, where you'll find step-by-step instructions.

The enablement package is a great option for installing a scoped feature update like Windows 11, version 23H2 as it enables an update from version 22H2 to version 23H2 with a single restart, reducing update downtime. This enables devices to take advantage of new features now.

An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software. This security update addresses the vulnerability by adding the signatures of the known vulnerable UEFI modules to the DBX. To learn more about this security vulnerability, see the following advisory:

TPM 2.0 is used in Windows 11 for a number of features, including Windows Hello for identity protection and BitLocker for data protection. In some cases, PCs that are capable of running TPM 2.0 are not set up to do so. If you are considering upgrading to Windows 11, check to ensure TPM 2.0 is enabled on your device.

The enablement package is a great option for installing a scoped feature update like Windows 10, version 20H2 as it enables an update from version 2004 to version 20H2 with a single restart, reducing update downtime. This enables devices to take advantage of new features now.