Nooutlandish theories here, only TPM questions so arcane it's very difficult to put into a short post.
Windows 11 seems to REALLY want "Bitlocker" and if I only do that, most of the questions will be answered.
So yes, I am secure booted,
But my PCR7=2, and it's supposed to be 11 (I've been told)
If I did not know how to swim I might be leery of diving off a pier into the ocean,
And Bitlocker is like that, it's scary.
If it's true about Windows managing keys,
If it's true about needing Bitlocker to qualify
If there's no other way to make windows 11 happy,
Fine.
(But I'd rather not use Bitlocker, or need keys)
///////////////////////////////////////////////////////
I don't know (from the picture) how important SMBIOS is or how I could possibly lock down my USB ports at lunch,
and my system drive is hooked to a un-allowed DMA PCI-Bus, so...
Bottom line, maybe there'll be different windows 11's, unless there's some way to upgrade the BIOS,