If you know it, open ‘Microsoft Surface UEFI Configurator’ from the Start menu, go to Start and click ‘Reset Package’. Now, choose ‘Certificate Protection’ to add your SEMM certificate ...