Safe to disable fTPM as precaution?

[Fastfishy2]

Running windows 10, no desire to upgrade to 11. Been reading about the fTPM stutter, I don't think I've noticed it but I want to disable fTPM as a precaution. I have a 5800X3D and an Asus strix B550A Mobo. It doesn't have a dedicated TPM Header. Board was built in March 2023 and is using the bios version it shipped with (2806)

I guess I'm asking if it's safe for me to just go into bios when I get home and disable fTPM. Will it mess anything up on my PC? Is it a real security risk for me going forward?

 

[Solaris17]

Do you use bitlocker?

if not then you should be able to yes.

and fwiw even Linux is getting frustrated with the implementation of it.

Linus Torvalds: "Let's Just Disable The Stupid [AMD] fTPM HWRND Thing" - Phoronix

www.phoronix.com

 

[tabascosauz]

Running windows 10, no desire to upgrade to 11. Been reading about the fTPM stutter, I don't think I've noticed it but I want to disable fTPM as a precaution. I have a 5800X3D and an Asus strix B550A Mobo. It doesn't have a dedicated TPM Header. Board was built in March 2023 and is using the bios version it shipped with (2806)

I guess I'm asking if it's safe for me to just go into bios when I get home and disable fTPM. Will it mess anything up on my PC? Is it a real security risk for me going forward?

When you disable fTPM after running a fTPM enabled setup, it should just ask you to reconfirm your PIN upon first login. As long as you don't use bitlocker.

If you are concerned about fTPM stutter, just update to any BIOS with AGESA 1207/1208/120A that have it fixed.

 

[cvaldes]

I don't use Bitlocker so fTPM is turned off on my Windows 10 systems. The systems run fine without it.

 

[Assimilator]

Running windows 10, no desire to upgrade to 11. Been reading about the fTPM stutter, I don't think I've noticed it but I want to disable fTPM as a precaution. I have a 5800X3D and an Asus strix B550A Mobo. It doesn't have a dedicated TPM Header. Board was built in March 2023 and is using the bios version it shipped with (2806)

I guess I'm asking if it's safe for me to just go into bios when I get home and disable fTPM. Will it mess anything up on my PC? Is it a real security risk for me going forward?

The number one rule of anything computer-related:

If it isn't causing a problem, leave it the f**k alone.

 

[Fastfishy2]

When you disable fTPM after running a fTPM enabled setup, it should just ask you to reconfirm your PIN upon first login. As long as you don't use bitlocker.

If you are concerned about fTPM stutter, just update to any BIOS with AGESA 1207/1208/120A that have it fixed.

Yeah I've got an Asus bios from late 2022 that's AGESA 1207. Have confirmed my drives are decrypted but I'm not gonna go messing with fTPM unless I definitely notice the stutter. Other than the pin reconfirmation, do you know of any other issues I should look out for if I decided to nix fTPM?

 

[tabascosauz]

Yeah I've got an Asus bios from late 2022 that's AGESA 1207. Have confirmed my drives are decrypted but I'm not gonna go messing with fTPM unless I definitely notice the stutter. Other than the pin reconfirmation, do you know of any other issues I should look out for if I decided to nix fTPM?

1207 already fixed the fTPM bug. There's no need to do anything.

The fTPM stuttering is really obvious, so there shouldn't be a need for just-in-case. Either it's happening or it's not.

At least a couple months ago, you could switch fTPM on and off at will and the only consequence is the PIN prompt. Not sure if anything has changed.

 

[Fastfishy2]

1207 already fixed the fTPM bug. There's no need to do anything.

The fTPM stuttering is really obvious, so there shouldn't be a need for just-in-case. Either it's happening or it's not.

At least a couple months ago, you could switch fTPM on and off at will and the only consequence is the PIN prompt. Not sure if anything has changed.

yeah I only asked because a bunch of people were complaining that the AGESA updates didn't help. I have no idea as to the merit of their complaints.

 

[tabascosauz]

yeah I only asked because a bunch of people were complaining that the AGESA updates didn't help. I have no idea as to the merit of their complaints.

Honestly, no idea either, but it worked on my systems and for most people. There have also been subsequent 1208 and 120A releases since then, so if you personally experience it then those could be worth a try. 120A is the big vulnerability mitigation suite.

Not to say that those people are lying. The fix was rolled out when Vermeer/Cezanne was still AMD's main product, so it's very possible that AMD has neglected to carry the fixes forward or did not understand the full extent of the problem. Pluton was only introduced with Rembrandt's PSP, and has continued to make an appearance in Phoenix and Raphael's new IO die, so the PSP has clearly undergone some design changes since AGESA "fixed" the fTPM within.