Share via

Secure boot error - new surface

Ruszkowski Dawid 20 Reputation points
2025-12-12T13:19:15.06+00:00

Unable to set secure boot.

Error: The system failed to update secure boot certificate keyset. The state of secure boot on this system has not been modified. Please reboot the system to try again, or open surface uefi settings and select a different secure boot certificate keyset.

What is the solution?

Surface | Surface Laptop | Safety and security
{count} votes

5 answers

Sort by: Most helpful
  1. Barb Bowman 80,695 Reputation points MVP Volunteer Moderator
    2025-12-15T14:43:48.6166667+00:00

    @Ruszkowski Dawid Thanks for confirming the model is a Surface Laptop 7 for Business. Suggest you download and install the latest msi package from https://www.microsoft.com/en-us/download/details.aspx?id=106120 which is for the Surface Laptop 7 for Business with the Intel processor. There may be a firmware update in this package that resolves the issue. If not, since this is a new Surface, suggest you return for refund and repurchase.

    0 comments No comments

  2. Ruszkowski Dawid 20 Reputation points
    2025-12-15T14:32:12.7+00:00

    Surface Laptop for Business 7th Ed

    0 comments No comments

  3. Ruszkowski Dawid 20 Reputation points
    2025-12-15T13:58:44.0633333+00:00

    Battery nad Motherboard - Surface Laptop Studio 2


  4. Barb Bowman 80,695 Reputation points MVP Volunteer Moderator
    2025-12-13T11:30:40.42+00:00

    You posted two other questions in the Surface Studio tag, and mentioned Surface Studio 2 in one of them. One mentioned a battery (the Studio is a desktop without a battery, while the Studio Laptop 2 has a battery). This post is tagged Surface Laptop.

    1. What exact device(s) were you referencing for the prior two questions about motherboard and battery?
    2. Is this question about the same device?
    3. If not the same device, which exact Surface Laptop model?

    https://support.microsoft.com/en-us/surface/surface-secure-boot-certificates-532abf3b-bafe-420f-b615-bf174105549e may provide applicable information on certs. If this is a brand new Surface you have just purchased, you can try using the downloadable recovery image. If that fails, suggest you return and repurchase.

    0 comments No comments

  5. Q&A Assist
    2025-12-12T13:19:27.66+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    To resolve the secure boot error on your Surface device, follow these steps:

    1. Reboot the System: Start by rebooting your Surface device to see if the error persists after a fresh start.
    2. Access UEFI Settings: If the error continues, access the UEFI settings:
      • Boot your Surface device and press the appropriate key to enter UEFI settings (usually F1, F2, or Esc).
      • Alternatively, from Windows, hold the Shift key while selecting Restart, then navigate to Troubleshoot > Advanced Options > UEFI Firmware Settings.
    3. Change Secure Boot Certificate Keyset: In the UEFI settings, navigate to the Security section and look for the Secure Boot settings. Here, you can select a different secure boot certificate keyset. Choose the appropriate option that aligns with your system's requirements.
    4. Save Changes and Exit: After making changes, ensure to save them and exit the UEFI settings. Your device will reboot.
    5. Check for Updates: Ensure that your Surface device is running the latest firmware and software updates, as these can sometimes resolve compatibility issues with secure boot.

    If the issue persists after trying these steps, consider contacting Microsoft support for further assistance.


    References:

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.