Surface Go 2 UEFI Photo

By Evan Forrest (SurfaceTip)

Since the first generation of Microsoft Surface Pro (2013) and Surface 3, Microsoft has implemented custom BIOS firmware on those devices to support required hardware features and securities.

Starting with Surface Pro 4, Microsoft has created its own UEFI firmware for use with newer devices. This new firmware is called Surface UEFI which is currently used on newer devices including Surface Go, Surface Book, and Surface Studio.

Compared to other Surface models, Surface Go has a slightly new design interface including a different on-screen keyboard. In this article, we will walk you through how to access and configure the Surface Go UEFI settings.

  1. How to access Surface Go UEFI settings?
  2. How to check your Surface Go device Information via UEFI settings?
  3. How to Change System Boot Order on Surface Go?
  4. How to Manage Device Components on Surface Go UEFI Settings?
  5. How to change your Surface Go Date and Time via Surface UEFI?
  6. How to Protect UEFI settings with a password on Surface Go?
  7. What is the Trusted Platform Module (TPM)?
  8. What is Secure Boot Control?
  9. Other Surface’s UEFI Settings

1 How to access Surface Go UEFI settings?

You can enter the Surface Go UEFI setup screen only while your Surface is starting up. Here is how you do that:

  1. Shut down your Surface.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The UEFI settings menu will appear in a few seconds.
    Surface Go - Entering UEFI Settings

After you have made any changes to the UEFI settings, you can save or delete those changes by:

Save changes and restart your Surface

By default, every change you made will automatically be saved. When you restart your Surface, all settings will take effect. To do so.

  • In the UEFI settings menu, select Exit.
  • Click Restart Now.
    Surface Go UEFI - Exit
  • It will save all the settings you have changed and restart your Surface.

Restart your Surface without saving your changes

You also have the option to discard all changes as well by using your Surface Type Cover or external keyboard. To do so.

  • On the keyboard press the ESC key.
    Surface Go UEFI - Exit Discarding Changes
  • Now you have 2 options:
    • Yes – Delete your changes and restart your Surface.
    • No – turn back to the UEFI settings.

2 How to check your Surface Go device Information via UEFI settings?

The first displayed page when you enter UEFI settings is the PC information page. On the page, you can find out more information about your device identities such as Model, System UUID (Universally Unique Identifier), Serial Number, and Asset Tag. Moreover, it also displays all important system other components version that you might need for troubleshooting.

  • Enter Surface UEFI settings as per the instructions above.
  • In the UEFI settings menu, select PC Information and you will see the following information:Surface Go UEFI - PC Information

See also: How to manage asset tag on Surface Go.

3 How to Change System Boot Order on Surface Go?

To change the alternate system boot order on your Surface Go:

  1. Enter Surface UEFI settings as per the instructions above.
  2. In the Surface UEFI menu, go to the Boot Configuration page as below:Surface Go UEFI - Boot Configuration

On the “Configure boot device order” page, you can:

  • Rearrange the boot order by clicking the up/down arrow button on any boot option available on the list.

4 How to Manage Device Components on Surface Go UEFI Settings?

Surface Go allows you to disable some of your surface device components and features to meet your specific security requirements. You can enable or disable those components by:

  • Enter Surface UEFI settings as per the instructions above.
  • In the UEFI settings menu, select Security and you will see the following options:
    Surface Go UEFI - Devices
  • On our Surface Go with System UEFI version 1.0.0.3, there are the following device options:
    • Docking USB Port – enable/disable the ability to use USB ports on the connected dock.
    • Front Camera – enable/disable the front-facing camera.
    • Rear Camera – enable/disable the main rear camera.
    • IR Camera – enable/disable the Infrared camera used for Windows Hello feature.
    • On-board Audio – enable/disable internal audio or speakers.
    • SDcard – enable/disable microSD slot.
    • Wi-Fi & Bluetooth– enable/disable both Wi-Fi and Bluetooth.
    • Bluetooth – enable/disable the internal Bluetooth only.
    • Type Cover port – enable/disable the Surface Go type cover.

5 How to change your Surface Go Date and Time via Surface UEFI?

The new Surface UEFI now allows you to set your Surface Go’s date and time right on the UEFI settings page. To check or set a date and time for your Surface Go:

  1. Enter Surface UEFI settings as per the instructions above.
  2. In the Surface UEFI menu, go to the Date and Time page as below:Surface Go UEFI - Date and Time
  3. To set a new time, click Set Time.
    Surface Go UEFI - Set Time
  4. To set a new date, click Set Date.
    Surface Go UEFI - Set Date
  5. Press Enter to apply changes.

6 How to Protect UEFI settings with a password on Surface Go?

You can prevent others from changing your UEFI settings by setting an Administrator Password in UEFI settings. To do that:

  • Enter Surface UEFI settings as per the instructions above.
  • In the UEFI settings menu, select Security.
    Surface Go UEFI - Security
  • Under the UEFI password, click the [Clean] button to create a UEFI password.
    Surface Go UEFI - Entering UEFI Password
  • You will need to enter a password in the box with your keyboard or the on-screen keyboard with the following criteria:
    • Minimum Length: 6 characters
    • Maximum Length: 128 characters
    • May contain a combination of letters, numbers, and special characters.
  • In case you have already set the password before and want to remove it, simply leave the password box blank.
Note If you enter the administrator password incorrectly three times, you’ll be locked out of the UEFI. Restart your Surface to enter the password again.

Important If you set a password for the UEFI, record it in a safe place. If you forget the password, you won’t be able to access the UEFI settings. You can only reset the administrator password from within the UEFI.

7 What is the Trusted Platform Module (TPM)?

The Trusted Platform Module (TPM) is a technology that provides a major advancement over BIOS in hardware-based security features. It is a specialized chip that stores RSA encryption keys specific to each Surface device for hardware authentication.

The TPM technology is a requirement of BitLocker disk encryption. The TPM helps you to encrypt/decrypt the entire disk without requiring your complex long passphrases. It means that the encryption key and decryption key are stored within the TPM chip. So your encrypted disks can’t be accessed on other devices.

Surface Go UEFI - Control TPM

8 What is Secure Boot Control?

The Secure Boot is a technology that blocks the loading of uncertified bootloaders and drives. It helps to prevent your Surface from being loaded with unauthorized operating systems and malicious software applications.

If you desire to install other operating systems like Ubuntu, or other Linux distributions, you may need to disable this feature in the UEFI settings above.

Surface Go UEFI - Control Secure Boot

Other Surface’s UEFI Settings

We have also covered this topic for other Surface PCs as well, to learn more about other Surface’s UEFI settings check the link below:

More Surface Go Resources

Make sure to check out our tips and tricks for Microsoft Surface Go here:

Ultimate Tips and Tricks for Mastering Microsoft Surface Go
Suggested Article

Ultimate Tips and Tricks for Mastering Microsoft Surface Go