[marcodiego]

Basically a TPM chip can be used a secure key store. This allows to use digital signatures to check if the boot chain, kernel or modules have not been tampered with.

[userbinator]

In practice, it's mainly used for DRM.