Many modern computers ship with enabled. Because most bootable Linux-based media lack signatures for Secure Boot, you may need to disable Secure Boot temporarily in your BIOS/UEFI settings. After completing your recovery, you can re-enable Secure Boot.
Select as your destination target and specify a local directory [1.16].
Users on Wilders Security Forums and Reddit r/sysadmin have noted that Build 41517 handles the Windows 7-to-New-Hardware migration better than newer builds, specifically regarding mass storage controller injection.