the usb must be created using GPT and UEFI non CSM mode. I use Rufus to burn windows iso to USB using that mode.
BIOS must be set to UEFI non CSM mode before installation.
secure erase might not needed. you simply can use partition tool during windows installation to clear all existing partitions.
creating new partition might get error during installation, but simply retry it.