What AMD TSME Encryption Is and How It Vanished
AMD TSME encryption, short for Transparent Secure Memory Encryption, is a hardware security feature that automatically encrypts data stored in system RAM to reduce the risk of physical memory attacks, including cold-boot techniques that try to read leftover data from DIMMs after power loss. For years, TSME quietly expanded from premium chips into consumer Ryzen processors, giving privacy-focused users another layer of defense by default. That stability was shaken in April, when Linux hobbyist Ben Kilpatrick installed a fresh OS on a Ryzen 7 9700X system and saw his usual Host Security ID checks report “encrypted RAM: not supported” despite TSME still being enabled in the BIOS. Further testing showed the feature stopped working on non-Pro Ryzen 9000 CPUs after systems adopted AMD’s newer AGESA 1.2.7.0 firmware, turning a silent BIOS change into a security controversy.
Silent BIOS Update, Missing Encryption, and User Backlash
The root of the problem was a BIOS update rollback in spirit: older firmware still exposed Ryzen memory encryption, but boards flashed with AGESA 1.2.7.0 began reporting TSME as unsupported on mainstream chips. MSI’s tests showed that with the same BIOS configuration, a non-Pro Ryzen 9800X3D returned tsme_status = 0 while a Pro Ryzen 9945 and server Epyc parts reported tsme_status = 1, confirming the silicon could handle TSME but firmware had disabled it. According to PCMag, AMD later acknowledged that “a BIOS option to enable Memory Guard on certain non-PRO Ryzen 9000-series desktop processors was previously available but was removed in a recent update.” Users saw this as a quiet downgrading of hardware security features, and the lack of upfront communication amplified concerns about trust, privacy, and who decides which protections stay enabled.
AMD’s Partial Reversal and Upcoming BIOS Update
Under pressure from the community, AMD shifted course and agreed to restore TSME on non-Pro Ryzen 9000 desktop CPUs. After the controversy surfaced through Kilpatrick’s bug reports and coverage, AMD told PCMag that, “Based on valuable community feedback, we will reinstate this option in an upcoming BIOS release in July.” Wccftech reports that the company will bring AMD TSME encryption back to mainstream Ryzen chips via new firmware, effectively undoing the earlier restriction that tied full memory encryption to Pro-branded processors. TSME remains a “foundational security feature” for Ryzen Pro, and AMD says it has no plans to remove support there. For users, the July updates should restore transparent RAM encryption through the BIOS, assuming motherboard vendors roll out fresh firmware built on the revised AGESA code.
What the Incident Reveals About Hardware Security Transparency
This episode highlights growing tension between chipmakers and users over control of hardware security features. By silently switching off Ryzen memory encryption in a routine BIOS update, AMD turned TSME from a background safeguard into a flashpoint about consent and disclosure. Even though TSME mainly protects against physical attacks, privacy-conscious users felt a line was crossed when a previously available defense vanished without warning and was later described as reserved for Ryzen Pro. The rapid backlash and subsequent reversal show how quickly communities can scrutinize firmware changes and demand explanations. It also underlines that security posture is not only about features, but about how openly vendors communicate when those features change. Going forward, enthusiasts are likely to monitor AGESA releases more closely and treat BIOS changelogs as critical security documents, not optional reading.
