How to unenroll Microsoft Surface from SEMM

Microsoft Surface helps you leverage the latest technologies – only sometimes this very characteristic becomes a problem. For example, when a Surface device is enrolled in Surface Enterprise Management Style (SEMM), information technology prevents any unauthorized changes to Surface UEFI settings. So, to restore control of Surface UEFI settings to the user, the device has to exist unenrolled from SEMM. Hither'south the way to unenroll Microsoft Surface from SEMM.

Unenroll Microsoft Surface from SEMM

You can choose to unenroll your Microsoft Surface from SEMM via two methods namely-

Unenrolling Surface from SEMM with a Recovery Request
Unenrolling Surface with UEFI reset package

The process of getting Microsoft Surface unenrolled from SEMM is sometimes described as reset or recovery.

one] Unenroll Surface from SEMM with a Recovery Asking

Boot the selected Surface device to be unenrolled from SEMM to Surface UEFI.

Adjacent, enter the Surface UEFI countersign when prompted.

When y'all run into the 'Surface Enterprise Direction Mode info' screen, select the 'Enterprise management' tab, every bit shown in the image above. (The Enterprise direction page is displayed in Surface UEFI on devices enrolled in SEMM).

Hit the 'Get Started' push button and choose 'Next' to kickstart the Recovery Request process.

Once you lot end with the higher up steps, select SEMM Certificate from the list of certificates displayed on the 'Choose a SEMM reset key page' and so press Next.

Now, when directed to the 'Enter SEMM reset verification code' page, choose the QR Code or Text buttons to brandish your Recovery Asking (Reset-Request).

While using the QR Code Recovery Request (Reset-Asking), use a QR reader app on a mobile device to read the code. The QR reader app will translate the QR code into an alphanumeric string. You can so email or message that string to the administrator that will produce the reset verification code with Microsoft Surface UEFI Configurator. Alternatively, to use the Recovery Asking (Reset-Asking) as text, only type the text directly into Microsoft Surface UEFI Configurator.

When done, open Microsoft Surface UEFI Configurator from the First menu on another computer, click 'Start' > 'Recovery Request' and choose 'Certificate Protection' to authenticate the Recovery Asking with the SEMM document.

Now, Browse to and select your SEMM certificate file, and and then click OK. At this stage, if you are prompted to enter the document password, type and confirm the password for the document file, and and then click OK. (Microsoft Surface UEFI Configurator).

Enter the Recovery Request (Reset-Request), then click 'Generate' to create a reset verification code.

The reset verification lawmaking will be shown in Microsoft Surface UEFI Configurator.

Click the Share push button to send the reset verification lawmaking past email.

Enter the reset verification code in the provided field on the Surface device and then click or press 'Verify' to reset the device and unenroll the device from SEMM.

At present, hit the 'Restart now' on the SEMM reset successful page to complete the removal from SEMM.

Finally, click 'End' in Microsoft Surface UEFI Configurator to complete the Recovery Request (Reset-Asking) process and shut Microsoft Surface UEFI Configurator.

2] Unenroll Surface with UEFI reset package

The bundle comes as a Windows Installer (.msi) file and resets the Surface UEFI configuration on a Surface device to its default settings. It likewise removes the SEMM document, and unenrolls the device from SEMM.

For creating a reset package, you lot volition demand the serial number of the device you desire to unenroll as well as the SEMM document used to enroll the device.

How to unenroll Microsoft Surface from SEMM

If yous know it, open 'Microsoft Surface UEFI Configurator' from the Outset menu, go to Starting time and click 'Reset Package'.

Unenroll Surface from SEMM

Now, choose 'Certificate Protection' to add your SEMM certificate file with the private key (.pfx).

Later, scan to the location of your document file, select the file, and so click OK.

Hit 'Next' after that.

When prompted, enter the serial number of the device yous want to unenroll from SEMM, and then click 'Build' to generate the Surface UEFI reset bundle.

When the 'Save As' dialog box appears, specify a name for the Surface UEFI reset package. Specify the location where yous would like to save the file, and then click Save.

After the procedure of package generation gets completed, you lot'll get a confirmation message. Click Finish to consummate package creation and close Microsoft Surface UEFI Configurator.

Now, all yous need to practice is run the Surface UEFI reset parcel Windows Installer (.msi) file on the Surface device to unenroll the device from SEMM. You will too exist required to reboot to complete the unenroll operation.