How to Remove Red Bar with Unlocked Lock Icon from Surface Boot Screen

Microsoft has created a unique UEFI firmware for all its recent Surface devices. This firmware includes security features to safeguard users against pre-boot and boot sequence attacks. One of the essential features of this firmware is Secure Boot, which is precisely engineered to prevent unauthorized operating systems and malicious software applications from booting on your Surface device.

The feature is enabled by default and can be disabled via Surface UEFI. In case it gets disabled, your Surface will notify you by showing up an alert notification right when you turn on your Surface.

If you see a red stripe and an open padlock on your Surface Boot screen, there is likely something wrong with Surface’s Secure Boot or other security configurations.

1 What does Surface Boot with Red Bar Look Like?

Here’s what it looks like on Surface devices released in 2017 and later.

Secure Boot Disabled Red Bar on Newer Surface

Here’s what it looks like on Surface devices released before 2017.

Secure Boot Disabled Red Bar on Older Surface

2 How to Boot into Surface UEFI Firmware Settings

You can boot your Surface into the UEFI menu by using the following methods:

  • Method 1: Hardware Buttons or Keyboard
  • Method 2: Windows Recovery Settings

Let’s get into the details of each method.

Method 1: Boot to Surface UEFI via Hardware Buttons or Keyboard

To boot into the Surface UEFI menu on Surface Pro 3, Surface Pro 4, Surface Pro 5, Surface Pro 6, Surface Pro 7, Surface Pro 8, Surface Pro 9, or Surface Pro X, do the following:

How to Enter Surface Pro UEFI/BIOS Settings

  1. Shut down your Surface Pro.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

To boot into the Surface UEFI menu on Surface Laptop (1st Gen), Surface Laptop 2, Surface Laptop 3, Surface Laptop 4, Surface Laptop 5, Surface Laptop Go (1st Gen), Surface Laptop Go 2, Surface Laptop SE, or Surface Laptop Studio, do the following:

How to Enter Surface Laptop UEFI/BIOS Settings

  1. Shut down your Surface Laptop.
  2. Press and hold the Volume Up (F6) key on your Surface, then press and release the Power Key next to the Del key.
  3. When you see the Surface logo appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

To boot into the Surface UEFI menu on Surface Book (1st Gen), Surface Book 2, or Surface Book 3, do the following:

How to Enter Surface Book UEFI/BIOS Settings

  1. Shut down your Surface Book.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

To boot into the Surface UEFI menu on Surface Go (1st Gen), Surface Go 2, or Surface Go 3, do the following:

Surface Go - Entering UEFI Settings

  1. Shut down your Surface Go.
  2. Press and hold the Volume Up button on your Surface, then press and release the Power button.
  3. When you see the Surface logo screen appear, release the Volume Up button. The Surface UEFI screen will appear in a few seconds.

Method 2: Boot to Surface UEFI via Windows Recovery Settings

  1. Open Windows Settings
    First, you need to access Windows Settings by going to Start and opening the Settings app with the gear icon (or by using Win + I shortcut key).
  2. Go to Windows Updates > Advanced options
    On the left pane of the settings, select "Windows Updates". Then select "Advanced options" from the more options section.
    Windows 11: Settings > Windows Update > Advanced options
  3. Select the "Recovery" option
    Under the "Additional options", select "Recovery".
    Windows 11: Settings > Recovery
  4. Restart your Surface Laptop in "Advanced Startup" mode.
    Under recovery options, click the "Restart now" button to restart your Surface Laptop in advanced startup mode which will allow you to change startup settings.
    Windows 11: Settings > Advanced startup
  5. Select "Troubleshoot"
    After your Surface is restarted, you will see a blue screen with the following options. Select "Troubleshoot".
    Windows 11 Recovery - Troubleshooting
  6. Select "Advanced options".
    Windows 11 Recovery - Advanced Options
  7. Select "UEFI Firmware Settings".
    Windows 11 Recovery - UEFI Firmware Settings
  8. Select "Restart" to restart your Surface directly into the UEFI Firmware Settings.
    Windows 11 Recovery - UEFI Restart

