ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Using Microsoft Surface Pro 1 and 2 laptops when Secure Boot is enabled on Microsoft Windows 8/8.1 UEFI systems


Article ID: 161306


Updated On:


Drive Encryption


Symantec Drive Encryption is incompatible with Microsoft Surface Pro 1 and Surface Pro 2 laptops when Secure Boot is enabled (a boot failure occurs when restarting your system after encrypting the disk).


To enable compatibility with Secure Boot on a Microsoft Surface Pro 1 or Surface Pro 2 laptop, download and run the Microsoft Surface Pro UEFI CA OEM PK Tool.

Instructions and the download file are available at

Note: This tool can only be run when your system is decrypted and Secure Boot is enabled.