[jprete]

Totally off-topic: You could always write a JNI shim to a C/C++-compatible API, if you know what OS it's running on.

I know it's awful, but probably not as awful as a hardcoded passphrase.

[cryptonector]

There are TPM 2.0 APIs for Java.

[RedShift1]

No, they are all for TPM 1.2