I wanted to let you know how I resolved my issue with this: https://developer.apple.com/forums/thread/683913 My old MBA was in the beta program. When I got the new one, I had to setup, enroll in the beta, and then try to erase and migrate via Thunderbolt. I messed up because Disk Utility now seems to default to Show All Volumes, instead of Show All Devices. I don’t think that I erased the entire drive before I restored. I may have erased each partition individually. This kept my account from getting a secure token for the device, preventing me from doing GUI updates, and enabling FileVault. I did a Time Machine backup to an external drive, erased the SSD Device, and reinstalled the current beta. Still in the installation interface, I migrated from the backup, and was prompted to enter a secure password, enable FileVault, and allow reset via Apple ID. My important note is that the problem is not saved in the backup. I did not have to boot into the system with a fresh account to establish ownership.