On a Unified Extensible Firmware Interface (UEFI) computer that's running Windows 8.1 or Windows Server 2012 R2, you discover that PXE boot performance is slower than expected. This problem occurs because during the PXE boot, the boot image takes a long time to download. To resolve this problem, apply the following hotfix.

Fixes a "TFTP download failed" error message. You receive this error message when you perform a PXE boot on a client computer that connects to a Windows Deployment Services server that is running Windows Server 2008 R2.

Devices that start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM) may fail to start with the error "Status: 0xc0000001, Info: A required device isn't connected or can't be accessed" after installing an affected update on a WDS server.

This article describes the protection against the publicly disclosed Secure Boot security feature bypass that uses the BlackLotus UEFI bootkit tracked by CVE-2023-24932, how to enable the mitigations, and guidance on bootable media.

In this scenario, the UEFI-based computers cannot start because the WDS Pre-Boot Execution Environment (PXE) program requires you to press F12 to continue a network startup in text-based mode. This problem occurs because the startup library-based applications, such as Wdfmgr.efi, use the graphics console incorrectly.

Preboot Execution Environment (PXE) boot. If the mitigation is deployed to a device and you attempt to use PXE boot, the device will not start unless the mitigations are also applied to the network boot sources (root where bootmgfw.efi is present).

After updating to Microsoft Endpoint Configuration Manager current branch, version 2002, operating system deployment task sequences fail during the PXE boot process. This occurs more frequently in environments with a large volume of packages in the task sequence.

Consider the following scenario. You start a Pre-boot execution Environment (PXE) client to connect to a Microsoft Windows Server 2003 Service Pack 1 (SP1)-based computer running Windows Deployment Service (WDS) or a Windows Server 2008-based computer that has the WDS role installed.

This issue occurs when the Enable a PXE responder without Windows Deployment Service option is set on the distribution point, and IP Helpers are used to route PXE requests. The following hotfix to resolve this problem is available for download from the Microsoft Download Center: Download this hotfix now.

Surface Unified Extensible Firmware Interface (UEFI) replaces the standard basic input/output system (BIOS) with new features including faster startup and improved security. You can use Surface UEFI to manage the firmware features on your Surface. These Surface models use the new firmware UEFI interface: