Generating and storing #SSH keys inside the #TPM (Trusted Platform Module)
https://linderud.dev/blog/store-ssh-keys-inside-the-tpm-ssh-tpm-agent/
It works, at least on a Thinkpad X1 and Debian 12. I'm not sure I'd actually prefer that to something more portable such as a Yubikey.
I'm interested in hearing your feedback, and whether you actually use the TPM (and what for).