TL;DR
AMD has confirmed it will restore support for memory encryption (TSME) on Ryzen 9000 desktop CPUs through a BIOS update in July. The feature was previously removed in recent firmware updates, but AMD now states it will be reinstated based on community feedback. The move affects security and transparency for users of these processors.
AMD has announced it will restore support for its memory encryption feature, known as Transparent Secure Memory Encryption (TSME) or Memory Guard, on Ryzen 9000 desktop processors via a BIOS update scheduled for July. This decision follows community feedback and concerns over the previous removal of the feature in recent firmware updates.
AMD confirmed to Tom’s Hardware that it will reintroduce support for TSME on non-PRO Ryzen 9000 processors through a forthcoming BIOS update in July. The feature, which encrypts data stored in RAM to protect against physical attacks such as cold boot attacks, was previously available but was disabled in the AGESA 1.2.7.0 firmware update earlier this year.
The removal of TSME had been noted by security researchers and users, with some discovering that the feature was supported in earlier Ryzen models, including Ryzen 7 3700X, but was later disabled on newer chips. AMD’s statement emphasizes that TSME remains a core security feature on its Ryzen PRO lineup, which continues to support the technology.
According to AMD, the decision to reinstate Memory Guard support on non-PRO Ryzen 9000 CPUs was driven by feedback from the user community, highlighting the importance of transparency and security features for desktop users. AMD’s official statement indicates that the feature will be enabled via BIOS, restoring a layer of hardware-based memory encryption that was previously disabled.
Impact of Reinstating Memory Encryption Support
This development is significant because it restores a security feature that protects sensitive data stored in RAM against physical attacks, such as cold boot attacks. While TSME is not critical for most typical consumer use cases, its availability enhances security for users handling sensitive information and aligns AMD’s consumer offerings with its PRO lineup, which has maintained support for the feature.
The move also signals AMD’s responsiveness to community concerns about transparency and security, potentially influencing user trust and security practices in the desktop CPU market. For security-conscious users, the return of TSME support could be an important factor in choosing AMD Ryzen 9000 processors.
AMD RYZEN 7 9800X3D 8-Core, 16-Thread Desktop Processor
The world’s fastest gaming processor, built on AMD ‘Zen5’ technology and Next Gen 3D V-Cache.
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Background on AMD’s Memory Encryption Support
AMD introduced support for TSME (also branded as Memory Guard) in its Ryzen PRO processors and some consumer CPUs as far back as 2020, including the Ryzen 7 3700X. The feature encrypts data in RAM to prevent physical extraction of sensitive information during attacks like cold boot attacks.
Earlier this year, AMD quietly removed support for TSME on Ryzen 9000 desktop processors with the release of AGESA 1.2.7.0. Security researcher Ben Kilpatrick discovered the removal after auditing a Ryzen 7 9700X system, which led to AMD confirming that the feature had been disabled via firmware updates. AMD did not publicly explain the reason for the removal, but it appeared to be a differentiation strategy between PRO and consumer products.
Following the discovery, AMD’s response was limited, with a senior engineer stating they had no further information. The removal raised concerns among security researchers and users who valued hardware-based memory encryption for protection against physical attacks.
“We take the security of our customers’ data very seriously. Memory Guard support will be reinstated on non-PRO Ryzen 9000 processors in an upcoming BIOS release in July.”
— AMD spokesperson
ASUS ROG Strix B650E-F Gaming WiFi AMD B650 AM5 Ryzen™ Desktop 9000 8000 & 7000 ATX Motherboard, 12+2 Power Stages, DDR5, 3X M.2 Slot, PCIe® 5.0, WiFi 6E, 2.5G LAN, USB 3.2 Gen 2×2 Type-C®, Aura Sync
AM5 Socket: Ready for AMD Ryzen Desktop 9000*, 8000*, and 7000 Series Processors
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Specific Changes Will the BIOS Update Include?
While AMD has announced the reinstatement of Memory Guard support via BIOS in July, it is not yet clear whether the feature will be enabled by default or require manual activation. Details about the exact BIOS versions and whether any hardware limitations will prevent support on certain models are still emerging. Additionally, AMD has not specified if future processor generations will also support TSME or if this is a one-time reinstatement.
SJZBIN 10Pcs DDR Memory RAM Module Case Plastic Box Packaging Container Clamshell Antistatic Tray for DDR2, DDR3 and DDR4 Long DIMM Desktop Memory RAM Module
material: plastic
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming BIOS Release and User Activation Details
The BIOS update scheduled for July will be the next step in restoring Memory Guard support on Ryzen 9000 processors. Users should expect firmware releases from motherboard manufacturers, and AMD may provide guidance on enabling the feature through BIOS settings. It is advisable for users to monitor manufacturer announcements and update their BIOS accordingly to regain the security benefits of memory encryption.
Further details, including the exact BIOS version numbers and whether additional security features will be added, are expected in the coming weeks as AMD and motherboard vendors prepare for the release.
AMD RYZEN 7 9800X3D 8-Core, 16-Thread Desktop Processor
The world’s fastest gaming processor, built on AMD ‘Zen5’ technology and Next Gen 3D V-Cache.
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Will Memory Guard be enabled automatically after the BIOS update?
AMD has not confirmed whether the feature will be enabled by default or require manual activation. Users should check BIOS settings after the update for the Memory Guard option.
Does this mean all Ryzen 9000 CPUs will support memory encryption again?
Support will be reinstated on non-PRO Ryzen 9000 processors through the BIOS update. Support for PRO models remains unchanged, as they have always included this feature.
Why was Memory Guard support removed initially?
AMD did not publicly specify the reason, but it appeared to be related to product segmentation between PRO and consumer CPUs. The removal was done via firmware update in AGESA 1.2.7.0.
Will this affect the security of my Ryzen 9000 system?
Reinstating Memory Guard support enhances security by encrypting data in RAM, providing additional protection against physical attacks. However, its practical impact depends on user needs and threat models.
There is no indication that the reinstatement is directly related to specific vulnerabilities. It appears to be a response to community feedback and a move toward greater transparency.
Source: Hacker News
