Saturday, June 20th 2026
AMD to Restore TSME (Memory Encryption) on Consumer Ryzen Processors After Backlash
AMD backpedaled on its recent decision to remove Transparent Secure Memory Encryption (TSME) feature on its consumer Ryzen processors, which was typically enabled by default. The company had, in April, quietly disabled the feature for Ryzen consumer processors through an AGESA update encapsulated into motherboard firmware updates. The idea probably was to restrict TSME to Ryzen commercial-segment processors, sold under the Ryzen PRO brand, besides Ryzen Threadripper WX workstation processors, and EPYC server processors. For reference, Intel offers a similar feature, TME-MK (Total Memory Encryption-Multi-Key) on even its consumer Core processors, and not just its commercial Core vPro processors.
AMD said that it has decided to restore TSME "based on valuable community feedback," and end-users should expect UEFI firmware updates that restore the feature starting next month (July 2026). TSME is a hardware-based feature that leverages fixed-function hardware on the silicon to encrypt the contents of the memory, providing an additional layer of security. Since AMD shares a common IOD design across its Ryzen consumer and Ryzen PRO commercial product lines, the feature is physically present.
In a statement to Tom's Hardware, AMD said:
Source:
Tom's Hardware
AMD said that it has decided to restore TSME "based on valuable community feedback," and end-users should expect UEFI firmware updates that restore the feature starting next month (July 2026). TSME is a hardware-based feature that leverages fixed-function hardware on the silicon to encrypt the contents of the memory, providing an additional layer of security. Since AMD shares a common IOD design across its Ryzen consumer and Ryzen PRO commercial product lines, the feature is physically present.
AMD Memory Guard (Transparent Secure Memory Encryption, or TSME) is a hardware-based memory encryption technology available on our Ryzen PRO desktop and mobile processors where supported in silicon. It is a foundational security feature, and we have no plans to remove support from our Ryzen PRO lineup. This commitment holds now and in the future.
Regarding certain non-PRO Ryzen 9000-series desktop processors, a BIOS option to enable Memory Guard was previously available but was removed in a recent update. Based on valuable community feedback, we will reinstate this option in an upcoming BIOS release in July."
90 Comments on AMD to Restore TSME (Memory Encryption) on Consumer Ryzen Processors After Backlash
When you use 5 or 10 year old software on all of your devices and all of your applications everywhere feel free to argue that way. If not, that just stop.
I'd still rather have the feature present out of principle
Image 1 with TSME
Image 2 without TSME
That would have been too good to be true.
Regards,
Fred.
But nice try
"Know What? You’re Starting To Remind Me Of Me."
Regards,
Fred.
Definitely super effective on AMD they do something almost yearly... Almost like they're doing it on purpose at this point.
At the end of the day, the bigger issue is AMD removing a feature and not telling anyone about it.
I never heard of this feature before the news, most home users probably have no need for TSME, but removing it without notice or any reason why is the problem.The bullying doesn't really work on Nvidia, all they did is lower the price by $100 and charge $800 for a x70Ti card, and if they listened or cared they'd be recalling the 12vhpwr connector.
I know that's a hot take for some people but honestly consumers need to be more critical of companies, or vote with your wallet.
Although all of these companies are testing to see what they can get off with, since the consumer market is no longer the focus.
The encryption key is in the CPU, and it'd be extremely hard to extract it if it's even possible after power is cut, depending on how the key is generated and stored.
You need to downgrade to a BIOS with AGESA 1.2.0.3g or earlier series to restore functionality, 1.2.7.0 is also affected
I’ve been reading here and there that there is confirmation for "some" Ryzen 9000 chips only. However, firstly, this doesn't apply to all of them, and secondly, not to the Ryzen 7000 series—which is what I have.
Attached is a screenshot from HWInfo (focusing on SME!).
Additionally:heise(de)
In addition to Heise's quote, you could also use the "fwupdmgr security" command. Anyone currently using Linux—and a Ryzen 7000—could take care of this while they're at it.
Regards,
Fred.
The same is TME/TME-MK on Intel, but where AMD and Intel differ is that Intel has explicitly supported both on client, business and workstation parts, while AMD just kind of left it enabled on Ryzen and never bothered disabling it, until now. Except that remotely disabling security features purely to enforce market segmentation makes them look like complete and total arses, hence the U turn on it.
Anyhow, AMD is very thick in the head. Who the hell is going to interpret a step toward less security in 2026 as a good thing?
At least they backtracked quickly rather than let this spiral out of control for weeks/months. Some other companies are not so bright and would just let this thing fester until their bottom lines are negatively impacted (*cough* Sonos *cough*).
if an AGESA ver. is bugged, it's bugged, I don't see why TSME toggle would only affect Ryzen 9000.
I'm not sure if you meant "too good to be true" for same latency on/off, or with respect to what I said about the latency penalty.
It was done on the down low, without communication, hoping nobody would notice or care
Since this is a consumer desktop PC i always keep TSME disabled.
No TSME: