More updates

UEFI added

devices/surface-hub/TOC.md

@@ -37,7 +37,7 @@
 ### [Applying ActiveSync policies to device accounts](apply-activesync-policies-for-surface-hub-device-accounts.md)
 
 ## Secure
-### [Securing Surface Hub 2S with UEFI](surface-hub-2s-secure-with-uefi-semm.md)
+### [Secure and manage Surface Hub 2S with SEMM and UEFI](surface-hub-2s-secure-with-uefi-semm.md)
 ### [How Surface Hub addresses Wi-Fi Direct security issues](surface-hub-wifi-direct.md)
 
 ## Support

devices/surface-hub/surface-hub-2s-quick-start.md

@@ -33,7 +33,9 @@ ms.localizationpriority: Normal
 ## Install pen and camera
 
 1. Attach Surface Hub 2 pen magnetically to your preferred side of the device.
-2. Remove the lens cling from the camera and attach it to the USB-C port on the top of the Surface Hub 2S.
+2. Remove the lens cling from the camera and attach it to the USB-C port on the top of the Surface Hub 2S. A red LED indicator light on the pen warns you when the battery is slow.
+
+![*Surface Hub 2S pen *](images/sh2-pen.png) <br>
 
 ## Start Surface Hub 2S
 

devices/surface-hub/surface-hub-2s-recover-reset.md

@@ -37,3 +37,18 @@ To begin, sign into Surface Hub 2S with admin credentials, open the **Settings**
 
 **Recover Surface Hub 2S using USB recovery drive**
 New in Surface Hub 2S, you can now reinstall the device using a recovery image.
+
+## Recover from USB drive
+
+Surface Hub 2S lets you reinstall the device using a recovery image, which allows you to reinstall the device to factory settings if you lost the Bitlocker key or no longer have admin credentials to the Settings app.
+
+
+1. Begin with a USB 3.0 drive with 8GB or 16GB of storage, formatted as FAT32.
+2. Download recovery image from the Surface Recovery website onto the USB drive and connect it to any USB-C or USB A port on Surface Hub 2S.
+3. Turn the device off, hold the Volume down button and then press the Power. Keep holding the Volume down button until you see circling dots below the Windows logo.
+
+![*Use Volume down and power buttons to initiate recovery*](images/sh2-keypad.png)<br>
+
+4. In the language selection screen, select the display language for your Surface Hub 2S.
+5. Choose **Recover from a drive** and **Fully clean the drive** and then click **Recover**. If prompted for a BitLocker key, click **Skip this drive**. Surface Hub 2S will reboot several times and take approximately 30 minutes to complete the recovery process.
+6. When the first OOBE startup screen appears, remove the USB drive.

devices/surface-hub/surface-hub-2s-secure-with-uefi-semm.md

@@ -1,5 +1,5 @@
 ---
-title: "Secure Surface Hub 2S with SEMM"
+title: "Secure and manage Surface Hub 2S with SEMM"
 description: "Learn more about securing Surface Hub 2S with SEMM."
 keywords: separate values with commas
 ms.prod: surface-hub
@@ -11,4 +11,46 @@ ms.topic: article
 ms.localizationpriority: Normal
 ---
 
-# Secure Surface Hub 2S with SEMM
+# Secure and manage Surface Hub 2S with SEMM and UEFI
+
+New in Surface Hub 2S, you can use SEMM to manage the UEFI setting of the device.
+Use the Microsoft Surface UEFI Configurator to control the following components:
+
+- Wired LAN
+- Cameras
+- Bluetooth
+- Wi-Fi
+- Occupancy sensor
+
+Use the Microsoft Surface UEFI Configurator to turn on or off the following UEFI settings:
+
+- Boot
+    - IPv6 for PXE Boot
+    - Alternate Boot
+    - Boot Order Lock
+    - USB Boot
+- UEFI Front Page
+    - Devices
+    - Boot
+    - Date/Time
+
+
+## Create UEFI configuration image
+
+Unlike other Surface devices, you cannot use an MSI file or a Win PE image to apply these settings on Surface Hub 2S. Instead, you’ll need to create a USB image that can be loaded to the device. To create a Surface Hub 2S UEFI configuration image, download and install the latest version of the Microsoft Surface UEFI Configurator from the [Surface Tools for IT](https://www.microsoft.com/download/details.aspx?id=46703) page in the Microsoft Download Center. For more information about using UEFI and SEMM, see [Microsoft Surface Enterprise Management Mode](https://docs.microsoft.com/en-us/surface/surface-enterprise-management-mode).
+
+
+## To configure UEFI on Surface Hub 2S
+1. Start the UEFI Configurator and on the first screen, choose **Configuration Package**.
+2. To add the certificate to your package, you must have a valid certificate with the private key in a .pfx file format to sign and protect the package. Click **+ Certificate Protection.**
+3. Enter the certificate’s private key’s password.
+4. After importing the private key,continue creating the package.
+5. Choose **Hub** and **Surface Hub 2S** as the target for the UEFI configuration package.
+6. Choose the components and settings you want to activate or deactivate on Surface Hub 2S.
+7. Use the USB option to export the file.
+8. Insert and choose the USB drive you’d like to use for this package. Note that the USB drive will be formatted, and you’ll lose any information you have on it.
+
+Upon successful creation of the package, the Configurator will display the last two characters of your certificate’s thumbprint. You’ll need them when you import to the configuration to Surface Hub 2S.
+
+## To boot into UEFI
+Turn off Surface Hub 2S. Press and hold the **Volume Up** button and press the **Power** Button. Keep holding the Volume Up button until the UEFI menu appears.

devices/surface-hub/surface-hub-2s-site-planning.md

@@ -19,14 +19,14 @@ Designed for team collaboration, Surface Hub 2S can transform the way you work
 
 ## Room considerations
 
-Designed for interactive use in smaller conference rooms and huddle spaces, Surface Hub 2S provides a 4K camera, beaming microphones, crystal clear speakers, and a brilliant 4K+ resolution display.  Optimizing the user experience in larger spaces may require peripherals such as an additional camera, microphone, or room systems solution such as Microsoft Teams Rooms. See the following table for guidance.
+Designed for interactive use in smaller conference rooms and huddle spaces, Surface Hub 2S provides a 4K camera, beaming microphones, crystal clear speakers, and a brilliant 4K+ resolution display. Optimizing the user experience in larger spaces with more people further away from the display may require peripherals such as an additional camera, microphone, or room systems solution such as Microsoft Teams Rooms. Use the following proximity table to determine if you need to plan for additional peripherals.
  
-|**Room size**|**Participants**|**Proximity**|**Additional requirements**|
+|**Proximity**|**Additional requirements**|
-|:-----|:-----|:--------|:------|
+|:--------|:------|
-|**Huddle**| 1-3 | 1-2 meters | None |
+| 1-2 meters | None |
-|**Small meeting**| 3-5 | Up to 2.3 meters | None |
+| Up to 2.3 meters | None |
-|**Medium-size meeting**| 5-7 | Up to 4 meters | Peripherals optional|
+| Up to 4 meters | Peripherals optional|
-|**Larger meting**| 7 + | More than 4 meters | Peripherals recommended |
+| More than 4 meters | Peripherals recommended |
 
 As a general guideline, install Surface Hub 2S in a space that meets the following criteria: