Related
Guys want to ask .. on new Samsung galaxy phones (e.g., say s8) exynos version.. if I want to unlock the bootloader does that trip knox? Is it possible to 'hide' using magisk?
Afaik In newer implementations, Knox is hardware fuse. So if it's blown it would be theoretically impossible to hide it ... That's what's I want to confirm. With a blown Knox। .. many things wouldnt work just like safteynet dependent stuff if it's not green.
E.g., Samsung pay, secure apps like enterprise email etc
Also if that's what's going to happen for s9, then we can't flash a fully working treble image can we
candiesdoodle said:
Guys want to ask .. on new Samsung galaxy phones (e.g., say s8) exynos version.. if I want to unlock the bootloader does that trip knox? Is it possible to 'hide' using magisk?
Afaik In newer implementations, Knox is hardware fuse. So if it's blown it would be theoretically impossible to hide it ... That's what's I want to confirm. With a blown Knox। .. many things wouldnt work just like safteynet dependent stuff if it's not green.
E.g., Samsung pay, secure apps like enterprise email etc
Also if that's what's going to happen for s9, then we can't flash a fully working treble image can we
Click to expand...
Click to collapse
Unlocking the BL in this case will not trip knox no.
sent from my Pixel 2 XL or Note FE
force70 said:
Unlocking the BL in this case will not trip knox no.
sent from my Pixel 2 XL or Note FE
Click to expand...
Click to collapse
If all you are going to do is unlock the bootloader - no, knox won't trip - (unlocking the bootloader is just really flipping the OEM switch in Developer Settings) However, if you flash Magisk or TWRP or anything other than a stock rom - YES you will trip knox.
Geekser said:
If all you are going to do is unlock the bootloader - no, knox won't trip - (unlocking the bootloader is just really flipping the OEM switch in Developer Settings) However, if you flash Magisk or TWRP or anything other than a stock rom - YES you will trip knox.
Click to expand...
Click to collapse
Well yes thats a given of course and everyone who has ever had a sammy device should know this by now!
force70 said:
Well yes thats a given of course and everyone who has ever had a sammy device should know this by now!
Click to expand...
Click to collapse
Right but if you read the op's initial question - it looked like he was asking if he could unlock bootloader and install magisk and still have the ability to use programs that rely on Knox -(Samsung pay for example) and obviously the answer is no - but your initial answer didn't go far enough to answering his question which is why I jumped in with more details - didn't mean to imply that you didn't know that - was trying to get the OP the answer he was asking for -even if he wouldn't like what it was.
Thanks for the info guys.
I am not a Sammy user so obviously I don't know
I am considering the s9 at this stage
So a follow up question, if you may help pls
Unlocked bootloader only, unrooted = knox intact
Unlocked botoloader, rooted = Knox blown
Unlocked bootloader, custom ROM unrooted = what's the status here?
Pardon my ignorance on this pls.
candiesdoodle said:
Thanks for the info guys.
I am not a Sammy user so obviously I don't know
I am considering the s9 at this stage
So a follow up question, if you may help pls
Unlocked bootloader only, unrooted = knox intact
Unlocked botoloader, rooted = Knox blown
Unlocked bootloader, custom ROM unrooted = what's the status here?
Pardon my ignorance on this pls.
Click to expand...
Click to collapse
Unlocked bootloader only, unrooted = Knox intact
Unlocked bootloader, rooted = Knox blown
Unlocked bootloader, custom ROM unrooted = Knox blown (To install custom ROMs, you need to flash TWRP which will trip Knox.)
KiraYamatoSD said:
Unlocked bootloader only, unrooted = Knox intact
Unlocked bootloader, rooted = Knox blown
Unlocked bootloader, custom ROM unrooted = Knox blown (To install custom ROMs, you need to flash TWRP which will trip Knox.)
Click to expand...
Click to collapse
V interesting
So why would anyone unlock the bootloader if there's nothing that can be done which is not reversible
So basically anything after unlocking bootloader is a one way street as far as Knox is concerned
I do not need Knox, I never even asked about this useless feature !!
candiesdoodle said:
V interesting
So why would anyone unlock the bootloader if there's nothing that can be done which is not reversible
So basically anything after unlocking bootloader is a one way street as far as Knox is concerned
Click to expand...
