Yes, you either generate the key on the TPM chip (for SSH authentication, that would be one per user), or you generate it in software and "import" it. I've cla

Yes, you either generate the key on the TPM chip (for SSH authentication, that would be one per user), or you generate it in software and "import" it. I've clarified how it works here: http://blog.habets.se/2013/12/How-TPM-protected-SSH-keys-work http://blog.habets.se/2013/12/How-TPM-protected-SSH-keys-wor...