Yeah, that's a solid suggestion. A quick tip: before you do, double-check that Secure Boot and TPM 2.0 are definitely enabled in your BIOS, as Lenovo sometimes has them off by default.
Same here. Agreed, and also try temporarily disabling any third-party antivirus during the upgrade process—it can sometimes block the installer. Let me know if that works.
Can confirm. This happened to me too. The health check tool was useless, but manually updating my BIOS from Lenovo's website finally got it to pass. Hope that helps.