-->

This article describes how to install and configure the v3.11.760.0 UEFI update to enable additional security options for Surface Pro 3 devices.

How to use a Micro SD card to store OneDrive, Apps, Videos and more! In this tutorial, I show tips for setting up a new SD card with the Microsoft Surface.

To address more granular control over the security of Surface devices, the v3.11.760.0 UEFI update provides additional security options that allow you to disable specific hardware devices or to prevent starting from those devices. After the UEFI update is installed on a device, you can configure it manually or automatically by running a script.

Manually install the UEFI update

This video shows the location of a micro sd card on a Microsoft Surface Pro 6. This video shows the location of a micro sd card on a Microsoft Surface Pro 6. The video will show how to. Home » Devices » Microsoft Surface Pro 3 Specs – Full Technical Specifications. Microsoft Surface Pro 3 Specs – Full Technical Specifications. Microsoft Surface Pro 3 is the third-generation of Surface Pro series, introduced by Microsoft on June 20, 2014. Microsoft Surface Pro 3 is the tablet that can replace your laptop. Util: SanDisk 128GB Micro SD Ultra + instalare in Surface Pro 4.

Before you can configure the advanced security features of your Surface device, you must first install the v3.11.760.0 UEFI update. This update is installed automatically if you receive your updates from Windows Update. For more information about how to configure Windows to update automatically by using Windows Update, see How to configure and use Automatic Updates in Windows.

To update the UEFI on Surface Pro 3, you can download and install the Surface UEFI updates as part of the Surface Pro 3 Firmware and Driver Pack. These firmware and driver packs are available from the Surface Pro 3 page on the Microsoft Download Center. You can find out more about the firmware and driver packs at Download the latest firmware and drivers for Surface devices. The firmware and driver packs are available as both self-contained Windows Installer (.msi) and archive (.zip) formats. You can find out more about these two formats and how you can use them to update your drivers at Manage Surface driver and firmware updates.

Manually configure additional security settings

Note

To enter firmware setup on a Surface device, begin with the device powered off, press and hold the Volume Up button, then press and release the Power button, then release the Volume Up button after the device has begun to boot.

After the v3.11.760.0 UEFI update is installed on a Surface device, an additional UEFI menu named Advanced Device Security becomes available. If you click this menu, the following options are displayed:

Option	Description	Available settings (default listed in bold)
Network Boot	Enables or disables the ability of your Surface device to boot from the network (also known as PXE boot).	Enabled, Not Bootable
Side USB	Enables or disables the USB port on the side of the Surface device. Additionally, the USB port can be enabled, but not allow booting.	Enabled, Not Bootable, Disabled
Docking Port	Enables or disables the ports on the Surface docking station. Additionally, the docking port can be enabled, but block booting from any USB or Ethernet port in the docking station.	Enabled, Not Bootable, Disabled
Front Camera	Enables or disables the camera on the front of the Surface device.	Enabled, Disabled
Rear Camera	Enables or disables the camera on the rear of the Surface device.	Enabled, Disabled
On Board Audio	Enables or disables audio on the Surface device.	Enabled, Disabled
microSD	Enables or disables the microSD slot on the Surface device.	Enabled, Disabled
WiFi	Enables or disables the built-in Wi-Fi transceiver in the Surface device. This also disables Bluetooth.	Enabled, Disabled
Bluetooth	Enables or disables the built-in Bluetooth transceiver in the Surface device.	Enabled, Disabled

Automate additional security settings

As an IT professional with administrative privileges, you can automate the configuration of UEFI settings by leveraging Surface Pro 3 Firmware Tools (476 KB) available from the Microsoft Download Center. These tools install a .NET assembly that can be called from any custom application or script.

Prerequisites

• The sample scripts below leverage the previously mentioned extension and therefore assume that the tool has been installed on the device being managed.
• The scripts must be run with administrative privilege.
• The Windows PowerShell command Set-ExecutionPolicy Unrestricted must be called prior to running sample scripts if they are not digitally signed.

Sample scripts

Note

The UEFI password used in the sample scripts below is presented in clear text. We strongly recommend saving the scripts in a protected location and running them in a controlled environment.

Show all configurable options:

Set or change UEFI password:

Check status of proposed changes:

Surface Pro 3 Micro Sd Slot Locations

Revert UEFI to default values:

Status code interpretation

Surface Pro Microsd Card Slot

• 00 - The proposed update was a success
• 02 - One of the proposed values had an invalid value
• 03 - There was a proposed value set that was not recognized
• 0F - The unlock password did not match currently set password