I should add the following (and indeed I should have included this within my previous post).
fwupdmgr told me three devices had installable updates: Lenovo diagnostics; a Logitech wireless receiver; Intel TPM.
Using @sj's method (and obtaining the device-id via `fwupdmg get-devices`) I managed to install one of diagnostics update. Upon reboot, fwupdmgr told me only one update was outstanding: the tpm one. So: the Logitech update had disappeared; and the TPM update remained uninstalled. One can see from the issue tracker for fwup that Lenovo TPM (or 'ME') updates are notorious for not installing. See: https://github.com/fwupd/firmware-lenovo/issues?q=tpm+is%3Aissue+is%3Aopen+
I should add the following (and indeed I should have included this within my previous post).
fwupdmgr told me three devices had installable updates: Lenovo diagnostics; a Logitech wireless receiver; Intel TPM.
Using @sj's method (and obtaining the device-id via `fwupdmg get-devices`) I managed to install one of diagnostics update. Upon reboot, fwupdmgr told me only one update was outstanding: the tpm one. So: the Logitech update had disappeared; and the TPM update remained uninstalled. One can see from the issue tracker for fwup that Lenovo TPM (or 'ME') updates are notorious for not installing. See: https:/ /github. com/fwupd/ firmware- lenovo/ issues? q=tpm+is% 3Aissue+ is%3Aopen+