Surface Pro 4 - BIOS Reset

Question

I am attempting to enable Secure Boot on my Surface Pro 4. When I attempt to do so, I receive the following error message: 

"The system failed to update the Secure Boot certificate keyset. The state of Secure Boot on this system has not been modified. Please reboot the system to try again, or open Surface UEFI settings and select a different Secure Boot certificate keyset." 

It is my understanding, per the Secure Boot troubleshooting guide at the following link that I must reset my device BIOS. 

https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/secure-boot-isnt-configured-correctly-troubleshooting

I am unable to find out how to reset my SP4 BIOS. I have done a standard factory reset, but this did not reset the BIOS. I have updated firmware to 18_033_01, which is the most recent SP4 firmware version to my knowledge. This did not reset the BIOS. I would simply like to perform the step listed on the link above: "try resetting the BIOS back to the factory settings." How do I do this?

Answer 1

Have you tried changing the Secure Boot configuration in the UEFI?

Answer 2

I have tried to change the Secure Boot configuration. There are three options: Windows-only software, Windows and certain third-party software, and all software. I have tried both of the options which are more restrictive. Either selection results in the aforementioned "The system failed to update the Secure Boot certificate keyset." error message.

Answer 3

I have never encountered any way to reset the sp4 uefi.  U can try disabling the TPM on the same screen where the secure boot is locate.  Beyond that I can only suggest that u contact Microsoft support or better yet visit a Microsoft store if one is available.

Good luck