Turns out TPM wasn't Microsoft being difficult.