Windows Upgrade Help and more

Same here. Agreed, it's a common headache. Sometimes you also need to enable the TPM setting separately in the BIOS, even if Secure Boot is on.

Yeah, that's the fix. Also, make sure you're saving the BIOS changes and restarting before you run the upgrade again.

Same here. You could also check if there's a BIOS update for your ThinkCentre, as that sometimes adds the proper Secure Boot support.

Agreed. This happened to me on a similar model. I had to go into the BIOS and manually enable both TPM and Secure Boot before it would finally pass the check. Hope that helps.

Oh, and just to be sure, is your TPM firmware itself fully updated in your motherboard's BIOS?

Yeah, This happened to me with an older i5. It's a hard block, so I ended up staying on Windows 10 for that machine. Good luck!

Glad that worked! To answer your new question, no, a good redirect tool shouldn't break those other features; they'll just open in your chosen browser instead.

Yeah, I had the same problem with my older PC. I ended up using the official Media Creation Tool to bypass the checks and it installed fine.