Develop Bugs

Clarifications about KNOX and the S3

AFAIK nobody has asked anything about KNOX on the T999, so I have a few things I want to know before updating my phone to 4.3.
I bought my phone off-contract at full price and its flash counter has already been incremented many times from rooting, so I obviously don't care about setting the "KNOX warranty void" flag either, nor the enterprise-grade security features KNOX provides.
However, there is a rumor that once the KNOX warranty void flag is set to 0x1 you can't upgrade the ROM anymore, not even via Odin. Is this actually true? I know you can't OTA unless you're stock, but I don't care about OTA since I'd just upgrade via Odin anyways. But the fact you can't even upgrade via Odin seems a bit far-fetched.
Another variant of this rumor that seems more believable is that updating to a KNOX-enabled ROM also updates the bootloader to a KNOX-enabled variant, and that you can't upgrade to new KNOX-enabled ROMs if you decide to downgrade to a non-KNOX ROM after the bootloader has been updated. But if I never downgrade, can I continue to install updates, assuming Samsung releases ROMs for the S3 after 4.3?
Can anyone shed some light on this?

I somehow can't trust the first one. However the second one sounds more plausible. Anyway doc Holliday has removed KNOX from the most recent leaked Stock Rom. So this question becomes moot really.

Perseus71 said:
I somehow can't trust the first one.
Click to expand...
Click to collapse
Which is exactly why I asked this. I just wanted some more opinion.
Perseus71 said:
Anyway doc Holliday has removed KNOX from the most recent leaked Stock Rom.
Click to expand...
Click to collapse
And does this also mean that the bootloader isn't KNOX-enabled?

jim45 said:
Which is exactly why I asked this. I just wanted some more opinion.
And does this also mean that the bootloader isn't KNOX-enabled?
Click to expand...
Click to collapse
I don't think so. I flashed that Leak to test out the features. Afterwards flashed back my regular AOSP Rom.
NOTE - With the Leak, some reported that the Bootloader didn't get updated. I explicitly asked as well. If you are concerned with Knox'd Bootloader, you can Flash back UVDMD5 Bootloader too!

Here's what I know so far.
First, we do not have to worry about the Knox counter. One of my sources sent me a pic of their download mode and it was not there.
Second, I have reliable doubts that our official release will NOT include Knox. It's only included now for ease of using the same builds across multiple devices during internal testing.
Third, the bootloader is not included in any of the leaks. I do have a copy of it and have been considering releasing a recovery flashable firmware update, but haven't decided yet if I want to do this.
One of my sources ran into a problem at one point and soft bricked. Samsung simply connected remotely and flashed the firmware via Odin.
As for not being able to downgrade or flash certain things, I do not think this is the case at all. If you do something Knox doesn't like, it will lock down the secure containers it uses and you will not be able to regain access. I do not belie e it will restrict you from flashing something else, old or new, firmware or Rom, etc.
There is still a lot I do not know about it, but the information is out there. I stopped putting time into it when I found we probably won't need to worry about it anyway.
A quick Google search will net you more info, but if you really want an education on it I'd suggest visiting the S4 and Note3 forums. S4 users have been dealing with Knox longer than anyone, and the Note3 is the first device to ship with it fully implemented.
Sent from my SGH-T999 using Tapatalk

