I have set up many of these systems and every one stores a string (a password) in the TPM which is then fed into the LUKS system as a regular password.