TSS is a service provided by Apple that generates and manages cryptographic signatures for firmware images. When a device requests a firmware update, TSS generates a signature (SHSH) that is specific to the device and the requested firmware version. This signature is then verified by the device to ensure that the firmware image is genuine and authorized.