[FAQ] KNOX and you

[SIZE=+1]There seems to be a lot of confusion and misunderstanding circling the forums with regards to Knox and the 4.3 OTA.
This is an attempt to clear things up[/SIZE]
UPDATE: It seems that people can find this thread, but are unable to actually READ the information presented. The most important note here is that if you are on 4.3 firmware, you can flash ANY rom you like. No, you are not tied down or locked into stock only or 4.3 roms only. AOSP roms will work fine as well. Now scroll down and READ EVERYTHING IN THIS FIRST POST.
What is Knox? Knox is both a firmware and a software component. The OS has Knox apps, and the MK3 bootloader has a Knox component too. Having Knox apps does not necessarily mean you have the Knox bootloader, or vice-versa.
How does Knox work? Because Knox is both in the OS (apps) and in the firmware (bootloader) it works in two ways. The OS components prevent attempts to obtain root access and make rooting with these Knox apps a pain in the butt. Fortunately they can be removed. In the firmware component (bootloader), Knox works to prevent the flashing of custom kernels and recoveries. If you flash a custom rom or custom recovery WHILE on the Knox bootloader, your Knox flag will be tripped and your Warranty Bit will go from 0x0 to 0x1. The Knox bootloader cannot be downgraded to, say, the MD4 bootloader because of special protections built into it. If you attempt to downgrade it, your phone will instantly brick.
Can I get root on the Knox-enabled update? Yes. For those of us who DID NOT take the official OTA and DO NOT have the Knox bootloader, we can get root on 4.3 by injecting it and removing the Knox apps. For those WITH the Knox bootloader, you will need to wait until a full stock MK3 tar is available, which we can then use to make an Odin-flashable MK3 stock rom with root injected using the de-la-vega root method.
Can I downgrade while on 4.3? You can flash roms no matter what Android version they are. That is perfectly fine. But you cannot downgrade the bootloader if you have the Knox bootloader, or else it will cause your bootloader to become corrupted and give you a fancy paperweight. Again, for those who DO NOT have the Knox bootloader, you needn't worry about this/downgrading firmware since the Knox bootloader is what prevents you from doing this. Downgrading your bootloader includes: attempting to flash full stock tar of software versions < MK3, etc.
How can I tell if I've got the Knox bootloader?
Boot into download mode (through custom reboot menu, or by powering off then holding Power+Home+VolumeDown and then VolUp when prompted). If you see a line that starts with the following, then you've got the Knox bootloader. I will insert a picture showing how it actually looks soon
Warranty Bit:
Click to expand...
Click to collapse
[SIZE=+1]READ THIS TOO: http://forum.xda-developers.com/showthread.php?t=1788313
It's for the Verizon S3, but it applies to all the carrier 4.3 updates[/SIZE]
I will add to this as more questions come up
I hope the above helps to clear up some confusion. Ask questions if you are still concerned and I will do my best to answer them.

is there any way to make this a sticky @kennyglass123

This is great information man!
http://i.imgur.com/qrByUGN.jpg

[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?

elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
as of right now none.

elephant007 said:
[Q] For now, once you have Knox you'll always have knox? What's the possibility of removing Knox?
Click to expand...
Click to collapse
No way to remove bootloader Knox ATM.

I've seen several posts mention "tripping KNOX" or "voiding KNOX." What does that mean, exactly, regarding rooting a phone? Does it just mean it voids the warranty if you need to get support from Samsung/Sprint? Or are there other adverse effects?

Mostly just a visible warranty void.

Samsung bought crapple disease. So sad, but its my excuse to buy a nexus.
Sent from my SPH-L710 using xda app-developers app

As said above, a voided Knox is mostly just a highly visible warranty void. Your local Sprint store may or may not care, or the specific Samsung rep that you deal with may not care, but it's easier just to not have to deal with it to begin with.

Does this mean there is already a touchwiz 4.3 ROM we can flash or do we still have to wait?
Sent from my SPH-L710 using Tapatalk

The biggest thing here is the fact that there is no full tar file to restore. So even if you do not care about knox or warranty. If something goes wrong with a flash or anything else you can't use an older tar file let's say MD4 or LJ7 or anything because you will end up with a brick. There is nothing to use to ODIN restore your device. Once you go 4.3 with Knox you have to stay 4.3 and even if you wanted to stay 4.3 and wanted to restore that there is no tar file at this time.
Have a great day!

I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.

docnas said:
I have a question I think we talked a bit about the problems the knox bootloader brings into the system. My question is the opposite what does it fix / change?
Im thinking along the lines of somebody modding the update so an old bootloader would be with the new rom would that be an issue? I think i remember hearing something about wifi being the problem but any clarification would be nice.
Click to expand...
Click to collapse
Late to the party. CNexus already has a update cooking.
Sent from my SPH-L710 using Tapatalk

the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)

docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too

You = rock. Or some other awesome thing.
Sent from my SPH-L710 using xda app-developers app

CNexus said:
Right now, wifi is broken with the old bootloader and 4.3 rom...happened on the other devices too (tmo s3 and sprint s4)
But there is a fix: flash at&t kernel. But it messes up screen rotation. So i'm trying to come up with another fix that will let wifi turn on properly and let screen rotation work properly too
Click to expand...
Click to collapse
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?

