AMD removes memory encryption from consumer Ryzen CPUs

Transparent Secure Memory Encryption (TSME) was introduced by AMD a decade ago to protect against cold boot attacks and other physical exploits targeting system memory. The feature encrypts all data stored in RAM, rendering it inaccessible to attackers with physical access. Initially reserved for high-end processors, TSME later appeared in consumer-grade Ryzen CPUs, including non-Pro models, providing an added layer of security for budget-conscious users. That protection has now vanished without formal notice or explanation from AMD.

What changed

AMD has removed TSME from its non-Pro Ryzen CPUs, a decision that went unannounced and undocumented. Users running Windows systems were unable to detect the absence of the feature, as the operating system does not expose TSME status. Linux users could only confirm the change through technical diagnostics, requiring effort to identify the missing encryption. AMD has not clarified whether TSME was ever officially supported on these consumer chips or why the feature was removed. The company’s only public statement on the matter describes TSME as exclusive to Pro CPUs under the "AMD PRO Technologies" umbrella, marking the first time this restriction has been explicitly communicated.

The removal of TSME creates a security disparity between Pro and non-Pro Ryzen processors. While Pro models retain memory encryption, consumer variants no longer offer this protection, leaving them vulnerable to physical attacks that exploit unencrypted RAM. The change affects users who previously relied on TSME for security, particularly in environments where physical access to hardware is a concern, such as shared workstations or laptops used in public spaces.

Why the change matters

Memory encryption is a critical defense against attacks that target data in RAM, such as cold boot attacks, where an attacker extracts sensitive information from memory after a system is powered off. TSME’s removal from consumer Ryzen CPUs weakens security for users who may not have been aware of the feature’s presence—or its subsequent absence. The lack of transparency from AMD exacerbates the issue, as users had no way of knowing their systems were no longer protected unless they performed specific technical checks.

For professionals managing fleets of machines, the change introduces an unexpected variable in security planning. Organizations that assumed TSME was active on all Ryzen CPUs may now need to audit their hardware to confirm which models retain the feature. The shift also raises questions about AMD’s long-term strategy for security features in its consumer product line. If TSME was never officially supported on non-Pro chips, its inclusion in earlier models may have been an unintended side effect of shared architecture, rather than a deliberate security offering.

What to watch

AMD has not indicated whether it plans to reintroduce TSME to consumer Ryzen CPUs or provide alternative security features for non-Pro models. The company’s silence on the matter leaves users without clarity on future product roadmaps. Meanwhile, the incident highlights the risks of assuming security features persist across product generations, particularly when manufacturers do not communicate changes proactively. Users and IT administrators may need to adopt more rigorous hardware validation processes to ensure their systems meet security requirements.