you will need the serial number of the device you want to unenroll as well as the SEMM certificate used to enroll the device. If you know it, open ‘Microsoft Surface UEFI Configurator’ from ...