AMD Removes Ryzen TSME Encryption

AMD (AMD) has silently removed the Transparent Secure Memory Encryption (TSME) feature from its consumer AMD processors through a firmware update (AGESA 1.2.7.0), without any public announcement or explanation. This feature, which encrypts all system memory to protect against physical attacks like cold boot exploits, had been available on consumer AMD chips for years. The change was discovered by Ben Kilpatrick, a Linux hobbyist, who noticed that his AMD 7 9700X no longer supported encrypted RAM despite the BIOS setting being enabled. Investigations by Ben Kilpatrick and Motorola Solutions engineers confirmed that the feature was disabled on consumer AMD parts but remained active on PRO and EPYC processors. AMD (AMD) has since stated that TSME is exclusively for PRO CPUs, but has declined to provide further details or explain why a previously working feature was removed from consumer hardware. This lack of transparency has angered users and security experts, raising concerns about AMD (AMD)'s commitment to security and customer communication. The move also sharpens the distinction between AMD (AMD)'s consumer and business tiers, potentially pushing security-minded buyers towards pricier PRO models or competitors like Intel.