Related
AFAIK nobody has asked anything about KNOX on the T999, so I have a few things I want to know before updating my phone to 4.3.
I bought my phone off-contract at full price and its flash counter has already been incremented many times from rooting, so I obviously don't care about setting the "KNOX warranty void" flag either, nor the enterprise-grade security features KNOX provides.
However, there is a rumor that once the KNOX warranty void flag is set to 0x1 you can't upgrade the ROM anymore, not even via Odin. Is this actually true? I know you can't OTA unless you're stock, but I don't care about OTA since I'd just upgrade via Odin anyways. But the fact you can't even upgrade via Odin seems a bit far-fetched.
Another variant of this rumor that seems more believable is that updating to a KNOX-enabled ROM also updates the bootloader to a KNOX-enabled variant, and that you can't upgrade to new KNOX-enabled ROMs if you decide to downgrade to a non-KNOX ROM after the bootloader has been updated. But if I never downgrade, can I continue to install updates, assuming Samsung releases ROMs for the S3 after 4.3?
Can anyone shed some light on this?
I somehow can't trust the first one. However the second one sounds more plausible. Anyway doc Holliday has removed KNOX from the most recent leaked Stock Rom. So this question becomes moot really.
Perseus71 said:
I somehow can't trust the first one.
Click to expand...
Click to collapse
Which is exactly why I asked this. I just wanted some more opinion.
Perseus71 said:
Anyway doc Holliday has removed KNOX from the most recent leaked Stock Rom.
Click to expand...
Click to collapse
And does this also mean that the bootloader isn't KNOX-enabled?
jim45 said:
Which is exactly why I asked this. I just wanted some more opinion.
And does this also mean that the bootloader isn't KNOX-enabled?
Click to expand...
Click to collapse
I don't think so. I flashed that Leak to test out the features. Afterwards flashed back my regular AOSP Rom.
NOTE - With the Leak, some reported that the Bootloader didn't get updated. I explicitly asked as well. If you are concerned with Knox'd Bootloader, you can Flash back UVDMD5 Bootloader too!
Here's what I know so far.
First, we do not have to worry about the Knox counter. One of my sources sent me a pic of their download mode and it was not there.
Second, I have reliable doubts that our official release will NOT include Knox. It's only included now for ease of using the same builds across multiple devices during internal testing.
Third, the bootloader is not included in any of the leaks. I do have a copy of it and have been considering releasing a recovery flashable firmware update, but haven't decided yet if I want to do this.
One of my sources ran into a problem at one point and soft bricked. Samsung simply connected remotely and flashed the firmware via Odin.
As for not being able to downgrade or flash certain things, I do not think this is the case at all. If you do something Knox doesn't like, it will lock down the secure containers it uses and you will not be able to regain access. I do not belie e it will restrict you from flashing something else, old or new, firmware or Rom, etc.
There is still a lot I do not know about it, but the information is out there. I stopped putting time into it when I found we probably won't need to worry about it anyway.
A quick Google search will net you more info, but if you really want an education on it I'd suggest visiting the S4 and Note3 forums. S4 users have been dealing with Knox longer than anyone, and the Note3 is the first device to ship with it fully implemented.
Sent from my SGH-T999 using Tapatalk
[SIZE=+1]There seems to be a lot of confusion and misunderstanding circling the forums with regards to Knox and the 4.3 OTA.
This is an attempt to clear things up[/SIZE]
UPDATE: It seems that people can find this thread, but are unable to actually READ the information presented. The most important note here is that if you are on 4.3 firmware, you can flash ANY rom you like. No, you are not tied down or locked into stock only or 4.3 roms only. AOSP roms will work fine as well. Now scroll down and READ EVERYTHING IN THIS FIRST POST.
What is Knox? Knox is both a firmware and a software component. The OS has Knox apps, and the MK3 bootloader has a Knox component too. Having Knox apps does not necessarily mean you have the Knox bootloader, or vice-versa.
