Yeah I've read the fTPM paper that made use of SGX, but it sounded like it had some limitation (needed fuses to prevent rollbacks, etc.) From the article it al

Yeah I've read the fTPM paper that made use of SGX, but it sounded like it had some limitation (needed fuses to prevent rollbacks, etc.) From the article it also looks like Pluton will implement the TPM API, but I guess that's just to remain compatible.