You can use the Microsoft Surface UEFI Configurator tool in three modes: To learn more, see Secure Surface Dock ports with SEMM.įigure 1. You can now use Surface UEFI Configurator and SEMM to manage ports on Surface Dock 2 or Surface Thunderbolt 4 Dock. SEMM packages also contain a certificate that's installed and stored in firmware and is used to verify the signature of configuration files before UEFI settings are applied. These packages contain a configuration file that specifies the UEFI settings. Use WinPE images to enroll, configure, and unenroll SEMM on a Surface device.Create Windows Installer (.msi) packages.You can use Microsoft Surface UEFI Configurator to: The primary workspace of SEMM is Microsoft Surface UEFI Configurator, as shown in Figure 1. For information, see Use Microsoft Endpoint Configuration Manager to manage devices with SEMM. Integration with Microsoft Endpoint Configuration Manager. SEMM standalone tool, Microsoft Surface UEFI Configurator, is described in this article. There are two administrative options that you can use to manage SEMM and enroll Surface devices: When the SEMM certificate is removed and control of UEFI settings is returned to the user of the device, the Surface device is considered unenrolled in SEMM. When Surface devices are configured by SEMM and secured with the SEMM certificate, they're considered enrolled in SEMM. To learn more, see View your system info. Surface Laptop Go 2 (commercial SKUs only)Ĭommercial SKUs (aka Surface for Business) run Windows 10 Pro/Enterprise or Windows 11 Pro/Enterprise consumer SKUs run Windows 10/Windows 11 Home.Surface Laptop 3 (Intel processors only).Surface Laptop 4 (commercial SKUs only).Surface Laptop 5 (commercial SKUs only).Surface Laptop Studio (commercial SKUs only).Surface Pro 9 with 5G (commercial SKUs only).SEMM is only available on devices with Surface UEFI firmware including: To migrate a Surface Hub 2S to Windows 10 Pro or Windows Enterprise, SEMM is required. SEMM also uses a certificate to protect the configuration from unauthorized tampering or removal. Prepare UEFI settings configurations and install them on a Surface device.Secure and manage firmware settings in your organization. Microsoft Surface Enterprise Management Mode (SEMM) is a feature of Surface devices with Surface Unified Extensible Firmware Interface (UEFI).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |