Ok, managed to update to 25H2, I used the Installation Assistant. Think I have updated the Secure Boot keys, will see when I reboot. BIOS still needs to be updated.