Edge-Case said:
So is this Knox a Sprint thing, or a Samsung thing?
I can understand the reasoning for Knox(money) but, dang, I guess it's a dog eat dog world out there.
This doesn't affect CyanogenMod does it? I'm scared...
edit... I remember reading about a brick api or command, I never executed it, sounds nasty, is this what they use to brick peoples phones if they try to "hack" it?
Click to expand...
Click to collapse
This would be a we-can't-update-the-bootloader thing lol. And we can't do that because it has Knox, which is Samsung's doing
This shouldn't affect any AOSP roms because it uses a different kernel and builds its own WiFi libs

docnas said:
the question im trying to ask is what do we lose if we use the old bootloader? any functionality? (besides the knox security bull$hit)
Click to expand...
Click to collapse
From what I've read Knox is Samsung's attempt to provide strong security to their phones for the enterprise customers. As you can imagine, allowing system level access to files can be used to get around a lot of security measures that IT people would like to enforce in their client's devices. It makes sense at the enterprise level, but it's a pain for anyone who want's to mod their phone.
So I think the answer to your question is, unless you are using your phone in a locked down corporate environment then there really is no advantage to Knox. Too bad it can't be turned off, at least not officially.

4.3 Update for T-Mobile M919 ~ DO NOT UPDATE IF...

T-Mobile finally pushed the 4.3 update earlier today but DO NOT UPDATE YOUR PHONE IF YOU WANT TO KEEP YOUR ROOT! It comes with a locked bootloader. Therefore, once you are on 4.3 stock, you can only flash stock firmwares then. If you try to root your phone on 4.3 with the standard method, it will blow your efuse and void your warranty!
AGAIN, DO NOT UPDATE 4.3 VIA OTA OR ODIN IF YOU DON'T WANT TO VOID YOUR WARRANTY. IF YOU HAVE NO PROBLEM WITH THAT, FEEL FREE TO UPDATE
Info on KNOX:
Hawke84 said:
What we know so far (I think!)
1. Upgrading to newer Samsung firmware will upgrade the bootloader to knox bootloader. this will give an additional 2 lines in download mode about knox status.
2. If the Knox warranty void line says 0x1 then you cannot use knox softwareas your device has been flagged as insecure. By this i mean that if your workplace / company supports bring your own device to work for corporate emails etc and they use knox to keep security your device will not allow this. You are still able to use future samsung firmware releases with the knox flag 0x1. hope this makes sense. sorry for any confusion this has caused!
3. If the knox warranty line says 0x0 knox will work.
4. with the new knox bootloader root will work, however rooting with CFautorootwill trip the knox flag. thanks @DjeMBeY for correcting this point you can use the root method (Root de la Vega) described here for rooting a device with knox bootloader.
5. If you try to downgrade to earlier firmware / bootloader it will set the knox flag to 0x1 i.e. void.
6. once the knox flag gets set to 0x1 there is no way to set it back (that anyone has found yet anyway!)
7. some newer 4.2.2 software that's supplied with the knox bootloader has been repacked by devs to not use the new bootloader and it all works fine you can still keep up to date.
8. I've seen people trying the test build of 4.3 touchwiz without the new knox bootloader sound and wifi does not work. This is no longer the case, see point 12.
9. There seems to be a big question mark as to weather Samsung will allow hardware repairs under warranty with the knox 0x1 flag
10. only seems to affect GT-i9505 at the moment!
11. Software affected thanks to @DjeMBeY
12. it is now possible to install custom 4.3 TW roms which have been modified to work without the new knox bootloader, do make sure that they are free from knox bootloader before flashing. Do note also that if you already have knox bootloader flashing anything even these 4.3 custom roms will still trip your 0x1 flag
Click to expand...
Click to collapse
Credit: http://forum.xda-developers.com/showthread.php?t=2470635
Thanks to @Mr Impossible @Jamison904 @jovy23 and everyone else!

