Surface hub hardening guidelines learn more – Microsoft Surface Hub 2 SmCamera User Manual
Page 304
Surface Hub is designed to facilitate collaboration and allow users to start or join
meetings quickly and efficiently. The default Wi-Fi Direct settings for Surface Hub are
optimized for this scenario.
For additional wireless interface security, Surface Hub users should enable the WPS-PIN
security setting. This setting disables WPS-PBC mode and offers client authentication. It
provides the strongest level of protection by preventing unauthorized connection to
Surface Hub.
If you still have concerns about authentication and authorization for Surface Hub, we
recommend that you connect the device to a separate network. You could use Wi-Fi
(such as a "guest" Wi-Fi network) or a separate Ethernet network, preferably an entirely
different physical network. But a VLAN can also provide added security. Of course, this
approach may preclude connections to internal network resources or services and may
require additional network configuration to regain access.
Also recommended:
Install regular system updates
Update Miracast settings to disable auto-present mode
Secure and manage Surface Hub 2S with SEMM and UEFI
Surface Hub hardening guidelines
Learn more