Thanks for all your work!
I'm noticing some oddities, and can't get past the first reboot.
First, when running the configurator to generate password.msi, the Surface Pro 5 is not in the list of Surface Pro models available. It displays only Surface pro, pro4, pro 6, pro 7, etc (see missing_model.png).
I followed the instructions (setting security to off), and ran the msi using msiexec /i from an elevated command prompt. The file runs and then prompts me to reboot, which I do.
After reboot, it boots to a black screen with a red box asking for the last two characters of the signature and a password. I've tried leaving the password blank, or using gibberish as the first post instructs, but either way I get a message saying that it's incorrect and no eufi configuration is enabled on the machine. It then boots back into windows.
The BIOS version is still old, apparently, but Windows is up to date:
BIOS Version/Date Microsoft Corporation 239.871.768, 11/7/2015
OS Name Microsoft Windows 10 Pro
Version 10.0.19045 Build 19045
Can you help, please?
Thanks