Click to collapse
Because most ppl ( I said most not all) here on xda dont care about a useless stupid feature like knox. Also the same holds true for pay, secure folder, s health etc
sent from my Pixel 2 XL or Note FE
candiesdoodle said:
V interesting
So why would anyone unlock the bootloader if there's nothing that can be done which is not reversible
So basically anything after unlocking bootloader is a one way street as far as Knox is concerned
Click to expand...
Click to collapse
Go look at the cross device development for the S8 & S8+. There are more ROMs for the S8 than there are for the Pixel (XL), or Pixel 2 (XL). That is why we root, why we flash, and why we dont care about knox.
x111 said:
I do not need Knox, I never even asked about this useless feature !!
Click to expand...
Click to collapse
Replace the word knox with warranty.
peachpuff said:
Replace the word knox with warranty.
Click to expand...
Click to collapse
What is this warranty thing you speak of lol?
sent from my Pixel 2 XL or Note FE
shiftr182 said:
Go look at the cross device development for the S8 & S8+. There are more ROMs for the S8 than there are for the Pixel (XL), or Pixel 2 (XL). That is why we root, why we flash, and why we dont care about knox.
Click to expand...
Click to collapse
talk about AOSP roms. The roms for s8 are just taking existing Samsung roms and deodexing, removing apps etc from them.
munchy_cool said:
talk about AOSP roms. The roms for s8 are just taking existing Samsung roms and deodexing, removing apps etc from them.
Click to expand...
Click to collapse
Well, the ROMS for the google devices are just AOSP ROMs with some mods added to them, likewise, the ROMs for the S8 are just Samsung ROMs with mods added to them. I bought a Samsung, and do not expect an AOSP ROM to run on it, and if I had a Pixel I wouldn't expect a Samsung ROM to work on it. I went to S8 after a 6P and Pixel XL.
shiftr182 said:
Well, the ROMS for the google devices are just AOSP ROMs with some mods added to them, likewise, the ROMs for the S8 are just Samsung ROMs with mods added to them. I bought a Samsung, and do not expect an AOSP ROM to run on it, and if I had a Pixel I wouldn't expect a Samsung ROM to work on it. I went to S8 after a 6P and Pixel XL.
Click to expand...
Click to collapse
https://www.androidauthority.com/project-treble-818225/
Samsung merges AOSP into their rom for updates. The main issue are drivers (these being in kernel OR userspace like rild, gpsd, ...), the rest of the rom needs to be able to communicate with them. That's what LineageOS devs spend most time working on. Treble supposedly enforces using stable APIs for all the drivers things. Basically, like Windows and other OSes, which is a good thing.
This also means it might be a lot easier to port roms from pixel to S9, or lineage os to s9. But.. we'll see how it is in practice in a few month from now. I'm sure it won't be as smooth as we'd want, not by a long shot lol.
With regard to the OEM unlock. I have had to go through the initial set up 3 times. This is because I have, in developer settings, switched the OEM unlock on each time.
When rebooting I get a message regarding security and the phone then automatically wipes itself.
This time I am leaving alone.
I remember from my old Samsung rooting days that Samsung phones had a tamper flag, so even if you restored to stock they would know that you rooted/how many times etc. Does the razer phone have a similar thing? Reason I ask is I have been used to OnePlus phones where it doesn't void your warranty to root and now I have the razer phone (loving it too!) - don't mind rooting it if I can flash stock and lock bootloader and no one knows the difference (for warranty etc!)
manor7777 said:
I remember from my old Samsung rooting days that Samsung phones had a tamper flag, so even if you restored to stock they would know that you rooted/how many times etc. Does the razer phone have a similar thing? Reason I ask is I have been used to OnePlus phones where it doesn't void your warranty to root and now I have the razer phone (loving it too!) - don't mind rooting it if I can flash stock and lock bootloader and no one knows the difference (for warranty etc!)
Click to expand...
Click to collapse
As far as I can tell, no. I originally had my phone rooted and running Magisk and I reverted back to stock and relocked the bootloader to do an RMA because my screen had developed a group of dead pixels. They accepted the RMA and sent me a replacement device after I put it back to stock.
For real? Dam
ThatGuy94 said:
As far as I can tell, no. I originally had my phone rooted and running Magisk and I reverted back to stock and relocked the bootloader to do an RMA because my screen had developed a group of dead pixels. They accepted the RMA and sent me a replacement device after I put it back to stock.
