How to use Surface UEFI - Microsoft Support
Learn about Unified Extensible Firmware Interface (UEFI) features and how to access them on Surface Pro 4, Surface Book, and Surface Studio.
Windows Secure Boot certificate expiration and CA updates
Jun 26, 2025 · As an industry standard, UEFI Secure Boot defines how platform firmware manages the certificates, authenticates firmware, and how the operating system (OS) interfaces with this process.
Windows 11 and Secure Boot - Microsoft Support
While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot …
Secure Boot Certificate updates: Guidance for IT professionals and ...
Jun 26, 2025 · Finally, the scheduled task updates the Windows boot manager to the one signed by the Windows UEFI CA 2023. Windows will detect that a restart is needed before the boot manager can …
Windows Secure Boot Key Creation and Management Guidance
Aug 6, 2025 · For more information, see the following resources: Windows Secure Boot Key Creation and Management Guidance Microsoft Secure Boot open-source repository for the recommended …
Enable Virtualization on Windows - Microsoft Support
Oct 14, 2025 · Learn how to enable virtualization through the UEFI (or BIOS) of your PC to run the Windows Subsystem for Android or Windows Subsystem for Linux.
Forgot UEFI password for Surface - Microsoft Support
If you forgot your UEFI password, here's what you can do. Check with your IT administrator for the password If your device is managed by someone else, such as your IT department or a different …
Surface Secure Boot Certificates - Microsoft Support
Microsoft began updating the UEFI Secure Boot Signature Database (DB) on Surface devices to contain the “Windows UEFI CA 2023” certificate starting in 2023, and these updates were delivered to …
"0xc0000017" error when you restart a UEFI-based computer in …
Jun 13, 2015 · Fixes an issue in which you receive a "0xc0000017" error code when you restart the operating system. This issue occurs on a UEFI-based computer that is running Windows RT 8.1, …
Frequently asked questions about the Secure Boot update process ...
Sep 15, 2025 · If Windows is already using the 2023-signed boot manager but the firmware is reset to defaults that don’t include the Windows UEFI CA 2023 certificate, Secure Boot will block the boot …