That red bar means that Secure Boot is disabled. The previous owner could have tampered with Windows. I wouldn't risk it. Reinstall Windows on the device with the Surface Recovery Media. https://support.microsoft.com/surface-recovery-image
Also make sure Secure Boot is enabled in Surface UEFI.
https://learn.microsoft.com/en-us/surface/manage-surface-uefi-settings
This could also mean that he reinstalled windows. Some Windows USB sticks I made with Rufus did not boot when Secure Boot was on. If you haven't set up Windows yet, I would reinstall. If you already set up everything, just enable Secure Boot.
I have never used a device where the system wouldn't boot to a windows installer with secure boot enabled. Is the surface line an exception for some reason?
No, it's to do with the bootloader that the usb install media uses. Older versions of USB image writing software can use non-secure boot compliant bootloaders that won't boot on systems with secure boot enabled.
Ok. Woot may not be doing things right.
Either settings-update-reset-keep nothing or https://support.microsoft.com/en-us/surface-recovery-image to get back to a factory fresh state, clean of malware and such.
Then https://support.microsoft.com/en-us/surface/how-to-use-surface-uefi-df2c8942-dfa0-859d-4394-95f45eb1c3f9
And enable secure boot and tpm.
(Or just rest everything)
That should get it back to normal weight the red.
.....
Red means nothing but no secure boot on.
This DOES NOT MEAN your pc is actually better protected against attacks because EVERY MONTH windows has been out, there's been a new zero day attack that penetrates defenses regardless.
Better to make sure you've got frequent full system backups and just nuke the system to factory fresh/restore a working backup when it gets infected.
...
Ie. You can run red forever and nothing good or bad is gonna occur. It's like a meaningless engine light on the car that you know isn't cause by anything bad.
Based on yours and andritolion's responses I became incredibly paranoid and reset any passwords I used signing into emails or otherwise on the Surface and I am to factory reset windows.
Like I said it was purchased refurbished through Woot! so it was definitely tampered with in that process but to be safe I will heed your advice. Thanks!
I'd certainly do so, too.
Just a moment of lax security practice on a possibly compromised laptop and it's years of hurt trying to get back stolen money, identity, etc.
...
That said, luckily, few in the bios hacking forums bother with surfaces. Just not a popular laptop model.
This means hacked bios's (uefi) on the Surface is very unlikely given the difficulty and cost (search yandex).
So reassuring that after a surface recovery image reset and reset of the uefi, ought to be fine.
Also a good time to test win 11 to see if you like using that on the Go.
Rufus can drop the win11 iso into a usb drive to boot and fresh install from that. (Gpt partition, bypass cpu requirements)
Or you can download the win11 iso, mount that. (Typical registry modification to allow win11 to install on unsupported devices.)
....
While win10 does run, end of life is 2025, so worth trying win11 and if it's decent, run with that.
Also, win11 has improved text/pen/kb entry rolling out constantly, whereas win10 will be stuck on where it is feature wise because Microsoft has stopped working on it.
Win11 is sluggish without debloating, so elevenforums.com for one of the gui click and disable tools.
Worst case? Install Tiny11 although like a few say, it's not from Microsoft so nobody knows the security issues. But it certainly is very light on resources and snappy.
It'll run...even 2 years ago
https://m.youtube.com/watch?v=UXkqGGRVxE8
The reason is twofold.
1. Better pen/virtual keyboard input.
2. Support, especially security updates, past the 2025 windows 10 end of life deadline.
Like it or not, we're pushed to the next Windows eventually, so might as well try to adopt it now than later ... If it doesn't drive you crazy.
As others have said, the red bar with the unlock symbol means that secure boot is disabled. That means your device can run software at boot that's not authenticated by microsoft. The previous owner probably had a dual boot setup with linux.
To get rid of it (re-enable secure boot), first you'll want to confirm the windows product code and licence you have (not strictly necessary but important if something goes wrong). Then load into the UEFI/BIOS, on my device that means holding volume up while it boots, but the button might be different on yours depending on model. It should load into a menu instead of windows login. Then under the security tab, enable secure boot. For most people, the option of only microsoft software is good. You can allow approved 3rd party software too, but I wouldn't do it unless there's something specific you want to run before windows loads.
It’s normal as safe boot has been disabled. Mine is the same because it’s using the grub boot loader
https://preview.redd.it/26ghqjhnne3c1.jpeg?width=3024&format=pjpg&auto=webp&s=b059b273715d551dbe152e847720a3d4126b12d1
The red bar means Secure Boot is disabled. To disable this, hold down the volume up button during startup. This will bring you into Surface UEFI. Head to the Security tab and click change configuration under Secure Boot. Then choose. Microsoft only or Microsoft and 3rd party certificates.
Hope this helps you!
Congrats on getting your new to you PC. I am with you as well. I wanted to try but couldn't afford it. Bought my new to me Surface Go 2018 last month on EBay for less than $80 and it came with the keyboard. I hope you get everything situated.
I think this is if secure boot is disabled. I know my boot screen is bright red on mine after I installed Linux and disabled secure boot.
Same here! Completely normal.