DO NOT FLASH MODEMS/BASEBAND EITHER..... does not let u make phone calls on the leaked 4.3 tw version..... or the regular 4.2.2 version and like some1 said 4.4..... not sure if it works on the official 4.3 tw released today since no dev has released a rom of it... so do not flash if u need to make or receive phone calls makes ur phone freeze and wont make the actual call
richardmkovach said:
Same here. Have tried GPE 4.3, stock 4.2.2, and international 4.3 TW. Phone freezes when trying to make a phone call.
Click to expand...
Click to collapse
Mr Impossible said:
Anyone taking the OTA or Odin the new firmware will be sorry they did. Modem is also tied to the bootloader somehow as was the i9505 and won't work without the bootloader. Seems to be more security in this also. More to come...
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse
If you already flashed the new modem and want to get back to MDL to make phone calls lol here it is
bogdi1988 said:
http://forum.xda-developers.com/showthread.php?t=2282342
Click to expand...
Click to collapse

I dont think it comes with a lock bootloader but more of with new knox flash counter.

gypsy214 said:
I dont think it comes with a lock bootloader but more of with new knox flash counter.
Click to expand...
Click to collapse
Is already confirmed that it comes with LOCKED bootloaded

Along w/ no calls, does it include breaking sound?

gypsy214 said:
I dont think it comes with a lock bootloader but more of with new knox flash counter.
Click to expand...
Click to collapse
All Samsung bootloaders have been locked after MH8. This is part of Knox security.
Sent from my SGH-M919 using Tapatalk

gdmlaz said:
DO NOT FLASH MODEMS/BASEBAND EITHER..... does not let u make phone calls on the leaked 4.3 tw version..... or the regular 4.2.2 version and like some1 said 4.4..... not sure if it works on the official 4.3 tw released today since no dev has released a rom of it... so do not flash if u need to make or receive phone calls makes ur phone freeze and wont make the actual call
Click to expand...
Click to collapse
Thats sucks. Thanks for the heads up. I was thinking of flashing the kernel with a 4.3 9505 rom.
How about doing that?
---------- Post added at 03:17 PM ---------- Previous post was at 03:14 PM ----------
Mr Impossible said:
All Samsung bootloaders have been locked after MH8. This is part of Knox security.
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse
So lock bootloader like on Att and verizon? I think samsung will loose a lot of business in the near future

This seems to be the problem
Mr Impossible said:
Anyone taking the OTA or Odin the new firmware will be sorry they did. Modem is also tied to the bootloader somehow as was the i9505 and won't work without the bootloader. Seems to be more security in this also. More to come...
Sent from my SGH-M919 using Tapatalk
Click to expand...
Click to collapse

@jovy23 flashed the OTA and now cannot Odin a custom recovery nor revert to MDL. Odin fails every time. I have a locked Verizon S4 I bought for testing (not much good that did) this is the exact same thing I fought weeks to brake.. Nothing. It is locked.

gdmlaz said:
This seems to be the problem
Click to expand...
Click to collapse
Thats sucks. I hope people on XDA will read before they make a mistake

http://forum.xda-developers.com/showthread.php?t=2324667
There is a Odin tar for T-Mobile MDL modem here. If you didn't take the OTA but Odin the modem you "should" be OK with this. Be sure to thank the OP of that thread!

I just wanted to throw this out there... I had the stock ROM but rooted. Did my update through Kies fine. My data stayed intact. However, as some others have reported, I lost my root. Now I'm not sure how to get it back. I've seen mention of rooting it another method will void my warranty but I can't find info on how that's done.

