Safe to disable fTPM as precaution?

Fastfishy2 · Aug 1, 2023

Running windows 10, no desire to upgrade to 11. Been reading about the fTPM stutter, I don't think I've noticed it but I want to disable fTPM as a precaution. I have a 5800X3D and an Asus strix B550A Mobo. It doesn't have a dedicated TPM Header. Board was built in March 2023 and is using the bios version it shipped with (2806)

I guess I'm asking if it's safe for me to just go into bios when I get home and disable fTPM. Will it mess anything up on my PC? Is it a real security risk for me going forward?

Solaris17 · Aug 1, 2023

Do you use bitlocker?

if not then you should be able to yes.

and fwiw even Linux is getting frustrated with the implementation of it.

Linus Torvalds: "Let's Just Disable The Stupid [AMD] fTPM HWRND Thing" - Phoronix

www.phoronix.com

tabascosauz · Aug 1, 2023

Fastfishy2 said:
Running windows 10, no desire to upgrade to 11. Been reading about the fTPM stutter, I don't think I've noticed it but I want to disable fTPM as a precaution. I have a 5800X3D and an Asus strix B550A Mobo. It doesn't have a dedicated TPM Header. Board was built in March 2023 and is using the bios version it shipped with (2806)

I guess I'm asking if it's safe for me to just go into bios when I get home and disable fTPM. Will it mess anything up on my PC? Is it a real security risk for me going forward?

When you disable fTPM after running a fTPM enabled setup, it should just ask you to reconfirm your PIN upon first login. As long as you don't use bitlocker.

If you are concerned about fTPM stutter, just update to any BIOS with AGESA 1207/1208/120A that have it fixed.

cvaldes · Aug 1, 2023

I don't use Bitlocker so fTPM is turned off on my Windows 10 systems. The systems run fine without it.

Assimilator · Aug 1, 2023

Fastfishy2 said:
Running windows 10, no desire to upgrade to 11. Been reading about the fTPM stutter, I don't think I've noticed it but I want to disable fTPM as a precaution. I have a 5800X3D and an Asus strix B550A Mobo. It doesn't have a dedicated TPM Header. Board was built in March 2023 and is using the bios version it shipped with (2806)

I guess I'm asking if it's safe for me to just go into bios when I get home and disable fTPM. Will it mess anything up on my PC? Is it a real security risk for me going forward?

The number one rule of anything computer-related:

If it isn't causing a problem, leave it the f**k alone.

Fastfishy2 · Aug 2, 2023

tabascosauz said:
When you disable fTPM after running a fTPM enabled setup, it should just ask you to reconfirm your PIN upon first login. As long as you don't use bitlocker.

If you are concerned about fTPM stutter, just update to any BIOS with AGESA 1207/1208/120A that have it fixed.

Yeah I've got an Asus bios from late 2022 that's AGESA 1207. Have confirmed my drives are decrypted but I'm not gonna go messing with fTPM unless I definitely notice the stutter. Other than the pin reconfirmation, do you know of any other issues I should look out for if I decided to nix fTPM?

tabascosauz · Aug 2, 2023

Fastfishy2 said:
Yeah I've got an Asus bios from late 2022 that's AGESA 1207. Have confirmed my drives are decrypted but I'm not gonna go messing with fTPM unless I definitely notice the stutter. Other than the pin reconfirmation, do you know of any other issues I should look out for if I decided to nix fTPM?

1207 already fixed the fTPM bug. There's no need to do anything.

The fTPM stuttering is really obvious, so there shouldn't be a need for just-in-case. Either it's happening or it's not.

At least a couple months ago, you could switch fTPM on and off at will and the only consequence is the PIN prompt. Not sure if anything has changed.

Fastfishy2 · Aug 2, 2023

tabascosauz said:
1207 already fixed the fTPM bug. There's no need to do anything.

The fTPM stuttering is really obvious, so there shouldn't be a need for just-in-case. Either it's happening or it's not.

At least a couple months ago, you could switch fTPM on and off at will and the only consequence is the PIN prompt. Not sure if anything has changed.

yeah I only asked because a bunch of people were complaining that the AGESA updates didn't help. I have no idea as to the merit of their complaints.

tabascosauz · Aug 2, 2023

Fastfishy2 said:
yeah I only asked because a bunch of people were complaining that the AGESA updates didn't help. I have no idea as to the merit of their complaints.

Honestly, no idea either, but it worked on my systems and for most people. There have also been subsequent 1208 and 120A releases since then, so if you personally experience it then those could be worth a try. 120A is the big vulnerability mitigation suite.

