Microsoft Surface Enterprise Management Mode (SEMM) is a feature of Surface devices with Surface Unified Extensible Firmware Interface (UEFI). You can use SEMM to secure and manage firmware settings in your organization. Prepare UEFI settings configurations and install them on a Surface device.