Jamison904 said:
http://forum.xda-developers.com/showthread.php?t=2324667
There is a Odin tar for T-Mobile MDL modem here. If you didn't take the OTA but Odin the modem you "should" be OK with this. Be sure to thank the OP of that thread!
Click to expand...
Click to collapse
Thanks dude. I was to the point that I didnt cared if my knox counter was stripped but now with lock bootloader plus lock modem it seems useless. Samsung is trying really hard to keep it lock.

gypsy214 said:
Thanks dude. I was to the point that I didnt cared if my knox counter was stripped but now with lock bootloader plus lock modem it seems useless. Samsung is trying really hard to keep it lock.
Click to expand...
Click to collapse
They are just trying to be more like Apple how they have been trying to avoid Jailbreak. Samsung is trying to avoid root. #DumbF**ks

Tunasty said:
They are just trying to be more like Apple how they have been trying to avoid Jailbreak. Samsung is trying to avoid root. #DumbF**ks
Click to expand...
Click to collapse
if that is the case I will not buy any more Samsung.. that is why I bought the tmobile version even though I am on At&t .. total bs.

Tunasty said:
They are just trying to be more like Apple how they have been trying to avoid Jailbreak. Samsung is trying to avoid root. #DumbF**ks
Click to expand...
Click to collapse
Exactly my point. Ive been saying it all along. Trying to become evil apple lol. It sucks for them. I dont know if I will be buying any other samsung device in the future

lgkahn said:
if that is theh case I will not buy any more Samsung.. that is why I bought the tmobile version even though I am on At&t .. total bs.
Click to expand...
Click to collapse
Same here man. Using M919 (T-Mobile) device on AT&T.

Tunasty said:
Same here man. Using M919 (T-Mobile) device on AT&T.
Click to expand...
Click to collapse
htc locks bootloaders too... does LG?

Thanks for the heads up. New to the S4 since some 3 weeks ago, and this is definitely not good news.

lgkahn said:
htc locks bootloaders too... does LG?
Click to expand...
Click to collapse
The only difference is that HTC gives you the option to unlock boooader on htcdev.com
Lg in the other hand they just dont give out any source code

Features lost when Rooting?

I asked in one of the root threads and didn't get a reply. From looking through the existing threads I understand that you lose samsung pay and the hidden folder feature. I can live with those but is there any other features lost when unlocking the bootloader?
1.) Once knox is tripped will features be lost forever or start working again once tablet is returned to stock?
2.) Still shows as widevine L1? Any loss in resolution from an streaming apps (youtube, netflix, amazon prime, youtube tv)?
3.) Any other apps or features not working?

1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. Back then, I did this installing a custom recovery called TWRP. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock recovery can't "unblow" a fuse.
2. Not sure about this one, sorry.
3. In my experience, rooting broke only those apps that relied on Knox. But I suppose these days more apps are likely to detect if they're running on a rooted device and refuse to run. That would account for the popularity of tools like Magisk that try to hide the root state from apps.
After I moved away from those devices (S7 Edge and Tab S3 were next in my history), I abandoned the rooting game. Not sure the value is worth the cost anymore.
EDIT: There are apparently ways to root without flashing a custom recovery -- this was news to me, and shows how long I've not been playing the rooting game, heh.

SteveRiley said:
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock can't "unblow" a fuse.
2. Not sure about this one, sorry.
3. In my experience, rooting broke only those apps that relied on Knox. But I suppose these days more apps are likely to detect if they're running on a rooted device and refuse to run. That would account for the popularity of tools like Magisk that try to hide the root state from apps.
After I moved away from those devices (S7 Edge and Tab S3 were next in my history), I abandoned the rooting game. Not sure the value is worth the cost anymore.
Click to expand...
Click to collapse
Thanks for the reply. Yeah I have rooted my samsung devices in the past as well but I believe the last one I did was my note 4 as well but I don't remember widevine being a thing back then or at least I didn't care. Of all the features I am concerned about that. Don't really care about the other samsung features save for maybe dex but I don't think that is affected. Can anyone rooted confirm if they still have widevine? Is any legit premium video app like netflix or youtube tv affected? My oneplus 7 pro had widevine downgraded I believe when the bootloader unlocked which was annoying.

