PSA: many desktop machines without a TPM still have a header for one. You can plug in a TPM module compatible with your motherboard, which costs about $20 from Amazon.