Hardware

ASUS beta BIOS updates restore Ryzen 9000 memory encryption ahead of AMD's July timeline

At a glance:

  • ASUS has released beta BIOS updates restoring TSME support for Ryzen 9000 processors on select AM5 motherboards
  • Updates cover ROG Crosshair, ROG Strix, TUF Gaming, and ProArt boards across X870, B850, and X670 chipsets
  • BIOS versions include 2401 for X870, 1686 for B850, and 3901/3886 for X670 boards

The TSME restoration effort

ASUS has begun distributing beta BIOS updates that bring back Transparent Secure Memory Encryption (TSME) to several AM5 motherboards, marking one of the first board vendors to implement AMD's promised fix. The feature had been quietly removed from non-Pro Ryzen CPUs, drawing criticism from the user community.

The BIOS updates are based on AGESA ComboAM5 PI 1.3.0.1b Patch A and specifically support "GNR Transparent Secure Memory Encryption," with GNR referring to AMD's Granite Ridge Ryzen 9000 desktop processor family. This restoration is arriving ahead of AMD's previously stated July timeline for reinstating the feature.

The updates apply to a range of ASUS motherboard lines including ROG Crosshair, ROG Strix, TUF Gaming, and ProArt boards built on AMD's X870, B850, and X670 chipsets. Specific firmware versions vary by chipset: X870 boards are moving to BIOS 2401, B850 boards to BIOS 1686, while X670 boards are receiving either BIOS 3901 or 3886 depending on the exact model.

Why TSME matters

Transparent Secure Memory Encryption is a critical security feature that protects CPUs against physical exploits by encrypting data stored in memory. When enabled, it makes memory contents unusable to physical attackers who might attempt to extract sensitive information through hardware-level attacks.

AMD officially confirmed to Tom's Hardware that it would reinstate memory encryption on Ryzen 9000 CPUs via BIOS update, following what the company described as "valuable community feedback." Users had strongly expressed disapproval after discovering TSME support was silently removed from consumer Ryzen chips.

Testing by MSI revealed that consumer Ryzen chips could report TSME support under older firmware versions, but lost the capability after newer AGESA updates were applied. Interestingly, Ryzen Pro processors maintained TSME support throughout, highlighting a disparity in the feature's availability across product tiers.

What users should know

While the ASUS update represents progress in restoring TSME support, this is not yet a broad, stable rollout. The files are beta BIOS releases being shared through the ASUS ROG forum by community members including overclocker SAFEDISK.

Users who specifically need TSME protection should monitor these beta releases closely, but those running production systems or environments where stability is critical should wait for final, fully-tested BIOS builds before upgrading.

The early arrival of these updates ahead of AMD's July timeline suggests motherboard vendors are working to address the issue proactively, though the beta status means some risk remains for early adopters.

Editorial SiliconFeed is an automated feed: facts are checked against sources; copy is normalized and lightly edited for readers.

FAQ

What is TSME and why does it matter for Ryzen 9000 processors?
Transparent Secure Memory Encryption (TSME) is a security feature that encrypts data stored in memory to protect against physical attacks. It makes memory contents unusable to attackers attempting hardware-level exploits. AMD removed TSME support from non-Pro Ryzen 9000 CPUs, which drew criticism from users who rely on this protection.
Which ASUS motherboards receive the TSME-restoring BIOS updates?
The beta BIOS updates apply to several ASUS motherboard lines: ROG Crosshair, ROG Strix, TUF Gaming, and ProArt boards built on AMD's X870, B850, and X670 chipsets. Specific firmware versions are BIOS 2401 for X870 boards, BIOS 1686 for B850 boards, and either BIOS 3901 or 3886 for X670 models depending on the exact board.
Should users install these beta BIOS updates immediately?
Users should proceed with caution, as these are beta releases shared through the ASUS ROG forum rather than official stable firmware. Those who specifically need TSME protection may want to track the updates, but production systems or stability-critical environments should wait for final BIOS builds before upgrading.

More in the feed

Prepared by the editorial stack from public data and external sources.

Original article