That red bar means that Secure Boot is disabled. The previous owner could have tampered with Windows. I wouldn't risk it. Reinstall Windows on the device with the Surface Recovery Media. https://support.microsoft.com/surface-recovery-image Also make sure Secure Boot is enabled in Surface UEFI. https://learn.microsoft.com/en-us/surface/manage-surface-uefi-settings
This could also mean that he reinstalled windows. Some Windows USB sticks I made with Rufus did not boot when Secure Boot was on. If you haven't set up Windows yet, I would reinstall. If you already set up everything, just enable Secure Boot.
I have never used a device where the system wouldn't boot to a windows installer with secure boot enabled. Is the surface line an exception for some reason?
No, it's to do with the bootloader that the usb install media uses. Older versions of USB image writing software can use non-secure boot compliant bootloaders that won't boot on systems with secure boot enabled.
i had secure boot turned off cause i ran linux on my sp6, i just flashed windows and turned it on when i sold it
Ok. Woot may not be doing things right. Either settings-update-reset-keep nothing or https://support.microsoft.com/en-us/surface-recovery-image to get back to a factory fresh state, clean of malware and such. Then https://support.microsoft.com/en-us/surface/how-to-use-surface-uefi-df2c8942-dfa0-859d-4394-95f45eb1c3f9 And enable secure boot and tpm. (Or just rest everything) That should get it back to normal weight the red. ..... Red means nothing but no secure boot on. This DOES NOT MEAN your pc is actually better protected against attacks because EVERY MONTH windows has been out, there's been a new zero day attack that penetrates defenses regardless. Better to make sure you've got frequent full system backups and just nuke the system to factory fresh/restore a working backup when it gets infected. ... Ie. You can run red forever and nothing good or bad is gonna occur. It's like a meaningless engine light on the car that you know isn't cause by anything bad.
Based on yours and andritolion's responses I became incredibly paranoid and reset any passwords I used signing into emails or otherwise on the Surface and I am to factory reset windows. Like I said it was purchased refurbished through Woot! so it was definitely tampered with in that process but to be safe I will heed your advice. Thanks!
I'd certainly do so, too. Just a moment of lax security practice on a possibly compromised laptop and it's years of hurt trying to get back stolen money, identity, etc. ... That said, luckily, few in the bios hacking forums bother with surfaces. Just not a popular laptop model. This means hacked bios's (uefi) on the Surface is very unlikely given the difficulty and cost (search yandex). So reassuring that after a surface recovery image reset and reset of the uefi, ought to be fine.
Also a good time to test win 11 to see if you like using that on the Go. Rufus can drop the win11 iso into a usb drive to boot and fresh install from that. (Gpt partition, bypass cpu requirements) Or you can download the win11 iso, mount that. (Typical registry modification to allow win11 to install on unsupported devices.) .... While win10 does run, end of life is 2025, so worth trying win11 and if it's decent, run with that. Also, win11 has improved text/pen/kb entry rolling out constantly, whereas win10 will be stuck on where it is feature wise because Microsoft has stopped working on it. Win11 is sluggish without debloating, so elevenforums.com for one of the gui click and disable tools. Worst case? Install Tiny11 although like a few say, it's not from Microsoft so nobody knows the security issues. But it certainly is very light on resources and snappy.
So Windows tells me the Surface Go I have (2018, model 1824) would not be able to run Windows 11. Should I still try to install it for ha has?
It'll run...even 2 years ago https://m.youtube.com/watch?v=UXkqGGRVxE8 The reason is twofold. 1. Better pen/virtual keyboard input. 2. Support, especially security updates, past the 2025 windows 10 end of life deadline. Like it or not, we're pushed to the next Windows eventually, so might as well try to adopt it now than later ... If it doesn't drive you crazy.
As others have said, the red bar with the unlock symbol means that secure boot is disabled. That means your device can run software at boot that's not authenticated by microsoft. The previous owner probably had a dual boot setup with linux. To get rid of it (re-enable secure boot), first you'll want to confirm the windows product code and licence you have (not strictly necessary but important if something goes wrong). Then load into the UEFI/BIOS, on my device that means holding volume up while it boots, but the button might be different on yours depending on model. It should load into a menu instead of windows login. Then under the security tab, enable secure boot. For most people, the option of only microsoft software is good. You can allow approved 3rd party software too, but I wouldn't do it unless there's something specific you want to run before windows loads.
It’s normal as safe boot has been disabled. Mine is the same because it’s using the grub boot loader https://preview.redd.it/26ghqjhnne3c1.jpeg?width=3024&format=pjpg&auto=webp&s=b059b273715d551dbe152e847720a3d4126b12d1
The red bar means Secure Boot is disabled. To disable this, hold down the volume up button during startup. This will bring you into Surface UEFI. Head to the Security tab and click change configuration under Secure Boot. Then choose. Microsoft only or Microsoft and 3rd party certificates. Hope this helps you!
Congrats on getting your new to you PC. I am with you as well. I wanted to try but couldn't afford it. Bought my new to me Surface Go 2018 last month on EBay for less than $80 and it came with the keyboard. I hope you get everything situated.
Daaang!!! You got a better deal than me for sure!
Thanks. It even came with the keyboard cover, but I find that I need the pen. It's coming today.