TL;DR
AMD is restoring support for Transparent Secure Memory Encryption (TSME) on Ryzen 9000 desktop CPUs via a BIOS update scheduled for July. The feature was previously removed with AGESA 1.2.7.0, sparking community concern.
AMD has confirmed that support for Transparent Secure Memory Encryption (TSME) will be reinstated on Ryzen 9000 desktop processors via a BIOS update scheduled for July 2024. The company previously removed the feature with AGESA 1.2.7.0, but is now responding to community feedback by restoring this security capability on non-PRO Ryzen 9000 chips.
AMD’s TSME, branded as Memory Guard on Ryzen PRO processors, encrypts data stored in RAM to protect against cold boot attacks. The feature was available on certain Ryzen CPUs as far back as 2020, but was quietly removed from consumer Ryzen 9000 series with the release of AGESA 1.2.7.0 earlier this year, according to reports from Ars Technica.
AMD has now stated that, based on valuable community feedback, it will bring back Memory Guard support for non-PRO Ryzen 9000 processors through a BIOS update in July. The company emphasized that Memory Guard remains a foundational security feature on its PRO lineup, with no plans to remove support from those models.
AMD clarified that the removal of Memory Guard from consumer CPUs was not due to security concerns but was part of a firmware decision. The feature encrypts RAM data with a generated key, providing an additional layer of protection against physical attacks, although it is not considered critical for most consumer desktops.
Implications for Consumer Security and Firmware Policies
This development matters because it indicates AMD’s willingness to respond to user concerns about security features. Restoring Memory Guard on Ryzen 9000 CPUs enhances the security options available to consumers, especially those handling sensitive data. It also reflects a shift in AMD’s firmware policy, suggesting that features previously removed for differentiation or firmware reasons may be revisited based on community input.
While Memory Guard is not a critical security feature for everyday users, its availability can be important for security-conscious individuals and enterprise users who rely on hardware-based encryption for data protection. The move also signals AMD’s recognition of the importance of transparency and user feedback in product support decisions.
As an affiliate, we earn on qualifying purchases.
Background on AMD’s Memory Encryption Support
AMD introduced TSME support on Ryzen CPUs as early as 2020, with the Ryzen 7 3700X. The feature encrypts data in RAM, protecting against cold boot attacks that could retrieve sensitive information if a device is physically accessed after shutdown. The feature was available on Ryzen PRO processors and some consumer models until it was removed with the release of AGESA 1.2.7.0 earlier this year.
The removal was not publicly explained by AMD, but reports indicated that it was a firmware decision aimed at differentiating the PRO lineup from consumer CPUs. The community, security researchers, and motherboard vendors raised concerns about the loss of this security capability, prompting AMD to reconsider its stance.
Following the discovery and a bug report on AMD’s GitHub, AMD’s official response indicated that support for Memory Guard on Ryzen PRO processors would continue, but the removal from non-PRO chips was temporary and subject to change based on feedback.
“We take the security of our customers’ data very seriously. Regarding certain non-PRO Ryzen 9000-series desktop processors, a BIOS option to enable Memory Guard was previously available but was removed in a recent update. Based on valuable community feedback, we will reinstate this option in an upcoming BIOS release in July.”
— AMD spokesperson
As an affiliate, we earn on qualifying purchases.
Remaining Questions About Feature Implementation
It is not yet clear whether all Ryzen 9000 models will support Memory Guard after the July BIOS update or if there will be limitations. AMD has not detailed the specific models or the exact timeline beyond the scheduled release. Additionally, the precise security implications and whether the feature will be fully functional on all supported hardware remain to be confirmed.
Secure memory encryption for desktops
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps for AMD and Ryzen Users
AMD plans to release the BIOS update in July 2024, which will enable Memory Guard support on Ryzen 9000 CPUs. Users should monitor motherboard manufacturer announcements for specific BIOS availability. Security experts and users interested in hardware encryption should review the update once available to determine the feature’s functionality and impact.
Further clarifications from AMD regarding model-specific support and security implications are expected after the BIOS release, and users should stay informed through official channels.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will all Ryzen 9000 CPUs support Memory Guard after the BIOS update?
It is not yet confirmed whether all models will support Memory Guard after the July BIOS update. AMD has only stated that support will be reinstated for non-PRO Ryzen 9000 processors based on community feedback.
Why was Memory Guard removed from Ryzen 9000 CPUs initially?
AMD did not publicly specify the reason, but reports suggest it was a firmware decision aimed at differentiating the PRO lineup from consumer CPUs. The feature was previously supported on some Ryzen CPUs but was disabled in AGESA 1.2.7.0.
Is Memory Guard a critical security feature for most users?
While it provides an additional layer of security by encrypting RAM data, it is not considered critical for most consumer desktops. Its main value is for security-conscious users and enterprise environments handling sensitive information.
Will AMD support Memory Guard on Ryzen PRO CPUs?
Yes, AMD has confirmed that Memory Guard support on Ryzen PRO processors will continue as part of their foundational security features.
When exactly will the BIOS update be available?
AMD has announced the update will be released in July 2024, but specific release dates depend on motherboard manufacturers and are yet to be confirmed.
Source: Tom’s Hardware: For The Hardcore PC Enthusiast
