I am extremely new to the field of information security but was given a project to create a secure TLS certificate signed by our CA for a new security process. I found this thread (How to generate a unique and uncopyable VPN certificate/key for a specific client hardware device?) It seems to be an answer to my problem.
Is this a secure method to create a certificate?
What are the protections in using a VSC?
And the line in the above process "\attestation AIK_AND_CERT" what is the purpose of this?