NFC support in Surface Pro for Business

2025-07-22
Applies to: Windows 11

Near Field Communication (NFC) is designed to enhance security and convenience for users. It facilitates Microsoft Entra ID and Microsoft Account (MSA) authentication via FIDO 2.0 standards, enabling secure access and sign-in. Additionally, these devices are capable of reading and writing NFC tags.

Although NFC on Surface Pro can read information stored on the magnetic stripe of a bank card, it doesn't support payment transactions.

We engineered NFC in Surface Pro for enterprise customers where the primary applications of NFC technology include authentication, access control, and the exchange of information. These use cases are fundamental in environments that demand heightened security and streamlined operations, such as workplaces and educational institutions.

Supported Devices

NFC is supported on the following Surface for Business Wi-Fi models:

Surface Go 4 for Business (See NFC support in Surface Go for Business for details)
Surface Pro 10 for Business
Surface Pro for Business, Copilot+ PC, 13-inch (Intel and Snapdragon models)
Surface Pro for Business, Copilot+ PC, 12-inch

Note

NFC support is available only on commercial Wi-Fi versions of Surface Pro 10 and Surface Pro 11th Edition for Business. The 5G models of Surface Pro 10 and Surface Pro 11th Edition don't include NFC support. The consumer Wi-Fi version of Surface Pro 11th Edition doesn't include NFC support.

NFC reader location

To authenticate, align your NFC security key with the appropriate location based on your device model.

Surface Pro 12-inch	Surface Pro 10 and Surface Pro 13-inch
On Surface Pro 12-inch, the NFC reader is located slightly to the right of the center of the device, under the display.	On Surface Pro 10 and Surface Pro 13-inch, the NFC antenna is in the upper-left corner of the top bezel, under the display.

Supported end-user experiences

Basic authentication

Device authentication: You can log into a device by tapping an NFC-enabled badge or key against its NFC reader. This method is compatible with devices that support NFC for authentication, including Windows Security Key sign-in and various apps that offer single sign-on (SSO) capabilities.
App authentication: You can also log into both native and web apps in the same way, by tapping an NFC-enabled badge or key against the NFC reader. This functionality is available for apps that use NFC for authentication, such as apps integrating with Microsoft Entra ID and MSA.
Multi-factor authentication (MFA): For extra security, you can use your NFC-enabled badge or key as a multifactor authentication token. Just tap it against the NFC reader to securely access services and apps that support NFC keys, including Microsoft Entra ID, MSA, and NFC-compatible apps.

Asset tracking

Tag writing: You have the ability to write to an NFC tag by tapping it on the NFC reader of the device, using software apps that support this feature.
Tag reading: You can read from an NFC tag by tapping it on the NFC reader of the device. While no other applications are necessary to read the data from an NFC tag, there are third-party solutions that might enhance this experience.

Imprivata Enterprise Access Management (EAM)

Certified Surface devices with built-in NFC enhance security and productivity by providing fast, seamless access to Imprivata workstations and applications. With Imprivata’s No Click Access, users can tap their NFC-enabled badge to sign in or out of their Surface device.

Surface devices certified for Imprivata include:

Surface Pro 11th Edition, Intel processor
Surface Pro 10 for Business, Wi-Fi–only
Surface Go 4 for Business

To learn more, see Surface for Business devices are now Imprivata Ready.

ID Verification

Bank card reading: You can tap your NFC-enabled bank card against the device to read information from it. This functionality requires specific software capable of reading from bank cards; specifically, a line of business application. As indicated earlier, NFC on Surface Pro cannot process financial transactions.

NFC wayfinding support

NFC wayfinding takes advantage of the simplicity and convenience of NFC technology to improve how individuals navigate through physical spaces. This functionality makes it a valuable tool to enhance user experience, engagement, and accessibility. Common benefits of wayfinding include the following scenarios:

Navigation assistance: NFC tags can be placed at key points within a building or outdoor area. For example, tapping your device against an NFC tag, can display a map, directions, or information about your location. This functionality can help you navigate complex spaces like hospitals, museums, universities, or shopping centers.
Accessibility: NFC wayfinding can improve accessibility for individuals with disabilities by providing audio directions, descriptive content, or tailored assistance based on the user's needs when they interact with NFC tags.
Information access: Beyond just directions, NFC wayfinding can offer detailed information about products in a store, enhancing the visitor experience without the need for guided tours or physical brochures.

Custom lock-screen image

To help end users find the NFC reader on the device, a custom lock screen image is available to download and deploy to devices in your organization. See Download NFC Lock Screens on this page.

Screenshot showing an example of a custom lock screen image for Surface Pro 10 and Surface Pro 11th Edition for Business.

Supported NFC tag types & standards

Supported standards

Our NFC solution is compatible with a broad range of standards, ensuring it can meet various operational needs:

ISO/IEC 14443 A/B compliance: Enables reading and writing to NFC Type 1, 2, and 4 tags, covering a wide array of use cases from access control to payment systems.
JIS X 6319-4 compliance: Supports Type 3 Tags, facilitating integration with devices and systems utilizing this standard.
ISO/IEC 15693 compliance: Extends capabilities to include Type 5 Tags, allowing for interactions with a broader range of tags including tags that store iClass UID information, commonly used in identification badges.
MIFARE compatibility: Our solution also works seamlessly with the MIFARE encryption method, ensuring secure reading and coding for systems using MIFARE.