How does Knox work? Because Knox is both in the OS (apps) and in the firmware (bootloader) it works in two ways. The OS components prevent attempts to obtain root access and make rooting with these Knox apps a pain in the butt. Fortunately they can be removed. In the firmware component (bootloader), Knox works to prevent the flashing of custom kernels and recoveries. If you flash a custom rom or custom recovery WHILE on the Knox bootloader, your Knox flag will be tripped and your Warranty Bit will go from 0x0 to 0x1. The Knox bootloader cannot be downgraded to, say, the MD4 bootloader because of special protections built into it. If you attempt to downgrade it, your phone will instantly brick.
Can I get root on the Knox-enabled update? Yes. For those of us who DID NOT take the official OTA and DO NOT have the Knox bootloader, we can get root on 4.3 by injecting it and removing the Knox apps. For those WITH the Knox bootloader, you will need to wait until a full stock MK3 tar is available, which we can then use to make an Odin-flashable MK3 stock rom with root injected using the de-la-vega root method.
Can I downgrade while on 4.3? You can flash roms no matter what Android version they are. That is perfectly fine. But you cannot downgrade the bootloader if you have the Knox bootloader, or else it will cause your bootloader to become corrupted and give you a fancy paperweight. Again, for those who DO NOT have the Knox bootloader, you needn't worry about this/downgrading firmware since the Knox bootloader is what prevents you from doing this. Downgrading your bootloader includes: attempting to flash full stock tar of software versions < MK3, etc.
How can I tell if I've got the Knox bootloader?
Boot into download mode (through custom reboot menu, or by powering off then holding Power+Home+VolumeDown and then VolUp when prompted). If you see a line that starts with the following, then you've got the Knox bootloader. I will insert a picture showing how it actually looks soon
Warranty Bit:
Click to expand...
Click to collapse
[SIZE=+1]READ THIS TOO: http://forum.xda-developers.com/showthread.php?t=1788313
It's for the Verizon S3, but it applies to all the carrier 4.3 updates[/SIZE]
I will add to this as more questions come up
I hope the above helps to clear up some confusion. Ask questions if you are still concerned and I will do my best to answer them.
is there any way to make this a sticky @kennyglass123
This is great information man!
http://i.imgur.com/qrByUGN.jpg
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
as of right now none.
elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
No way to remove bootloader Knox ATM.
I've seen several posts mention "tripping KNOX" or "voiding KNOX." What does that mean, exactly, regarding rooting a phone? Does it just mean it voids the warranty if you need to get support from Samsung/Sprint? Or are there other adverse effects?
Mostly just a visible warranty void.
Samsung bought crapple disease. So sad, but its my excuse to buy a nexus.
Sent from my SPH-L710 using xda app-developers app
As said above, a voided Knox is mostly just a highly visible warranty void. Your local Sprint store may or may not care, or the specific Samsung rep that you deal with may not care, but it's easier just to not have to deal with it to begin with.
Does this mean there is already a touchwiz 4.3 ROM we can flash or do we still have to wait?
Sent from my SPH-L710 using Tapatalk
The biggest thing here is the fact that there is no full tar file to restore. So even if you do not care about knox or warranty. If something goes wrong with a flash or anything else you can't use an older tar file let's say MD4 or LJ7 or anything because you will end up with a brick. There is nothing to use to ODIN restore your device. Once you go 4.3 with Knox you have to stay 4.3 and even if you wanted to stay 4.3 and wanted to restore that there is no tar file at this time.
Have a great day!
I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.
docnas said:
I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.
Click to expand...
Click to collapse
Late to the party. CNexus already has a update cooking.
Sent from my SPH-L710 using Tapatalk
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too
You = rock. Or some other awesome thing.
Sent from my SPH-L710 using xda app-developers app
CNexus said:
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too
Click to expand...
Click to collapse
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?
Edge-Case said:
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?
Click to expand...
Click to collapse
This would be a we-can't-update-the-bootloader thing lol. And we can't do that because it has Knox, which is Samsung's doing
This shouldn't affect any AOSP roms because it uses a different kernel and builds its own WiFi libs
docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
From what I've read Knox is Samsung's attempt to provide strong security to their phones for the enterprise customers. As you can imagine, allowing system level access to files can be used to get around a lot of security measures that IT people would like to enforce in their client's devices. It makes sense at the enterprise level, but it's a pain for anyone who want's to mod their phone.
