How To: Unenroll Microsoft Surface Device from SEMM

RECOMMENDED: Click here to fix Windows errors and optimize system performance

When a Surface device is registered in Surface Enterprise Management (SEMM) mode, a certificate is stored in the firmware of that device. The presence of this certificate and registration in SEMM prevents any unauthorized changes to surface UEFI settings or options while the device is registered in SEMM. To restore the user’s control of the UEFI Surface parameters, the Surface unit must be disconnected from the SEMM, a process sometimes called Reset or Recovery. There are two methods you can use to roll a device from the EMMS: a UEFI Surface Reset Package and a Recovery Request.

Unenroll Surface from SEMM with a Recovery Request

  1. Start the selected surface system to be scrolled from the SEMM to the UEFI Surface.
  2. When prompted, enter the UEFI surface password.
  3. When you see the Surface Enterprise Management Mode Information screen, select the Enterprise Administration tab as shown in the figure above. (The company’s administration web page is displayed in Surface UEFI on the gadgets registered in the SEMM.)
  4. Click on the “Start” button and select “Next” to start the course on recovery requests.
  5. When you have completed the above steps, select SEMM Certificate from the Certificate record displayed on the web page Choose a SEMM reset key, and then press Next.
  6. When you are directed to the Web page Enter the SEMM reset verification code, select the QR Code or Text buttons to display your reset request.
  7. When using the QR code retrieval request (reset request), use a QR Reader application on a cellular system to learn the code. The QR Reader application translates the QR code into an alphanumeric string. You can then send an email or message to the administrator, who can create the reset verification code using the Microsoft Surface UEFI configurator. To use the recovery request (Reset-Request) as text content, you can also sort the text content only immediately in the Microsoft Surface UEFI configurator.

May 2020 Update:

We now recommend using this tool for your error. Additionally, this tool fixes common computer errors, protects you against file loss, malware, hardware failures and optimizes your PC for maximum performance. You can fix your PC problems quickly and prevent others from happening with this software:

  • Step 1 : Download PC Repair & Optimizer Tool (Windows 10, 8, 7, XP, Vista – Microsoft Gold Certified).
  • Step 2 : Click “Start Scan” to find Windows registry issues that could be causing PC problems.
  • Step 3 : Click “Repair All” to fix all issues.


Unroll the surface with the UEFI Reset Package

The package is delivered as a Windows Installer file (.msi) and resets the default UEFI Surface configuration settings to a Surface device. It also deletes the SEMM certificate and the SEMM device.

  1. To create a reset package, you need the serial number of the device you want to delete and the SEMM certificate that registers the device.
  2. If you know, open’Microsoft Surface UEFI Configurator’ in the Start menu, go to Start and click on’Reset Package’.
  3. Now select’Certificate Protection’ to add your SEMM certificate file with the private key (.pfx).
  4. Then navigate to the location of your certificate file, select the file, and click OK.
  5. Then press’Next’.
  6. When prompted, enter the serial number of the device you want to run from the EMMS, then click Build to generate the Surface UEFI reset package.
  7. When the Save As dialog box appears, specify a name for the UEFI Surface reset package. Specify the location where you want to save the file, and then click Save.
  8. Once the package creation process is complete, you will receive a confirmation message. Click Finish to complete the package creation and close Microsoft Surface UEFI Configurator.

RECOMMENDED: Click here to troubleshoot Windows errors and optimize system performance