Inside the TPM would be a great place to store the private key, simply because it cannot be extracted.

Of course, that introduces a new problem: securely backing up the private key.