So I think the answer to your question is, unless you are using your phone in a locked down corporate environment then there really is no advantage to Knox. Too bad it can't be turned off, at least not officially.
Because it's not very clear even after reading many xda Thread, and users have many problems withknox I deciced to gather informations about Knox.
1 :What is Knox?: http://omegadroid.co/wanted-knox-void-warranty-0x1/
All you wanted to know about KNOX Void Warranty 0×1
By tamirda • October 9, 2013
Screenshot_2013-02-25_11_35_AM
Recently, Samsung announced that her all new devices will get an Android 4.3 update that includes KNOX Security system. According to Samsung, these devices will get the update:
Samsung Galaxy S3
Samsyng Galaxy Note II
Samsung Galaxy S4
Samsung Galaxy Note 3 (already has KNOX Security system)
Most of the users don’t root their devices and use it normally and for them KNOX Security system is a great option.
But what happanes if we want to root our device?
Now the problem begins.
Normal(unrooted and so..) devices are flaged as KNOX Void Warranty 0×0 right from the factory.
When we flash items which weren’t signed by Samsung, it flags your device as KNOX Void Warranty 0×1.
According to Chainfire, KNOX status is indeed an eFuse. This means that even JTAG can not reset the KNOX status back to 0×0.
Some facts about KNOX status:
It isn’t possible to downgrade to KNOX-disabled firmwares/bootloaders (An attempt sets 0×1) (even though some people state, downgrade is possible when omitting the bootloader file in a firmware package). By downgrading from KNOX-enabled to KNOX-disabled firmware, your devices will be locked to installation of newer firmwares.
Let’s focus on that fact. As we mentioned above, Devices like S4, S3 and Note II which came without KNOX will get the KNOX system.For example, S4 I9505 got about a month ago 4.2.2 update that includes KNOX-enabled system(MH1). If you try to downgrade to KNOX-disabled system(MGA for example) your device will be flaged as KNOX Void Warranty 0×1 and will get a special lock – you won’t be able to update to any KNOX-enabled firmware even by ODIN. Samsung’s 4.3 update is KNOX-enabled, so if you tried to downgrade to KNOX-disabled firmware(for example MH8->MGA), you won’t be able to install 4.3 update.
This problem is only for devices which didn’t come with KNOX-enabled system from the factory(S4, S3 and Note 2)
Jeffery Butler confirmed this information:
FYI…Samsung told me that Knox warranty becomes 0×1(void) when the device with secured bootloader attempts to have non-secured bootloader. MH1 is the very first binary with secured bootloader. If MH1 is attempted to be downgraded to lower version(i.e. MGD) which has non-secured bootloader, then Knox warranty becomes void forever, and this means that the device can be used only for non-Knox device(no container can be created).
If you try to downgrade to KNOX-disabled firmware, you can’t install any new firmaware(that includes KNOX-enabled system) and use your device only with the old firmwares.
Even if you flash a KNOX-enabled firmware via odin (e.g. the latest fw) knox will be set to 0×1.
Flashing unsigned or modified images via odin will set knox to 0×1.
According to these two, flashing root/kernel/recovery/latest firmware by samsung/etc. will set KNOX status to 0×1.
Samsung stated, resetting the flag is impossible.
Chainfire confirmed that it is impossible to reset the flag.
KNOX is mandatory and can not be completely removed.
In custom roms we can remove KNOX apps, but the status remains 0×1.
Warranty Void is not a counter, it is a flag (0,1). We have never seen 0×2 or so.
Mirroring all partitions from a clean 0×0-Device to a 0×1-Device via JTAG produces an unfunctional device (reversible by restoring the 0×1 partitions on the phone).
Using JTAG or other repair tools to reset the flag is impossible.
KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the knox warranty.
Again, if we flash kernel/recovery/etc. we will void the warranty.
This si how 0×1 looks like:
2rn7beq.jpg
This is how 0×0 looks like:
attachment.php
I guess you are asking yourself now, what the hell 0×1 means?
If your device is flageed as 0×1. you should forget about your warranty.
Chainfire and other people confirmed that your can’t use your warranty:
Worse than that, I’ve also been hearing that service center instructions are indeed that devices with this status tripped will not receive any warranty repairs. (Of course, the action they take may still depend on the service center). Their excuse is that the hardware is damaged by the owner. Seems Samsung is catching up in scumbaggery to HTC, who years ago attributed my HTC Diamond’s screen damage (digitizer detached) to the installation of HSPL
To anyone in the know it is obvious that this doesn’t really fly, and the eFuse blowing (is this the hardware damage?) is intentionally done by the bootloader when unsigned software is loaded.
If you want to read the whole Chainfire’s statement, click here.
What is eFUSE? it’s a technology that allows reprogramming a read-only memory chip in real-time, even though such chips come with hard-coded code that cannot be generally changed after manufacturing.
When flashing unofficial software on the device, the status of the system and KNOX is switched to CUSTOM while increasing a binary flash counter, which helps Samsung find out whether the device has been tampered with. However, while Chainfire’s TriangleAway app has let users switch the status back to official and reset the flash counter until now, the KNOX status is based on eFUSE – basically, once you flash custom kernels or root the Note 3, the KNOX code gets rewritten, and this constitutes hardware damage.
Well, all I can say is think twice before you play with your Samsung device. If you don’t care about warranty, and you like custom roms and cool stuff just be aware of this information and continue with what you are doing.
Rajaasim1980 said:
KNOX is a new security system in official update of Android 4.3
on Samsung devices which prevents access to multiple applications when rooting your device and prevents the flash counter being reset to 0
Click to expand...
Click to collapse
theq86 said:
As you may already know, the latest Samsung firmwares came with a new secured bootloader. You can recognize it in download mode easily. It states: Knox warranty void: 0x0 or 0x1.
As for now, there is no way to reset that flag from 0x1 to 0x0.
Then I read in a comment of Chainfires post concerning that flag, that as long as you do not try to downgrade to a non secured bootloader, this flag will not change. He claims to have that information directly from Samsung.
https://plus.google.com/u/0/+Chainfire/posts
Has anyone already experience with rooting an "untouched" S4 which has the secured bootloader and can confirm or decline that?
- - - - - - - - - -
Conclusions and Facts about KNOX-enabled firmwares (based on statements from chainfires post and it's comments above, ans based on this thread)
Not possible to downgrade to KNOX-disabled firmwares/bootloaders (An attempt sets 0x1) (even though some people state, downgrade is possible when omitting the bootloader file in a firmware package: see http://forum.xda-developers.com/showthread.php?t=2444671, not confirmed)
Even if you flash a KNOX-enabled firmware via odin (e.g. the latest fw) knox will be set to 0x1
Flashing unsigned or modified images via odin will set knox to 0x1
Samsung stated, resetting the flag is impossible
KNOX is mandatory and can not be completely removed
Warranty Void is no counter, it is a flag (0,1) it was never seen 0x2 or so
Mirroring all partitions from a clean 0x0-Device to a 0x1-Device via JTAG produces an unfunctional device (reversible by restoring the 0x1 partitions on the phone)
KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the knox warranty
Assumptions on how KNOX flag in bootloader works:
Some experts think, an eFuse is involved. (http://en.wikipedia.org/wiki/EFUSE). An eFuse is mostly only incremential. Even unwriteable by low level tools or JTAG. But it is still not proven, that eFuse is used.
Knox technical information:
https://www.samsungknox.com/overview/technical-details
Click to expand...
Click to collapse
2: Can i downgrade the bootloader?
cosmyndemeter said:
from mj5 bootloader downgrade is possible, read this for newest than mj5 downgrade not possible!
do not try! you can brick your phone forever!!!
Click to expand...
Click to collapse
3:Can i install custom roms?
DeepankarS said:
You can do any customization on your phone like a normal phone, but customizing it means that you have triggered the KNOX counter to 1. Thus on a stock rom you can never use KNOX if KNOX reads 1.
FYI the MK4 (bootloader) or MJ9 (babseband version) has blocked installation of any custom roms on our n7100s via odin. You cannot even downgrade to 4.1.2 official via odin, So flashing via recoveries is the only way left.
And also it is recommended that you install custom roms via Philz/TWRP/CWM recoveries to flash custom roms and everything.
