Dear Maintainer,

I installed Debian Sid on a HP Elitebook 8 G1a 14 with an AMD Ryzen AI 7 PRO
350 w/ Radeon 860M SOC.

When booting the kernel (Linux 6.18.1-1~exp1), it complains about this missing
firmware:

    0.923462] tee tee0: firmware: failed to load
/amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin (-2)
[    0.923468] tee tee0: firmware: failed to load
/amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin (-2)
[    0.923472] tee tee0: firmware: failed to load
/amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin (-2)
[    0.923473] tee tee0: Direct firmware load for
/amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin failed with error -2
[    0.923475] amdtee: failed to load firmware
/amdtee/f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin
[    0.923513] amdtee: failed to copy TA binary
[    0.923524] Failed to open TEE session err:0x0, rc:-12
[    0.923538] amd-pmf AMDI0107:00: Failed to open TA session (-12)
[    0.923554] amd-pmf AMDI0107:00: registered PMF device successfully

Updating my kernel from 6.18.1 to 6.18.2 made the error go away.

Still Fedora contains this file:
https://packages.fedoraproject.org/pkgs/linux-firmware/amd-ucode-firmware/fedora-rawhide.html

So maybe it should be added anyway.

* Frederik Himpe <frederik@frehi.be> [251228 17:01]:

The file is already part of amd64-microcode version 3.20251202.1.

I assume there is another problem hiding here.

Chris

Oh, you are right. My apologies.

I guess the problem is that it's not included in the initramfs:

# lsinitramfs /boot/initrd.img-6.18-amd64  | grep f29bb3d9-bd66-5441-afb88acc2b2b60d6.bin
#

retitle 1124123 amd64-microcode: amdtee firmware missing in initramfs
tags 1124123 + confirmed
thanks

Hello Frederik,

"modinfo amdtee" tells me "amdtee" does *not* declare its firmware files, so the normal initramfs machinery to include firmware data won't do the job.

I will add the firmware files to the initramfs "by force" as it is done with the CPU microcode.  It is small enough that I will just always install them if the CPU microcode itself is being installed.

I will also check if AMD-SEV firmware is likewise affected, since there is a new set of data files from 2025-12-19 to package.

Hello Henrique,

Thank you.

I was checking a bit further, and noticed that my
initrd.img-6.17.13+deb14-amd64 created on Dec 23 does include the module
amdtee.ko.xz, but not the firmware, which explains the error. My
initrd.img-6.18-amd64 does not include the amdtee module, so that would
explain why I don't have this error any more there.

I'm not sure what the cause is that suddenly amdtee.ko was not any more
in the initrd. I think it happend just after upgrading from 2.18.1 to
2.18.2, but maybe I changed modules to hostonly (although I think I did
that already in the installer). In the meantime I have also switched
to dracut with hostonly='yes'. I recreated the initrd for 2.17.13 now
with dracut too, and now amdtee.ko is indeed not included, and the
error is also gone for this error.

Regards,