Imports certificates from PFX files into the Microsoft Platform Crypto Provider.
This is the same as
certutil -user -csp TPM -p password -importPFX PFXFile NoExport
But certutil has a bug and at least on some systems produces the error
CertUtil: -importPFX command FAILED: 0x80090027 (-2146893785 NTE_INVALID_PARAMETER)
CertUtil: The parameter is incorrect.
If you leave away the NoExport, it produces the error
CertUtil: -importPFX command FAILED: 0x80090029 (-2146893783 NTE_NOT_SUPPORTED)
CertUtil: The requested operation is not supported.
When deleting the certificate via the Windows UI or similar means, the TPM still keeps the private key. This is different than other KSPs and CSPs and likely depends only on the KSP and not the way TPMImport imports the key. Read Issue #4 for more details.
Keys stored in the TPM can be listed through the certutil [-user] -csp TPM -key command and leaked keys can be deleted with certutil [-user] -csp TPM -delkey TPM-Import-Key-<thumbprint> .
TPMImport is available under the GPL.