This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Arm-based Surface devices, including Surface Pro 11th Edition, Snapdragon processor; Surface Laptop 7th Edition, Snapdragon processor; Surface Pro 9 with 5G, and Surface Pro X, are engineered to meet high-performance commercial requirements.
Image-based Operating System Deployment (OSD) is now supported via Configuration Manager for Windows 11 on Surface Pro 11th Edition, Snapdragon processor; Surface Laptop 7th Edition, Snapdragon processor, and Surface Pro 9 with 5G.
Deploy Arm-based Surface devices using Windows Autopilot with the help of a Microsoft Cloud Solution Provider. Or you can self-provision devices with Autopilot deployment profiles. Autopilot allows for zero-touch deployment using the factory-provisioned OS, enabling streamlined setup, including preinstallation of Microsoft 365 Apps for enterprise. Organizations using modern management and security solutions can fully use the performance features of Arm-based Surface devices. Customers using modernized line of business apps, Microsoft Store apps, or remote desktop solutions also stand to benefit.
With the Surface IT Toolkit and Surface Enterprise Management Mode (SEMM), you can manage hardware components at the firmware level for commercial SKUs of the supported Surface devices. The default behavior of each component is indicated as either "On" or "Off." For detailed settings functionality, refer to the SEMM UEFI settings reference.
Note
Commercial SKUs of Surface Pro 11th Edition, Snapdragon processor and Surface Laptop 7th Edition, Snapdragon processor begin shipping on September 10, 2024, from your Microsoft Surface Authorized Reseller.
To learn more about managing firmware with SEMM, see:
With Microsoft Intune and Device Firmware Configuration Interface (DFCI) profiles, you can manage hardware components at the firmware level for Arm-based Surface devices, similar to other Surface devices. To learn more, see Manage DFCI on Surface devices.
The Microsoft Intune admin center integrates with Microsoft Entra ID to provide granular management of enrolled devices, enabling faster device sign-ins and streamlined policy settings for full cloud-based management. For example, you can manage LTE using eSIM profiles to configure data plans and deploy activation codes across multiple devices.
After deployment via Autopilot, devices can be joined to Microsoft Entra ID or Active Directory (Microsoft Entra hybrid join), where you can manage the devices with Intune or co-manage them with Configuration Manager, which installs the 32-bit x86 ConfigMgr client.
Contact your MDM provider for details about how you can manage Arm-based Surface devices.
Microsoft Defender protects Windows 10 and 11 on Arm-based PCs throughout the device's supported lifetime. While more non-Microsoft antivirus programs now support Arm-based PCs, confirm compatibility with your specific solution. Windows Security continues to offer comprehensive protection.
Arm-based devices are designed to simplify the update process for drivers and firmware via Windows Update. Ensure the default settings are enabled to receive automatic updates:
Most apps run smoothly on Arm-based Windows 11 PCs, with a few exceptions.
The App Assure program is available to commercial customers for their LOB, ISV, and Microsoft first-party apps targeting Windows 10 or Windows 11 on Arm. If you encounter an app compatibility issue, Microsoft provides developer resources to troubleshoot and assist with app remediations at no extra cost. To learn more, visit aka.ms/AppAssure.
For more information about running apps on Arm-based devices, see:
Azure Virtual Desktop enables access to Windows desktops, applications, and data on any device, from any location. To learn more, visit the Azure Virtual Desktop site.
Popular browsers are supported on Arm-based Surface devices:
To confirm if a specific VPN supports Arm-based Windows 10 or Windows 11 PCs, contact the VPN provider.
The following tables show the availability of key features on Arm-based Surface devices and Windows 11 on Arm.
| Feature | Surface Pro X | Surface Pro 9 with 5G | Surface Pro 11th Edition, Snapdragon processor | Surface Laptop 7th Edition, Snapdragon processor | Notes |
|---|---|---|---|---|---|
| Windows Autopilot | Yes | Yes | Yes | Yes | Recommended deployment option |
| Network Boot (PXE) | No | Yes | Yes | Yes | |
| Windows Configuration Designer | Yes | Yes | Yes | Yes | |
| WinPE | Yes | Yes | Yes | Yes | Not recommended. Microsoft doesn't provide the necessary .ISO and drivers to support WinPE with Arm-based Surface devices. |
| Operating System Deployment | No | Yes | Yes | Yes | Supported with Windows 11 on Surface Pro 9 with 5G, Surface Pro 11th Edition, Snapdragon processor, and Surface Laptop 7th Edition, Snapdragon processor. |
| MDT | No | No | No | No | Not supported on Windows 11, including x86 Windows 11. |
| Feature | Surface Pro X | Surface Pro 9 with 5G | Surface Pro 11th Edition, Snapdragon processor | Surface Laptop 7th Edition, Snapdragon processor | Notes |
|---|---|---|---|---|---|
| Intune | Yes | Yes | Yes | Yes | |
| Windows Autopilot | Yes | Yes | Yes | Yes | |
| Microsoft Entra ID (co-management) | Yes | Yes | Yes | Yes | Ability to join Arm-based Surface devices to Microsoft Entra ID or Active Directory (Microsoft Entra hybrid join). |
| Configuration Manager | Yes | Yes | Yes | Yes | |
| Power on When AC Restore | Yes | Yes | Yes | Yes | |
| Surface Diagnostic Toolkit (SDT) for Business | Yes | Yes | Yes | Yes | |
| Surface Asset Tag tool | Yes | Yes | Yes | Yes | |
| Surface Enterprise Management Mode (SEMM) | Partial | Yes | Yes | Yes | |
| Surface UEFI Configurator | No | Yes | Yes | Yes | |
| Surface UEFI Manager | Partial | Yes | Yes | Yes |
| Feature | Surface Pro X | Surface Pro 9 with 5G | Surface Pro 11th Edition, Snapdragon processor | Surface Laptop 7th Edition, Snapdragon processor | Notes |
|---|---|---|---|---|---|
| BitLocker | Yes | Yes | Yes | Yes | |
| Microsoft Defender | Yes | Yes | Yes | Yes | |
| Support for non-Microsoft antivirus software | See note | See note | See note | See note | Some non-Microsoft antivirus software can't be installed on an Arm-based processor. Contact your antivirus software provider about app availability. |
| Secure Boot | Yes | Yes | Yes | Yes | |
| Windows Information Protection | Yes | Yes | Yes | Yes | |
| Surface Data Eraser | Yes | Yes | Yes | Yes |
Can I deploy Arm-based Surface devices with Configuration Manager?
How can I deploy Arm-based Surface devices?
Is a recovery image available?
Is Intune required to manage Arm-based Surface devices?
Training
Certification
Microsoft 365 Certified: Endpoint Administrator Associate - Certifications
Plan and execute an endpoint deployment strategy, using essential elements of modern management, co-management approaches, and Microsoft Intune integration.