TSME and memory encryption #18

lucasmz commented 2026年02月16日 04:04:59 +01:00

Maybe I'm asking the wrong person, but I'm curious and DDG wasn't of help;

I have TSME enabled (instead of disabled or auto) in my BIOS, but I'm not sure if it works and if it's worse or better than SME, and the system reports that I don't have encrypted memory.

Maybe I'm asking the wrong person, but I'm curious and DDG wasn't of help; I have TSME enabled (instead of disabled or auto) in my BIOS, but I'm not sure if it works and if it's worse or better than SME, and the system reports that I don't have encrypted memory.

ContentedGoat commented 2026年02月16日 04:15:14 +01:00

fwupdmgr shows encrypted when the ccp driver sees that the psp reports it, such reporting is only supported on 6000 series and higher

tsme should work on pro and non-pro cpus if you can turn the option on, but there is no easy way to verify it

sme/sev is seemingly only available if you have a pro cpu

fwupdmgr shows encrypted when the ccp driver sees that the psp reports it, such reporting is only supported on 6000 series and higher tsme should work on pro and non-pro cpus if you can turn the option on, but there is no easy way to verify it sme/sev is seemingly only available if you have a pro cpu

lucasmz commented 2026年02月16日 04:16:51 +01:00

Actually fwupdmgr says 'not supported' so I'm guessing it's maybe not even a thing in the BIOS, unsure

Actually fwupdmgr says 'not supported' so I'm guessing it's maybe not even a thing in the BIOS, unsure

lucasmz commented 2026年02月16日 04:20:25 +01:00

tsme should work on non-pro cpus if you can turn the option on, but there is no easy way to verify it

I see, so I should probably just trust it
Which, at least it didn't fallback or anything, so good
I would expect it to not want to boot or something I guess
I have a Ryzen 5 5600G, so I guess no SME but TSME seemingly works I guess.

Talking about memory is quite depressing at the moment 😅

Thanks Tavi :)

> tsme should work on non-pro cpus if you can turn the option on, but there is no easy way to verify it I see, so I should probably just trust it Which, at least it didn't fallback or anything, so good I would expect it to not want to boot or something I guess I have a Ryzen 5 5600G, so I guess no SME but TSME seemingly works I guess. Talking about memory is quite depressing at the moment 😅 Thanks Tavi :)

ContentedGoat commented 2026年02月16日 04:22:23 +01:00

to clarify, the fwupdmgr check cannot be completed unless you have a 6000 series and newer

tsme can still work on older cpus

the setting is usually: AMD CBS > UMC Common Options > DDR Options > DDR Security > TSME > Enabled

or use the in-bios search function if available

if your machine doesn't expose all settings you can try these hidden shortcuts:

On Lenovo with Insyde, from off: hitting F4-4-R-F-V, F5-5-T-G-B, F6-6-Y-H-N, then power and hold F2 (yes really, this sounds stupid but actually works)
On MSI with AMI: right shift + right Ctrl + left alt + F2 + (FN)

to clarify, the fwupdmgr check cannot be completed unless you have a 6000 series and newer tsme can still work on older cpus the setting is usually: AMD CBS > UMC Common Options > DDR Options > DDR Security > TSME > Enabled or use the in-bios search function if available if your machine doesn't expose all settings you can try these hidden shortcuts: ``` On Lenovo with Insyde, from off: hitting F4-4-R-F-V, F5-5-T-G-B, F6-6-Y-H-N, then power and hold F2 (yes really, this sounds stupid but actually works) On MSI with AMI: right shift + right Ctrl + left alt + F2 + (FN) ```

ContentedGoat commented 2026年02月16日 04:23:19 +01:00

also I've noticed the reboot after toggling tsme usually takes longer, which may be some slight indicator that it is doing something

also I've noticed the reboot after toggling tsme usually takes longer, which may be some slight indicator that it is doing something

lucasmz commented 2026年02月16日 18:18:44 +01:00

Is there even any benefit to SME, it seems worse

Is there even any benefit to SME, it seems worse