Please tell me how to get the TPM version of the Lumia 950LX from UWP app.
Take a look at Security/RequireRetrieveHealthCertificateOnBoot in the Policy CSP. If the device is enrolled and you are the MDM administrator this could serve as a proxy to determine if the device has TPM 2.0. You would have to be able to enroll the device for management.