Related
After seeing many people ask questions about Knox on a regular basis about what they can or can't do, I have decided to create this thread that will hopefully make things clear for those searching information about Knox on our devices.
So first things first.
What exactly is Knox?
Information about Knox
Knox allows people to use their device on a secure business (work) network. It allows the data which belongs to the business to be encrypted per DoD standards. Once the Knox/warranty bit is tripped, you can no longer use this service because it proves the device has been tampered with. You can imagine how much simpler it would be to manipulate this service without the restrictions Samsung had to enforce in order to protect sensitive data. This is the main reason I believe the Knox bootloader was added and why root access, once gained, is still limited in some cases. There is also claims that a tripped warranty bit means your warranty will be void, but I have not seen any cases where people have been denied warranty. However it is better to play it safe than sorry if you really do care about warranty.
Wikipedia sums it up pretty nicely.
Knox on Wikipedia
Click to expand...
Click to collapse
F.A.Q
Q. I have Knox firmware on my device, can I still root, flash custom roms, and kernels?
A. Yes, yes you can. Procedure is the same as it has always been. If you have questions search the forum or ask in this thread. Your Knox counter may trip doing any of this so continue to next FAQ for info.
Click to expand...
Click to collapse
Q. What will trip my Knox counter?
Flashing custom recovery or kernels will trip Knox counter, so avoid them at all costs if you want or need to keep that counter at 0x0. Some root methods will also trip this counter, keep reading if you want to avoid this.
Click to expand...
Click to collapse
My Knox counter is tripped, how can I reset it?
Once tripped, the counter CANNOT be reset.
Click to expand...
Click to collapse
Q. How can I root and not trip Knox?
We can currently use the TowelRoot method by geohot for 4.3 and 4.4.2. Follow link below to thread. It does NOT work on 4.4.4
TowelRoot
Click to expand...
Click to collapse
Q. How can I downgrade my firmware?
You cannot and Odin will fail at any attempt to do so. Do not try to bypass this and try to downgrade another way, you run a high risk of bricking you device! This applies to any device that has been officially updated from 4.3 and up from OTA, Odin, or Kies. If you must downgrade for any reason, flash an older rom in custom recovery only. That is the only way to downgrade. Knox Bootloader will not and cannot be removed, so learn how to get along with it.
Click to expand...
Click to collapse
Q. How can I avoid bricking my device? I have seen people say flashing will brick anything with Knox bootloader.
Do not flash firmware for other devices. Do that and you will be okay. On some devices you can flash other firmwares, if you have questions about this you can ask in this thread.
Click to expand...
Click to collapse
Q. Will tripping the Knox counter void my warranty?
As I stated earlier, there have been cases of people successfully filing insurance claims on their devices. However if you really care about warranty, you may want to avoid tripping this counter to be on the safe side.
Click to expand...
Click to collapse
Q. I see an odd message when I start up my device and it says something about SEAndroid kernel not enforcing, what is this and how do I fix it?
It is normal, you either flashed a custom kernel or custom rom with modified kernel. Do not let it bother you but if you flash back the stock unmodified kernel it will disappear. There is also the possibility you performed an unsupported root method and your device is bootlooping, if this is the case, then flash back to stock firmware with Odin to fix and use an updated root method like TowelRoot
Click to expand...
Click to collapse
And if you have any questions feel free to ask
Nice work bro. Should answer a lot of questions for folks.
Haters Made Me Famous
Deviant Team Member
Forgot to reserve, but mine! I'll use this in case Sammy changes something in the next version of android
Never know
And if you have any questions feel free to ask
Click to expand...
Click to collapse
Thanks for this post!
After rooting using TowelRoot, should you install SuperSU or some other su?
Sizzlechest said:
After rooting using TowelRoot, should you install SuperSU or some other su?
Click to expand...
Click to collapse
SuperSu from the Play Store
The Sickness said:
SuperSu from the Play Store
Click to expand...
Click to collapse
Thanks! It won't trip Knox, right?
Sizzlechest said:
Thanks! It won't trip Knox, right?
Click to expand...
Click to collapse
Nope, perfectly safe
Sizzlechest said:
Thanks! It won't trip Knox, right?
Click to expand...
Click to collapse
A custom recovery or kernel trips Knox
Good. It prompts you to disable Knox, so I thought that might trip it.
I need help with update
Sorry people, it has been many years that I have been on here. I just got the s4, rooted using the SU method (not towel) and it shows 0x1 for knox.
When I try to go to my software update it says, your devise had been modied and cannot be updated.
please help
It's having root that is keeping you from updating. Not tripping Knox.
I'd download the latest firmware. From sammobile or shinyside's links. And use Odin to flash.
Anyway to flash or odin a custom os with a stock kernel and recovery without tripping knox? Mabey a modified official tar? Just replace system, etc?
lordodin912 said:
Anyway to flash or odin a custom os with a stock kernel and recovery without tripping knox? Mabey a modified official tar? Just replace system, etc?
Click to expand...
Click to collapse
It might be possible but I don't know the procedure. I imagine it must be very unconventional, otherwise we would see it very often
Thanks, SEAndroid kernel not enforcing worried me.
Hmmmmmm wish I were a bit more fluent in this area.....itd be nice if you could just replace/repackage the tar file....then mabey id get off MDL....just read something about repacking tar files for odin and apparently you cant pull and repackage the system without breaking the signature (of the system) therefore odin wont flash....but imma noob in this area. If anyones got any info, please share
noobieneedshelp said:
Sorry people, it has no been many years that I have been on here. I just got the s4, rooted using the SU method (not towel) and it shows 0x1 for knox.
When I try to go to my software update it says, your devise had been modied and cannot be updated.
please help
Click to expand...
Click to collapse
Use this to go back to stock and fix Knox then root again with towelroot method.
http://forum.xda-developers.com/showthread.php?t=2336392
http://forum.xda-developers.com/galaxy-s4-tmobile/general/root-nb4-knox-0x0-t2802185
Thanks for the info!
Just for clarity: What does having a tripped Knox bit mean? Just that the phone has been tampered with and possibly voiding the warranty?
Legioss199 said:
Thanks for the info!
Just for clarity: What does having a tripped Knox bit mean? Just that the phone has been tampered with and possibly voiding the warranty?
Click to expand...
Click to collapse
Yes, and it also means you can no longer use the Knox service.
is there any successful bootloader unlocking method and rooting available for this phone?
DrPras said:
is there any successful bootloader unlocking method and rooting available for this phone?
Click to expand...
Click to collapse
Theoretically, the method to root the S10/S10+/S10e should work on the S10 Lite too. The stock firmware is already available via Frija/SamFirm, or you can download it from databases like SamFrew.com, SamMobile.com, etc.
DJBhardwaj said:
Theoretically, the method to root the S10/S10+/S10e should work on the S10 Lite too. The stock firmware is already available via Frija/SamFirm, or you can download it from databases like SamFrew.com, SamMobile.com, etc.
Click to expand...
Click to collapse
Anyone has tried this?
ammarwajihi said:
Anyone has tried this?
Click to expand...
Click to collapse
It may or may not work.
Theoretically, since the S10 Lite comes with an SD SoC, there could be two ways to do it.
1) By patching the AP firmware file using Magisk Manager, and then flashing the patched boot (along with other partitions BL, CP, and CSC) via Odin.
2) By flashing the Magisk zip via TWRP. But since TWRP isn't available, that's a no go (for now).
DJBhardwaj said:
It may or may not work.
Theoretically, since the S10 Lite comes with an SD SoC, there could be two ways to do it.
1) By patching the AP firmware file using Magisk Manager, and then flashing the patched boot (along with other partitions BL, CP, and CSC) via Odin.
2) By flashing the Magisk zip via TWRP. But since TWRP isn't available, that's a no go (for now).
Click to expand...
Click to collapse
Okay, thanks.
ammarwajihi said:
Okay, thanks.
Click to expand...
Click to collapse
For twrp....you first need to unlock bootloader....
DJBhardwaj said:
It may or may not work.
Theoretically, since the S10 Lite comes with an SD SoC, there could be two ways to do it.
1) By patching the AP firmware file using Magisk Manager, and then flashing the patched boot (along with other partitions BL, CP, and CSC) via Odin.
2) By flashing the Magisk zip via TWRP. But since TWRP isn't available, that's a no go (for now).
Click to expand...
Click to collapse
Need to unlock bootloader for installing TWRP..and about the first method...its workable in theory...but still no one tried yet...
DrPras said:
Need to unlock bootloader for installing TWRP..and about the first method...its workable in theory...but still no one tried yet...
Click to expand...
Click to collapse
Yup
DrPras said:
Need to unlock bootloader for installing TWRP..and about the first method...its workable in theory...but still no one tried yet...
Click to expand...
Click to collapse
For either method, an unlocked bootloader is a must.
And yes, I think that could be done by enabling the OEM unlocking toggle in Developer Options. Topjohnwu already has it covered in his installation guide here.
Keep me updated I plan to purchase this phone
Is there any rooting method without tripping knox yet?
