Hi,
I had the same issue and needed a lot more paremeters to be set on the initial installation. The only way to use firstboot is to disable secure boot and enable ist again after the setup.
We did not want to do that because to disable and enable is not what we wanted.
So you can run a Powercli script after installing the host, or automate the whole thing with, for example, Ansible or Aria Automation