AMD to Reinstate TSME Memory Encryption on Ryzen 9000 CPUs via July BIOS Update

AMD will restore memory encryption on Ryzen 9000 desktop CPUs in July through a BIOS update, reversing a previous removal after "valuable community feedback" prompted the reversal.

AMD has confirmed it will reinstate Trusted Platform Module (TPM)-based Secure Memory Encryption (TSME) on its Ryzen 9000-series desktop processors starting with a BIOS update in July 2026. The feature, which encrypts system memory to protect against physical attacks, was disabled in an earlier firmware revision but will now be restored for non-PRO models, according to AMD’s official statement.

TSME was originally introduced to safeguard sensitive data in systems where physical security cannot be guaranteed. Its removal in prior updates had drawn criticism from security researchers and enterprise users, who argued that the feature was critical for protecting against cold-boot attacks and other hardware-level threats. AMD’s decision to restore it reflects direct input from its user community, including feedback channels and security forums.

The BIOS update will be available for all Ryzen 9000 desktop CPUs, including the 9600, 9700, and 9900 series, though PRO models (which retained TSME) are unaffected. Users will need to update their BIOS to enable the feature, which AMD will support across major motherboard manufacturers. The company has not specified whether this change will extend to mobile or embedded variants of the Ryzen 9000 lineup.

This reversal comes as cybersecurity concerns around hardware-level protections have intensified. In 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued guidance urging organizations to enable memory encryption where possible, citing rising incidents of supply-chain attacks targeting firmware. While TSME is not a substitute for full-disk encryption, it adds an additional layer of defense by encrypting RAM contents in real time.

AMD’s move aligns with broader industry trends. Intel, for instance, has long included similar protections in its vPro and Xeon platforms, though its implementation differs technically. Competitors like Qualcomm and Apple have also emphasized hardware-based security in their respective ecosystems. The restoration of TSME may also influence other chipmakers to re-evaluate their own security postures, particularly as regulatory scrutiny over data protection grows.

For end users, the update means enhanced security without requiring a new CPU purchase. Enterprise customers, who often rely on TSME for compliance with standards like FIPS 140-3, will benefit from the restoration. AMD has not yet announced whether future Ryzen generations will include TSME by default, but the company’s responsiveness to community feedback suggests continued attention to security features.

The BIOS update is expected to roll out in phases beginning July 2026, with motherboard vendors providing detailed instructions for users. AMD’s official documentation will outline compatibility and any potential performance impact, though early benchmarks suggest minimal overhead for most workloads.

Why is TSME being restored after its removal?
AMD cited "valuable community feedback" as the primary reason for reinstating Trusted Platform Module (TPM)-based Secure Memory Encryption (TSME) on Ryzen 9000 desktop CPUs. Security researchers and enterprise users had raised concerns about the feature’s absence, particularly in environments where physical security cannot be guaranteed. The move reflects AMD’s commitment to addressing user demands in its security posture, especially as hardware-level threats like cold-boot attacks remain a persistent risk.

What happens next for users?
Users of Ryzen 9000 desktop processors (9600, 9700, 9900 series) will need to update their BIOS starting in July 2026 to re-enable TSME. AMD will work with motherboard manufacturers to ensure compatibility, and detailed instructions will be provided in official documentation. While the update is expected to have minimal performance impact, users should verify their motherboard’s support for the latest BIOS revision before proceeding.

How does TSME compare to Intel’s memory encryption?
AMD’s TSME and Intel’s Total Memory Encryption (TME) serve similar purposes—encrypting system memory to protect against physical attacks—but differ in implementation. Intel’s TME is integrated into its vPro and Xeon platforms, while AMD’s TSME relies on the TPM for key management. Both features require hardware support and BIOS enablement, though Intel’s solution is more tightly coupled with its processor microarchitecture. The restoration of TSME may prompt a closer look at how these competing approaches balance security and usability.

Will this affect mobile or embedded Ryzen 9000 devices?
As of now, AMD has not confirmed whether the BIOS update restoring TSME will extend to mobile or embedded variants of the Ryzen 9000 series. The company’s statement specifically mentions desktop CPUs, and mobile implementations often prioritize power efficiency over security features. Users of Ryzen 9000 mobile processors (e.g., in laptops) should monitor AMD’s official updates for further details.

What are the broader implications for cybersecurity?
The reinstatement of TSME underscores growing recognition of hardware-level security as a critical defense against evolving threats. With regulatory bodies like CISA emphasizing memory encryption and supply-chain attacks targeting firmware becoming more common, AMD’s move may influence other chipmakers to reassess their security strategies. For enterprises, the restoration of TSME could simplify compliance with standards like FIPS 140-3, reducing the need for additional security layers.

How can users verify if their system supports TSME after the update?
Users can check their BIOS settings for the TSME option once the July 2026 update is available. AMD’s documentation will likely include steps to confirm compatibility, such as verifying the motherboard’s BIOS version and checking for TPM 2.0 support. Early adopters may also find third-party tools to scan for enabled memory encryption features, though official channels will remain the most reliable source.