Apart from that, I think sth's gonna change when S20 comes. Maybe someone makes a twrp and stock rom from S20.
Did someone root it successfully?
Good morning,
had somone tried the unlock idea from galaxy A71?
Both devices have a snapdragon.
https://www.getdroidtips.com/unlock-bootloader-galaxy-s10-lite/
Here is a method root
Galaxy s10 lite. If anyone try, inform.
https://www.getdroidtips.com/how-to-root-samsung-galaxy-s10-lite-using-magisk-no-twrp-needed/
Root is possible, it's done by an XDA member.
He'll post soon enough more surprises
w41ru5 said:
Root is possible, it's done by an XDA member.
He'll post soon enough more surprises
Click to expand...
Click to collapse
I'm about to buy this phone. Please keep me posted
A Galaxy S10e needs to be rooted for a persion with disability
Hi
many apps that help disabled people use their phones need root access. Is there an easy way to root a S10e? it is a SM-G970U1
Thank you for your time
Josh
joshuawwilson said:
Hi
many apps that help disabled people use their phones need root access. Is there an easy way to root a S10e? it is a SM-G970U1
Thank you for your time
Josh
Click to expand...
Click to collapse
The G970U version has a SnapDragon CPU platform which is impossible to be rooted due to locked bootloader.
Samsung doesn't care about a minority.
Root confirmed and done! You can find more details in my post:
https://forum.xda-developers.com/galaxy-s10-lite/how-to/root-magisk-successful-help-t4095119
sir mere pass samsung s10 lite hai lekin oem option pr click nhi ho raha hai kya kru
DJBhardwaj said:
Theoretically, the method to root the S10/S10+/S10e should work on the S10 Lite too. The stock firmware is already available via Frija/SamFirm, or you can download it from databases like SamFrew.com, SamMobile.com, etc.[/QUOTE
Click to expand...
Click to collapse
Hi , Kindly post files for Unlocking bootloader and twrp with magisk root with guide
Thanks in advance
Yes we need too. XDA developers please consider our request
Yes please we need unlock bootloader for f62.
Uh.... Did any one try this... Never tried myself cuz I'm concerned about the warranty issues
How To Unlock Samsung Galaxy F62 Bootloader - NaldoTech
In this tutorial, you will learn how to unlock the bootloader on the Samsung Galaxy F62 (SM-E625F). A bootloader is a piece of code that runs before the
www.naldotech.com
rushi12565 said:
Uh.... Did any one try this... Never tried myself cuz I'm concerned about the warranty issues
How To Unlock Samsung Galaxy F62 Bootloader - NaldoTech
In this tutorial, you will learn how to unlock the bootloader on the Samsung Galaxy F62 (SM-E625F). A bootloader is a piece of code that runs before the
www.naldotech.com
Click to expand...
Click to collapse
Already tried not working
rahulvishva said:
Already tried not working
Click to expand...
Click to collapse
Oh OK never tried myself so I just asked abt it lol...... Hope someone figures it out
Basically, it has Knox I won't suggest trying but enabling OEM unlocking in developer options unlocks the bootloader.
Sahil_Sonar said:
Basically, it has Knox I won't suggest trying but enabling OEM unlocking in developer options unlocks the bootloader.
Click to expand...
Click to collapse
Try but Not working ..
rahulvish4va said:
Try but Not working ..
Click to expand...
Click to collapse
Yes, I also wanted to give a try but for safe we should have all files backup as og working stock rom with odin tool so that we can take risk to proceed with unlock bootloader and rooting. Currently this phone is new in market so may be some time need to get all the correct files for this Model
rahulvish4va said:
Try but Not working ..
Click to expand...
Click to collapse
It is working, first enable OEM unlocking. Then go into download mode (it is a little tricky, but this video works for the phone-:
. Then hold volume up and wait. I had to wait around 5 minutes but then it rebooted and started the setup.
Then I installed Magisk without TWRP. By downloading the file from samsungs servers directly. Setting the region to INS and setting the ROM info to the latest update. Then I decrypted and extracted it and sent the TAR file of the boot to Magisk app. Magisk app modified it to allow for root. Then I took the modified image file and then used Odin to flash it.
The instructions in the NaldoTech website work fine, it is just not very clear because of all the different links for everything and not having one page for the whole process.
Nishant9272 said:
Yes, I also wanted to give a try but for safe we should have all files backup as og working stock rom with odin tool so that we can take risk to proceed with unlock bootloader and rooting. Currently this phone is new in market so may be some time need to get all the correct files for this Model
Click to expand...
