How to securely store arbitrary data in TPM? [closed]

Let's assume that I have an arbitrary data that needs to be protected by Windows TPM and later use the stored data. Which of the below approaches is a good design?

Create a persisted NCrypt key object (empty container). Store arbitrary data bytes as a "property" using NCryptSetProperty of this key. Finalize the key to persist it to TPM. And later retrieve it using key handle. From my understanding the properties are not really stored inside TPM but in Windows CNG key container (Key Storage Provider ) on disk. Is it correct?

TPM-Sealed Encryption: Encrypt the arbitrary data with a TPM-protected key so only that TPM can decrypt it as this provides confidentiality and integrity. Later decrypt encrypted blob stored on disk to retrieve the data.

Is there any better approach? I am trying to do this C++ using Windows libraries.