Tpm2-pk11 is an utility to provide a PKCS#11 backend for a TPM 2.0 (Trusted Platform Module) chip in order to secure your SSH keys. The package comes with a library that you can use as “PKCS11Provider” in your SSH configuration file.