You don’t need to use windows hello, you should be able to use TPM with a Fido2 key or similar. Difference is the private key can never be read again. It can o

You don’t need to use windows hello, you should be able to use TPM with a Fido2 key or similar. Difference is the private key can never be read again. It can only be used to sign things.