This mode is supported on Linux, macOS, and Windows operating systems. In this mode, a key pair generates during enrollment and is stored in the file system of workstation rather than the TPM chip. The key pair is secured using the PIN.
To disable the TPM chip in Windows workstation, see Device Authentication Setting.