Reset a Surface Pro 7 when Microsfoft Instructions do not work

Enable USB boot in Surface UEFI and start the recovery drive directly from Boot configuration, because the Volume-Down startup sequence can be ignored when USB boot or the alternate boot sequence is disabled.

Configure USB boot in UEFI

1. Shut down the Surface Pro 7 and wait about 10 seconds.
2. Hold Volume Up, then press and release Power.
3. Keep holding Volume Up until Surface UEFI appears.
4. Open Boot configuration.
5. Confirm:
   • USB Storage is enabled.
   • Enable Boot from USB devices is On, if displayed.
   • Enable Alternate Boot Sequence is On.
6. Move USB Storage above Windows Boot Manager, or insert the recovery drive and swipe left on USB Storage to boot from it immediately.
7. Select Exit → Restart Now. These settings and the immediate-boot gesture are supported on Surface Pro 7.^1^ ^2^

If these controls are locked or cannot be changed on an organization-managed Surface, contact its IT administrator; Surface UEFI policies can be centrally managed.^1^

If UEFI still does not recognize the recovery drive

Rebuild it using the model-specific Surface Pro 7 recovery image, rather than relying on a generic Windows recovery drive:

1. On another Windows PC, download the latest recovery image for the exact Surface using its serial number.
2. Use a blank USB drive with sufficient capacity; Microsoft recommends 32 GB, USB 3.0 or later, and FAT32.
3. Run Create a recovery drive.
4. Clear Back up system files to the recovery drive, create the drive, and then copy every file from the downloaded recovery-image ZIP to the USB drive.
5. Choose Replace the files in the destination when prompted.
6. Eject the drive safely and attempt the direct swipe-left on USB Storage method above.

Creating or rebuilding the drive erases everything on that USB device.^3^

Also disconnect every other USB accessory while booting. If possible, test a second USB drive; Microsoft specifically recommends another drive when the original is not recognized.^2^

Conditional Secure Boot check

Current Surface recovery images can require the newer 2023 Secure Boot certificate. For Surface Pro 7, Microsoft lists System UEFI [IP Address] as the minimum version with the manual Secure Boot update available.^4^

Check the version under UEFI → PC information:

• Below [IP Address]: the documented manual certificate procedure is not established as available. If Windows still starts, install Surface firmware and Windows updates first; otherwise, proceed to Microsoft service.
• [IP Address] or later: if a newly created, model-specific recovery drive still will not boot, first obtain the device’s BitLocker recovery key. Then open:
  1. UEFI → Security
  2. Under Secure Boot, select Change Configuration
  3. Select Microsoft only → OK
  4. Select Exit → Restart now

Warning: Microsoft states that this certificate change triggers BitLocker recovery, so do not perform it without the recovery key.^4^

If UEFI cannot detect or boot either of two correctly prepared Surface recovery drives, arrange Microsoft device service. Microsoft’s service guidance is published for devices stuck on the Recovery screen, but the same service route is the appropriate escalation after firmware-level USB boot and known-good media have both failed.^5^

References

1. Manage Surface UEFI settings
2. Boot Surface from a USB device
3. Windows 11
4. Surface Secure Boot Certificates
5. Surface turns on but is stuck on the Recovery screen | Microsoft Support