Multi-factor authentication that combines a private key stored in the device's TPM (Trusted Platform Module) with a PIN or biometric authentication. Because the password never travels over the network, it is more secure than traditional authentication methods.