Can anyone answer some questions about knox? - Verizon Galaxy Note 3 Q&A, Help & Troubleshooting

1. What is the purpose of it?
2. Is there currently a way to prevent it from running in the background?
3. How can I check the status of it to see if it has been tripped or what not?
4. Lastly how in the hell would anyone at Verizon including warranty center know to check for this?
Thank you for your responses :good:

1. http://www.samsung.com/global/business/mobile/solution/security/samsung-knox
2. You dont have to have it running but it is hard coded into the bootloader and the phone and to turn it on/off its in device administrators under settings
3. check bootloader and Knox status 0x0 means it isnt tripped while 0x1 means it is tripped
4. and verizon or anybody would check the bootloader i assume?

Related

[Q] Knox question

If knox is not installed can it still be tripped ?
When clicking on the knox app it offers to install it.
Madmansdeath said:
If knox is not installed can it still be tripped ?
When clicking on the knox app it offers to install it.
Click to expand...
Click to collapse
The apps don't "trip" anything. The point of confusion seems to revolve around the fact that Knox is not only an app interface, but it is also integrated into the bootloader. The bootloader will "trip" or trigger the Knox flag (a binary status, not a flash counter as was in previous devices) to indicate whether or not the Knox app container environment is valid.
If/when the system is upgraded to a Knox bootloader, it cannot (at least for the time being and possibly forever) be downgraded to a previous version.

[Q] How can I check Knox status?

I know my Verizon S5 has been rooted before, but now it is no longer rooted and I would like to check my Knox status. How am I able to do this? I did the Vol. down, home and power button and that didnt tell me the KNOX WARRANTY VOID.
It says "Knox Warranty Void:" If it shows 0x0 you are fine and knox is not tripped, however, if it shows something other than 0x0, it is tripped...
Just download "phone info" from the app store and it should tell you whether you tripped knox or not.
Sent from my SM-G900V using Tapatalk

[Q] S4 I9500 BN2 root without trip knox.

I tried to root with towelroot=not support?:crying:
I tryied vroot and it support,no dare to click, will it trip knox?
Others like geniusroot,kingo root support n trip knox?
Any chances to root without trip knox?
Thank you.
Hello.
I had rooted my Galaxy S4 (i9505), 4.4.2, without triggering the Knox Flag, using CF-Auto-Root, via Odin. The Flash Counter is now 1, due to flashing something, but Knox is 0x0. Flash counter can be reseted by using Triangle Away,
Hope this helps.
http://forum.xda-developers.com/showthread.php?t=2292615
Proof:
https://www.dropbox.com/s/mkjnmpwcq6pz2se/DSC_3831.JPG?dl=0
(no 0x1 flag)
https://www.dropbox.com/s/gctx9ejiin47rrp/Screenshot 2014-10-04 17.08.39.png?dl=0
(device supported by Kies)
https://www.dropbox.com/s/v8hpbmo815ltn1w/2014-10-04 14.09.39.png?dl=0
(SuperUser working)
Mind that you have to install BusyBox from Google Play, cause it does not come with it.
Have fun
costin96 said:
Hello.
I had rooted my Galaxy S4 (i9505), 4.4.2, without triggering the Knox Flag, using CF-Auto-Root, via Odin. The Flash Counter is now 1, due to flashing something, but Knox is 0x0. Flash counter can be reseted by using Triangle Away,
Hope this helps.
http://forum.xda-developers.com/showthread.php?t=2292615
Proof:
https://www.dropbox.com/s/mkjnmpwcq6pz2se/DSC_3831.JPG?dl=0
(no 0x1 flag)
https://www.dropbox.com/s/gctx9ejiin47rrp/Screenshot 2014-10-04 17.08.39.png?dl=0
(device supported by Kies)
https://www.dropbox.com/s/v8hpbmo815ltn1w/2014-10-04 14.09.39.png?dl=0
(SuperUser working)
Mind that you have to install BusyBox from Google Play, cause it does not come with it.
Have fun
Click to expand...
Click to collapse
Thanks to you.Still can not root at the moment fir I9500
Not included - Triangle Away - ! NOT OPERATIONAL ON THE GT-I9500 !
Triangle Away can be used to reset the flash counter after installing CF-Root. The flash counter keeps track of how many custom firmwares you have flashed, as this voids warranty. (No idea what this about ? Read up on it, you will want to use this !)
ttkyy said:
Thanks to you
Click to expand...
Click to collapse
Bear in mind, that I am not 100% sure that it will work on ALL Galaxy S4 devices (I mean not trigger it).
Also bear in mind that OTA (Over the air update) will NOT work, it will return the message "Phone was been personalized."
Although, Kies sees it. Also make sure you don't have Knox mode activated or installed.
LATER EDIT:
I see that Triangle Away is only for the Qualcomm Galaxy S4 (9505). That means that you can't, at this moment, reset the flash counter. There are basically two things to worry about:
- Knox Flag -> as which seems so, I avoided it by installing that CF-Auto-Root on my 9505. I am not sure about avoiding it on 9500, but it should work.
- Flash Counter -> it raises everything you flash something via download mode. If it's 0, in Settings > About Phone > Status >Phone Status, it will return "Original" or something. If it's anything else than 0 (like 1, which I currently have cause I re-flashed root due to some tiny problem), it will return "personalized" or something like it. That will still void warranty IF the phone is sent to warranty like that, but will NOT trigger Knox. Also that will stop OTA Updates from working, but Kies updates will work (for some reason, samsung bug, use it ).
I have no idea how to help you regarding that Flash Counter on the 9500.
costin96 said:
Bear in mind, that I am not 100% sure that it will work on ALL Galaxy S4 devices (I mean not trigger it).
Also bear in mind that OTA (Over the air update) will NOT work, it will return the message "Phone was been personalized."
Although, Kies sees it. Also make sure you don't have Knox mode activated or installed.
LATER EDIT:
I see that Triangle Away is only for the Qualcomm Galaxy S4 (9505). That means that you can't, at this moment, reset the flash counter. There are basically two things to worry about:
- Knox Flag -> as which seems so, I avoided it by installing that CF-Auto-Root on my 9505. I am not sure about avoiding it on 9500, but it should work.
- Flash Counter -> it raises everything you flash something via download mode. If it's 0, in Settings > About Phone > Status >Phone Status, it will return "Original" or something. If it's anything else than 0 (like 1, which I currently have cause I re-flashed root due to some tiny problem), it will return "personalized" or something like it. That will still void warranty IF the phone is sent to warranty like that, but will NOT trigger Knox. Also that will stop OTA Updates from working, but Kies updates will work (for some reason, samsung bug, use it ).
I have no idea how to help you regarding that Flash Counter on the 9500.
Click to expand...
Click to collapse
Thanks again.
I just hav to avoid to take the risk and prevent warranty void,the answer is not to root at the moment.
Thanks gain:good:

