AMD Launches Ryzen PRO CPUs: Enhanced Security, Longer Warranty, Better Quality

AMD has introduced its Ryzen PRO processors for business and commercial desktop PCs. The new lineup of CPUs includes Ryzen 3 Pro, Ryzen 5 PRO and Ryzen 7 PRO products with four, six or eight cores and various frequencies. The chips have the same feature set as other Ryzen devices, but also offer enhanced security, 24 months availability, a longer warranty and promise to feature better quality.

AMD Ryzen Pro: The Family Portrait

The AMD Ryzen PRO lineup of processors consists of six SKUs that belong to the Ryzen 7, Ryzen 5 and Ryzen 3 families targeting different market segments and offering different levels of performance. As one would expect, the Ryzen 7 PRO are aimed at workstation applications and thus have all eight cores with simultaneous multithreading enabled, the Ryzen 5 PRO are designed for advanced mainstream desktops and therefore have four or six cores with SMT, whereas the Ryzen 3 PRO are aimed at office workloads that work well on quad-core CPUs without SMT. Specifications of the Ryzen 7 PRO and the Ryzen 5 PRO resemble those of regular Ryzen processors. Meanwhile, the Ryzen 3 PRO are the first chips from the Ryzen 3 lineup and thus give us a general idea what to expect from such products: four cores without SMT operating at 3.1 – 3.5 GHz base frequency along with 10 MB of cache.

AMD Ryzen PRO Specifications
  Cores/Threads Frequency Cache TDP
Base Boost L2 L3
Ryzen 7 PRO 1700X 8/16 3.5 GHz 3.7 GHz 4 MB 16 MB 95 W
Ryzen 7 PRO 1700 3 GHz 3.7 GHz 65 W
Ryzen 5 PRO 1600 6/12 3.2 GHz 3.6 GHz 3 MB
Ryzen 5 PRO 1500 4/8 3.5 GHz 3.7 GHz 2 MB
Ryzen 3 PRO 1300 4/4 3.5 GHz 3.7 GHz 8 MB
Ryzen 3 PRO 1200 4/4 3.1 GHz 3.4 GHz

Just like other Ryzen CPUs, all the Ryzen PRO chips fully support ECC technology, but with certain limitations when it comes to data transfer rates and memory modules — these are peculiarities of the controller and the PRO moniker cannot change them. One of the things to note is that AMD used only DDR4-2400 memory for its internal testing of the Ryzen PRO CPUs, thus, expect PC makers to use the same speed DRAM for their desktops as well.

In fact, when it comes to general feature set, all AMD Ryzen PRO CPUs support the same capabilities as their non-PRO brethren do, including AMD’s SenseMi, Precision Boost, Extended Frequency Range, Neural Net Prediction and so on. In fact, there is the AMD Ryzen 7 PRO 1700X CPU in the lineup with extended performance and 95 W TDP (the first for any AMD PRO platform). Meanwhile, there are four things that the Ryzen PRO bring to the table: enhanced security features, enterprise-class manageability, processor and platform longevity and enhanced quality (which we are going to touch upon later).

With the launch of the Ryzen PRO, AMD offers its iGPU-less processors for business desktops for the first time ever. Previously the company only offered its A PRO-series APUs with integrated graphics and TDP ranging from 35 to 65 W. By contrast, the new CPU are offered with 65 – 95 thermal envelops, which means that we are not going to see ultra-small form-factor workstations running AMD Ryzen PRO, but may finally see full-sized desktops.

It makes sense to note that all Ryzen PRO CPUs, including the highest performing and the most affordable SKUs, will support all of the advertised enterprise/business-grade capabilities. AMD is especially proud about that because its rival Intel does not support enterprise features (such as vPro) on lower-end Core i3 models. At this point AMD does not disclose prices of its Ryzen PRO CPUs and the only metrics that AMD uses for comparison against competing SKUs is performance, not MSRPs or TDPs.

AMD Ryzen PRO Competitive Positioning Based on Performance
AMD Intel
Model Key Features Price Model Key Features Price
Ryzen 7 PRO 1700X 8C/16T, 3.5/3.7 GHz, 20 MB cache, 95 W ? - - -
Ryzen 7 PRO 1700 8C/16T, 3/3.7 GHz, 20 MB cache, 65 W Core i7-7700 4C/8T, 3.6/4.2 GHz, 8 MB cache, 65 W $303 - $312
Ryzen 5 PRO 1600 6C/12T, 3.2/3.6 GHz, 19 MB cache, 65 W Core i5-7500 4C/4T, 3.4/3.8 GHz, 6 MB cache, 65 W $192 - $202
Ryzen 5 PRO 1500 4C/8T, 3.5/3.7 GHz, 18 MB cache, 65 W
Ryzen 3 PRO 1300 4C/8T, 3.5/3.7 GHz, 10 MB cache, 65 W Core i3-7100 2C/4T, 3.9 GHz, 3 MB cache, 51 W $117
Ryzen 3 PRO 1200 4C/8T, 3.1/3.4 GHz, 10 MB cache, 65 W - - -

Such comparison shows that AMD’s Ryzen PRO lineup for desktops can cover a wider range of performance requirements than Intel’s mainstream vPro offerings do. For example, the AMD Ryzen PRO 1700X does not have a direct competitor from Intel, according to AMD. Which may indicate that vPro supporting Xeon E5s are considerably more expensive than the Ryzen PRO 1700X is going to be. In addition, AMD’s Ryzen 3 PRO 1200 also does not have a corresponding rival from the Core i3 lineup from performance point of view, based on AMD’s comparison. However, since Intel also offers Core i7 and Core i5 CPUs with TDP reduced to 35 W (for which AMD does not have announced competitors in the Ryzen PRO range), such performance-focused comparison does not display a complete picture.

