Which of the following, BEST explains the function of TPM?

TPM (Trusted Platform Module) is a hardware chip that provides security features using unique keys2. TPM can store cryptographic keys that are used for encryption, authentication, digital signatures, and other security functions. TPM can also generate random keys that are unique to each device and never leave the chip. TPM can protect these keys from unauthorized access or tampering by using hardware isolation and encryption3. TPM can also measure and verify the integrity of the operating system and firmware on a device by using a process called attestation. TPM does not ensure platform confidentiality by storing security measurements (B), as security measurements are used for attestation, not confidentiality. TPM does not improve management of OS installation ©, as OS installation is not directly related to TPM functionality. TPM does not implement encryption algorithms for hard drives (D), as encryption algorithms are implemented by software such as BitLocker, which can use TPM keys for encryption.

References: 2: https://support.microsoft.com/en-us/topic/what-is-tpm-705f241d-025d-4470-80c5-4feeb24fa1ee  3: https://www.techopedia.com/definition/24771/technical-controls : https://www.techopedia.com/definition/25888/security-development-lifecycle-sdl