[Q] N910G from Telstra (Australia) - Bootloader locked?

Hi all,
I know there are a few posts on bootloaders on the Galaxy Note 4 already, but none have answered my question.
I have just gotten this phone from Telstra in Australia, which I want to root and install a custom recovery on, but I am not sure if the bootloader is locked, or if this matters. It seems that most people can root with a locked bootloader, but I have read in other places that you can't, or that it may brick the phone. I've also read that Telstra doesn't lock the bootloader if it isn't locked from the manufacturer, but don't want to take the risk without knowing, if it can brick my phone.
ODIN MODE (HIGH SPEED)
PRODUCT NAME: SM-N910G
CURRENT BINARY: Samsung Official
SYSTEM STATUS: Official
REACTIVATION LOCK(KK): OFF
KNOX WARRANTY VOID: 0x0
QUALCOMM SECUREBOOT: ENABLE (CSB)
RP SWREV: S1, T1, R1, A1, P1
SECURE DOWNLOAD : ENABLE
UDC START
The above is what I get in download mode, so does this mean the bootloader is locked? Or can you not tell from this information?
If it is locked, then can I still root the phone, and install a custom recovery? Or, despite what I have read elsewhere, is it harmless to try?
Thanks in advance
Ben
I have the N910G from Telstra too. I believe it is not network locked.
1. Does no network lock necessarily mean the bootloader is unlocked?
2. Is there some app (or other method) that can definitively determine the status of the bootloader please?
Regards
I think you're right that it isn't network locked, but I don't think that relates to the bootloader.
I have worked out that QUALCOMM SECUREBOOT: ENABLE (CSB) does not necessarily mean that the phone is bootloader locked. No google search was able to tell me that, but I found this video where the guy shows his phone in download mode, with the same 'secureboot' status, and then goes on to successfully root it. There is also reason to believe that it isn't bootloader locked, because according to this thread, Telstra does not lock bootloaders where they are unlocked from the manufacturer. But having said that, I'm hesitant to try rooting my phone without knowing for sure.
So my questions are:
1. (same as yours) Is there a way to determine if the bootloader on these phones is unlocked? And
2. Is it safe to try rooting if the bootloader is locked?
Hopefully someone can help, but otherwise it may come down to someone just trying it and reporting whether or not it is successful.
Australian note 4 optus
Just thought i would let ya know i have rooted my virgin/optus note 4 with no probs.
Twrp recovery and exposed installed.
joeljody said:
Just thought i would let ya know i have rooted my virgin/optus note 4 with no probs.
Twrp recovery and exposed installed.
Click to expand...
Click to collapse
Thanks for letting us know. It's looking more and more likely that the bootloader won't be locked, so I think I'm just going to have to give it a go.
Well, my phone's rooted. After seeing someone who tried rooting a Verizon Note 4 here, without causing any problems, I decided to try it myself, and it was successful first time. I have TRWP installed, and things like fingerprint scanning, private mode and S Health are all working, until I install Xposed, which I am still trying to sort out.
So just letting anyone who's interested know, the Telstra Note 4 is not bootloader locked. Still no idea on any other ways of checking the bootloader status though.
That's excellent news Benanna88. Just to confirm: You used cf-auto Root method, correct?
Also, what are you calling 'private mode' please?
And, did you ever get a response from Samsung about the bootloader?
Regards
Yes I used CF Auto Root, specifically following the video I mentioned above.
Private mode is something that lets you hide things like photos and s notes. It stops working when you install xposed, and so far there doesn't seem to be an actual solution, but I think it still works for some people.
And no, still no response from Samsung, despite three different methods of contact.