  1. Open Windows Settings
    First, you need to access Windows Settings by going to Start and clicking the Gear icon (or by using Win + I shortcut key).
  2. Go to Update & Security
    In Windows Settings, select "Update & Security".
    Windows 10 Settings > Update & Security
  3. Go to Recovery
    On the left side of the settings, select Recovery.
    Windows 10 Settings > Update & Security > Recovery
  4. Restart your Surface in Advanced Startup
    Under the "Advanced startup" section, click Restart now to restart your Surface in an advanced startup mode.
    Windows 10 Settings > Update & Security > Recovery > Advanced Startup
  5. Select "Troubleshoot"
    After your Surface is restarted, you will see a blue screen with the following options. Select "Troubleshooting".
    Windows 11 Recovery - Troubleshoot
  6. Select "Advanced options".
    Windows 10 Recovery - Advanced Options
  7. Select "UEFI Firmware Settings".Windows 10 Recovery - UEFI Firmware Settings
  8. Select "Restart" to restart your Surface directly into the UEFI Firmware Settings.
    Windows 10 Recovery - UEFI Firmware Settings - Restart

3 Configuring UEFI Settings to Remove the Red Bar from Surface Boot Screen

To get a clean look at your Surface devices, go to Surface UEFI and re-enable the Secure Boot security feature.

On Surface Pro 4, Surface Pro (5th Gen), Surface Pro 6, Surface Pro 7, Surface Pro 8, and Surface Pro X:

  1. Go to the Security page, under the Secure Boot section, and click the “Change configuration” button.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  2. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only” and click OK to apply the option.
    Enable Secure Boot on Surface Book
  3. Now, the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  4. Go to the Exit page, click the “Restart now” button to save the settings, and restart your Surface.Disable Secure Boot on Surface Book 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear, which means the Secure Boot is successfully enabled.

On Surface Laptop (1st Gen), Surface Laptop 2, Surface Laptop 3, and Surface Laptop 4:

  1. Go to the Security page, under the Secure Boot section, and click the “Change configuration” button.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  2. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only” and click OK to apply the option.
    Enable Secure Boot on Surface Book
  3. Now, the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  4. Now go to the Exit page, and click the Restart now button to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear, which means the Secure Boot is successfully enabled.

On Surface Book(1st Gen), Surface Book 2, and Surface Book 3:

  1. Go to the Security page, under the Secure Boot section, and click the Change Configuration button.
    You can notice that the current setting for Secure Boot is Disabled.
    Disable Secure Boot on Surface Book 003
  2. On the “Change Secure Boot configuration” dialog, change the option to “Microsoft only” and click OK to apply the option.
    Enable Secure Boot on Surface Book
  3. Now, the current setting of Secure Boot will be changed to Enabled.
    Disable Secure Boot on Surface Book 001
  4. Now go to the Exit page, and click the Restart now button to save the settings and restart your Surface.Disable Secure Boot on Surface Book 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear, which means the Secure Boot is successfully enabled.

On Surface Go, Surface Go 2, and Surface Go 3:

  1. Go to the Security page, under the Secure Boot section, and click Disabled.
    You can notice that the current setting for Secure Boot is Disabled, as displayed in the button label.
    Disable Secure Boot on Surface Go 003
  2. On the Change Secure Boot configuration dialog, change the option to Enabled.Enable Secure Boot on Surface Go 001
  3. Now, the current setting of Secure Boot will be changed to Enabled.
    Enable Secure Boot on Surface Go 002
  4. Now go to the Exit page, and click the Restart now button to save the settings and restart your Surface.Disable Secure Boot on Surface Go 004
  5. After rebooting, the red bar with an unlocked lock icon in the middle of the screen should disappear, which means the Secure Boot is successfully enabled.

FAQs

To further help, here are some answers to questions you may have about Secure Boot and the red bar on Surface startup:

Question

How do you check if Secure Boot is enabled on Windows 10 and 11?

Answer

To check the status of the Secure boot configuration on your Surface or any PCs running Windows 10 and Windows 11, do the following:

  1. Go to Start > All apps > Windows Security
  2. On the app sidebar, select the Device Security option.
  3. You can find the Secure Boot status information here under the Secure Boot section.
Secure Boot status in Windows Security app.

Secure boot is on