Click to expand...
Click to collapse
Ah awesome. You in the UK? Got my phone with 3 and Debranded it to get the 8.1 update earlier - I have the insurance for it anyway so no matter what I do to it, it should be covered really - Also sorry for the slow reply... Busy busy! Now to wait for some ROMs to show up, or a Magisk image I can flash that's 8.1 compatible!
I asked in one of the root threads and didn't get a reply. From looking through the existing threads I understand that you lose samsung pay and the hidden folder feature. I can live with those but is there any other features lost when unlocking the bootloader?
1.) Once knox is tripped will features be lost forever or start working again once tablet is returned to stock?
2.) Still shows as widevine L1? Any loss in resolution from an streaming apps (youtube, netflix, amazon prime, youtube tv)?
3.) Any other apps or features not working?
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. Back then, I did this installing a custom recovery called TWRP. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock recovery can't "unblow" a fuse.
2. Not sure about this one, sorry.
3. In my experience, rooting broke only those apps that relied on Knox. But I suppose these days more apps are likely to detect if they're running on a rooted device and refuse to run. That would account for the popularity of tools like Magisk that try to hide the root state from apps.
After I moved away from those devices (S7 Edge and Tab S3 were next in my history), I abandoned the rooting game. Not sure the value is worth the cost anymore.
EDIT: There are apparently ways to root without flashing a custom recovery -- this was news to me, and shows how long I've not been playing the rooting game, heh.
SteveRiley said:
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock can't "unblow" a fuse.
2. Not sure about this one, sorry.
3. In my experience, rooting broke only those apps that relied on Knox. But I suppose these days more apps are likely to detect if they're running on a rooted device and refuse to run. That would account for the popularity of tools like Magisk that try to hide the root state from apps.
After I moved away from those devices (S7 Edge and Tab S3 were next in my history), I abandoned the rooting game. Not sure the value is worth the cost anymore.
Click to expand...
Click to collapse
Thanks for the reply. Yeah I have rooted my samsung devices in the past as well but I believe the last one I did was my note 4 as well but I don't remember widevine being a thing back then or at least I didn't care. Of all the features I am concerned about that. Don't really care about the other samsung features save for maybe dex but I don't think that is affected. Can anyone rooted confirm if they still have widevine? Is any legit premium video app like netflix or youtube tv affected? My oneplus 7 pro had widevine downgraded I believe when the bootloader unlocked which was annoying.
SteveRiley said:
1. I rooted my Note 4 phone and Note Pro 12.2 tablet some years ago. This blows an e-fuse on the main board, which prohibits Knox from working forever. Flashing back to stock can't "unblow" a fuse
Click to expand...
Click to collapse
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
Click to expand...
Click to collapse
Hey, this is interesting news! I just might take the plunge, then. Thanks for making me smarter.
EDIT. See conversation here: https://forum.xda-developers.com/galaxy-tab-s7/how-to/guide-unlock-tab-s7-bootloader-t4158841
Confirmed that unlocking the boot loader and rooting with modified firmware does trip Knox. Magisk can try to conceal this bypass some security checks, but not always successfully.
jhill110 said:
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made.
Click to expand...
Click to collapse
100% agree. Once upon a time a Galaxy Note was not just a Galaxy S with a stylus. Alas, it appears Samsung is diligently heading away from what made the Note a distinctive device.
SteveRiley said:
Hey, this is interesting news! I just might take the plunge, then. Thanks for making me smarter.
100% agree. Once upon a time a Galaxy Note was not just a Galaxy S with a stylus. Alas, it appears Samsung is diligently heading away from what made the Note a distinctive device.
Click to expand...
Click to collapse
I thought the knox tripped when you unlock the bootloader, don't you need to do this even if you root your device without installing twrp?
mikedavo said:
I thought the knox tripped when you unlock the bootloader, don't you need to do this even if you root your device without installing twrp?
Click to expand...
Click to collapse
Yes you do need to unlock the bootloader to root your device... But that doesn't trip knox.
Rooting with magisk will definitely trip knox, even without TWRP.
jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
Click to expand...
Click to collapse
Can anyone else confirm this?
smartymcfly said:
Can anyone else confirm this?
Click to expand...
Click to collapse
You loose warranty once device is rooted. No matter if with SuperSU or magisk. Root is root
Cindysmith0994 said:
Rooting with magisk will definitely trip knox, even without TWRP.