Imporant ! please read : re enable Knox after super su disabled it .. need to enable

I need help
please some one .. i need help and it's so important . one of my friend encrypted his data though knox and regardless of what super su and root do with knox and it's disabling knox ... he rooted his phone ! (he is todler and didn't take notice )
anyway his knox now is disabled and he can't access to his data because in security knox is disabled .. how can we enable knox so he can decrypt knox with password and access to his data ... thanks in advance and keep in mind that please guys if you are not sure about how can solve problem without losing data , guide me . data encrypted with knox is so important to him .
target device is Galaxy note 3 n9005 .
If knox is 0x1, then you are out of luck.
celderic said:
If knox is 0x1, then you are out of luck.
Click to expand...
Click to collapse
if we unroot phone can't we just enable it ?
Depends how it's rooted. If Knox Warranty Void is 0x1 - you can't do nothing to it. If device is rooted keeping Knox flag 0x0, there might be a way to recover the data somehow, since Knox shouldnt be locked up.
Spere said:
Depends how it's rooted. If Knox Warranty Void is 0x1 - you can't do nothing to it. If device is rooted keeping Knox flag 0x0, there might be a way to recover the data somehow, since Knox shouldnt be locked up.
Click to expand...
Click to collapse
since Knox shouldnt be locked up " what is tha mean ? he used cf-root , i wonder knox is disabled , and data locked down in on the internal .. if we unroot it won't re enabled ?
if someone root he can't use knox for entire phone life
afraaa said:
since Knox shouldnt be locked up " what is tha mean ? he used cf-root , i wonder knox is disabled , and data locked down in on the internal .. if we unroot it won't re enabled ?
if someone root he can't use knox for entire phone life
Click to expand...
Click to collapse
If he used cf-auto-root Knox warranty is void (you can check that booting phone to download mode, if you don't know how or what that is, Google it. If there is line "Knox Warranty Void 0x1" means warranty is void, and "0x0" means it's fine)
Knox is 0x1 on his phone and that means there is no way to recover data from Knox container, at least as for now, most probably will never be.
Spere said:
If he used cf-auto-root Knox warranty is void (you can check that booting phone to download mode, if you don't know how or what that is, Google it. If there is line "Knox Warranty Void 0x1" means warranty is void, and "0x0" means it's fine)
Knox is 0x1 on his phone and that means there is no way to recover data from Knox container, at least as for now, most probably will never be.
Click to expand...
Click to collapse
yeah i know .. abut all you said ... i know guaranty is void but data to him is much important than phone guaranty .. i guess he should get phone to samsung and tell them " data all i need if you want money or void warranty the ndo it ... i guess the only way is samsung speciallists to bring back data !!! i wonder how he ignore the part that super su want's to disable knox !!!!
i wanna test to unroot and see if knox returns or not
afraaa said:
yeah i know .. abut all you said ... i know guaranty is void but data to him is much important than phone guaranty .. i guess he should get phone to samsung and tell them " data all i need if you want money or void warranty the ndo it ... i guess the only way is samsung speciallists to bring back data !!! i wonder how he ignore the part that super su want's to disable knox !!!!
i wanna test to unroot and see if knox returns or not
Click to expand...
Click to collapse
Oh god. Knox warranty void means Knox is not secure anymore. You can't recover data no matter what you do. If you unroot, it changes nothing.
Read this article from Samsung about Knox and CF-Auto-Root.
It clearly says: "Once the e-fuse bit is burned, a Samsung KNOX-enabled device can no longer create a KNOX Container, or access the data previously stored in an existing KNOX Container. This is a mechanism to ensure that enterprise data will be protected as long as the rooting attempt is detected."
Spere said:
Oh god. Knox warranty void means Knox is not secure anymore. You can't recover data no matter what you do. If you unroot, it changes nothing.
Read this article from Samsung about Knox and CF-Auto-Root.
It clearly says: "Once the e-fuse bit is burned, a Samsung KNOX-enabled device can no longer create a KNOX Container, or access the data previously stored in an existing KNOX Container. This is a mechanism to ensure that enterprise data will be protected as long as the rooting attempt is detected."
Click to expand...
Click to collapse
okay ... thanks for your time . really appreciated . if anyone knows other useful thing please let me know , this data is now not accessible is so critical unfortunately

Categories

Resources