Supported tag types for secure authentication

NFC on Surface Pro supports the use of FIDO2.0 keys, for secure authentication across various platforms, including Windows, Microsoft Entra ID, and MSA. For passwordless sign-in options, we leverage Microsoft Entra's authentication capabilities. To learn more about FIDO key integration with Microsoft Entra, see Microsoft Entra passwordless sign-in.

The following FIDO2.0 keys are supported and recommended for use:

YubiKey: Offers a portfolio of NFC security keys that support a broad set of security protocols.
Identiv: Offers a range of security solutions, including FIDO2 security keys.
Thetis: Provides FIDO2 certified security keys designed for secure access.
Token2 Card: A compact and portable security key option.
AuthenTrend Card: Known for their biometric and card-style FIDO2 security keys.
FEITIAN ePass: Provides a range of NFC-enabled FIDO2 security keys, including options with USB-A and USB-C interfaces for MFA and PIV credential support.

Tip

These keys provide a robust layer of security for authentication processes, ensuring a secure and user-friendly experience for IT admins and decision-makers.

Non-FIDO NFC Keys

The following table includes supported non-FIDO NFC keys, listing various types of NFC tags along with supported technology standards. These keys aren't aligned with the FIDO (Fast Identity Online) Alliance standards but offer a range of functionality including reading and writing tags.

Name	Tag type	Compatible standards
Sony Felica Lite RC-S966	F/3	JIS X 6319-4
NXP ICODE SLI	v/5	ISO15693
NXP ICODE SLIX	v/5	ISO15693
NXP NTAG210	A/2	ISO 14443
NXP NTAG 203	A/2	ISO 14443
NXP NTAG213	A/2	ISO 14443
MIFARE Ultralight	A/2	ISO 14443-2/ISO 14443-3
MiFare DESFire	A/4	ISO 14443-4/ISO 14443-3/ISO 14443-2/ISO-IEC 7816-4
MIFARE DESFire EV1	A/4	ISO 14443-4/ISO 14443-3/ISO 14443-2/ISO-IEC 7816-4
MiFare Classic	A	ISO 14443-2/ISO 14443-3/ Mifare Classic
Broadcomm Topaz 512	A/1	ISO 14443
Infineon Tech AG	A/4	ISO 7816, ISO 14443
Samsung Java card	A/4	ISO 7816, ISO 14443

Manage NFC

Disable NFC via device settings

End users can directly disable NFC via device settings.

Go to Settings > Network & Internet > Airplane mode and select NFC.
Adjust the Toggle switch to turn it off.

Disable NFC via firmware

For a managed approach, IT admins can disable NFC using SEMM (Surface Enterprise Management Mode). SEMM allows IT admins to manage hardware features at the firmware level. With SEMM, you can enforce policies that disable NFC functionality, making it inaccessible regardless of software settings. To learn more, see Surface Enterprise Management Mode (SEMM).

FAQ

What is the operational range of the NFC reader?

The NFC reader is designed to function within a range of up to 15 millimeters along the z-axis. This close proximity ensures secure communication between the reader and NFC-enabled devices or tags.

Can the NFC reader operate independently of a keyboard?

Yes, the NFC reader is designed to work seamlessly both with and without a keyboard across all supported operating systems and modes. This flexibility allows for a wide range of use cases and device configurations.

Does the NFC feature support waking up the device from sleep mode?

No, the current NFC technology doesn't support waking up the device from sleep mode. Surface Pro must be awake and active for NFC interactions to occur.

Do all Surface Pro devices support reading NFC?

No, currently, the NFC reader is available on Wi-Fi-only commercial versions of Surface Pro and Surface Go for Business devices.

Is the NFC functionality different on Surface Pro 10 than Surface Go?

NFC functionality on Surface Pro includes support for more cards and tag types.
To learn more about supportability and NFC location for Surface Go, see NFC support in Surface Go for Business.

Download NFC Lock Screens

To help end users find the NFC reader on the device, a custom lock screen image is available to download and deploy to devices in your organization.

For the best user experience, we recommend modifying the following settings on Surface Pro:

Navigate to Settings > Personalization > Colors.
- Toggle Transparency effects to Off.
Navigate to Settings > Personalization > Lock screen.
- Toggle Make the lock screen image react when I move my PC to Off.

These settings can be managed when deploying the lock screen via Microsoft Intune or with Administrative Templates in Windows Group Policy. To learn more, see Group Policy Settings Reference.

NFC Lock Screen downloads

As shown in the following figure, available downloads include:

A default lock screen with a user-friendly interface: NFC Lock Screen - with background.
Separate black and white icons for customization.

Note

The following example showcases the Surface Pro 13-inch. Below, you’ll find NFC lock screen images for both the Surface Pro 12-inch and 13-inch. Because the NFC sensor is positioned differently on each device, the lock screen layouts vary accordingly.

Screenshot that shows available downloads of NFC Lock Screen for Surface Pro 10.

Share via