Hope the lil knowledge helped.
Click to expand...
Click to collapse
4 Can i root my note 2 with 4.3 knox?
Yes, but there are chances to trigger the KNOX counter to 1
yeminswe said:
4.3 root
http://forum.xda-developers.com/showthread.php?t=2540761
http://forum.xda-developers.com/showthread.php?t=2573576
>D
Click to expand...
Click to collapse
If you see any questions about knox, post here we will answer.
number 1 link is error,not found.
what about knox container ?
sora9009 said:
number 1 link is error,not found.
what about knox container ?
Click to expand...
Click to collapse
Link fixed.
Thanks
What about kernels?
Smack that thanks button if I helped!
Note 2 LTE powered by Illusion ROM and Plasma Kernel.
Sent from dat small country called Singapore.
P.S. replies with quotes will be replied to faster.
Irwenzhao said:
What about kernels?
Smack that thanks button if I helped!
Note 2 LTE powered by Illusion ROM and Plasma Kernel.
Sent from dat small country called Singapore.
P.S. replies with quotes will be replied to faster.
Click to expand...
Click to collapse
KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the knox warranty
Is there any way to get the knox back to 0 from 0x1????
Sent from my GT-I9500 using Tapatalk 4 - Hassan K. Malik
HassanM said:
Is there any way to get the knox back to 0 from 0x1????
Sent from my GT-I9500 using Tapatalk 4 - Hassan K. Malik
Click to expand...
Click to collapse
Not yet,although note 3 has been reported to somehow reverse it but that's just wishing too much.
singhpratik87 said:
Not yet,although note 3 has been reported to somehow reverse it but that's just wishing too much.
Click to expand...
Click to collapse
On the note 3 it's done by special bootloader leaked by sammy. The only chance for the note 2 is if note 2 bootloader is leaked. No other way.
Sent from my GT-N7100
I dont care about warranty , all i care that , if i installed a custom rom and the Knox bit is set to 0X1 and i want to get back to the stock , can i install Knox again or not ? because i like the knox idea
hazemsalah said:
I dont care about warranty , all i care that , if i installed a custom rom and the Knox bit is set to 0X1 and i want to get back to the stock , can i install Knox again or not ? because i like the knox idea
Click to expand...
Click to collapse
Once your counter goes to 1 no more Knox app , it can't be used anymore.
Sent from my GT-N7100
gregsarg post :
We have a fix....just not on xda....yet
Mobiletechvideos.com now offers a bootloader downgrade service for our devices. ..
The Knox flags can be reset quite easily according to them....
So if you want the old Knox free phone back....see below and get your anti-knox groove on....
See the product description tab in the middle of the page. ..g
http://mobiletechvideos.mybigcommerce.com/samsung-galaxy-note-2-bootloader-sboot-downgrade-service/
Hmmm it's kinda fishy , but could be true. So you send them your phone ? I don't get it. And all around is jtag heh
Sent from my GT-N7100
note2nooby said:
Hmmm it's kinda fishy , but could be true. So you send them your phone ? I don't get it. And all around is jtag heh
Sent from my GT-N7100
Click to expand...
Click to collapse
Nope i can't risk to send my phone (400 euro), but it looks like they have the solution.I send them mail to ask if i can pay for the file and instruvtions but no answer till now.They want 75 for the reset and 45 for express shipping end delivery.I told them that i am
agree to pay all the ammount for the file.
And one more thing-if i send them phone i can't be sure that they will reset it instead of just replacing MB and write my old IMEI e.t.c
gencho81 said:
Nope i can't risk to send my phone (400 euro), but it looks like they have the solution.I send them mail to ask if i can pay for the file and instruvtions but no answer till now.They want 75 for the reset and 45 for express shipping end delivery.I told them that i am
agree to pay all the ammount for the file.
And one more thing-if i send them phone i can't be sure that they will reset it instead of just replacing MB and write my old IMEI e.t.c
Click to expand...
Click to collapse
I'm quite sure they are using jtag and service bootloader. That's why they need the phone. It's not the same way like the exynos fix for note 3.
