Symantec Drive Encryption is incompatible with Microsoft Surface Pro 1 and Surface Pro 2 laptops when Secure Boot is enabled (a boot failure occurs when restarting your system after encrypting the disk).
To enable compatibility with Secure Boot on a Microsoft Surface Pro 1 or Surface Pro 2 laptop, download and run the Microsoft Surface Pro UEFI CA OEM PK Tool.
Instructions and the download file are available at http://www.microsoft.com/en-us/download/details.aspx?id=41666.
Note: This tool can only be run when your system is decrypted and Secure Boot is enabled.