LinuxCon + CloudOpen + ContainerCon NA 2015

We've never made much use of TPMs in Linux. Poorly understood and poorly trusted, they sit there on the LPC bus, gathering dust. But what if we can use them to provide meaningful additional security to systems? What if we could use the TPM to protect us from rootkits, bootkits and modified firmware? What if the TPM could secure your SSH keys against theft, make your random numbers more random and inform you that someone backdoored your laptop when you left it in your hotel room?

All of this is possible today, but it's not integrated and it's beyond the ability of even most skilled users. What can we do to tie this exceptionally useful security device into the underlying OS and make real steps to better security?