err_nvm:
        dev_dbg(&rt->dev, "NVM upgrade disabled\n");
+       rt->no_nvm_upgrade = true;
        if (!IS_ERR(nvm))
                tb_nvm_free(nvm);
 
 
        if (!rt->nvm)
                ret = -EAGAIN;
-       else if (rt->no_nvm_upgrade)
-               ret = -EOPNOTSUPP;
        else
                ret = sysfs_emit(buf, "%#x\n", rt->auth_status);
 
 
        if (!rt->nvm)
                ret = -EAGAIN;
-       else if (rt->no_nvm_upgrade)
-               ret = -EOPNOTSUPP;
        else
                ret = sysfs_emit(buf, "%x.%x\n", rt->nvm->major, rt->nvm->minor);
 
 }
 static DEVICE_ATTR_RO(vendor);
 
+static umode_t retimer_is_visible(struct kobject *kobj, struct attribute *attr,
+                                 int n)
+{
+       struct device *dev = kobj_to_dev(kobj);
+       struct tb_retimer *rt = tb_to_retimer(dev);
+
+       if (attr == &dev_attr_nvm_authenticate.attr ||
+           attr == &dev_attr_nvm_version.attr)
+               return rt->no_nvm_upgrade ? 0 : attr->mode;
+
+       return attr->mode;
+}
+
 static struct attribute *retimer_attrs[] = {
        &dev_attr_device.attr,
        &dev_attr_nvm_authenticate.attr,
 };
 
 static const struct attribute_group retimer_group = {
+       .is_visible = retimer_is_visible,
        .attrs = retimer_attrs,
 };