Microsoft Surface Hub 2 SmCamera - Manual (Page 297)

Admins can implement SEMM and enrolled Surface Hub 2S devices using the
downloadable
Microsoft Surface UEFI Configurator . For more information, see Secure
and manage Surface Hub 2S with SEMM and UEFI . Secured using a certificate to protect
the configuration from unauthorized tampering or removal, SEMM enables
management of the following components:
Wired LAN
Camera
Bluetooth
Wi-Fi
Occupancy sensor
IPv6 for PXE Boot
Alternate Boot
Boot Order Lock
USB Boot
UEFI front page interface
Devices
Boot
Date/Time
Recover Hub with bootable USB