Arm-based Surface devices, including Surface Pro 11th Edition, Snapdragon processor; Surface Laptop 7th Edition, Snapdragon processor; Surface Pro 9 with 5G, and Surface Pro X, are engineered to meet high-performance commercial requirements.

Image-based Operating System Deployment (OSD) is now supported via Configuration Manager for Windows 11 on Surface Pro 11th Edition, Snapdragon processor; Surface Laptop 7th Edition, Snapdragon processor, and Surface Pro 9 with 5G.

Deploy Arm-based Surface devices using Windows Autopilot with the help of a Microsoft Cloud Solution Provider. Or you can self-provision devices with Autopilot deployment profiles. Autopilot allows for zero-touch deployment using the factory-provisioned OS, enabling streamlined setup, including preinstallation of Microsoft 365 Apps for enterprise. Organizations using modern management and security solutions can fully use the performance features of Arm-based Surface devices. Customers using modernized Microsoft Store apps, or remote desktop solutions also stand to benefit.

With the SEMM UEFI settings reference.

To learn more about managing firmware with SEMM, see:

• Get started with Surface Enterprise Management Mode
• Manage Surface UEFI settings

With Microsoft Intune and Manage DFCI on Surface devices.

The Microsoft Intune admin center integrates with Microsoft Entra ID to provide granular management of enrolled devices, enabling faster device sign-ins and streamlined policy settings for full cloud-based management. For example, you can manage LTE using eSIM profiles to configure data plans and deploy activation codes across multiple devices.

After deployment via Autopilot, devices can be joined to Microsoft Entra ID or Active Directory (co-manage them with Configuration Manager, which installs the 32-bit x86 ConfigMgr client.

Contact your MDM provider for details about how you can manage Arm-based Surface devices.

Microsoft Defender protects Windows 10 and 11 on Arm-based PCs throughout the device's supported lifetime. While more non-Microsoft antivirus programs now support Arm-based PCs, confirm compatibility with your specific solution. Windows Security continues to offer comprehensive protection.

Arm-based devices are designed to simplify the update process for drivers and firmware via Windows Update. Ensure the default settings are enabled to receive automatic updates:

1. Go to Start > Settings > Update & Security > Windows Update > Advanced Options.
2. Under Choose how updates are installed, select Automatic (recommended).

• Use Windows Update or Windows Update for Business to maintain the latest drivers and firmware. For more information, see What is Windows Update for Business?.
• For more information about deploying and managing updates on Surface devices, see Manage and deploy Surface driver and firmware updates.
• Windows Server Update Services (WSUS) doesn't support the delivery of drivers and firmware to Surface Pro 9 with 5G and Surface Pro X.

Most apps run smoothly on Arm-based Windows 11 PCs, with a few exceptions.

• x86 Win32 apps: Most run seamlessly on Arm-based Surface devices, benefiting from advanced emulation technology.
• Native Arm64 and Microsoft Store UWP apps: These apps deliver an outstanding experience, using the full native speed of the Arm-based processor while optimizing battery life. Native Arm64 app availability continues to grow, including popular applications like Adobe Photoshop and Adobe Lightroom.
• Driver-supported apps: Apps that rely on drivers designed for Arm-based Windows 10 or Windows 11 PCs are fully supported.
• x64 emulation: Now generally available in Windows 11, x64 emulation allows broader app compatibility, enabling many x64 apps to run effectively on Arm-based devices.
• To learn more, see Arm-based Surface devices FAQ

The App Assure program is available to commercial customers for their LOB, ISV, and Microsoft first-party apps targeting Windows 10 or Windows 11 on Arm. If you encounter an app compatibility issue, Microsoft provides developer resources to troubleshoot and assist with app remediations at no extra cost. To learn more, visit aka.ms/AppAssure.

For more information about running apps on Arm-based devices, see:

• Windows on Arm documentation

Azure Virtual Desktop enables access to Windows desktops, applications, and data on any device, from any location. To learn more, visit the Azure Virtual Desktop site.

Popular browsers are supported on Arm-based Surface devices:

• Microsoft Edge, Firefox, Chrome, and Internet Explorer run on Surface Pro 9 with 5G and Surface Pro X.
• Firefox and Microsoft Edge (Chromium) run natively with enhanced performance on Arm-based Windows 10 or Windows 11 PCs.

• Use Microsoft 365 for the best experience on Arm-based Windows 10 or Windows 11 PCs.
• Microsoft 365 "select-to-run" installs Outlook, Word, Excel, and PowerPoint optimized for Arm-based processors.
• Microsoft Teams runs natively on Surface Pro 9 with 5G and Surface Pro X.
• For "perpetual versions" of Office, such as Office 2021, install the 32-bit version.

To confirm if a specific VPN supports Arm-based Windows 10 or Windows 11 PCs, contact the VPN provider.

The following tables show the availability of key features on Arm-based Surface devices and Windows 11 on Arm.

Can I deploy Arm-based Surface devices with Configuration Manager?

• Microsoft Configuration Manager now supports Operating System Deployment for Windows 11 on Surface Pro 9 with 5G, Surface Pro 11th Edition, Snapdragon processor, and Surface Laptop 7th Edition, Snapdragon processor.

How can I deploy Arm-based Surface devices?

• Deploy Surface Pro 11th Edition, Snapdragon processor; Surface Laptop 7th Edition, Snapdragon processor, or Surface Pro 9 with 5G via OSD or Windows Autopilot.
• Deploy Surface Pro X via Windows Autopilot.

Is a recovery image available?

• Yes, when devices begin shipping, go to Download a recovery image for your Surface for all available BMRs.

Is Intune required to manage Arm-based Surface devices?

• Intune is recommended but not required. Once deployed via Autopilot, you can join Arm-based Surface devices to Microsoft Entra ID or Active Directory (Microsoft Entra hybrid join). This enables you to manage your devices with Intune or co-manage them with Configuration Manager, which installs the 32-bit x86 ConfigMgr client.

• Arm-based Surface devices FAQ
• Windows on Arm documentation
• App Assure
• Qualcomm: Getting Started with Windows on Snapdragon