Assertion: azure ad | /r/CapableOf | request tpm
Facets:
value: to decrypt
type: PURPOSE
Source sentences:
text: When the device needs to decrypt the user profile with the DPAPI key, Azure AD provides the DPAPI key encrypted by the session key, which CloudAP plugin requests TPM to decrypt.