How to Get Rid of Red Bar with Unlocked Lock Icon from Surface Boot Screen

Got an annoying red bar and an unlocked lock icon on your Surface when it startup. Here is a step-by-step guide on how to get rid of that.

How to Remove Red Bar with Unlocked Lock Icon from Surface Boot Screen

Microsoft has developed its own UEFI firmware for all recent Surface devices. The firmware contains security features that can protect users from pre-boot and boot sequence attacks. That includes a feature called Secure Boot that is purposely built to prevent unauthorized operating systems and malicious software applications from the boot of your Surface.

The feature is enabled by default and can be disabled via Surface UEFI. In case it gets disabled, your Surface will notify you by showing up an alert notification right when you turn on your Surface.

If you see a red stripe and an open padlock on your Surface Boot screen, it’s likely that there is something wrong with Surface’s Secure Boot or other security configurations.

Here’s what it looks like on Surface devices released in 2017 and later.

Secure Boot Disabled Red Bar on Newer Surface

Here’s what it looks like on Surface devices released before 2017.

Secure Boot Disabled Red Bar on Older Surface

Removing Red Bar from Surface Devices by Enabling Secure Boot

To get back a clean look of your Surface devices, you simply go to Surface UEFI and re-enable the Secure Boot security feature. To do so:

On Surface Pro 4, Surface Pro (5th Gen), Surface Pro 6, Surface Pro 7, Surface Pro 8, and Surface Pro X:

  1. Shut down your Surface Pro.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.How to Enter Surface Pro UEFI/BIOS Settings
  4. Go to the Security page, under the Secure Boot section click Change configuration.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  5. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only”, and click OK to apply the option.
    Enable Secure Boot on Surface Book
  6. Now the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  7. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  8. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.

On Surface Laptop (1st Gen), Surface Laptop 2, Surface Laptop 3, and Surface Laptop 4:

  1. Shut down your Surface Laptop.
  2. Press and hold the Volume Up (F6) key on your Surface, then press and release the Power Key next to the Del key.
  3. When you see the Surface logo appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.How to Enter Surface Laptop UEFI/BIOS Settings
  4. Go to the Security page, under the Secure Boot section click Change configuration.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  5. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only”, and click OK to apply the option.
    Enable Secure Boot on Surface Book
  6. Now the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  7. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  8. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.

On Surface Book(1st Gen), Surface Book 2, and Surface Book 3:

  1. Shut down your Surface Book.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.How to Enter Surface Book UEFI/BIOS Settings
  4. Go to the Security page, under the Secure Boot section click Change configuration.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  5. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only”, and click OK to apply the option.
    Enable Secure Boot on Surface Book
  6. Now the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  7. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  8. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.

On Surface Go, Surface Go 2, and Surface Go 3:

  1. Shut down your Surface Go.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.Surface Go - Entering UEFI Settings
  4. Go to the Security page, under the Secure Boot section click the button Disabled.
    You can notice that the current setting for Secure Boot is Disabled as displayed in the button label.
    Disable Secure Boot on Surface Go 003
  5. On the Change Secure Boot configuration dialog, change the option to Enabled.Enable Secure Boot on Surface Go 001
  6. Now the current setting of Secure Boot will be changed to Enabled.
    Enable Secure Boot on Surface Go 002
  7. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Go 004
  8. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.