If you want it to automatically unlock via TPM then you turn filevault off. This is protection on top of that.