A Trusted Platform Module (TPM) provides additional security benefits over software because data stored within it cannot be used on other devices.
If you enable this policy setting, only devices with a usable TPM may provision Microsoft Passport for Work.
If you disable or do not configure this policy setting, the TPM is still preferred, but all devices may provision Microsoft Passport for Work using software if the TPM is non-functional or unavailable.
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\PassportForWork |
| Value Name | RequireSecurityDevice |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |