How To: Unenroll Microsoft Surface Device from SEMM

Updated November 2024: Stop getting error messages and slow down your system with our optimization tool. Get it now at this link

1. Download and install the repair tool here.
2. Let it scan your computer.
3. The tool will then repair your computer.

When a Surface device is registered in Surface Enterprise Management (SEMM) mode, a certificate is stored in the firmware of that device. The presence of this certificate and registration in SEMM prevents any unauthorized changes to surface UEFI settings or options while the device is registered in SEMM. To restore the user’s control of the UEFI Surface parameters, the Surface unit must be disconnected from the SEMM, a process sometimes called Reset or Recovery. There are two methods you can use to roll a device from the EMMS: a UEFI Surface Reset Package and a Recovery Request.

Unenroll Surface from SEMM with a Recovery Request

1. Start the selected surface system to be scrolled from the SEMM to the UEFI Surface.
2. When prompted, enter the UEFI surface password.
3. When you see the Surface Enterprise Management Mode Information screen, select the Enterprise Administration tab as shown in the figure above. (The company’s administration web page is displayed in Surface UEFI on the gadgets registered in the SEMM.)
4. Click on the “Start” button and select “Next” to start the course on recovery requests.
5. When you have completed the above steps, select SEMM Certificate from the Certificate record displayed on the web page Choose a SEMM reset key, and then press Next.
6. When you are directed to the Web page Enter the SEMM reset verification code, select the QR Code or Text buttons to display your reset request.
7. When using the QR code retrieval request (reset request), use a QR Reader application on a cellular system to learn the code. The QR Reader application translates the QR code into an alphanumeric string. You can then send an email or message to the administrator, who can create the reset verification code using the Microsoft Surface UEFI configurator. To use the recovery request (Reset-Request) as text content, you can also sort the text content only immediately in the Microsoft Surface UEFI configurator.

Unroll the surface with the UEFI Reset Package

The package is delivered as a Windows Installer file (.msi) and resets the default UEFI Surface configuration settings to a Surface device. It also deletes the SEMM certificate and the SEMM device.

1. To create a reset package, you need the serial number of the device you want to delete and the SEMM certificate that registers the device.
2. If you know, open’Microsoft Surface UEFI Configurator’ in the Start menu, go to Start and click on’Reset Package’.
3. Now select’Certificate Protection’ to add your SEMM certificate file with the private key (.pfx).
4. Then navigate to the location of your certificate file, select the file, and click OK.
5. Then press’Next’.
6. When prompted, enter the serial number of the device you want to run from the EMMS, then click Build to generate the Surface UEFI reset package.
7. When the Save As dialog box appears, specify a name for the UEFI Surface reset package. Specify the location where you want to save the file, and then click Save.
8. Once the package creation process is complete, you will receive a confirmation message. Click Finish to complete the package creation and close Microsoft Surface UEFI Configurator.

https://docs.microsoft.com/en-us/surface/unenroll-surface-devices-from-semm

Expert Tip: This repair tool scans the repositories and replaces corrupt or missing files if none of these methods have worked. It works well in most cases where the problem is due to system corruption. This tool will also optimize your system to maximize performance. It can be downloaded by Clicking Here