How to Get Rid of Red Bar with Unlocked Lock Icon from Surface Boot Screen

Got an annoying red bar and an unlocked lock icon on your Surface when it startup. Here is a step-by-step guide on how to get rid of that.

How to Remove Red Bar with Unlocked Lock Icon from Surface Boot Screen

Microsoft has developed its own UEFI firmware for all recent Surface devices. The firmware contains security features that can protect users from pre-boot and boot sequence attacks. That includes a feature called Secure Boot that is purposely built to prevent unauthorized operating systems and malicious software applications from the boot of your Surface.

The feature is enabled by default and can be disabled via Surface UEFI. In case it gets disabled, your Surface will notify you by showing up an alert notification right when you turn on your Surface.

If you see a red stripe and an open padlock on your Surface Boot screen, it’s likely that there is something wrong with Surface’s Secure Boot or other security configurations.

  1. What does Surface Boot with Red Bar Look Like?
  2. How to Boot into Surface UEFI Firmware Settings
  3. Configuring UEFI Settings to Remove the Red Bar from Surface Boot Screen

1 What does Surface Boot with Red Bar Look Like?

Here’s what it looks like on Surface devices released in 2017 and later.

Secure Boot Disabled Red Bar on Newer Surface

Here’s what it looks like on Surface devices released before 2017.

Secure Boot Disabled Red Bar on Older Surface

2 How to Boot into Surface UEFI Firmware Settings

You can boot your Surface into the UEFI menu by using the following methods:

  • Method 1: Hardware Buttons or Keyboard
  • Method 2: Windows Recovery Settings

Let’s get into the details of each method.

Method 1: Boot to Surface UEFI via Hardware Buttons or Keyboard

To boot into the Surface UEFI menu on

Do the following:

How to Enter Surface Pro UEFI/BIOS Settings

  1. Shut down your Surface Pro.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

To boot into the Surface UEFI menu on

Do the following:

How to Enter Surface Laptop UEFI/BIOS Settings

  1. Shut down your Surface Laptop.
  2. Press and hold the Volume Up (F6) key on your Surface, then press and release the Power Key next to the Del key.
  3. When you see the Surface logo appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

To boot into the Surface UEFI menu on

Do the following:

How to Enter Surface Book UEFI/BIOS Settings

  1. Shut down your Surface Book.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

To boot into the Surface UEFI menu on

Do the following:

Surface Go - Entering UEFI Settings

  1. Shut down your Surface Go.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

Method 2: Boot to Surface UEFI via Windows Recovery Settings

  1. Open Windows Settings
    First, you need to access Windows Settings by going to Start and opening the Settings app with the gear icon (or by using Win + I shortcut key).
  2. Go to Windows Updates > Advanced options
    On the left pane of the settings, select "Windows Updates". Then select "Advanced options" from the more options section.
    Windows 11: Settings > Windows Update > Advanced options
  3. Select the "Recovery" option
    Under the "Additional options", select "Recovery".
    Windows 11: Settings > Recovery
  4. Restart your Surface Laptop in "Advanced Startup" mode.
    Under recovery options, click the "Restart now" button to restart your Surface Laptop in advanced startup mode which will allow you to change startup settings.
    Windows 11: Settings > Advanced startup
  5. Select "Troubleshoot"
    After your Surface is restarted, you will see a blue screen with the following options. Select "Troubleshoot".
    Windows 11 Recovery - Troubleshooting
  6. Select "Advanced options".
    Windows 11 Recovery - Advanced Options
  7. Select "UEFI Firmware Settings".
    Windows 11 Recovery - UEFI Firmware Settings
  8. Select "Restart" to restart your Surface directly into the UEFI Firmware Settings.
    Windows 11 Recovery - UEFI Restart

  1. Insert your bootable USB or recovery drive into one of the Surface Laptop's available USB ports.
  2. Open Windows Settings
    First, you need to access Windows Settings by going to Start and clicking the Gear icon (or by using Win + I shortcut key).
  3. Go to Update & Security
    In Windows Settings, select "Update & Security".
    Windows 10 Settings > Update & Security
  4. Go to Recovery
    On the left side of the settings, select Recovery.
    Windows 10 Settings > Update & Security > Recovery
  5. Restart your Surface in Advanced Startup
    Under the "Advanced startup" section, click Restart now to restart your Surface in an advanced startup mode.
    Windows 10 Settings > Update & Security > Recovery > Advanced Startup
  6. Select "Troubleshoot"
    After your Surface is restarted, you will see a blue screen with the following options. Select "Troubleshooting".
    Windows 11 Recovery - Troubleshoot
  7. Select "Advanced options".
    Windows 10 Recovery - Advanced Options
  8. Select "UEFI Firmware Settings".Windows 10 Recovery - UEFI Firmware Settings
  9. Select "Restart" to restart your Surface directly into the UEFI Firmware Settings.
    Windows 10 Recovery - UEFI Firmware Settings - Restart

3 Configuring UEFI Settings to Remove the Red Bar from Surface Boot Screen

To get back a clean look of your Surface devices, you simply go to Surface UEFI and re-enable the Secure Boot security feature.

On Surface Pro 4, Surface Pro (5th Gen), Surface Pro 6, Surface Pro 7, Surface Pro 8, and Surface Pro X:

  1. Go to the Security page, under the Secure Boot section click Change configuration.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  2. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only”, and click OK to apply the option.
    Enable Secure Boot on Surface Book
  3. Now the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  4. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.

On Surface Laptop (1st Gen), Surface Laptop 2, Surface Laptop 3, and Surface Laptop 4:

  1. Go to the Security page, under the Secure Boot section click Change configuration.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  2. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only”, and click OK to apply the option.
    Enable Secure Boot on Surface Book
  3. Now the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  4. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.

On Surface Book(1st Gen), Surface Book 2, and Surface Book 3:

  1. Go to the Security page, under the Secure Boot section click Change configuration.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  2. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only”, and click OK to apply the option.
    Enable Secure Boot on Surface Book
  3. Now the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  4. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.

On Surface Go, Surface Go 2, and Surface Go 3:

  1. Go to the Security page, under the Secure Boot section click the button Disabled.
    You can notice that the current setting for Secure Boot is Disabled as displayed in the button label.
    Disable Secure Boot on Surface Go 003
  2. On the Change Secure Boot configuration dialog, change the option to Enabled.Enable Secure Boot on Surface Go 001
  3. Now the current setting of Secure Boot will be changed to Enabled.
    Enable Secure Boot on Surface Go 002
  4. Now go to the Exit page, and click Restart now to save the settings and restart your Surface.Disable Secure Boot on Surface Go 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear and it means the Secure Boot is successfully enabled.