Microsoft Surface Hub 2 SmCamera - Manual (Page 167)

Enrolling a device into SEMM affects how you can manage it. For example, after you
apply a SEMM package, all UEFI settings are unavailable (locked) in the device's UEFI
menu. Default values for other settings such as
IPv6 for PXE Boot are also unavailable.
To change UEFI settings after you finish the migration, apply another SEMM package or
unenroll the device from SEMM. If you apply another SEMM package to change the UEFI
settings, you must use the original certificate when you build the new SEMM package.
Use the UEFI Configurator tool and leave
EnableOSMigration off (not on as in the
original migration steps).
If your company outsources the Surface Hub 2 migration to Windows 10/11 Pro or
Enterprise, you may want to have the partner transfer the SEMM certificate, SEMM
package, and UEFI password to you. Or, after you migrate the Hub, you can immediately
unenroll it from SEMM. This step enables local administration of UEFI and transfer of the
device to another party. But we still strongly recommend that you use a UEFI password,
which can be configured after migration. To learn more, see
Manage Surface UEFI
settings .
If you choose to restore your device to Windows 10 Team after the migration as
described later in this article , we recommend that you first unenroll Hub from SEMM. To
learn more, see Unenroll Surface devices from SEMM .
1. Connect a USB drive to your PC.
2. Choose Hub 2S , and then select Next .
If you work with partners
To roll back to Windows 10 Team
２ Warning
To unenroll a device from SEMM and restore user control of Surface UEFI settings,
you must have the SEMM certificate that was used to enroll the device in SEMM. If
this certificate becomes lost or corrupted, it is not possible to unenroll from SEMM.
Back up and protect your SEMM certificate accordingly.
Save the SEMM package to a USB drive