Click to expand...
Click to collapse
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
jhill110 said:
That's not quite true these days.
Using Magisk to root doesn't "blow the e fuse".
Rooting without installing TWRP will keep the warranty status 0x0 which is valid.
BTW: Netflix ect. Works just fine.
It's nice to see old Note 4 guyz around. I was very active in the sprint Note 4 forums years ago. IMO that was the very best phone samsung ever made. @tx_dbs_tx was a mad man of a developer for that device.
Click to expand...
Click to collapse
Can you make an instruction? Thanks
umibuzu said:
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
Click to expand...
Click to collapse
You lose L1 once the BL is unlocked though. So kiss goodbye HD on netflix and such on the ts7+ which is beneficial.
EugenStanis said:
You loose warranty once device is rooted. No matter if with SuperSU or magisk. Root is root
Click to expand...
Click to collapse
Did you see the picture in the post that was quoted?
It shows as rooted and knox efuse intact. So the warranty would still be good as long as it doesn't trip the efuse.
Look at the picture before telling me a generic answer. I already know that when the excuse is blown the warranty is lost. How do they have root without tripping the efuse?
This is the picture I am referring to.
See conversation here: https://forum.xda-developers.com/galaxy-tab-s7/how-to/guide-unlock-tab-s7-bootloader-t4158841
Confirmed that unlocking the boot loader and rooting with modified firmware does trip Knox. Magisk can try to conceal this bypass some security checks, but not always successfully.
smartymcfly said:
Can anyone else confirm this?
Click to expand...
Click to collapse
hes wrong
umibuzu said:
Is it sure? Even without TWRP?
By the way, knox is really important for personal use? I will still able to encrypt my tab? And update it without problem?
Click to expand...
Click to collapse
unlpcking bootloader alone doesnt trip knox but as soon as u flash any custom firmware i.e. disabled vbmeta, twrp, magisk etc. then it will trip knox.
theres thousands of threads on xda alone about tripped knox and what works n doesnt work so id go n look for urself before anything..
and usually it will break ota updates but can depend on device etc. but ull likely have to update via odin
Jedi.Tester said:
Can you make an instruction? Thanks
Click to expand...
Click to collapse
hes wrong
bs3pro said:
You lose L1 once the BL is unlocked though. So kiss goodbye HD on netflix and such on the ts7+ which is beneficial.
Click to expand...
Click to collapse
dunno what L1 is but unlocking by itself doesnt trio knox, its custom firmware that trips it.. basically anything u do after unlocking lol
and netflix can still work.. its trivial for netflix
hello everyone,
I have and use android phones last 10+ years, always rooted. But I never had samsung phone.
Now I hear only half informations from my buddy, that its dangeous to root samsung because of knox (i dunno what knox even is).
So, now I'm thinking to buy S20 and want to root it, and my question is..:
If I root it, is anything ''broken'' on the phone ? Can phone still recieve official Samsung OTA updates?
What are minuses? what to look for? What about this "knox"?
Please need informaions
Well, I've owned a couple of Samsung devices over the years and I guess I can speak a bit from experience. Here's what you should know:
1.- U.S. phones have their bootloaders locked, so avoid buying a U.S. variant if you want to root it (some people want them for their Snapdragon chips)
2.- Knox is an e-fuse in the phone motherboard. Once you trip it by flashing custom software (root it), then that fuse will be tripped forever. You cannot get your Knox your status back to official unless you change the motherboard. Even flashing stock firmware will never get you this back to official.
3.- A lot of Samsung's security apps check for this fuse and will refuse to work if they detect that you've tripped it. Samsung Pay, Pass, Secure Folder are just some examples of features that will stop working when they detect a tripped Knox fuse. Some of these have bypass with root, but some don't.
4.- You will not get OTA updates with an unlocked bootloader, let alone root. It IS possible to get them back but only after flashing stock firmware and blocking the bootloader. These don't seem to check for Knox.
Understood, Thank You alot for informations and help!
ShaDisNX255 said:
Well, I've owned a couple of Samsung devices over the years and I guess I can speak a bit from experience. Here's what you should know:
1.- U.S. phones have their bootloaders locked, so avoid buying a U.S. variant if you want to root it (some people want them for their Snapdragon chips)
2.- Knox is an e-fuse in the phone motherboard. Once you trip it by flashing custom software (root it), then that fuse will be tripped forever. You cannot get your Knox your status back to official unless you change the motherboard. Even flashing stock firmware will never get you this back to official.