Click to collapse
The ROM files can be directly accessed from Samsung's servers using tools like samloader. There are no TWRP files (IDK how that works yet) but you can install magisk without TWRP.
PreKirt said:
The ROM files can be directly accessed from Samsung's servers using tools like samloader. There are no TWRP files (IDK how that works yet) but you can install magisk without TWRP.
Click to expand...
Click to collapse
have you successfully installed magisk? and magisk modules are working? i
PreKirt said:
The ROM files can be directly accessed from Samsung's servers using tools like samloader. There are no TWRP files (IDK how that works yet) but you can install magisk without TWRP.
Click to expand...
Click to collapse
tried , didnt work for me
it is giving me vbmeta error
bloodcypher said:
have you successfully installed magisk? and magisk modules are working? i
Click to expand...
Click to collapse
yes
PreKirt said:
yes
Click to expand...
Click to collapse
It gave me vbmeta error in M62
Successfully rooted with this guide.
How To Root Samsung Galaxy M62 with Magisk (Detailed Guide) - NaldoTech
If you like to customize your Samsung Galaxy M62 (SM-M625F) and have complete control over its firmware, then the first thing you should do is root it. You
www.naldotech.com
nasif69 said:
Successfully rooted with this guide.
How To Root Samsung Galaxy M62 with Magisk (Detailed Guide) - NaldoTech
If you like to customize your Samsung Galaxy M62 (SM-M625F) and have complete control over its firmware, then the first thing you should do is root it. You
www.naldotech.com
Click to expand...
Click to collapse
Thank you for the details
you got root?
Nishant9272 said:
Hi , Kindly post files for Unlocking bootloader and twrp with magisk root with guide
Thanks in advance
Click to expand...
Click to collapse
I have a method for rooting samsung f62.
I have f62 with root, see this proof.
bilal sayeed said:
I have a method for rooting samsung f62.
I have f62 with root, see this proof.
Click to expand...
Click to collapse
Can u share all ur file to root this phone?
I have a question, if i relock the bootloader (assuming i should flash stock recovery and ROM first), will knox security be back to normal? Or that's it, once unlocked, i'll never be able to lets say use Samsung Pay again?
Pupet_Master said:
I have a question, if i relock the bootloader (assuming i should flash stock recovery and ROM first), will knox security be back to normal? Or that's it, once unlocked, i'll never be able to lets say use Samsung Pay again?
Click to expand...
Click to collapse
Once you trip knox you can't get it back and therefore Samsung won't work ever again.
ShaDisNX255 said:
Once you trip knox you can't get it back and therefore Samsung won't work ever again.
Click to expand...
Click to collapse
Thanks m8.
hello
please looking for information
if I make adb oem unlock, and later I change my mind and want locked back to factory state, can I lock it myself? How?
Also if i root with magisk, will knox be tripped? Can I then wipe phone and reinstall stock firmware non-rooted and everything will be fine again?
Just wondering, wanna try custom roms and stuff, but want to be able to get phone to factory working state afer all that.. Looking for informations please
maxis123 said:
hello
please looking for information
if I make adb oem unlock,
Click to expand...
Click to collapse
This isn't a thing. There is an OEM Unlocking toggle in Developer Options that can be enabled; once this is done, the bootloader can be unlocked.
maxis123 said:
and later I change my mind and want locked back to factory state, can I lock it myself? How?
Click to expand...
Click to collapse
Yes, you can relock the bootloader, just make sure you flash back to factory firmware. Locking the bootloader on custom firmware can brick your device.
maxis123 said:
Also if i root with magisk, will knox be tripped?
Click to expand...
Click to collapse
Yes. Any custom or modified firmware image will trip Knox. This includes Magisk patches and TWRP.
maxis123 said:
Can I then wipe phone and reinstall stock firmware non-rooted and everything will be fine again?
Click to expand...
Click to collapse
You can re-lock the bootloader as I described above, but once Knox is tripped, it will be tripped forever and cannot be reset.
maxis123 said:
Just wondering, wanna try custom roms and stuff, but want to be able to get phone to factory working state afer all that.. Looking for informations please
Click to expand...
Click to collapse
It's sorta a one-way trip. Although you can flash back to stock and relock the bootloader, Samsung security features won't work if Knox is tripped. This means you won't be able to use Samsung Pay or other apps that depend on Knox.
if by rooting i wil trip knox and later i cant get phone to factory state with knox not tripped , then im afraid that rooting samsung is a no option for me...thanks for replys
if I unlock BL and root, after that is it possible to get device to factory state aagain? with knox not tripped .