Not to say that those people are lying. The fix was rolled out when Vermeer/Cezanne was still AMD's main product, so it's very possible that AMD has neglected to carry the fixes forward or did not understand the full extent of the problem. Pluton was only introduced with Rembrandt's PSP, and has continued to make an appearance in Phoenix and Raphael's new IO die, so the PSP has clearly undergone some design changes since AGESA "fixed" the fTPM within.

Processor	Ryzen 7 5800X3D
Motherboard	Asus Strix B550-A
Cooling	Be Quiet! Dark Rock 4
Memory	Gskill Trident Z DDR4-3200 (16GB x 2)
Video Card(s)	Sapphire Pulse RX 7900 XT 20GB
Storage	Samsung 970 Evo Plus NVME 1TB (Boot), Samsung 970 Evo Plus NVME 2TB, Samsung QVO Sata 2Tb
Display(s)	Aoc 31.5" 1440p 75hz; Asus 24" 1080p 75hz (secondary)
Case	Be Quiet! Silent Base 802 White
Power Supply	Corsair RM750X 2021 w/ Corsair Type 4 Sleeved Red Cables

System Name	RogueOne
Processor	Xeon W9-3495x
Motherboard	ASUS w790E Sage SE
Cooling	SilverStone XE360-4677
Memory	128gb Gskill Zeta R5 DDR5 RDIMMs
Video Card(s)	MSI SUPRIM Liquid X 4090
Storage	1x 2TB WD SN850X \| 2x 8TB GAMMIX S70
Display(s)	49" Philips Evnia OLED (49M2C8900)
Case	Thermaltake Core P3 Pro Snow
Audio Device(s)	Moondrop S8's on schitt Gunnr
Power Supply	Seasonic Prime TX-1600
Mouse	Razer Viper mini signature edition (mercury white)
Keyboard	Monsgeek M3 Lavender, Moondrop Luna lights
VR HMD	Quest 3
Software	Windows 11 Pro Workstation
Benchmark Scores	I dont have time for that.

System Name	ab┃ob
Processor	7800X3D┃5800X3D
Motherboard	B650E PG-ITX┃X570 Impact
Cooling	NH-U12A + T30┃AXP120-x67
Memory	64GB 6400CL32┃32GB 3600CL14
Video Card(s)	RTX 4070 Ti Eagle┃RTX A2000
Storage	8TB of SSDs┃1TB SN550
Case	Caselabs S3┃Lazer3D HT5

System Name	daily driver Mac mini M2 Pro
Processor	Apple proprietary M2 Pro (6 p-cores, 4 e-cores)
Motherboard	Apple proprietary
Cooling	Apple proprietary
Memory	Apple proprietary 16GB LPDDR5 unified memory
Video Card(s)	Apple proprietary M2 Pro (16-core GPU)
Storage	Apple proprietary onboard 512GB SSD + various external HDDs
Display(s)	LG UltraFine 27UL850W (4K@60Hz IPS)
Case	Apple proprietary
Audio Device(s)	Apple proprietary
Power Supply	Apple proprietary
Mouse	Apple Magic Trackpad 2
Keyboard	Keychron K1 tenkeyless (Gateron Reds)
VR HMD	Oculus Rift S (hosted on a different PC)
Software	macOS Sonoma 14.7
Benchmark Scores	(My Windows daily driver is a Beelink Mini S12 Pro. I'm not interested in benchmarking.)

System Name	Firelance.
Processor	Threadripper 3960X
Motherboard	ROG Strix TRX40-E Gaming
Cooling	IceGem 360 + 6x Arctic Cooling P12
Memory	8x 16GB Patriot Viper DDR4-3200 CL16
Video Card(s)	MSI GeForce RTX 4060 Ti Ventus 2X OC
Storage	2TB WD SN850X (boot), 4TB Crucial P3 (data)
Display(s)	Dell S3221QS(A) (32" 38x21 60Hz) + 2x AOC Q32E2N (32" 25x14 75Hz)
Case	Enthoo Pro II Server Edition (Closed Panel) + 6 fans
Power Supply	Fractal Design Ion+ 2 Platinum 760W
Mouse	Logitech G604
Keyboard	Razer Pro Type Ultra
Software	Windows 10 Professional x64

Safe to disable fTPM as precaution?

Fastfishy2

tabascosauz

Solaris17

Super Dainty Moderator

Linus Torvalds: "Let's Just Disable The Stupid [AMD] fTPM HWRND Thing" - Phoronix

tabascosauz

Moderator

cvaldes

Assimilator

Fastfishy2

tabascosauz

Moderator

Fastfishy2

tabascosauz

Moderator