Develop Bugs

The ultimate guide about Knox

Because it's not very clear even after reading many xda Thread, and users have many problems withknox I deciced to gather informations about Knox.
1 :What is Knox?: http://omegadroid.co/wanted-knox-void-warranty-0x1/
All you wanted to know about KNOX Void Warranty 0×1
By tamirda • October 9, 2013
Screenshot_2013-02-25_11_35_AM
Recently, Samsung announced that her all new devices will get an Android 4.3 update that includes KNOX Security system. According to Samsung, these devices will get the update:
Samsung Galaxy S3
Samsyng Galaxy Note II
Samsung Galaxy S4
Samsung Galaxy Note 3 (already has KNOX Security system)
Most of the users don’t root their devices and use it normally and for them KNOX Security system is a great option.
But what happanes if we want to root our device?
Now the problem begins.
Normal(unrooted and so..) devices are flaged as KNOX Void Warranty 0×0 right from the factory.
When we flash items which weren’t signed by Samsung, it flags your device as KNOX Void Warranty 0×1.
According to Chainfire, KNOX status is indeed an eFuse. This means that even JTAG can not reset the KNOX status back to 0×0.
Some facts about KNOX status:
It isn’t possible to downgrade to KNOX-disabled firmwares/bootloaders (An attempt sets 0×1) (even though some people state, downgrade is possible when omitting the bootloader file in a firmware package). By downgrading from KNOX-enabled to KNOX-disabled firmware, your devices will be locked to installation of newer firmwares.
Let’s focus on that fact. As we mentioned above, Devices like S4, S3 and Note II which came without KNOX will get the KNOX system.For example, S4 I9505 got about a month ago 4.2.2 update that includes KNOX-enabled system(MH1). If you try to downgrade to KNOX-disabled system(MGA for example) your device will be flaged as KNOX Void Warranty 0×1 and will get a special lock – you won’t be able to update to any KNOX-enabled firmware even by ODIN. Samsung’s 4.3 update is KNOX-enabled, so if you tried to downgrade to KNOX-disabled firmware(for example MH8->MGA), you won’t be able to install 4.3 update.
This problem is only for devices which didn’t come with KNOX-enabled system from the factory(S4, S3 and Note 2)
Jeffery Butler confirmed this information:
FYI…Samsung told me that Knox warranty becomes 0×1(void) when the device with secured bootloader attempts to have non-secured bootloader. MH1 is the very first binary with secured bootloader. If MH1 is attempted to be downgraded to lower version(i.e. MGD) which has non-secured bootloader, then Knox warranty becomes void forever, and this means that the device can be used only for non-Knox device(no container can be created).
If you try to downgrade to KNOX-disabled firmware, you can’t install any new firmaware(that includes KNOX-enabled system) and use your device only with the old firmwares.
Even if you flash a KNOX-enabled firmware via odin (e.g. the latest fw) knox will be set to 0×1.
Flashing unsigned or modified images via odin will set knox to 0×1.
According to these two, flashing root/kernel/recovery/latest firmware by samsung/etc. will set KNOX status to 0×1.
Samsung stated, resetting the flag is impossible.
Chainfire confirmed that it is impossible to reset the flag.
KNOX is mandatory and can not be completely removed.
In custom roms we can remove KNOX apps, but the status remains 0×1.
Warranty Void is not a counter, it is a flag (0,1). We have never seen 0×2 or so.
Mirroring all partitions from a clean 0×0-Device to a 0×1-Device via JTAG produces an unfunctional device (reversible by restoring the 0×1 partitions on the phone).
Using JTAG or other repair tools to reset the flag is impossible.
KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the knox warranty.
Again, if we flash kernel/recovery/etc. we will void the warranty.
This si how 0×1 looks like:
2rn7beq.jpg
This is how 0×0 looks like:
attachment.php
I guess you are asking yourself now, what the hell 0×1 means?
If your device is flageed as 0×1. you should forget about your warranty.
Chainfire and other people confirmed that your can’t use your warranty:
Worse than that, I’ve also been hearing that service center instructions are indeed that devices with this status tripped will not receive any warranty repairs. (Of course, the action they take may still depend on the service center). Their excuse is that the hardware is damaged by the owner. Seems Samsung is catching up in scumbaggery to HTC, who years ago attributed my HTC Diamond’s screen damage (digitizer detached) to the installation of HSPL
To anyone in the know it is obvious that this doesn’t really fly, and the eFuse blowing (is this the hardware damage?) is intentionally done by the bootloader when unsigned software is loaded.
If you want to read the whole Chainfire’s statement, click here.
What is eFUSE? it’s a technology that allows reprogramming a read-only memory chip in real-time, even though such chips come with hard-coded code that cannot be generally changed after manufacturing.
When flashing unofficial software on the device, the status of the system and KNOX is switched to CUSTOM while increasing a binary flash counter, which helps Samsung find out whether the device has been tampered with. However, while Chainfire’s TriangleAway app has let users switch the status back to official and reset the flash counter until now, the KNOX status is based on eFUSE – basically, once you flash custom kernels or root the Note 3, the KNOX code gets rewritten, and this constitutes hardware damage.
Well, all I can say is think twice before you play with your Samsung device. If you don’t care about warranty, and you like custom roms and cool stuff just be aware of this information and continue with what you are doing.
Rajaasim1980 said:
KNOX is a new security system in official update of Android 4.3
on Samsung devices which prevents access to multiple applications when rooting your device and prevents the flash counter being reset to 0
Click to expand...
Click to collapse
theq86 said:
As you may already know, the latest Samsung firmwares came with a new secured bootloader. You can recognize it in download mode easily. It states: Knox warranty void: 0x0 or 0x1.
As for now, there is no way to reset that flag from 0x1 to 0x0.
Then I read in a comment of Chainfires post concerning that flag, that as long as you do not try to downgrade to a non secured bootloader, this flag will not change. He claims to have that information directly from Samsung.
https://plus.google.com/u/0/+Chainfire/posts
Has anyone already experience with rooting an "untouched" S4 which has the secured bootloader and can confirm or decline that?
- - - - - - - - - -
Conclusions and Facts about KNOX-enabled firmwares (based on statements from chainfires post and it's comments above, ans based on this thread)
Not possible to downgrade to KNOX-disabled firmwares/bootloaders (An attempt sets 0x1) (even though some people state, downgrade is possible when omitting the bootloader file in a firmware package: see http://forum.xda-developers.com/showthread.php?t=2444671, not confirmed)
Even if you flash a KNOX-enabled firmware via odin (e.g. the latest fw) knox will be set to 0x1
Flashing unsigned or modified images via odin will set knox to 0x1
Samsung stated, resetting the flag is impossible
KNOX is mandatory and can not be completely removed
Warranty Void is no counter, it is a flag (0,1) it was never seen 0x2 or so
Mirroring all partitions from a clean 0x0-Device to a 0x1-Device via JTAG produces an unfunctional device (reversible by restoring the 0x1 partitions on the phone)
KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the knox warranty
Assumptions on how KNOX flag in bootloader works:
Some experts think, an eFuse is involved. (http://en.wikipedia.org/wiki/EFUSE). An eFuse is mostly only incremential. Even unwriteable by low level tools or JTAG. But it is still not proven, that eFuse is used.
Knox technical information:
https://www.samsungknox.com/overview/technical-details
Click to expand...
Click to collapse
2: Can i downgrade the bootloader?
cosmyndemeter said:
from mj5 bootloader downgrade is possible, read this for newest than mj5 downgrade not possible!
do not try! you can brick your phone forever!!!
Click to expand...
Click to collapse
3:Can i install custom roms?
DeepankarS said:
You can do any customization on your phone like a normal phone, but customizing it means that you have triggered the KNOX counter to 1. Thus on a stock rom you can never use KNOX if KNOX reads 1.
FYI the MK4 (bootloader) or MJ9 (babseband version) has blocked installation of any custom roms on our n7100s via odin. You cannot even downgrade to 4.1.2 official via odin, So flashing via recoveries is the only way left.
And also it is recommended that you install custom roms via Philz/TWRP/CWM recoveries to flash custom roms and everything.
Hope the lil knowledge helped.
Click to expand...
Click to collapse
4 Can i root my note 2 with 4.3 knox?
Yes, but there are chances to trigger the KNOX counter to 1
yeminswe said:
4.3 root
http://forum.xda-developers.com/showthread.php?t=2540761
http://forum.xda-developers.com/showthread.php?t=2573576
>D
Click to expand...
Click to collapse
If you see any questions about knox, post here we will answer.

number 1 link is error,not found.
what about knox container ?

sora9009 said:
number 1 link is error,not found.
what about knox container ?
Click to expand...
Click to collapse
Link fixed.
Thanks

What about kernels?
Smack that thanks button if I helped!
Note 2 LTE powered by Illusion ROM and Plasma Kernel.
Sent from dat small country called Singapore.
P.S. replies with quotes will be replied to faster.

Irwenzhao said:
What about kernels?
Smack that thanks button if I helped!
Note 2 LTE powered by Illusion ROM and Plasma Kernel.
Sent from dat small country called Singapore.
P.S. replies with quotes will be replied to faster.
Click to expand...
Click to collapse
KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the knox warranty

Is there any way to get the knox back to 0 from 0x1????
Sent from my GT-I9500 using Tapatalk 4 - Hassan K. Malik

HassanM said:
Is there any way to get the knox back to 0 from 0x1????
Sent from my GT-I9500 using Tapatalk 4 - Hassan K. Malik
Click to expand...
Click to collapse
Not yet,although note 3 has been reported to somehow reverse it but that's just wishing too much.

singhpratik87 said:
Not yet,although note 3 has been reported to somehow reverse it but that's just wishing too much.
Click to expand...
Click to collapse
On the note 3 it's done by special bootloader leaked by sammy. The only chance for the note 2 is if note 2 bootloader is leaked. No other way.
Sent from my GT-N7100

I dont care about warranty , all i care that , if i installed a custom rom and the Knox bit is set to 0X1 and i want to get back to the stock , can i install Knox again or not ? because i like the knox idea

hazemsalah said:
I dont care about warranty , all i care that , if i installed a custom rom and the Knox bit is set to 0X1 and i want to get back to the stock , can i install Knox again or not ? because i like the knox idea
Click to expand...
Click to collapse
Once your counter goes to 1 no more Knox app , it can't be used anymore.
Sent from my GT-N7100

gregsarg post :
We have a fix....just not on xda....yet
Mobiletechvideos.com now offers a bootloader downgrade service for our devices. ..
The Knox flags can be reset quite easily according to them....
So if you want the old Knox free phone back....see below and get your anti-knox groove on....
See the product description tab in the middle of the page. ..g
http://mobiletechvideos.mybigcommerce.com/samsung-galaxy-note-2-bootloader-sboot-downgrade-service/

Hmmm it's kinda fishy , but could be true. So you send them your phone ? I don't get it. And all around is jtag heh
Sent from my GT-N7100

note2nooby said:
Hmmm it's kinda fishy , but could be true. So you send them your phone ? I don't get it. And all around is jtag heh
Sent from my GT-N7100
Click to expand...
Click to collapse
Nope i can't risk to send my phone (400 euro), but it looks like they have the solution.I send them mail to ask if i can pay for the file and instruvtions but no answer till now.They want 75 for the reset and 45 for express shipping end delivery.I told them that i am
agree to pay all the ammount for the file.
And one more thing-if i send them phone i can't be sure that they will reset it instead of just replacing MB and write my old IMEI e.t.c

gencho81 said:
Nope i can't risk to send my phone (400 euro), but it looks like they have the solution.I send them mail to ask if i can pay for the file and instruvtions but no answer till now.They want 75 for the reset and 45 for express shipping end delivery.I told them that i am
agree to pay all the ammount for the file.
And one more thing-if i send them phone i can't be sure that they will reset it instead of just replacing MB and write my old IMEI e.t.c
Click to expand...
Click to collapse
I'm quite sure they are using jtag and service bootloader. That's why they need the phone. It's not the same way like the exynos fix for note 3.
Sent from my GT-N7100

I-9192 official status again
i have installed a few weeks later a rooted rom from another forum, and triggered the knox to 0x01 (so i cant receive official updates from samsung)
but, today i needed to reset my phone to factory default, than i was curious to check the phone status, and for my surprise was "Official" again...
i read in various sites that the knox flag cannot be reverted... is that true?
the files i was used to root:
Odin 3.09
Kernel_root_I9192.tar
SuperSU_1.41.zip
the only bad thing is that i lost my root
anyone have the same result just reseting the phone?
thx and sorry for bad english

Soooo. As far as i know the knox wont get updates from Samsung and Block using knox app? And what features are lost from a triggered knox? I flashed the original firmware again and all its ok so far. Theres any blocked feature that o didnt realize?

Need help
I've a s4mini 19192 and today I flashed samsungs official KitKat update to my phone... I tried to root it like I rooted the 4.2.2 update... But can't do.... Then I decided to downgrade to the old version 4.2.2 but odin says can't.... And fails... Someone can help me?

Is it possible to check when the flag was triggered?
I was sold a GN3, in witch the KNOX flag was already set* and I'm trying to avoid a situation in witch the seller will say that I've set the flag.
* not checked beforehand - my mistake - but still I can return it or get a discount under the law

hello..just got the s4 mini dual sim 9192... 2 days back..i was on 4.2.2 indian firmware....checked download mode and it said knox 0*0...now i flashed the 4.4.2 firmware downloaded from sammobile via odin and when i recheck knox is gone....!!!!
just said binary and system which changed from official to custom once i rooted it with CF-root method(nothing else was working...saferoot/towelroot etc)..and as i seem to have read that flashing stock rom reverts these back to official...is it true?
and does this mean that my knox firmware phone has been converted to a non-knox one after kit kat upgrade?
please anyone let me know..thanks

@Fataz bro i have a few questions
I'm currently on FNE2 stock deodexded custom rom with a FNE2 bootloader, when i go download mode it says "KNOX WARRANTY VOID:1"
1 - Does this means Knox is tripped as 0x1
2- Can i install a stock firmware higher than FNE2 from sammobile via odin
GT-N7100 cihazımdan Tapatalk kullanılarak gönderildi

KNOX warranty void

What does this truely mean. I just rooted via ODIN and my flag was tripped 0x1, does the flag geg tripped regardless if you root or install custom roms ?
Sent from my SM-N900T using xda premium

Seriously, there are tons of threads on this. You didn't do any research before rooting your phone?
Once tripped it can't be reset. If you planned on flashing roms, there it's no way around reporting the Knox flag. Now that you have already tripped it, you can't go back.
Whether or not it will effect you depends on how you use your phone, software out hardware issues you may have and if you try to get warrantee repair. For many it it's not a big deal.

I did do my research Im just asking a question maybe there was an update on how to change the void but obviously kot . Thanks anyway. Dont get all hyped thats what xda is for
Sent from my SM-N900T using xda premium

Hi, I got my note 3 recently and all i have done is just root my note 3 so far. but i have been doing some readings. from what i had found is Knox is a software on your phone, i am guessing and this is just a guess if you use the bloatware remover it might delete the knox program and files from your phone. It might trigger a reset on the counter. I remember reading the list of files it deletes, and it delete all of knox files and folder and a bunch of other stuff but you can edit the script to make it only delete the knox. It might delete the counter or reset it. And you can just reinstall it back and see if the counter is back at 0. remember i am just taking a guess here, does any 1 think this might work?

You cannot reset the Knox flag once it had been tripped.

megaearth77 said:
Hi, I got my note 3 recently and all i have done is just root my note 3 so far. but i have been doing some readings. from what i had found is Knox is a software on your phone, i am guessing and this is just a guess if you use the bloatware remover it might delete the knox program and files from your phone. It might trigger a reset on the counter. I remember reading the list of files it deletes, and it delete all of knox files and folder and a bunch of other stuff but you can edit the script to make it only delete the knox. It might delete the counter or reset it. And you can just reinstall it back and see if the counter is back at 0. remember i am just taking a guess here, does any 1 think this might work?
Click to expand...
Click to collapse
Try that and you might blow the efuse they have with removing Knox.
TWEAKED 1.0 NOTE 3

wow didn't know that

megaearth77 said:
wow didn't know that
Click to expand...
Click to collapse
It what chain fire was afraid of and reason why triangle away won't work
TWEAKED 1.0 NOTE 3

krelvinaz said:
Seriously, there are tons of threads on this. You didn't do any research before rooting your phone?
Once tripped it can't be reset. If you planned on flashing roms, there it's no way around reporting the Knox flag. Now that you have already tripped it, you can't go back.
Whether or not it will effect you depends on how you use your phone, software out hardware issues you may have and if you try to get warrantee repair. For many it it's not a big deal.
Click to expand...
Click to collapse
So rude all that extra was not really needed on do your research. You were probably once new to something too
Sent from my SM-N900T using Tapatalk

BACARDILIMON said:
Try that and you might blow the efuse they have with removing Knox.
TWEAKED 1.0 NOTE 3
Click to expand...
Click to collapse
By just deleting Knox? Pretty sure lots of us have removed it by now and not blown any fuse. I deleted it right out of the box and my phone works just fine...
Sent from my SM-N900T using XDA Premium 4 mobile app

Kalm_Traveler said:
By just deleting Knox? Pretty sure lots of us have removed it by now and not blown any fuse. I deleted it right out of the box and my phone works just fine...
Sent from my SM-N900T using XDA Premium 4 mobile app
Click to expand...
Click to collapse
You didn't delete Knox fully or it would not have the counter. Trust me chain fire tried with no success. He has been one of the pioneers in getting things done and could not.
TWEAKED 1.0 NOTE 3

Can someone explain to me what Knox does and why it get's "tripped"?

BACARDILIMON said:
You didn't delete Knox fully or it would not have the counter. Trust me chain fire tried with no success. He has been one of the pioneers in getting things done and could not.
TWEAKED 1.0 NOTE 3
Click to expand...
Click to collapse
I was referring to what I quoted you saying about blowing an e-fuse by removing Knox. I'm not talking about the check component in the bootloader or wherever it's stored - just the software components that are very easily removable, and do not seem to have caused any adverse effects (aside from the arguably undesired Knox 0x1 flag).
---------- Post added at 08:43 PM ---------- Previous post was at 08:37 PM ----------
dinggus said:
Can someone explain to me what Knox does and why it get's "tripped"?
Click to expand...
Click to collapse
It's a component Samsung decided to build into their new phones and Android builds that is allegedly supposed to be helpful for device security, especially when used with a corporate mobile device system.
Currently, if you flash a phone that has Knox installed with non-factory ROM, Recovery software, etc an at-bootup counter is "permanently" tripped indicating that the device has been tampered with.
I put that word in quotes because we all know with enough time and resources someone will surely figure out a way to reset that counter, if not remove it altogether.
SHORT VERSION: it's a piece of garbage that Samsung and Tmo can use to not uphold your warranty (since it technically voids the entire warranty if you flash custom stuff).

Kalm_Traveler said:
It's a component Samsung decided to build into their new phones and Android builds that is allegedly supposed to be helpful for device security, especially when used with a corporate mobile device system.
Currently, if you flash a phone that has Knox installed with non-factory ROM, Recovery software, etc an at-bootup counter is "permanently" tripped indicating that the device has been tampered with.
I put that word in quotes because we all know with enough time and resources someone will surely figure out a way to reset that counter, if not remove it altogether.
SHORT VERSION: it's a piece of garbage that Samsung and Tmo can use to not uphold your warranty (since it technically voids the entire warranty if you flash custom stuff).
Click to expand...
Click to collapse
Guess I'll stay away from Samsung devices then. If I could get a Note 3 that has the camera features and S-Pen, I'd be happy.

Interesting, i got a few question i want to ask. I root my t mobile note 3 recently using the new method that don't trip the knox counter. And i install several apps that require root access. I know if you install custom rom it will trigger the knox, but i won't on my and its still stock at 4.3. My Question is what about apps that require root access? I got ES file explorer, es task manager, game guardian, cachemate for root users free, cpu tuner, and titanium backup, does those trigger the knox? And is efuse short for eletronic fuse? if it is, can't you just replace it to undo the knox?

Apps don't trigger the Knox flag, flashing a kernel roms etc do. Efuse is in the snapdragon processor.

Kalm_Traveler said:
I was referring to what I quoted you saying about blowing an e-fuse by removing Knox. I'm not talking about the check component in the bootloader or wherever it's stored - just the software components that are very easily removable, and do not seem to have caused any adverse effects (aside from the arguably undesired Knox 0x1 flag).
---------- Post added at 08:43 PM ---------- Previous post was at 08:37 PM ----------
It's a component Samsung decided to build into their new phones and Android builds that is allegedly supposed to be helpful for device security, especially when used with a corporate mobile device system.
Currently, if you flash a phone that has Knox installed with non-factory ROM, Recovery software, etc an at-bootup counter is "permanently" tripped indicating that the device has been tampered with.
I put that word in quotes because we all know with enough time and resources someone will surely figure out a way to reset that counter, if not remove it altogether.
SHORT VERSION: it's a piece of garbage that Samsung and Tmo can use to not uphold your warranty (since it technically voids the entire warranty if you flash custom stuff).
Click to expand...
Click to collapse
It voids Samsung warranty not TMOBILE. So ur good for 1 year
TWEAKED 1.0 NOTE 3

Yes, Knox is Samsung thing, T-mo has nothing to do with it and some people already suggested, T-mo doesn't even check Knox flag for replacements etc, at least so far. I asked here before if it's e-fuse and got different answers, so I ask again : are we sure it's e-fuse or we just speculating? The reason is, there was a guy in international forum claiming Samsung reset his Knox flag, which would be not possible with e-fuse. BTW I just updated my old GS3 to 4.3 and it added Knox to it, so I got mad and rooted it to just to delete this stupid Knox, so now how do I check that flag on it? It says custom because is rooted, but where is the Knox flag?

You see the Knox setting when you put your phone in download mode.
As for resetting the Knox flag, I've not seen a confined resetting of it or better said, if it can be done, no one outside of Samsung has been able to do it and prove they have.

So I've been searching around and have not found out the answer to these questions... I'm assuming the answer is "Yes" to the first but want to confirm:
If the KNOX flag is tripped, the KNOX software will no longer work. Ever (assuming we never get a 0x0 reset). Correct?
Now for the next question, assuming "No":
If I use the RDLV to root without tripping KNOX, will the KNOX software still work?
I ask because my company does have MDM and supports KNOX and I may want to use it in the future.

What exactly is KNOX?

So I've read all over and I have gotten several different ideas of what KNOX is. What is it exactly does it prevent you from installing custom roms/recoveries? Is this the same for all phones/devices running KNOX?

Check here for more info:
http://www.samsung.com/global/business/mobile/solution/security/samsung-knox

Knox is Samsung proprietary security software ...designed to create a secure partition or "container" within the virtual space...
Designed primarily for corporate level use...the Knox container is used to contain email....messaging...and other secure applications that are considered private....and are generally chosen by Samsung...
For the average user...Knox is a security curse...locking a portion of the bootloader and flagging the device if any attempt is made to gain root access....effectively voiding the device warranty...
Samsung makes grand claims regarding this flag...and claims it is permanent and cannot be removed...
The flag signal indicates the secure container has been compromised...
Knox is a step to lure in lucrative contracts from entities like the U.S. Army...and large corporate entities that need secure devices....or for those entities which allow BYOD programs....
Knox enabled note 2 devices can be rooted...and software can easily be flashed....but currently there is no correction for a tripped Knox counter....
I hope this helps a bit....g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...

Knox
It's not fun for the average user. If your enterprise then sure but even then not good. I rooted and installed 4.4.2 once 4.3 hit my note 2... I did not like it. for whatever reason it was slower.... so anyways it took days to finally get samsung/knox out and omnirom in...

gregsarg said:
Knox is Samsung proprietary security software ...designed to create a secure partition or "container" within the virtual space...
Designed primarily for corporate level use...the Knox container is used to contain email....messaging...and other secure applications that are considered private....and are generally chosen by Samsung...
For the average user...Knox is a security curse...locking a portion of the bootloader and flagging the device if any attempt is made to gain root access....effectively voiding the device warranty...
Samsung makes grand claims regarding this flag...and claims it is permanent and cannot be removed...
The flag signal indicates the secure container has been compromised...
Knox is a step to lure in lucrative contracts from entities like the U.S. Army...and large corporate entities that need secure devices....or for those entities which allow BYOD programs....
Knox enabled note 2 devices can be rooted...and software can easily be flashed....but currently there is no correction for a tripped Knox counter....
I hope this helps a bit....g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...
Click to expand...
Click to collapse
thanks! that was a great summary
i'm glad i didn't jump on the 4.3 bandwagon

If you want even more details about Knox....
http://www.samsung.com/global/busin...er/2013/06/Samsung_KNOX_whitepaper_June-0.pdf

Just wondering... I run into problems rebooting my device with different non-stock ROMs - the boot animation freezes and the phone never actually boots up. I have to pull the battery and reboot - usually multiple times. Could KNOX have anything to do with this strange behavior?

It's a fort in Kentucky

PScales17 said:
Just wondering... I run into problems rebooting my device with different non-stock ROMs - the boot animation freezes and the phone never actually boots up. I have to pull the battery and reboot - usually multiple times. Could KNOX have anything to do with this strange behavior?
Click to expand...
Click to collapse
Not likely a Knox issue...
More likely you are having issues with the device being cleaned correctly before or after the flash process...
Additionally...if you took an official OTA to 4.3....you have a gimped bootloader which has given some users issues when dropping back to 4.1.xxx frameworks...(this issue is still being worked on)...
If you are flashing via Odin using full images....and do have a locked bootloader....the flash step will fail when attempting to flash a bootloader image...
Fully wipe the internal storage and your data, dalvik, and standard caches prior to flashing a new rom..but be sure to copy or backup and data or photos...music that you wish to keep ..( note...your IMEI AND EFS folder will not be deleted when using TWRP )
...and never dirty flash...
( unless told by the developer of the rom to do so )
over an existing rom..
Use TWRP recovery....version 2.6.3.1 for what I believe to be the best results...
Try the method...and if you continue to have issues....post a thread of your own in QA...g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...

gregsarg said:
Knox enabled note 2 devices can be rooted...and software can easily be flashed....but currently there is no correction for a tripped Knox counter....
.
Click to expand...
Click to collapse
So how do you do it? I keep getting security warnings when I try to install a bootloader. Is there a way to just get rid of this curse?
Edit: Never mind. I found an article on Droidviews.

So, I got a Note 2 a couple of weeks ago and it had 4.1.2 on it. I never updated it to 4.3 as I rooted and flashed kitkat/4.4.2/CM 11 on it immediately. If I flash a 4.3 ROM, will Knox be "installed" on it? Can I flash a 4.3 ROM just like normal?

You can flash any rom from this section...but a few require an updated 4.3 bootloader...
That is the leaked bootloader found in the dev section...
The problem comes if you take the OTA to 4.3...which installs the Knox bootloader ....g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...

New update 11/4

Just got an update on my phone. Anyone else?

unomedmen1 said:
Just got an update on my phone. Anyone else?
Click to expand...
Click to collapse
I'm rooted, but I would love to know if this actually fixes battery life. I would unroot for that.

It's probably one of those security updates.

Update
I received the update as well as an update for Samsung Pay. It includes patches for the 2nd round of Stagefright vulnerabilities.. If you download the stagefright detector app from the Google Play Store and run it, it now informs you that your device is no longer vulnerable to any of the known versions of Stagefright. Before this update only the first round of Stagefright vulnerabilities were patched by the July update. As for the battery life optimization listed in the update's documentation, I guess we won't know until we use our phones for a few days. Hope this answers some of your questions.

Phone is snappier than ever
Sent from my SM-G920P using XDA Free mobile app

waoasis said:
Phone is snappier than ever
Sent from my SM-G920P using XDA Free mobile app
Click to expand...
Click to collapse
I personally don't feel anything different to be honest.

Me either. Battery seemed the same today too
Sent from my SM-G920P using XDA Free mobile app

worth to unroot device?

If my s6 ever snapped at me, i would throw it on the ground, repetitively step on it, and go buy me a nexus 6
Sent from my SM-G920P using Tapatalk

Has anybody confirmed the root methods we already have available will work with this update?

I also would like to know this....
P1_e85 said:
Has anybody confirmed the root methods we already have available will work with this update?
Click to expand...
Click to collapse

Im temped to try and flash unikernal it should work.?

They work
Sent from my SM-G920P using XDA Free mobile app

Forgive my ignorance on the subject but I have a few quick questions if anyone would be so kind as to indulge me with answers:
1. Is KNOX only tripped when a custom ROM is flashed or does the act of simply acquiring root permission trip it as well?
2. If KNOX is tripped does that simply void the warranty or does it hard-brick the phone as well?
I am fine without a custom ROM I just want root access to remove bloatware and customize features using Wanam Xposed. I loved everything I could do with that on my S3 and I am already bored with the look of my S6 even though I have only had it for about 5 hours now.

new update
trips knox stock rom xposed needs odexed rom

OI1 fixed Bluethooth battery drain
bowhunt2005 said:
Me either. Battery seemed the same today too
Sent from my SM-G920P using XDA Free mobile app
Click to expand...
Click to collapse
I had horrible battery life with my Bluetooth enabled.
Tried everything, the only way to return good battery life was to disable Bluetooth (which sucked with my Gear 2). OI1 fixed the Bluetooth battery drain.

Not sure battery is so poor , im kind of sick of this, for a flagship it should be better than this
Sent from my SM-G920P using Tapatalk

edlee said:
Not sure battery is so poor , im kind of sick of this, for a flagship it should be better than this
Sent from my SM-G920P using Tapatalk
Click to expand...
Click to collapse
Dunno bout you guys. Battery is been the best for me on this update. Im semi heavy user.
Sent from my SM-G920P using XDA Free mobile app

Just some security update.

PunkIsDeadAndYouAreNext said:
Forgive my ignorance on the subject but I have a few quick questions if anyone would be so kind as to indulge me with answers:
1. Is KNOX only tripped when a custom ROM is flashed or does the act of simply acquiring root permission trip it as well?
2. If KNOX is tripped does that simply void the warranty or does it hard-brick the phone as well?
I am fine without a custom ROM I just want root access to remove bloatware and customize features using Wanam Xposed. I loved everything I could do with that on my S3 and I am already bored with the look of my S6 even though I have only had it for about 5 hours now.
Click to expand...
Click to collapse
Knox is tripped when you flash a custom kernel or a custom recovery, to gain root access you usaully install a custom kernel with root access and then some people install a custom recovery to have the ability to flash custom roms. Some people have been able to unpack and repack the original stock rom for their device and then flash with Odin and not trip Knox, as long as your leave the boot.img and recovery.img intact and keep all the partitions their original size they were successful, this I am going to attempt soon, I too want to do a few edits to the CSC in the cache.img and try and remove some bloat in the system.img and repack and flash to keep my phone stock and unrooted and without bloat and to NOT trip knox.
if Knox is tripped Samsung can void the 1 year service warranty on your device, the knox counter keeps track if the phone has been altered by flashing custom kernels and recoveries, this makes the phone vurnerable to attacks by malicious apps and or users because having root access gives any user and apps permission to anything in the system files. I have tripped knox on many devices and have returned them bricked and never had a problem with Sprint and they replaced my phone, now sending it to Samsung directly I can not answer that but I have read on here in the forums a few have had their phones repaired after Knox being tripped but never ever heard of tripping knox bricking a phone, to brick a phone you have had to flash the wrong firmware and such things alike.
Tripping knox has a few drawbacks as some apps and features will not work, like Private Mode, or Samsung Pay and many more because Knox can not secure your Data anymore since you rooted your phone. So think of Knox as it looks at root, its like you leaving the front door on your house opened all day while your away at work. Knox has a purpose some people don't care about it and some do like me, I like private mode feature. Some root methods have bypassed the security checks by Knox but they keep fixing the vulnerabilities and making it harder and harder to not trip knox, so either you root and trip it or not to root and try other means to make your phone yours.

S6 Edge Root

Hi guys i havent been in the forums in a while and i thoght about rooting my device cause i formatted my phone and lost a bunch of pics that i want to recover. long story short i have tryied many apps and none seem to be able to recover the deleted pics. the only one so far that people claim that can do it is DiskDigger or something like it, but for it to fully work it needs ROOT. so my problem is that unless there is a 100% way of getting my deleted pics which at this point i doubt, then lets please proceed.
Since i need to ROOT im gonna give you guys my phone specs so you guys can get a picture and advice me better cause i dont want to mess up this phone cause is my daily driver.
SPECS:
T-Mobile
S6 Edge 128GB (SM-G925T)
Android: 5.1.1
Baseband: G925TUVS3DOJC
Kernel: 3.10.61-5756057
Build: LMY47X.G927TUVS3DOJC
Knox: 2.4.1
Device Status: Official
and the Download Screen Displays This:
ODIN MODE
Product name: SM-G925T
Curent Binary: Samsung Official
System Status: Official
FAP Lock: OFF
Secure Download: Enabled (blue letters)
Knox Warranty VOID: 0 (0x0000)
AP SWAREV: B:3 K:2 S:2
is everything here ok? does anything seem ok in my phone? is it rootable?
ok first of all let me say that i do not care about the pay methods but i do care about losing other functionality like fingerprint scanner of LTE and less battery life and stuff like that. mine last me about a whole day with moderate use and some gaming in between.
i want basically to ROOT my phone and if possible and available without tripping the cursed knox so i can if available intall a custom recovery so i can backup and restore my phone from (on that actually works) cause i coulnt for the life of my phone NEVER restore from an image done by my S4 with TWRP or i never knew how to do it cause when i tryied it to fully wipe ended up having to reinstall the full firmware and rooting from scratch.
Also if available which apps and in which directories can be frozen and which ones can be unistalled cause im tired of facebook and instagram and Tmo useless crapware.
Sorry for the long and winded speech but this phone is almost a $1000 and i dont have insurance anymore and if knox tripped samsung wont fix or exchange.
thanks in advanced
have a nice day
sorry for the length again

Apparently you have done some reading (and if not, start reading) because you are mentioning all or most of the issues that some folks are experiencing with this phone when attempting to root with latest firmware updates. ( Not to mention the bricks. )
At first release it was possible with little consequences but that changed in a hurry with updates and with every update it becomes harder and more dangerous to root safely.
There is very little going on in development, just some rehashed versions of the old firmware and in the international forum there are some roms that lose a lot of features you want.
If you really need and rely on your expensive phone and need all features working, leave it stock.
As for your lost images, well your going to have to use your imagination and try to remember what they were.
I was a diehard rooter with all my devices until I met up with this Samsung 6Edge, I love the phone and am a big fan of Samsung so I'm sticking with stock debloated for now, I'm learning to live "stock" and enjoying my phone with all features working properly.
Pp.

PanchoPlanet said:
Apparently you have done some reading (and if not, start reading) because you are mentioning all or most of the issues that some folks are experiencing with this phone when attempting to root with latest firmware updates. ( Not to mention the bricks. )
At first release it was possible with little consequences but that changed in a hurry with updates and with every update it becomes harder and more dangerous to root safely.
There is very little going on in development, just some rehashed versions of the old firmware and in the international forum there are some roms that lose a lot of features you want.
If you really need and rely on your expensive phone and need all features working, leave it stock.
As for your lost images, well your going to have to use your imagination and try to remember what they were.
I was a diehard rooter with all my devices until I met up with this Samsung 6Edge, I love the phone and am a big fan of Samsung so I'm sticking with stock debloated for now, I'm learning to live "stock" and enjoying my phone with all features working properly.
Pp.
Click to expand...
Click to collapse
How do you debloat if you don't have root? are you just disabling the bloatware apps?

3RAN7ON said:
How do you debloat if you don't have root? are you just disabling the bloatware apps?
Click to expand...
Click to collapse
Yes, disabling all and any bloatware that gives you the option to disable.
When my phone is sitting idle it goes into 99% deep sleep.
With light use I'll get 30 + hours from a charge.
I don't subscribe to Facebook or any of those social media apps and for games I have a Tab2 running CM. I basically use my phone for calls, messages and photos and a couple of forums.
Pp.
Sample of disabled apps.

dr69 said:
Hi guys i havent been in the forums in a while and i thoght about rooting my device cause i formatted my phone and lost a bunch of pics that i want to recover. long story short i have tryied many apps and none seem to be able to recover the deleted pics. the only one so far that people claim that can do it is DiskDigger or something like it, but for it to fully work it needs ROOT. so my problem is that unless there is a 100% way of getting my deleted pics which at this point i doubt, then lets please proceed.
Since i need to ROOT im gonna give you guys my phone specs so you guys can get a picture and advice me better cause i dont want to mess up this phone cause is my daily driver.
SPECS:
T-Mobile
S6 Edge 128GB (SM-G925T)
Android: 5.1.1
Baseband: G925TUVS3DOJC
Kernel: 3.10.61-5756057
Build: LMY47X.G927TUVS3DOJC
Knox: 2.4.1
Device Status: Official
and the Download Screen Displays This:
ODIN MODE
Product name: SM-G925T
Curent Binary: Samsung Official
System Status: Official
FAP Lock: OFF
Secure Download: Enabled (blue letters)
Knox Warranty VOID: 0 (0x0000)
AP SWAREV: B:3 K:2 S:2
is everything here ok? does anything seem ok in my phone? is it rootable?
ok first of all let me say that i do not care about the pay methods but i do care about losing other functionality like fingerprint scanner of LTE and less battery life and stuff like that. mine last me about a whole day with moderate use and some gaming in between.
i want basically to ROOT my phone and if possible and available without tripping the cursed knox so i can if available intall a custom recovery so i can backup and restore my phone from (on that actually works) cause i coulnt for the life of my phone NEVER restore from an image done by my S4 with TWRP or i never knew how to do it cause when i tryied it to fully wipe ended up having to reinstall the full firmware and rooting from scratch.
Also if available which apps and in which directories can be frozen and which ones can be unistalled cause im tired of facebook and instagram and Tmo useless crapware.
Sorry for the long and winded speech but this phone is almost a $1000 and i dont have insurance anymore and if knox tripped samsung wont fix or exchange.
thanks in advanced
have a nice day
sorry for the length again
Click to expand...
Click to collapse
I agree with @PanchoPlanet to an extent. There are 2 ways to root the S6 Edge right now. One works just fine with no issues. I have been rooted since I bought the device before Samsung Pay came out. The other way that people have been using to avoid tripping knox will screw up your phone.If you don't care about Samsung Pay then you can simply use CF-Auto root like always. then flash TWRP after you root. The only thing that has made rooting unsafe is the people trying to avoid knox. I keep posting everywhere that people need to stop worrying about knox. Unless you are in a security job or a government job or you want to use Samsung Pay then knox is absolutely of no concern. People worried about getting their device fixed or returning it because of the knox trip, I have read many people were able to without problems.
*Edit*
This root method works just fine --> Here
Except I use the newest Unikernel --> Here

jmc302005 said:
I agree with @PanchoPlanet to an extent. There are 2 ways to root the S6 Edge right now. One works just fine with no issues. I have been rooted since I bought the device before Samsung Pay came out. The other way that people have been using to avoid tripping knox will screw up your phone.If you don't care about Samsung Pay then you can simply use CF-Auto root like always. then flash TWRP after you root. The only thing that has made rooting unsafe is the people trying to avoid knox. I keep posting everywhere that people need to stop worrying about knox. Unless you are in a security job or a government job or you want to use Samsung Pay then knox is absolutely of no concern. People worried about getting their device fixed or returning it because of the knox trip, I have read many people were able to without problems.
*Edit*
This root method works just fine --> Here
Except I use the newest Unikernel --> Here
Click to expand...
Click to collapse
Sorry to ask but did you noticed that my baseband is different from the one in the tutorial? Sorry to ask but are you sure this tuto will work for my current baseband and/or keenel?
Thanks in advanced
Sent from my SM-G925T using Tapatalk

dr69 said:
Sorry to ask but did you noticed that my baseband is different from the one in the tutorial? Sorry to ask but are you sure this tuto will work for my current baseband and/or keenel?
Thanks in advanced
Sent from my SM-G925T using Tapatalk
Click to expand...
Click to collapse
The baseband doesn't matter the build does. It does work with the build you are on.

Ok so, so far what i have done is just odin the UNIKERNEL which also rooted my phone. Everything is working nice exept for titanium which i already asked in another thread. So my next question is: is it safe to factory restore my phone from the phones menu -->backup and reset-->factory data reset <--
Is this safe and will it still remain rooted so i can install titanium and a custom recovery so i can do a full image?
Can someone plz answer today to see if im able to get my phone up and running by tonite?
Thanks again and in advanced.
Sent from my SM-G925T using Tapatalk

dr6901 said:
Ok so, so far what i have done is just odin the UNIKERNEL which also rooted my phone. Everything is working nice exept for titanium which i already asked in another thread. So my next question is: is it safe to factory restore my phone from the phones menu -->backup and reset-->factory data reset <--
Is this safe and will it still remain rooted so i can install titanium and a custom recovery so i can do a full image?
Can someone plz answer today to see if im able to get my phone up and running by tonite?
Thanks again and in advanced.
Sent from my SM-G925T using Tapatalk
Click to expand...
Click to collapse
I answered your other thread...go into SuperSU settings, scroll down and untick "mount namespace separation" and you will be good to go...it worked for me...
Sent from my SM-G925T using Tapatalk

Yes and thanks i jist read it. It did work. You are the man
Thanks so much, now how about giving me a hand with this matter
Sent from my SM-G925T using Tapatalk

Plz, any takers? I just need a yes or a no. I dont wanna fo it and then my phone messed up
Sent from my SM-G925T using Tapatalk