TPM2-PK11 provide a PKCS#11 backend for TPM 2.0 chips. This allows you to use your TPM keys in every application which support the PKCS #11 standard. For more information about howto setup keys, certificates and applications see the wiki.

For Ubuntu 18.04 Bionic beaver apt install libsapi-dev libtasn1-6-dev libp11-kit-dev

• Sign and decrypt using private RSA key stored in TPM
• Provide on disk stored certificate in DER format to applications using PKCS #11

• OpenSSH Client (SSH key in TPM)
• Firefox (Private key of Client certificate in TPM)
• GnuPG using gnupg-pkcs11-scd (PGP key in TPM)

1. Fork us
2. Write code
3. Send Pull Requests