Sent from my GT-N7100
I-9192 official status again
i have installed a few weeks later a rooted rom from another forum, and triggered the knox to 0x01 (so i cant receive official updates from samsung)
but, today i needed to reset my phone to factory default, than i was curious to check the phone status, and for my surprise was "Official" again...
i read in various sites that the knox flag cannot be reverted... is that true?
the files i was used to root:
Odin 3.09
Kernel_root_I9192.tar
SuperSU_1.41.zip
the only bad thing is that i lost my root
anyone have the same result just reseting the phone?
thx and sorry for bad english
Soooo. As far as i know the knox wont get updates from Samsung and Block using knox app? And what features are lost from a triggered knox? I flashed the original firmware again and all its ok so far. Theres any blocked feature that o didnt realize?
Need help
I've a s4mini 19192 and today I flashed samsungs official KitKat update to my phone... I tried to root it like I rooted the 4.2.2 update... But can't do.... Then I decided to downgrade to the old version 4.2.2 but odin says can't.... And fails... Someone can help me?
Is it possible to check when the flag was triggered?
I was sold a GN3, in witch the KNOX flag was already set* and I'm trying to avoid a situation in witch the seller will say that I've set the flag.
* not checked beforehand - my mistake - but still I can return it or get a discount under the law
hello..just got the s4 mini dual sim 9192... 2 days back..i was on 4.2.2 indian firmware....checked download mode and it said knox 0*0...now i flashed the 4.4.2 firmware downloaded from sammobile via odin and when i recheck knox is gone....!!!!
just said binary and system which changed from official to custom once i rooted it with CF-root method(nothing else was working...saferoot/towelroot etc)..and as i seem to have read that flashing stock rom reverts these back to official...is it true?
and does this mean that my knox firmware phone has been converted to a non-knox one after kit kat upgrade?
please anyone let me know..thanks
@Fataz bro i have a few questions
I'm currently on FNE2 stock deodexded custom rom with a FNE2 bootloader, when i go download mode it says "KNOX WARRANTY VOID:1"
1 - Does this means Knox is tripped as 0x1
2- Can i install a stock firmware higher than FNE2 from sammobile via odin
GT-N7100 cihazımdan Tapatalk kullanılarak gönderildi
So I've read all over and I have gotten several different ideas of what KNOX is. What is it exactly does it prevent you from installing custom roms/recoveries? Is this the same for all phones/devices running KNOX?
Check here for more info:
http://www.samsung.com/global/business/mobile/solution/security/samsung-knox
Knox is Samsung proprietary security software ...designed to create a secure partition or "container" within the virtual space...
Designed primarily for corporate level use...the Knox container is used to contain email....messaging...and other secure applications that are considered private....and are generally chosen by Samsung...
For the average user...Knox is a security curse...locking a portion of the bootloader and flagging the device if any attempt is made to gain root access....effectively voiding the device warranty...
Samsung makes grand claims regarding this flag...and claims it is permanent and cannot be removed...
The flag signal indicates the secure container has been compromised...
Knox is a step to lure in lucrative contracts from entities like the U.S. Army...and large corporate entities that need secure devices....or for those entities which allow BYOD programs....
Knox enabled note 2 devices can be rooted...and software can easily be flashed....but currently there is no correction for a tripped Knox counter....
I hope this helps a bit....g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...
Knox
It's not fun for the average user. If your enterprise then sure but even then not good. I rooted and installed 4.4.2 once 4.3 hit my note 2... I did not like it. for whatever reason it was slower.... so anyways it took days to finally get samsung/knox out and omnirom in...
gregsarg said:
Knox is Samsung proprietary security software ...designed to create a secure partition or "container" within the virtual space...
Designed primarily for corporate level use...the Knox container is used to contain email....messaging...and other secure applications that are considered private....and are generally chosen by Samsung...
For the average user...Knox is a security curse...locking a portion of the bootloader and flagging the device if any attempt is made to gain root access....effectively voiding the device warranty...
Samsung makes grand claims regarding this flag...and claims it is permanent and cannot be removed...
The flag signal indicates the secure container has been compromised...
Knox is a step to lure in lucrative contracts from entities like the U.S. Army...and large corporate entities that need secure devices....or for those entities which allow BYOD programs....
