Before doing anything, disable bitlocker or your surface won't boot.
Run this command in Command Prompt :-
manage-bde -protectors %systemdrive% -disable (either replace %systemdrive% with C: or just leave it at that)
Edit :- Links are dead!! Go to the following thread :-
Secure Boot is disabled!
Now you can run unsigned apps on surface rt!