After perusing the /r/Windows11 sub, I checked the device security settings on the desktop. Turns out *all* the hardware security options on the motherboard had been disabled by default since I bought the thing. It wants Secure Boot, TPM, and virtualization all turned on. Since this isn't going to be anything but a Windows box for now, turning them on isn't that big a deal, at least not for *that*.