Knox enabled note 2 devices can be rooted...and software can easily be flashed....but currently there is no correction for a tripped Knox counter....
I hope this helps a bit....g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...
Click to expand...
Click to collapse
thanks! that was a great summary
i'm glad i didn't jump on the 4.3 bandwagon
If you want even more details about Knox....
http://www.samsung.com/global/busin...er/2013/06/Samsung_KNOX_whitepaper_June-0.pdf
Just wondering... I run into problems rebooting my device with different non-stock ROMs - the boot animation freezes and the phone never actually boots up. I have to pull the battery and reboot - usually multiple times. Could KNOX have anything to do with this strange behavior?
It's a fort in Kentucky
PScales17 said:
Just wondering... I run into problems rebooting my device with different non-stock ROMs - the boot animation freezes and the phone never actually boots up. I have to pull the battery and reboot - usually multiple times. Could KNOX have anything to do with this strange behavior?
Click to expand...
Click to collapse
Not likely a Knox issue...
More likely you are having issues with the device being cleaned correctly before or after the flash process...
Additionally...if you took an official OTA to 4.3....you have a gimped bootloader which has given some users issues when dropping back to 4.1.xxx frameworks...(this issue is still being worked on)...
If you are flashing via Odin using full images....and do have a locked bootloader....the flash step will fail when attempting to flash a bootloader image...
Fully wipe the internal storage and your data, dalvik, and standard caches prior to flashing a new rom..but be sure to copy or backup and data or photos...music that you wish to keep ..( note...your IMEI AND EFS folder will not be deleted when using TWRP )
...and never dirty flash...
( unless told by the developer of the rom to do so )
over an existing rom..
Use TWRP recovery....version 2.6.3.1 for what I believe to be the best results...
Try the method...and if you continue to have issues....post a thread of your own in QA...g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...
gregsarg said:
Knox enabled note 2 devices can be rooted...and software can easily be flashed....but currently there is no correction for a tripped Knox counter....
.
Click to expand...
Click to collapse
So how do you do it? I keep getting security warnings when I try to install a bootloader. Is there a way to just get rid of this curse?
Edit: Never mind. I found an article on Droidviews.
So, I got a Note 2 a couple of weeks ago and it had 4.1.2 on it. I never updated it to 4.3 as I rooted and flashed kitkat/4.4.2/CM 11 on it immediately. If I flash a 4.3 ROM, will Knox be "installed" on it? Can I flash a 4.3 ROM just like normal?
You can flash any rom from this section...but a few require an updated 4.3 bootloader...
That is the leaked bootloader found in the dev section...
The problem comes if you take the OTA to 4.3...which installs the Knox bootloader ....g
Sent from my NOTE 2.750...
Courtesy of our amazing developers...
I've been "out of the loop" for quite some time and much has happened to Samsung devices since my last one (Samsung i9000). Basically it is the terror stories about this Knox security thing that mostly concern me and brought me here...
I mean I like this tablet, I trully do, but if I'm robbed by android's main advantage (modifying the thing to suit your needs) then I have absolutely no reason to choose this.
I have already read a a couple of stuff but they are all concerned about s4 and note 3. What about this tablet (the WiFi version), is it ... secured too? Also I'm a bit unclear of what this Knox thing achieves, at first it voids your warranty, second does not let you to flash certain ROMs, but I'm unclear from/on which ROMs this is enabled or even if merely rooting your device would enable this. I mean someone may not be interested in aosp ROMs but still love some "optimized stock + custom kernel" will this Knox thing prevent him even from that?
If this is proved an unmodifiable device I'd think twice for it's usefulness, android's only edge is its "modifiability" remove it and you buy sth 2nd or 3rd tier...
Stevethegreat said:
I've been "out of the loop" for quite some time and much has happened to Samsung devices since my last one (Samsung i9000). Basically it is the terror stories about this Knox security thing that mostly concern me and brought me here...
I mean I like this tablet, I trully do, but if I'm robbed by android's main advantage (modifying the thing to suit your needs) then I have absolutely no reason to choose this.
