Today we're pleased to announce our newest Surface device built for the flexible workplace by powering productivity and enabling mobility with Surface's well-known design craftmanship, advanced security and performance to take on everyday tasks.
With Firmware Attack Surface Reduction (FASR), our first Intel-based Secured-core PC brings more hardware and software protection for users handling the most sensitive data in your organization.
Meet Surface Laptop Go 2
Simplicity for IT - at its best
Surface Laptop Go 2 ensures peace of mind for you and your team, no matter where, when, or how your employees are working.
- Convenient security thanks to Fingerprint Power Button1 with Windows Hello and One Touch sign-in on select models.
- Maintain control of your sensitive information with a removable SSD.2
- Granular USB-C port management at UEFI level: You can now choose to either disable just the data flow or the entire USB-C port with UEFI manager.
- More control with cloud-first device deployment and management: Surface Management Portal allows you to get an inventory count of all Surface devices, including Surface Laptop Go 2. You will soon be able to initiate support requests from this portal in July
Surface expands Secured-core PC
Surface Laptop Go 2 is our first Intel-based Secured-core PC, designed to elevate the benefits of Windows 11 security, providing additional hardware and software protection for workers handling the most sensitive data in your organization. Secured-core PC is a special category of devices that enables an advanced set of protections across multiple layers of the device. One of the core value propositions of a Secured-core PC is to protect the hypervisor and operating system from firmware attacks. The overall security of any system is deeply rooted in the firmware since any vulnerabilities or exploits in firmware can result in the entire operating system being compromised.
The open source Project Mu UEFI firmware now supports new firmware protection capabilities that help reduce attack surfaces. It introduces a new approach to achieving the Secured-core promise around firmware protection.
To achieve this, we identified the smallest set of core firmware components required for booting the PC. Then we developed mechanisms to securely measure those components and attest to their authenticity to Windows in a tamper-resistant way. Carefully controlling the list of components allowed to execute in the FASR-certified boot path reduces the firmware attack surface. Windows can determine that only the expected firmware code is executed, and that code has not been tampered with. This approach leverages a root-of-trust upon boot to ensure the device only boots the anticipated firmware and version of Windows 11.
This is how Surface Laptop Go 2 meets Secured-core PC standards to protect the device all the way down to the firmware level. This, along with Surface's Chip to Cloud security, helps users get tasks done with peace of mind. To learn more, go to FASR
Keeping up with our commitment to sustainability
Surface plays a key role in Microsoft’s commitment to be carbon negative, water positive, and zero waste by 2030 3 which is why we aim to create devices that reduce carbon impact across their lifecycles, reduce waste, and are built with integrity.
- Surface Laptop Go 2 is 52% more energy efficient than ENERGY STAR computer specification requirements, making it our most efficient Laptop Go yet.
- Surface Laptop Go 2 is built to be more serviceable. Skilled technicians can service devices by replacing components4 like the Feet, SSD, Keyboard Cover, Top Assembly, and SurfLink connectors. The battery can be replaced through Microsoft or a Microsoft Authorized Service Provider.
- The Surface Laptop Go 2 base is a polycarbonate composite resin system with glass fiber and 30% post-consumer recycled content.
Get Surface Laptop Go 2
Explore the new device here. Surface Laptop Go 2 for Business is available to order now
References
- Fingerprint Power Button on select models.
- This device does not contain user serviceable parts. SSD is only removable by an authorized technician following Microsoft provided instructions.
- 2021 Environmental Sustainability Report | Microsoft CSR
- Components available for purchase through your Surface Commercial Authorized Device Reseller. Components can be replaced on-site by a skilled technician following Microsoft’s Service Guide. Opening and/or repairing your device can present electric shock, fire and personal injury risks and other hazards. Use caution if undertaking do-it-yourself repairs. Device damage caused during repair will not be covered under Microsoft’s Hardware Warranty or protection plans.