New AMD Secure Technologies

Now, time to talk about security features of the AMD Ryzen PRO platform. For years AMD’s processors for business PCs supported security technologies (collectively known as AMD Secure Processor and Platform Security Processor before that) enabled by the ARM TrustZone platform with the ARM Cortex-A5 core. AMD’s previous-gen PRO-series APUs included Secure Boot, Content Protection, per-Application security, fTPM 2.0, and support for Microsoft Device Guard, Windows Hello, fingerprint security, data protection and so on. The Ryzen PRO adds Transparent Secure Memory Encryption (TSME) on top of them.

To explain what TSME is, it makes sense to refer to AMD’s Zen memory encryption technologies in general. The Zen microarchitecture features two important technologies: Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) that protect data in DRAM using a dedicated AES-128 engine.

When data is stored on storage devices, it is usually encrypted, but when it is processed, it is almost never is, leaving possibilities to steal certain confidential things. As the name suggests, Secure Memory Encryption encrypts content of DRAM in a bid to eliminate data snooping by unauthorized programs or administrators (this is more likely to happen in a server/datacenter environment, but still). This feature will be particularly important for NVDIMMs going forward as they store data even after unplugged from their hosts.

The SME encrypts data when it is written to DRAM and decrypts it when it is read. The AES-128 key is generated NIST SP 800-90 compliant hardware random number generator and then managed by the AMD-SP hardware (thus, in a secure environment only). Although a dedicated engine performs the encryption/decryption, the process still takes time and thus adds latency for memory accesses. AMD claims that the actual performance impact is not significant, but will have to test it before making any conclusions of our own. AMD’s Zen microarchitecture supports full and partial memory encryption for cases when performance is a concern. Meanwhile, both require OSes and software to be modified in order to work properly. Meanwhile, AMD’s processors also support Transparent SME mode that that encrypts DRAM completely, can be enabled from BIOS and thus be used with legacy OSes and programs. At this point Transparent SME is the only type of SME supported by the Ryzen Pro, but AMD’s EPYC processors support all of them.

The Secure Encrypted Virtualization in many ways resembles the SME, but in this case, it enables owners to encrypt virtual machines, isolating them from each other, hypervisor and hosting software. The SEV is an extension to AMD’s virtualization architecture that uses the same hardware as the SME to protect/sandbox selected VMs using different AES-128 keys and eliminating some of the security threats particularly in datacenter environments. As the SEV uses different keys for different VMs, it does not work with TSME. By contrast, SEV is fully enabled on AMD’s EPYC processors (it will be interesting to see whether Threadripper chips support the feature as well).

One thing that should be noted is that both SME and SEV should be supported not only by processors themselves, but also on the platform and the software levels. With the exception of TSME mode (which will still require BIOS/chipset support), it will take some time before actual systems can take advantage of the new technologies supported by AMD’s Zen microarchitecture. A good thing is that owners of the Ryzen PRO will be able to use TSME already this year and this is where AMD’s new business platform excels Intel’s Core-series offerings.

Enterprise Manageability and Reliability

In addition to security capabilities, business PCs require some other hardware features as well.

First off, the Ryzen PRO platforms support DASH management protocol and therefore PCs featuring the chips can be remotely managed using tools based on this industry standard developed by vendors of appropriate computers. AMD Pro-series processors have supported DASH for years, no changes here.

Secondly, AMD’s Ryzen PRO platforms support 18-month platform stability and 24-month processor availability. AMD guarantees that the Ryzen PRO chips it launches this year will be available for two more years without changes to software, enabling business customers to buy and deploy new systems running the CPUs without modifying the software they use.

Finally, all AMD Ryzen PRO CPUs are covered with a 36-month limited warranty, up from 12-month warranty for consumer processors. The reason why AMD offers extended warranty for its business CPUs (apart from the fact that its customers demand this) is because it uses wafers with highest yields/least amount of defective parts to build the Ryzen Pro. AMD believes that wafers with the lowest manufacturing variability provide chips that are “set to meet long term reliability”.

Available This Fall

AMD promises to share more information about its Ryzen PRO CPUs and supporting platforms on August 29, 2017. The company does not say that actual systems will be available on this date, but since the chip designer already disclosed plans to ship Ryzen PRO in the second half of this year, it is safe to say that at least some Ryzen Pro-based desktops will ship this fall.

As for vendors, expect the usual workstation/commercial PC makers like Dell, HP, Lenovo and other to offer desktops powered by AMD’s Ryzen Pro.



from AnandTech http://ift.tt/2t4LEm0
via IFTTT
Share on Google Plus

About Unknown

This is a short description in the author block about the author. You edit it by entering text in the "Biographical Info" field in the user admin panel.
    Blogger Comment
    Facebook Comment

0 comments:

Post a Comment