Turns out TPM wasn't Microsoft being difficult.
This article highlights the issues that older computer systems will encounter when the Secure Boot Certificate expires ...