If you think it's hard to gain physical access to a consumer desktop, you're out of touch. Most desktops aren't locked inside a datacenter. Memory encryption is a valuable desktop (and laptop) security feature.

I don’t even think its exposed in most BIOS’s

I wonder if this was also something they just accidentally broke, or if it was an incompetent attempt at larger segmentation.

If you want to strip some features from things we bought after the purchasing, you must ask me and every other customers for consents explicitly, with a reasonable explanation, and before the strip happens. If one of us show no consent, you cannot do that.

-------------

See the github issue [1]. @benkilpatrick found out the problem in April. There was absolutely no consent asking information transparency at all. There was inefficient to no information even for people willing to spend THEIR OWN TIME to solve the problem. After about two months of back and forth with motherboard manufacturer, @benkilpatrick found out the problem stems from some components inside the bios, and the components came from AMD. Another ~three weeks passed and no problem resolution at all. It was after things blow up AMD PR came out and said something about "valuable feedback".

Wait, what if there's no enough pushback? What if this github issue as well as the problem it raised is ignored by all? Just see this thread, that thread [2] and whatnot. Is your customers going to screw themselves and being stripped silently for being your customers and believing that new bios will solve their problems without causing shenanigans?

-------------

I won't upgrade bios without future third-party bios integrity checks showing the problem is solved properly.

[1] https://github.com/AMDESE/AMDSEV/issues/292

[2] https://news.ycombinator.com/item?id=48582320

AMD silently removes memory encryption from consumer Ryzen CPUs

https://news.ycombinator.com/item?id=48582320