Develop Bugs

[FAQ] KNOX and you

[SIZE=+1]There seems to be a lot of confusion and misunderstanding circling the forums with regards to Knox and the 4.3 OTA.
This is an attempt to clear things up[/SIZE]
UPDATE: It seems that people can find this thread, but are unable to actually READ the information presented. The most important note here is that if you are on 4.3 firmware, you can flash ANY rom you like. No, you are not tied down or locked into stock only or 4.3 roms only. AOSP roms will work fine as well. Now scroll down and READ EVERYTHING IN THIS FIRST POST.
What is Knox? Knox is both a firmware and a software component. The OS has Knox apps, and the MK3 bootloader has a Knox component too. Having Knox apps does not necessarily mean you have the Knox bootloader, or vice-versa.
How does Knox work? Because Knox is both in the OS (apps) and in the firmware (bootloader) it works in two ways. The OS components prevent attempts to obtain root access and make rooting with these Knox apps a pain in the butt. Fortunately they can be removed. In the firmware component (bootloader), Knox works to prevent the flashing of custom kernels and recoveries. If you flash a custom rom or custom recovery WHILE on the Knox bootloader, your Knox flag will be tripped and your Warranty Bit will go from 0x0 to 0x1. The Knox bootloader cannot be downgraded to, say, the MD4 bootloader because of special protections built into it. If you attempt to downgrade it, your phone will instantly brick.
Can I get root on the Knox-enabled update? Yes. For those of us who DID NOT take the official OTA and DO NOT have the Knox bootloader, we can get root on 4.3 by injecting it and removing the Knox apps. For those WITH the Knox bootloader, you will need to wait until a full stock MK3 tar is available, which we can then use to make an Odin-flashable MK3 stock rom with root injected using the de-la-vega root method.
Can I downgrade while on 4.3? You can flash roms no matter what Android version they are. That is perfectly fine. But you cannot downgrade the bootloader if you have the Knox bootloader, or else it will cause your bootloader to become corrupted and give you a fancy paperweight. Again, for those who DO NOT have the Knox bootloader, you needn't worry about this/downgrading firmware since the Knox bootloader is what prevents you from doing this. Downgrading your bootloader includes: attempting to flash full stock tar of software versions < MK3, etc.
How can I tell if I've got the Knox bootloader?
Boot into download mode (through custom reboot menu, or by powering off then holding Power+Home+VolumeDown and then VolUp when prompted). If you see a line that starts with the following, then you've got the Knox bootloader. I will insert a picture showing how it actually looks soon
Warranty Bit:
Click to expand...
Click to collapse
[SIZE=+1]READ THIS TOO: http://forum.xda-developers.com/showthread.php?t=1788313
It's for the Verizon S3, but it applies to all the carrier 4.3 updates[/SIZE]
I will add to this as more questions come up
I hope the above helps to clear up some confusion. Ask questions if you are still concerned and I will do my best to answer them.

is there any way to make this a sticky @kennyglass123

This is great information man!
http://i.imgur.com/qrByUGN.jpg

[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?

elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
as of right now none.

elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
No way to remove bootloader Knox ATM.

I've seen several posts mention "tripping KNOX" or "voiding KNOX." What does that mean, exactly, regarding rooting a phone? Does it just mean it voids the warranty if you need to get support from Samsung/Sprint? Or are there other adverse effects?

Mostly just a visible warranty void.

Samsung bought crapple disease. So sad, but its my excuse to buy a nexus.
Sent from my SPH-L710 using xda app-developers app

As said above, a voided Knox is mostly just a highly visible warranty void. Your local Sprint store may or may not care, or the specific Samsung rep that you deal with may not care, but it's easier just to not have to deal with it to begin with.

Does this mean there is already a touchwiz 4.3 ROM we can flash or do we still have to wait?
Sent from my SPH-L710 using Tapatalk

The biggest thing here is the fact that there is no full tar file to restore. So even if you do not care about knox or warranty. If something goes wrong with a flash or anything else you can't use an older tar file let's say MD4 or LJ7 or anything because you will end up with a brick. There is nothing to use to ODIN restore your device. Once you go 4.3 with Knox you have to stay 4.3 and even if you wanted to stay 4.3 and wanted to restore that there is no tar file at this time.
Have a great day!

