Surface offers an additional layer of protection, called Surface Enterprise Management Mode (SEMM). This is especially useful for situations where there may be public access to a Surface device. IT administrators can secure and manage firmware settings; SEMM also uses a certificate to protect the configuration from unauthorized tampering or removal. Examples of firmware that can be disable include docking USB ports, on-board audio, SD card slots, cameras, Bluetooth, and more!
