The Surface doesn't carry the third-party signing key, so in the absence of a flaw in the firmware implementation you're not going to be able to run anything other than Windows.