How to setup SecureDoc on my Surface Pro 4
Preliminary Overview
Although, both the Surface Book and Surface Pro 4 devices can be setup with encryption using native Preboot UEFI under version 7.1 SR1 or higher however, for optimal support and bypassing UEFI limitation, we would suggest 7.1 SR6 or higher would allow you to apply Linux Preboot on UEFI (PBLU) bootloader. Using PBLU option will provide greater advantage of supporting additional devices (notably for Wireless and Tokens\Smartcards device).
When upgrading to Windows 10 Creators Edition (RS2):
In the event, you're completing completing a fresh install of SecureDoc on your Surface Pro 4 device in which has already been upgraded to Windows 10 RS2, WinMagic Magic recommends using our latest version of 7.1 SR6. This will allow you to take full advantage of core features of the SecureDoc product. We recommend that you obtain are current updates from microsoft prior to setup of SecureDoc on your Surface device.
When upgrading to Windows 10 Creators Edition Fall Update (RS3):
The minimum requirement for SecureDoc on Windows 10 Creators Fall Update [B1709] (RS3) is our latest version of 7.5 SR1.
Completing Setup Requirements:
From Within SecureDoc console, go to Profile >> Boot configuration:
- Within the Boot Configuration window:
- locate the UFEI Boot Loader Section and select the radio button for PBLU (Linux Pre-boot for UEFI).
This will also provide additional support for Wireless and Tokens\Smartcards devices

Boot Configuration Settings:
It’s recommended to use PBLU (Linux Pre-boot for UEFI)instead of pbu
Boot Paramaters Settings:
Within the Boot Configuration Window - Click on Advance Options
The following boot parameters are normally required: -console=null quiet nosmp acpi=off reboot=warm,,efi,force

Advanced>>Boot Parameters:
Enter the following boot parameters:
-console=null quiet nosmp acpi=off reboot=warm,,efi,force
Installation Package Settings:
You will need to configure your installation package using the 64 bit kernel settings for Pre-Boot Loader Processor Architecture.

Installation Package Settings:
New Installation package will need to be configured with 64 bit kernel settings for Pre-Boot Loader Processor Architecture
Note: At the time of writing this article, touch and wireless is not supported for PBLUx64.
During boot up process, you may see a kernel window screen which is normal behavior for this device. To suppress the linux kernel output, you can add additional Boot Parameter “ loglevel=0”