AMD Launches Ryzen PRO CPUs: Enhanced Security, Longer Warranty, Better Quality


This morning AMD is introducing their Ryzen PRO processors for business and commercial desktop PCs. The new lineup of CPUs includes the Ryzen 3 PRO, Ryzen 5 PRO and Ryzen 7 PRO families with four, six, or eight cores running at various frequencies. A superset to the standard Ryzen chips, the PRO chips have the same feature set as other Ryzen devices, but also offer enhanced security, 24 months availability, a longer warranty and promise to feature better chip quality.

AMD Ryzen Pro: The Family Portrait

The AMD Ryzen PRO lineup of processors consists of six SKUs that belong to the Ryzen 7, Ryzen 5 and Ryzen 3 families targeting different market segments and offering different levels of performance. As one would expect, the Ryzen 7 PRO models are aimed at workstation applications and thus have all eight cores with simultaneous multithreading enabled, the Ryzen 5 PROmodels are designed for advanced mainstream desktops and therefore have four or six cores with SMT, whereas the Ryzen 3 PRO models are aimed at office workloads that work well on quad-core CPUs without SMT. The specifications of the Ryzen 7 PRO and the Ryzen 5 PRO resemble those of regular Ryzen processors. Meanwhile, the Ryzen 3 PRO are the first chips from the Ryzen 3 lineup and thus give us a general idea what to expect from such products: four cores without SMT operating at 3.1 – 3.5 GHz base frequency along with 2+8 MB of cache.

AMD Ryzen PRO Specifications
Ryzen 7 PRO 1700X8/163.5 GHz3.7 GHz4 MB16 MB95 W
Ryzen 7 PRO 17003 GHz3.7 GHz65 W
Ryzen 5 PRO 16006/123.2 GHz3.6 GHz3 MB
Ryzen 5 PRO 15004/83.5 GHz3.7 GHz2 MB
Ryzen 3 PRO 13004/43.5 GHz3.7 GHz8 MB
Ryzen 3 PRO 12004/43.1 GHz3.4 GHz

Just like other Ryzen CPUs, all the Ryzen PRO chips fully support ECC technology, but with certain limitations when it comes to data transfer rates and memory modules — these are peculiarities of the controller and the PRO moniker cannot change them. One of the things to note is that AMD used only DDR4-2400 memory for their internal testing of the Ryzen PRO CPUs, thus, expect PC makers to use the same speed DRAM for their desktops as well.

In fact, when it comes to their general feature set, all of the AMD Ryzen PRO CPUs support the same capabilities as their non-PRO brethren do, including AMD’s SenseMi, Precision Boost, Extended Frequency Range, Neural Net Prediction and so on. There is even the AMD Ryzen 7 PRO 1700X CPU in the lineup, completely with its extended performance and 95 W TDP (the first for any AMD PRO platform). Meanwhile, there are four things that the Ryzen PRO bring to the table that give it its PRO designation: enhanced security features, enterprise-class manageability, processor and platform longevity, and enhanced quality (which we are going to touch upon later).

With the launch of the Ryzen PRO, AMD is offering pure CPUs for business desktops for the first time ever. Previously the company only offered its A PRO-series of APUs with integrated graphics and TDPs ranging from 35 to 65 W. By contrast, the new CPUs are offered with 65 – 95 thermal envelops, which means that we are not going to see ultra-small form-factor workstations running AMD Ryzen PRO, but may finally see full-sized desktops.

It makes sense to note that all Ryzen PRO CPUs, including the highest performing and the most affordable SKUs, will support all of the advertised enterprise/business-grade capabilities. AMD is especially proud about that because their rival Intel does not support enterprise features (such as vPro) on lower-end Core i3 models. At this point AMD is not disclosing the prices of its Ryzen PRO CPUs, and the only metrics that AMD uses in comparing the PRO chips against competing SKUs is performance, not MSRPs or TDPs.

View more  Fitbit's upcoming smartwatch is reportedly plauged with all sorts of issues
AMD Ryzen PRO Competitive Positioning Based on Performance Tier
ModelKey FeaturesPriceModelKey FeaturesPrice
Ryzen 7 PRO 1700X8C/16T, 3.5/3.7 GHz, 20 MB cache, 95 W?
Ryzen 7 PRO 17008C/16T, 3/3.7 GHz, 20 MB cache, 65 WCore i7-77004C/8T, 3.6/4.2 GHz, 8 MB cache, 65 W$303 – $312
Ryzen 5 PRO 16006C/12T, 3.2/3.6 GHz, 19 MB cache, 65 WCore i5-75004C/4T, 3.4/3.8 GHz, 6 MB cache, 65 W$192 – $202
Ryzen 5 PRO 15004C/8T, 3.5/3.7 GHz, 18 MB cache, 65 W
Ryzen 3 PRO 13004C/8T, 3.5/3.7 GHz, 10 MB cache, 65 WCore i3-71002C/4T, 3.9 GHz, 3 MB cache, 51 W$117
Ryzen 3 PRO 12004C/8T, 3.1/3.4 GHz, 10 MB cache, 65 W

Such comparison shows that AMD’s Ryzen PRO lineup for desktops can cover a wider range of performance requirements than Intel’s mainstream vPro offerings do. For example, the AMD Ryzen PRO 1700X does not have a direct competitor from Intel – at least, not by AMD's accounting. In addition, AMD’s Ryzen 3 PRO 1200 also does not have a corresponding rival from the Core i3 lineup from performance point of view, based on AMD’s comparison. However, since Intel also offers Core i7 and Core i5 CPUs with TDP reduced to 35 W (for which AMD does not have announced competitors in the Ryzen PRO range), such performance-focused comparison does not draw a complete picture.