SteveRiley said:
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock can't "unblow" a fuse
Click to expand...
Click to collapse
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.

jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
Click to expand...
Click to collapse
Hey, this is interesting news! I just might take the plunge, then. Thanks for making me smarter.
EDIT. See conversation here: https://forum.xda-developers.com/galaxy-tab-s7/how-to/guide-unlock-tab-s7-bootloader-t4158841
Confirmed that unlocking the boot loader and rooting with modified firmware does trip Knox. Magisk can try to conceal this bypass some security checks, but not always successfully.
jhill110 said:
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made.
Click to expand...
Click to collapse
100% agree. Once upon a time a Galaxy Note was not just a Galaxy S with a stylus. Alas, it appears Samsung is diligently heading away from what made the Note a distinctive device.

SteveRiley said:
Hey, this is interesting news! I just might take the plunge, then. Thanks for making me smarter.
100% agree. Once upon a time a Galaxy Note was not just a Galaxy S with a stylus. Alas, it appears Samsung is diligently heading away from what made the Note a distinctive device.
Click to expand...
Click to collapse
I thought the knox tripped when you unlock the bootloader, don't you need to do this even if you root your device without installing twrp?

mikedavo said:
I thought the knox tripped when you unlock the bootloader, don't you need to do this even if you root your device without installing twrp?
Click to expand...
Click to collapse
Yes you do need to unlock the bootloader to root your device... But that doesn't trip knox.

Rooting with magisk will definitely trip knox, even without TWRP.

jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
Click to expand...
Click to collapse
Can anyone else confirm this?

smartymcfly said:
Can anyone else confirm this?
Click to expand...
Click to collapse
You loose warranty once device is rooted. No matter if with SuperSU or magisk. Root is root

Cindysmith0994 said:
Rooting with magisk will definitely trip knox, even without TWRP.
Click to expand...
Click to collapse
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?

jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
Click to expand...
Click to collapse
Can you make an instruction? Thanks

umibuzu said:
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
Click to expand...
Click to collapse
You lose L1 once the BL is unlocked though. So kiss goodbye HD on netflix and such on the ts7+ which is beneficial.

EugenStanis said:
You loose warranty once device is rooted. No matter if with SuperSU or magisk. Root is root
Click to expand...
Click to collapse
Did you see the picture in the post that was quoted?
It shows as rooted and knox efuse intact. So the warranty would still be good as long as it doesn't trip the efuse.
Look at the picture before telling me a generic answer. I already know that when the excuse is blown the warranty is lost. How do they have root without tripping the efuse?

This is the picture I am referring to.

See conversation here: https://forum.xda-developers.com/galaxy-tab-s7/how-to/guide-unlock-tab-s7-bootloader-t4158841
Confirmed that unlocking the boot loader and rooting with modified firmware does trip Knox. Magisk can try to conceal this bypass some security checks, but not always successfully.

smartymcfly said:
Can anyone else confirm this?
Click to expand...
Click to collapse
hes wrong

umibuzu said:
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
Click to expand...
Click to collapse
unlpcking bootloader alone doesnt trip knox but as soon as u flash any custom firmware i.e. disabled vbmeta, twrp, magisk etc. then it will trip knox.
theres thousands of threads on xda alone about tripped knox and what works n doesnt work so id go n look for urself before anything..
and usually it will break ota updates but can depend on device etc. but ull likely have to update via odin

Jedi.Tester said:
Can you make an instruction? Thanks
Click to expand...
Click to collapse
hes wrong

bs3pro said:
You lose L1 once the BL is unlocked though. So kiss goodbye HD on netflix and such on the ts7+ which is beneficial.
Click to expand...
Click to collapse
dunno what L1 is but unlocking by itself doesnt trio knox, its custom firmware that trips it.. basically anything u do after unlocking lol
and netflix can still work.. its trivial for netflix

help/info about samsung rooting

hello everyone,
I have and use android phones last 10+ years, always rooted. But I never had samsung phone.
Now I hear only half informations from my buddy, that its dangeous to root samsung because of knox (i dunno what knox even is).
So, now I'm thinking to buy S20 and want to root it, and my question is..:
If I root it, is anything ''broken'' on the phone ? Can phone still recieve official Samsung OTA updates?
What are minuses? what to look for? What about this "knox"?
Please need informaions

