# BIOS should be OVMF. Add a EFI disk and make sure not to select Pre-Enroll-keys as that would enable Secure Boot.
# Under Options I recommend enabling the Qemu Guest Agent. For CPU type I'd recommend host and 2 cores.