I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.

docnas said:
I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.
Click to expand...
Click to collapse
Late to the party. CNexus already has a update cooking.
Sent from my SPH-L710 using Tapatalk

the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)

docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too

You = rock. Or some other awesome thing.
Sent from my SPH-L710 using xda app-developers app

CNexus said:
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too
Click to expand...
Click to collapse
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?

Edge-Case said:
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?
Click to expand...
Click to collapse
This would be a we-can't-update-the-bootloader thing lol. And we can't do that because it has Knox, which is Samsung's doing
This shouldn't affect any AOSP roms because it uses a different kernel and builds its own WiFi libs

docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
From what I've read Knox is Samsung's attempt to provide strong security to their phones for the enterprise customers. As you can imagine, allowing system level access to files can be used to get around a lot of security measures that IT people would like to enforce in their client's devices. It makes sense at the enterprise level, but it's a pain for anyone who want's to mod their phone.
So I think the answer to your question is, unless you are using your phone in a locked down corporate environment then there really is no advantage to Knox. Too bad it can't be turned off, at least not officially.

Root via Kingo

I am trying to root via the kingoapp. However when I get to the screen to select my OS and make sure USB debugging is on, there is no option for 4.3. The highest OS is 4.2. Anyone else run into this?

I did and everything worked just fine. I just switched to T-mobile today and got a new note 3. Read about the Kingo here and decided to try it out as I didnt want to trip Knox. I went through the prompts and saw that it said 4.2 but kept going and didnt have any problems with the remaining installation process. Im fully rooted and everything looks good! Just follow the prompts and you should be good Good luck!
Sent from my SM-N900T using xda app-developers app

im rooted on 4.3 with kingo without any problems. just go ahead, follow the prompts and you'll be rooted in minutes

this method works fine, but in my case it tripped Knox...it asked me to install an app called Mtkcamera, I declined, Kingo kinda froze, then rebooted, when I went to check the Knox counter it was tripped....

PTJunkie1975 said:
this method works fine, but in my case it tripped Knox...it asked me to install an app called Mtkcamera, I declined, Kingo kinda froze, then rebooted, when I went to check the Knox counter it was tripped....
Click to expand...
Click to collapse
Think I dodge the bullet. I declined also on the Mtcamera but it continue working until the warning of a custom recovery
being installed. I had to cancel. I got no root yet and checking download mode, Knox still 0.
People that were able to root successfully without tripping knox, also got the custom recovery being installed warning?
Thanks.

iandy1 said:
Think I dodge the bullet. I declined also on the Mtcamera but it continue working until the warning of a custom recovery
being installed. I had to cancel. I got no root yet and checking download mode, Knox still 0.
People that were able to root successfully without tripping knox, also got the custom recovery being installed warning?
Thanks.
Click to expand...
Click to collapse
Well at least you the warning. When I used Kingo I saw no warning and the next thing I knew I had cwm on my phone and the knox warranty was tripped. .. crying lol... But it's okay. Probably would have put a custom recovery on it eventually.
Sent from my SM-N900T using Tapatalk

PTJunkie1975 said:
this method works fine, but in my case it tripped Knox...it asked me to install an app called Mtkcamera, I declined, Kingo kinda froze, then rebooted, when I went to check the Knox counter it was tripped....
Click to expand...
Click to collapse
iandy1 said:
Think I dodge the bullet. I declined also on the Mtcamera but it continue working until the warning of a custom recovery
being installed. I had to cancel. I got no root yet and checking download mode, Knox still 0.
People that were able to root successfully without tripping knox, also got the custom recovery being installed warning?
Thanks.
Click to expand...
Click to collapse
did you guys go to the kingo website and use their latest software? i didn't get any of that mtkcamera or cwm installed on my device. my knox is still 0x0. i wondering if you clicked on an outdated link to kingo's software

Troy1 said:
Well at least you the warning. When I used Kingo I saw no warning and the next thing I knew I had cwm on my phone and the knox warranty was tripped. .. crying lol... But it's okay. Probably would have put a custom recovery on it eventually.
Sent from my SM-N900T using Tapatalk
Click to expand...
Click to collapse
Sorry about that. What version of Kingo root you use and from where you downloaded it?
---------- Post added at 04:13 PM ---------- Previous post was at 04:09 PM ----------
rlee008 said:
did you guys go to the kingo website and use their latest software? i didn't get any of that mtkcamera or cwm installed on my device. my knox is still 0x0. i wondering if you clicked on an outdated link to kingo's software
Click to expand...
Click to collapse
Mine is version 1.1.8.1835 from c-net's download.com uploaded on 1/10/14.
Thanks.

Yep, thats what what I got and it worked well, I just don't remember where did I downloaded it. Another possibility, however remote, just came to my mind: did anyone, who did get the flag tripped, play with Knox? It comes partially preinstalled, but if you run it, it will download and install some more files. I was speculating, maybe that caused Samsung update some extra files that trip Knox, they already patched anything above MJ7 and even if you uninstall Knox some new things are left behind. Just a crazy idea.

pete4k said:
Yep, thats what what I got and it worked well, I just don't remember where did I downloaded it. Another possibility, however remote, just came to my mind: did anyone, who did get the flag tripped, play with Knox? It comes partially preinstalled, but if you run it, it will download and install some more files. I was speculating, maybe that caused Samsung update some extra files that trip Knox, they already patched anything above MJ7 and even if you uninstall Knox some new things are left behind. Just a crazy idea.
Click to expand...
Click to collapse
Root De La Vega is a bit safer. Lots of spyware/IEMI stealing rumors about Kingo. Thaat said if there was no other way I'd have used them too.

iandy1 said:
Think I dodge the bullet. I declined also on the Mtcamera but it continue working until the warning of a custom recovery
being installed. I had to cancel. I got no root yet and checking download mode, Knox still 0.
People that were able to root successfully without tripping knox, also got the custom recovery being installed warning?
Thanks.
Click to expand...
Click to collapse
I was able to successfully root with Kingo. I remember getting the warning about installing MTK camera app but I accepted it. I did not get any additional warning during installation and I am rooted with Knox still at 0x0.
I received the latest version of the software 1.18. I saw something on their facebook page stating that it can use custom recovery as a way to gain root. Im thinking it some how uses the camera app to gain root and if you decline it, then it has to use the custom recovery option.

[Q] rooting

does the g3 have any sort of tamper flag like knox on samsung , which voids warranty when rooting?

pre10c said:
does the g3 have any sort of tamper flag like knox on samsung , which voids warranty when rooting?
Click to expand...
Click to collapse
Pretty sure any sort of rooting technically voids the warranty. That's what an ODIN reflash is for.

Slash8915 said:
Pretty sure any sort of rooting technically voids the warranty. That's what an ODIN reflash is for.
Click to expand...
Click to collapse
Not in Europe (EU).

Don't feel bad read what is coming from Google .....http://m.gsmarena.com/google_announces_andriod_l_developer_preview-news-8864.php
Any device with ics or better can run Knox software and Samsung pushed it back to Google who will put it in Android L
Don't feel like having a device with Knox well the new iPhone may not have Knox
Sent from my SM-N900P using Xparent BlueTapatalk 2

so the lg G3 has any sort of tamper flag implemented?

Well, I used towelroot to root the G3. It's pretty non-intrusive and very simple to use. No reboots required. Just install the APK and click a button.
Your bootloader stays intact and so does the stock recovery. If a simple root is all you want, try towelroot. You just need a factory reset to remove root.
And yes.. the S5 users are using it to root their devices without tampering the Knox bit. Based on this info, I would say it's pretty safe

No way to unroot towelrooted device without hard reset?

MasK said:
Well, I used towelroot to root the G3. It's pretty non-intrusive and very simple to use. No reboots required. Just install the APK and click a button.
Your bootloader stays intact and so does the stock recovery. If a simple root is all you want, try towelroot. You just need a factory reset to remove root.
And yes.. the S5 users are using it to root their devices without tampering the Knox bit. Based on this info, I would say it's pretty safe
Click to expand...
Click to collapse
Is the factory reset enough to make the phone accept OTA's? I can't see why it wouldn't be (unless there is a tampered flag) however some people on here have said refreshing stock rom is the only way to do it.
Sent from my LG G3

MasK said:
Well, I used towelroot to root the G3. It's pretty non-intrusive and very simple to use. No reboots required. Just install the APK and click a button.
Your bootloader stays intact and so does the stock recovery. If a simple root is all you want, try towelroot. You just need a factory reset to remove root.
And yes.. the S5 users are using it to root their devices without tampering the Knox bit. Based on this info, I would say it's pretty safe
Click to expand...
Click to collapse
Does it work with a carrier branded G3 in same way?
Sent from my HTC One X using XDA Premium 4 mobile app

Can we have some more information guys? Seems like a simple .apk can root the device and in the EU the warranty isn't void?

