I have heard about this, but not sure how it would work.
I would imagine that when you register the device, the public RSA key burnt into the chip would be shared. That way, if the application sends a challenge, the TPM uses the private key to decrypt a message and send the correct response??
I'm just guessing so any clarity would be most appreciated.
I also wonder if this authentication form of authentication could be made to support mutual attestation?
I managed to find this in 4edition CCSP 'Official Student Guide' p 261
Cloud-based software applications can use a Trusted Platform Module (TPM) to authenticate hardware devices. Since each TPM chip has a unique and secret RSA key burned in as it is produced, it is capable of performing platform (computer system, phone, tablet) authentication. A TPM is a chip placed on the main board of the device such as a laptop. It may also be used to create and store keys as well as perform tasks as a cryptoprocessor