Develop Bugs

Is it possible to have root while also having a locked bootloader?

I really want to use Android Pay but I'm not able to unless I have a locked bootloader. But then I will also lose root in the process. Anytime I reflash TWRP then lock the bootloader, it will just bootloop. Can someone help me please?

To use android pay you can flash magisk. AP should works fine with unlocked bootloader and root.

Wuzimu said:
To use android pay you can flash magisk. AP should works fine with unlocked bootloader and root.
Click to expand...
Click to collapse
How does that work though? Does it trick AP into thinking that the bootloader is locked or...

I can't check if Android Pay works because my country does not support it, but it should work because my device passes SafetyNet with unlocked bootloader.
First you need an unrooted rom with franco kernel, because franco kernel hides the unlocked bootloader from SafetyNet.
2. Install Rootswitch and reboot into TWRP.
3. Install SuperSU in systemless mode.
4. Reboot into Android and disable root in the Rootswitch App.
5. Android Pay should work now.

vipelp said:
I can't check if Android Pay works because my country does not support it, but it should work because my device passes SafetyNet with unlocked bootloader.
First you need an unrooted rom with franco kernel, because franco kernel hides the unlocked bootloader from SafetyNet.
2. Install Rootswitch and reboot into TWRP.
3. Install SuperSU in systemless mode.
4. Reboot into Android and disable root in the Rootswitch App.
5. Android Pay should work now.
Click to expand...
Click to collapse
I still get the "cant be used on this device error" even after following these instructions. I'm starting to wonder if root is even worth it.

SafetyNet check w/ unlocked bootloader?

So i have the Sprint variant and TWRP / rooted so i could SIM unlock the phone. Now I did a Flashall.bat with stock Sprint 8.0.0 image and then did an OTA update to latest build. So I am assuming I am stock with Sprint factory image and factory recovery but my bootloader is still unlocked and I am NOT rooted (SuperSU / Magisk or otherwise). I am not passing SafetyNet check and thus cannot DL Netflix, use Google Pay, banking app complaining. I have a few questions:
Whats the least painful or suggested route to this? I'm assuming SafetyNet fail is due to unlocked bootloader
If I relock the bootloader will this erase data similar to unlocking does?
I read that flashing a custom kernel will fix this by not tripping a Safetynet Flag but what other effects does this do? Will it break OTA?
I do not want to root because I would like to continue receiving OTA updates.
Thanks in advance!

If you relock bootloader safetynet will pass and OTA will work

Marcowe said:
If you relock bootloader safetynet will pass and OTA will work
Click to expand...
Click to collapse
Yeah but does relocking the bootloader on our phones wipe data (factory reset)?
I ask because I heard it does on some Android phones.
Thanks for the reply!

jeffritz1 said:
Yeah but does relocking the bootloader on our phones wipe data (factory reset)?
I ask because I heard it does on some Android phones.
Thanks for the reply!
Click to expand...
Click to collapse
Relocking the bootloader will erase everything, that is the same for all phones with unlockable bootloaders. Magisk hides your unlocked bootloader and helps you pass safety-net while rooted with magisk.
Sent from my Moto Z (2) using XDA Labs

skywalker-live said:
Relocking the bootloader will erase everything, that is the same for all phones with unlockable bootloaders. Magisk hides your unlocked bootloader and helps you pass safety-net while rooted with magisk.
Click to expand...
Click to collapse
Got it. But Magisk means goodbye OTA's correct?

jeffritz1 said:
Got it. But Magisk means goodbye OTA's correct?
Click to expand...
Click to collapse
Correct

Anyway to not wipe data, still accept OTA's, and pass SafetyNet?

jeffritz1 said:
Anyway to not wipe data, still accept OTA's, and pass SafetyNet?
Click to expand...
Click to collapse
You could boot twrp and flash pantheon. When you want to ota, just flash stock boot img and you can get ota again. Pantheon hides the flags in cmdline that make you fail safetynet. (In your case, the bootloader lock status flag). You could do the same with magisk though as well, you would just have to do a no wipe flash all when you want an ota. (Edit the .bat to not wipe user data)

Magisk installation

Hi guys so my question is can we patch a boot.img with magisk and flash it using odin without breaking knox?

Modification of system, recovery or boot in any way will trip Knox as it checks the integrity of all partitions on boot.
The only thing you can get away with at best is unlocking of the bootloader.

t3chg33k said:
Modification of system, recovery or boot in any way will trip Knox as it checks the integrity of all partitions on boot.
The only thing you can get away with at best is unlocking of the bootloader.
Click to expand...
Click to collapse
Its a good and bad news mate thanks ?

Relock the Bootloader

I have a question, if i relock the bootloader (assuming i should flash stock recovery and ROM first), will knox security be back to normal? Or that's it, once unlocked, i'll never be able to lets say use Samsung Pay again?

Pupet_Master said:
I have a question, if i relock the bootloader (assuming i should flash stock recovery and ROM first), will knox security be back to normal? Or that's it, once unlocked, i'll never be able to lets say use Samsung Pay again?
Click to expand...
Click to collapse
Once you trip knox you can't get it back and therefore Samsung won't work ever again.

ShaDisNX255 said:
Once you trip knox you can't get it back and therefore Samsung won't work ever again.
Click to expand...
Click to collapse
Thanks m8.

root/unlock information

hello
please looking for information
if I make adb oem unlock, and later I change my mind and want locked back to factory state, can I lock it myself? How?
Also if i root with magisk, will knox be tripped? Can I then wipe phone and reinstall stock firmware non-rooted and everything will be fine again?
Just wondering, wanna try custom roms and stuff, but want to be able to get phone to factory working state afer all that.. Looking for informations please

maxis123 said:
hello
please looking for information
if I make adb oem unlock,
Click to expand...
Click to collapse
This isn't a thing. There is an OEM Unlocking toggle in Developer Options that can be enabled; once this is done, the bootloader can be unlocked.
maxis123 said:
and later I change my mind and want locked back to factory state, can I lock it myself? How?
Click to expand...
Click to collapse
Yes, you can relock the bootloader, just make sure you flash back to factory firmware. Locking the bootloader on custom firmware can brick your device.
maxis123 said:
Also if i root with magisk, will knox be tripped?
Click to expand...
Click to collapse
Yes. Any custom or modified firmware image will trip Knox. This includes Magisk patches and TWRP.
maxis123 said:
Can I then wipe phone and reinstall stock firmware non-rooted and everything will be fine again?
Click to expand...
Click to collapse
You can re-lock the bootloader as I described above, but once Knox is tripped, it will be tripped forever and cannot be reset.
maxis123 said:
Just wondering, wanna try custom roms and stuff, but want to be able to get phone to factory working state afer all that.. Looking for informations please
Click to expand...
Click to collapse
It's sorta a one-way trip. Although you can flash back to stock and relock the bootloader, Samsung security features won't work if Knox is tripped. This means you won't be able to use Samsung Pay or other apps that depend on Knox.

if by rooting i wil trip knox and later i cant get phone to factory state with knox not tripped , then im afraid that rooting samsung is a no option for me...thanks for replys

if I unlock BL and root, after that is it possible to get device to factory state aagain? with knox not tripped .