Here’s how to disable secure boot on Microsoft Surface Go

1 What is Secure Boot?

Secure Boot is a new security feature that is available only on PCs that has UEFI enabled to block the loading of uncertified bootloaders and drives. It helps to prevent your Surface from being loaded with unauthorized operating systems and malicious software applications. All Surface devices ship with Microsoft’s certificate stored in UEFI to verify boot loader integrity before launching it.

2 How to disable Secure Boot on Surface Go

To disable secure boot on Microsoft Surface Go:

1. Shut down your Surface Go.
2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.
4. Go to the Security page, under Secure Boot section click the button Enabled.
   You can notice that the current setting for Secure Boot is Enabled as displayed in the button label.
5. On Change Secure Boot configuration dialog, change the option to Disabled.
6. Now the current setting of Secure Boot will be changed to Disabled.
   
7. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.
8. After rebooting, if you see a red bar with an unlock icon in the middle of the screen, it means the Secure Boot is successfully disabled.

3 How to re-enable Secure Boot on Surface Go

When you finish your OS installation, you should re-enable the Secure Boot option to protect your Surface from malware and to remove the red bar on your device’s boot screen when it startup. To do so:

1. Follow all the steps above to go to the Security page.
2. Click the Disabled button and select Enabled.
   
3. Now you will notice that the button will be labeled as Enabled.
   
4. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.