New AMD Secure Technologies

Now, time to talk about security features of the AMD Ryzen PRO platform. For years AMD’s processors for business PCs supported security technologies (collectively known as AMD Secure Processor and Platform Security Processor before that) enabled by the ARM TrustZone platform with the ARM Cortex-A5 core. AMD’s previous-gen PRO-series APUs included Secure Boot, Content Protection, per-Application security, fTPM 2.0, and support for Microsoft Device Guard, Windows Hello, fingerprint security, data protection and so on. The Ryzen PRO adds Transparent Secure Memory Encryption (TSME) on top of them.

To explain what TSME is, it makes sense to refer to AMD’s Zen memory encryption technologies in general. The Zen microarchitecture features two important technologies: Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) that protect data in DRAM using a dedicated AES-128 engine.

When data is stored on storage devices, it is usually encrypted, but when it is processed, it is almost never is, leaving possibilities to steal certain confidential things. As the name suggests, Secure Memory Encryption encrypts content of DRAM in a bid to eliminate data snooping by unauthorized programs or administrators (this is more likely to happen in a server/datacenter environment, but still). This feature will be particularly important for NVDIMMs going forward as they store data even after unplugged from their hosts.

The SME encrypts data when it is written to DRAM and decrypts it when it is read. The AES-128 key is generated NIST SP 800-90 compliant hardware random number generator and then managed by the AMD-SP hardware (thus, in a secure environment only). Although a dedicated engine performs the encryption/decryption, the process still takes time and thus adds latency for memory accesses. AMD claims that the actual performance impact is not significant, but will have to test it before making any conclusions of our own. AMD’s Zen microarchitecture supports full and partial memory encryption for cases when performance is a concern. Meanwhile, both require OSes and software to be modified in order to work properly. Meanwhile, AMD’s processors also support Transparent SME mode that that encrypts DRAM completely, can be enabled from BIOS and thus be used with legacy OSes and programs. At this point Transparent SME is the only type of SME supported by the Ryzen Pro, but AMD’s EPYC processors support all of them.

View more  Get 'Computer Security Handbook (6th Edition)' ebook ($130 value) FREE for a limited time

The Secure Encrypted Virtualization in many ways resembles the SME, but in this case, it enables owners to encrypt virtual machines, isolating them from each other, hypervisor and hosting software. The SEV is an extension to AMD’s virtualization architecture that uses the same hardware as the SME to protect/sandbox selected VMs using different AES-128 keys and eliminating some of the security threats particularly in datacenter environments. As the SEV uses different keys for different VMs, it does not work with TSME. By contrast, SEV is fully enabled on AMD’s EPYC processors (it will be interesting to see whether Threadripper chips support the feature as well).

One thing that should be noted is that both SME and SEV should be supported not only by processors themselves, but also on the platform and the software levels. With the exception of TSME mode (which will still require BIOS/chipset support), it will take some time before actual systems can take advantage of the new technologies supported by AMD’s Zen microarchitecture. A good thing is that owners of the Ryzen PRO will be able to use TSME already this year and this is where AMD’s new business platform excels Intel’s Core-series offerings.

Enterprise Manageability and Reliability

In addition to security capabilities, business PCs require some other hardware features as well.

First off, the Ryzen PRO platforms support DASH management protocol and therefore PCs featuring the chips can be remotely managed using tools based on this industry standard developed by vendors of appropriate computers. AMD Pro-series processors have supported DASH for years, no changes here.

Secondly, AMD’s Ryzen PRO platforms support 18-month platform stability and 24-month processor availability. AMD guarantees that the Ryzen PRO chips it launches this year will be available for two more years without changes to software, enabling business customers to buy and deploy new systems running the CPUs without modifying the software they use.

Finally, all AMD Ryzen PRO CPUs are covered with a 36-month limited warranty, up from 12-month warranty for consumer processors. The reason why AMD offers extended warranty for its business CPUs (apart from the fact that its customers demand this) is because it uses wafers with highest yields/least amount of defective parts to build the Ryzen Pro. AMD believes that wafers with the lowest manufacturing variability provide chips that are “set to meet long term reliability”.

Available This Fall

AMD promises to share more information about its Ryzen PRO CPUs and supporting platforms on August 29, 2017. The company does not say that actual systems will be available on this date, but since the chip designer already disclosed plans to ship Ryzen PRO in the second half of this year, it is safe to say that at least some Ryzen Pro-based desktops will ship this fall.

As for vendors, expect the usual workstation/commercial PC makers like Dell, HP, Lenovo and other to offer desktops powered by AMD’s Ryzen Pro.

Gallery: AMD Ryzen PRO Presentation