Installing now. Through trial & error, disabled Secure Boot in the BIOS. Disabling TPM was insufficient (and was re-enabled). Secure Boot seems to be a hidden setting in that I couldn’t find it in the menus but I did find it via the BIOS Search function. A bit wonky but seems to have fixed the problem.