Cyclone V Secure Boot

I have a DE10-Nano board and need to enable secure boot in U-Boot. I need to encrypt the entire SD Card and decrypt it at boot. I understand I needa TPM module to do this. Is it possible to do this ...