Lennyuk said:
Is the factory reset enough to make the phone accept OTA's? I can't see why it wouldn't be (unless there is a tampered flag) however some people on here have said refreshing stock rom is the only way to do it.
Sent from my LG G3
Click to expand...
Click to collapse
I used towel root on my LG G Pro 2 to change my build prop so that I could install and run skygo. I performed a full unroot with supersSU Pro and surprisingly found that this did not satisfy skygo and it still flagged up as rooted (superSU Pro has always worked for me previously with other root processes).
I repeated the root process and I found some additional towel root files in system xbin which I removed then ran unroot with supersSU Pro and was then able to run skygo successfully.
I hope this is relevant to the g3 as I intend to buy a 32gb version but would like to have skygo on this. For the first time in my life, I am not charging in head first. I am holding back on my purchase and reading everything about it first.
Not sure I can keep this up for much longer though.

Good to know where to look.
Thanks for the info:good:

Posting to post

G920P Rooting

Can build G920PVPU3CPD3 be rooted?
Which root method should I use?

Maverick923 said:
Can build G920PVPU3CPD3 be rooted?
Which root method should I use?
Click to expand...
Click to collapse
Just install TWRP and flash SuperSU.

So there is noway to do this without tripping knox?

bump!

No.
Let me add on a bit to my initial response. Rooting the phone will trip Knox. Has been this way for quite some time. Discussed across many thread here and elsewhere.
Now the question comes up as to what do you lose by tripping Knox? Samsung Pay will never work for you. Android Pay may or may not work. Many people have been able to get it working at least in part, but disable Root (via SuperSu) when using Android Pay. I don't use either of those, so I don't care.
Then the question comes up if this voids warranty. The answer is only if you say "Hey, I rooted my phone and then broke something!" If you need warranty for a physical defect, go back to stock via Odin and you shouldn't have a problem. If you root your phone and then install a ROM not meant for your phone or local (like a Note ROM or an international ROM) you are probably going to mess something up that will be immediately obvious. The solution is not to do that.
Realistically, there aren't a ton of great ROMs available for this phone and most are based on stock anyway. No CM13 as yet. If you can live with your phone un-Rooted, that might be the wisest choice.
That said, I rooted my phone as soon as I got it. I went the full route, didn't care about tripping Knox and still don't. I have run both Renegade and TeamSPR ROMs and have been happy with them.
Now you can decide what to do.

Or u could root ur phone n install xposed on it ... Rooted S6 stock rom is now compatible with xposed its better than any custom roms out there
Sent from my LG-H815 using XDA-Developers mobile app

In my case, I only need temporary root. After that it maybe removed. So it would be nice to be able keep knox from being tripped if possible. Installing twrp is an additional step too that I would like to avoid again because it would serve no purpose since root would only be temporary. I also wanted to be sure that build G920PVPU3CPD3 could be rooted. Thanks for your input guys.

Features lost when Rooting?

I asked in one of the root threads and didn't get a reply. From looking through the existing threads I understand that you lose samsung pay and the hidden folder feature. I can live with those but is there any other features lost when unlocking the bootloader?
1.) Once knox is tripped will features be lost forever or start working again once tablet is returned to stock?
2.) Still shows as widevine L1? Any loss in resolution from an streaming apps (youtube, netflix, amazon prime, youtube tv)?
3.) Any other apps or features not working?

1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. Back then, I did this installing a custom recovery called TWRP. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock recovery can't "unblow" a fuse.
2. Not sure about this one, sorry.
3. In my experience, rooting broke only those apps that relied on Knox. But I suppose these days more apps are likely to detect if they're running on a rooted device and refuse to run. That would account for the popularity of tools like Magisk that try to hide the root state from apps.
After I moved away from those devices (S7 Edge and Tab S3 were next in my history), I abandoned the rooting game. Not sure the value is worth the cost anymore.
EDIT: There are apparently ways to root without flashing a custom recovery -- this was news to me, and shows how long I've not been playing the rooting game, heh.

SteveRiley said:
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock can't "unblow" a fuse.
2. Not sure about this one, sorry.
3. In my experience, rooting broke only those apps that relied on Knox. But I suppose these days more apps are likely to detect if they're running on a rooted device and refuse to run. That would account for the popularity of tools like Magisk that try to hide the root state from apps.
After I moved away from those devices (S7 Edge and Tab S3 were next in my history), I abandoned the rooting game. Not sure the value is worth the cost anymore.
Click to expand...
Click to collapse
Thanks for the reply. Yeah I have rooted my samsung devices in the past as well but I believe the last one I did was my note 4 as well but I don't remember widevine being a thing back then or at least I didn't care. Of all the features I am concerned about that. Don't really care about the other samsung features save for maybe dex but I don't think that is affected. Can anyone rooted confirm if they still have widevine? Is any legit premium video app like netflix or youtube tv affected? My oneplus 7 pro had widevine downgraded I believe when the bootloader unlocked which was annoying.

SteveRiley said:
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock can't "unblow" a fuse
Click to expand...
Click to collapse
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.

jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
Click to expand...
Click to collapse
Hey, this is interesting news! I just might take the plunge, then. Thanks for making me smarter.
EDIT. See conversation here: https://forum.xda-developers.com/galaxy-tab-s7/how-to/guide-unlock-tab-s7-bootloader-t4158841
Confirmed that unlocking the boot loader and rooting with modified firmware does trip Knox. Magisk can try to conceal this bypass some security checks, but not always successfully.
jhill110 said:
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made.
Click to expand...
Click to collapse
100% agree. Once upon a time a Galaxy Note was not just a Galaxy S with a stylus. Alas, it appears Samsung is diligently heading away from what made the Note a distinctive device.

SteveRiley said:
Hey, this is interesting news! I just might take the plunge, then. Thanks for making me smarter.
100% agree. Once upon a time a Galaxy Note was not just a Galaxy S with a stylus. Alas, it appears Samsung is diligently heading away from what made the Note a distinctive device.
Click to expand...
Click to collapse
I thought the knox tripped when you unlock the bootloader, don't you need to do this even if you root your device without installing twrp?

mikedavo said:
I thought the knox tripped when you unlock the bootloader, don't you need to do this even if you root your device without installing twrp?
Click to expand...
Click to collapse
Yes you do need to unlock the bootloader to root your device... But that doesn't trip knox.

Rooting with magisk will definitely trip knox, even without TWRP.

jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
Click to expand...
Click to collapse
Can anyone else confirm this?

smartymcfly said:
Can anyone else confirm this?
Click to expand...
Click to collapse
You loose warranty once device is rooted. No matter if with SuperSU or magisk. Root is root

Cindysmith0994 said:
Rooting with magisk will definitely trip knox, even without TWRP.
Click to expand...
Click to collapse
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?

jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
Click to expand...
Click to collapse
Can you make an instruction? Thanks

umibuzu said:
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
Click to expand...
Click to collapse
You lose L1 once the BL is unlocked though. So kiss goodbye HD on netflix and such on the ts7+ which is beneficial.

EugenStanis said:
You loose warranty once device is rooted. No matter if with SuperSU or magisk. Root is root
Click to expand...
Click to collapse
Did you see the picture in the post that was quoted?
It shows as rooted and knox efuse intact. So the warranty would still be good as long as it doesn't trip the efuse.
Look at the picture before telling me a generic answer. I already know that when the excuse is blown the warranty is lost. How do they have root without tripping the efuse?

This is the picture I am referring to.

See conversation here: https://forum.xda-developers.com/galaxy-tab-s7/how-to/guide-unlock-tab-s7-bootloader-t4158841
Confirmed that unlocking the boot loader and rooting with modified firmware does trip Knox. Magisk can try to conceal this bypass some security checks, but not always successfully.

smartymcfly said:
Can anyone else confirm this?
Click to expand...
Click to collapse
hes wrong

umibuzu said:
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
Click to expand...
Click to collapse
unlpcking bootloader alone doesnt trip knox but as soon as u flash any custom firmware i.e. disabled vbmeta, twrp, magisk etc. then it will trip knox.
theres thousands of threads on xda alone about tripped knox and what works n doesnt work so id go n look for urself before anything..
and usually it will break ota updates but can depend on device etc. but ull likely have to update via odin

Jedi.Tester said:
Can you make an instruction? Thanks
Click to expand...
Click to collapse
hes wrong

bs3pro said:
You lose L1 once the BL is unlocked though. So kiss goodbye HD on netflix and such on the ts7+ which is beneficial.
Click to expand...
Click to collapse
dunno what L1 is but unlocking by itself doesnt trio knox, its custom firmware that trips it.. basically anything u do after unlocking lol
and netflix can still work.. its trivial for netflix