Comment by late2part

I'm pretty happy with this solution from Strongauth.

http://keyappliance.strongauth.com/

You can secure the root for it with TPM or HSM.