Well, I've owned a couple of Samsung devices over the years and I guess I can speak a bit from experience. Here's what you should know:
1.- U.S. phones have their bootloaders locked, so avoid buying a U.S. variant if you want to root it (some people want them for their Snapdragon chips)
2.- Knox is an e-fuse in the phone motherboard. Once you trip it by flashing custom software (root it), then that fuse will be tripped forever. You cannot get your Knox your status back to official unless you change the motherboard. Even flashing stock firmware will never get you this back to official.
3.- A lot of Samsung's security apps check for this fuse and will refuse to work if they detect that you've tripped it. Samsung Pay, Pass, Secure Folder are just some examples of features that will stop working when they detect a tripped Knox fuse. Some of these have bypass with root, but some don't.
4.- You will not get OTA updates with an unlocked bootloader, let alone root. It IS possible to get them back but only after flashing stock firmware and blocking the bootloader. These don't seem to check for Knox.

Understood, Thank You alot for informations and help!

ShaDisNX255 said:
Well, I've owned a couple of Samsung devices over the years and I guess I can speak a bit from experience. Here's what you should know:
1.- U.S. phones have their bootloaders locked, so avoid buying a U.S. variant if you want to root it (some people want them for their Snapdragon chips)
2.- Knox is an e-fuse in the phone motherboard. Once you trip it by flashing custom software (root it), then that fuse will be tripped forever. You cannot get your Knox your status back to official unless you change the motherboard. Even flashing stock firmware will never get you this back to official.
3.- A lot of Samsung's security apps check for this fuse and will refuse to work if they detect that you've tripped it. Samsung Pay, Pass, Secure Folder are just some examples of features that will stop working when they detect a tripped Knox fuse. Some of these have bypass with root, but some don't.
4.- You will not get OTA updates with an unlocked bootloader, let alone root. It IS possible to get them back but only after flashing stock firmware and blocking the bootloader. These don't seem to check for Knox.
Click to expand...
Click to collapse
Hiiii. I currently have a Samsung S20 and I have rooted it before. Once you root it Knox security will be tripped and you will not be able to get it back. This means you will lose access to apps like Samsung Pay, Samsung Pass and Samsung Health. You will not receive OTA updates if you're rooted, but if you flash stock firmware again and lock the bootloader you can start receiving updates again. I currently have a custom ROM installed and I have my ROM rooted. To me, it's been a great experience overall. I didn't really use the Knox features, so I didn't care much about losing it. I have loved rooting my S20 and using a custom ROM !!

victoriam8a said:
Hiiii. I currently have a Samsung S20 and I have rooted it before. Once you root it Knox security will be tripped and you will not be able to get it back. This means you will lose access to apps like Samsung Pay, Samsung Pass and Samsung Health. You will not receive OTA updates if you're rooted, but if you flash stock firmware again and lock the bootloader you can start receiving updates again. I currently have a custom ROM installed and I have my ROM rooted. To me, it's been a great experience overall. I didn't really use the Knox features, so I didn't care much about losing it. I have loved rooting my S20 and using a custom ROM !!
Click to expand...
Click to collapse
Actually you can use Samsung Health, just currently no version above 6.19 (2 versions behind current) until we find a way to patch it...i use it daily with my Watch 4 on Rooted S20+ 5G....

73sydney said:
Actually you can use Samsung Health, just currently no version above 6.19 (2 versions behind current) until we find a way to patch it...i use it daily with my Watch 4 on Rooted S20+ 5G....
Click to expand...
Click to collapse
Ohh okay !!! Thank you for letting us know !! I don't use Samsung Health so I had not tested it myself, but I had heard that Samsung Health doesn't work with root. Thanks for telling us it works fine !!

so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?

maxis123 said:
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
Click to expand...
Click to collapse
Yeah you can flash updates with something like Odin (never used Kies myself, I don't know if it still works)

maxis123 said:
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
Click to expand...
Click to collapse
ODIN
Flash HOME CSC if you want to keep your data