3.- A lot of Samsung's security apps check for this fuse and will refuse to work if they detect that you've tripped it. Samsung Pay, Pass, Secure Folder are just some examples of features that will stop working when they detect a tripped Knox fuse. Some of these have bypass with root, but some don't.
4.- You will not get OTA updates with an unlocked bootloader, let alone root. It IS possible to get them back but only after flashing stock firmware and blocking the bootloader. These don't seem to check for Knox.
Click to expand...
Click to collapse
Hiiii. I currently have a Samsung S20 and I have rooted it before. Once you root it Knox security will be tripped and you will not be able to get it back. This means you will lose access to apps like Samsung Pay, Samsung Pass and Samsung Health. You will not receive OTA updates if you're rooted, but if you flash stock firmware again and lock the bootloader you can start receiving updates again. I currently have a custom ROM installed and I have my ROM rooted. To me, it's been a great experience overall. I didn't really use the Knox features, so I didn't care much about losing it. I have loved rooting my S20 and using a custom ROM !!
victoriam8a said:
Hiiii. I currently have a Samsung S20 and I have rooted it before. Once you root it Knox security will be tripped and you will not be able to get it back. This means you will lose access to apps like Samsung Pay, Samsung Pass and Samsung Health. You will not receive OTA updates if you're rooted, but if you flash stock firmware again and lock the bootloader you can start receiving updates again. I currently have a custom ROM installed and I have my ROM rooted. To me, it's been a great experience overall. I didn't really use the Knox features, so I didn't care much about losing it. I have loved rooting my S20 and using a custom ROM !!
Click to expand...
Click to collapse
Actually you can use Samsung Health, just currently no version above 6.19 (2 versions behind current) until we find a way to patch it...i use it daily with my Watch 4 on Rooted S20+ 5G....
73sydney said:
Actually you can use Samsung Health, just currently no version above 6.19 (2 versions behind current) until we find a way to patch it...i use it daily with my Watch 4 on Rooted S20+ 5G....
Click to expand...
Click to collapse
Ohh okay !!! Thank you for letting us know !! I don't use Samsung Health so I had not tested it myself, but I had heard that Samsung Health doesn't work with root. Thanks for telling us it works fine !!
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
maxis123 said:
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
Click to expand...
Click to collapse
Yeah you can flash updates with something like Odin (never used Kies myself, I don't know if it still works)
maxis123 said:
so, when rooted there are no OTAs.. thats a nono for me heh.. but question, if no OTAs come from mobile itself, is it possible to get uprades through PC then.. (Kies) maybe ?
Click to expand...
Click to collapse
ODIN
Flash HOME CSC if you want to keep your data
hello, i want to sell my phone and i want to unroot it b4 doing it but the problem is that when i flashed the original boot the phone would be in a state that it wont be root but stuff like software update from settings and google pay/bank apps wouldnt work. its there any way to unroot the device back to be like it was original when i bought it?
Welcome to XDA!
For your problem, I think the supersu app can allow you to unroot
Samarimama said:
Welcome to XDA!
For your problem, I think the supersu app can allow you to unroot
Click to expand...
Click to collapse
the thing is it won't be like it used to be, when ever I boot it will say unofficial software and bank apps wouldn't work, I used magisk to root with AP
Diosee said:
hello, i want to sell my phone and i want to unroot it b4 doing it but the problem is that when i flashed the original boot the phone would be in a state that it wont be root but stuff like software update from settings and google pay/bank apps wouldnt work. its there any way to unroot the device back to be like it was original when i bought it?
Click to expand...
Click to collapse
Unfortunately when you flash magisk, you will never be able to use banking apps even if it's unrooted. That happens because samsung have knox bit which is tripped when custom software is flashed. That happens in phones cpu and it is irreversible.
AljosaXXX said:
Unfortunately when you flash magisk, you will never be able to use banking apps even if it's unrooted. That happens because samsung have knox bit which is tripped when custom software is flashed. That happens in phones cpu and it is irreversible.
Click to expand...
Click to collapse
P.S
You can use banking apps when phone is rooted and you enable denylist in magisk for specific apps. But when knox is tripped and you flash original firmware, you won't have that option