I have already read a a couple of stuff but they are all concerned about s4 and note 3. What about this tablet (the WiFi version), is it ... secured too? Also I'm a bit unclear of what this Knox thing achieves, at first it voids your warranty, second does not let you to flash certain ROMs, but I'm unclear from/on which ROMs this is enabled or even if merely rooting your device would enable this. I mean someone may not be interested in aosp ROMs but still love some "optimized stock + custom kernel" will this Knox thing prevent him even from that?
If this is proved an unmodifiable device I'd think twice for it's usefulness, android's only edge is its "modifiability" remove it and you buy sth 2nd or 3rd tier...
Click to expand...
Click to collapse
You can still root and modify things, however, Samsung has taken the stance that since Knox has been tripped you must've been running Custom firmware/apps that can "potentially" damage the hardware so all warranties (at least from Samsung) are void....
The other issue is Samsung are updating bootloaders when you install firmware updates. If you happen to get a new bootloader then you CAN'T go back to a lower version of firmware, period... Doing so generally results in bootloops or stuck on Samsung logo until you update to the newer firmware again...
The downside to this is the nandroid backup you took just before updating in case of a problem is rendered useless, and in the case of the Note 3, Kies no longer recognises the new bootloaders so emergency firmware restore doesn't work...
Knox also tries to deny any app root access, some messenger programs were denied access as their permissions required root access. SuperSu has been updated now to work with no problems, until Samsung decide to interfere again....
Knox is also a secure container for your data, it was meant for security agencies and such to have a secure passworded partition in the software that doesn't allow anyone but the person with the passcode to access it. This is disabled after rooting as the system has been modified and can no longer be deemed secure....
ultramag69 said:
You can still root and modify things, however, Samsung has taken the stance that since Knox has been tripped you must've been running Custom firmware/apps that can "potentially" damage the hardware so all warranties (at least from Samsung) are void....
The other issue is Samsung are updating bootloaders when you install firmware updates. If you happen to get a new bootloader then you CAN'T go back to a lower version of firmware, period... Doing so generally results in bootloops or stuck on Samsung logo until you update to the newer firmware again...
The downside to this is the nandroid backup you took just before updating in case of a problem is rendered useless, and in the case of the Note 3, Kies no longer recognises the new bootloaders so emergency firmware restore doesn't work...
Knox also tries to deny any app root access, some messenger programs were denied access as their permissions required root access. SuperSu has been updated now to work with no problems, until Samsung decide to interfere again....
Knox is also a secure container for your data, it was meant for security agencies and such to have a secure passworded partition in the software that doesn't allow anyone but the person with the passcode to access it. This is disabled after rooting as the system has been modified and can no longer be deemed secure....
Click to expand...
Click to collapse
So Knox is more about controlling your device than security as it is not optional (you cannot turn it off , right). Also about losing the warranty, well I was hoping to buy it from a reputable store in my country, even if Samsung voids my warranty can't the store itself honor it?
If not, if in fact merely rooting your device voids my warranty whatsoever than I'm most certain that this is not a device for me and I'm not sure for whom it is, I don't think android is a good os when decoupled from rooted apps (no xposed framework, no adblock, no virtual buttons, no gestures, no greenify), the experience is basically killed...
Even jail breaking your iPad doesn't kill the warranty as long as you install non jail broken iOS version on top... Bad Samsung, bad
OK, since I actually want to give this tablet a go I came up with a new idea. What if I trip up the Knox counter but then get back to stock firmware and *then* my tablet gets damaged? Would then my warranty be honored? The Knox counter can only tell you that it was tripped *once* but not what is/was happening at the time you got a defect.
Maybe my battery died, or more than a handful pixels died on me, all having nothing to do with me rooting my device at some point. Can my rooting still be grounds for samsung to dismiss my warranty? Because if so that is quite a scheme that Samsung runs.
Do any people had their warranty honored even though the Knox counter was tripped?
If you have a squaretrade warranty you should be fine with that excuse. However, Samsung will say that they cannot tell if the damaged occurred before or after the rooting occurred, thus denying you your warranty. Once the counter is tripped, from that point on the warranty is gone. My recommendation, get a squaretrade for 100 with a 2 year warranty and you will be fine.
Sent from my SM-P600 using Tapatalk