Activate AMD Secure Memory Encryption (SME) by default

configname: CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT

Linux Kernel Configuration
└─>Processor type and features
└─>Activate AMD Secure Memory Encryption (SME) by default
In linux kernel since version 4.2 (release Date: 2015-08-30)  
Say yes to have system memory encrypted by default if running on
an AMD processor that supports Secure Memory Encryption (SME).

If set to Y, then the encryption of system memory can be
deactivated with the mem_encrypt=off command line option.

If set to N, then the encryption of system memory can be
activated with the mem_encrypt=on command line option.