[Q] Will tripping the Knox counter actually DISABLE Knox? - Galaxy Note 3 Q&A, Help & Troubleshooting

I want to use Knox when I get my Note 3 tomorrow but I also want to root it. I know there are ways to root without tripping the counter but I'm wondering, in the case that it does get tripped, does it actually disable/remove Knox? I honestly don't care about the warranty but I do care about the feature being disabled.

knox won't work when you root and trip. It throws up a message.
Sent from my SM-N9005 using XDA Premium 4 mobile app

That's what I was wondering. Thanks!

However, Know will may still be active on your phone. You just can't access the Knot security container. You may get messages that some program is trying to access system files and it's been blocked. This is also a feature of Knox.
You can disable the Knox app by going to terminal and entering a command, can't think of it off the top of my head but it's in the 1st post of the root del la vega thread.

Related

Understanding knox.

I need to check some facts
When upgraded to 4.3 I lost root and my is back to stock? True or false
Would it be safe to post a pic of my knox screen?
Sent from my SPH-L720 using XDA Premium 4 mobile app
cinnamngrl said:
I need to check some facts
When upgraded to 4.3 I lost root and my is back to stock? True or false
Would it be safe to post a pic of my knox screen?
Sent from my SPH-L720 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
If you took the OTA update to 4.3, then yes you are on the Knox bootloader. AND you are stock unrooted (unless you've since rooted).
Yes it's safe to post a pic of you system config; there is nothing anyone can take from that information that is harmful to you.
Is this a clean knox? Or is it already tripped.
Sent from my SPH-L720 using XDA Premium 4 mobile app
cinnamngrl said:
Is this a clean knox? Or is it already tripped.
Sent from my SPH-L720 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Clean Knox
Sent from my SPH-L720 using Tapatalk
To get Root, you can use Kingo root without tripping Knox.
optimummind said:
To get Root, you can use Kingo root without tripping Knox.
Click to expand...
Click to collapse
Isn't it the custom recovery that ends up tripping the Knox anyways?
I'm a Verizon guy and also have a sprint s4 that I threw Philz on. So I'm not sure if you can do that without tripping Knox, that's the impression I got though.
Sent from my SCH-I545 using XDA Premium 4 mobile app
Mistertac said:
Isn't it the custom recovery that ends up tripping the Knox anyways?
I'm a Verizon guy and also have a sprint s4 that I threw Philz on. So I'm not sure if you can do that without tripping Knox, that's the impression I got though.
Sent from my SCH-I545 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Yes, custom recovery will trip Knox.
1. My phone was previously rooted,
2. Got 4.3 update
3. Now has a clean knox
My questions are
A. can I root my phone again?
B. Will later android updates give me another clean knox?
C. Are any procedures like triangle away that will keep knox clean?
D. Is warranty the only reason I want a clean knox?
Sent from my SPH-L720 using XDA Premium 4 mobile app
cinnamngrl said:
1. My phone was previously rooted,
2. Got 4.3 update
3. Now has a clean knox
My questions are
A. can I root my phone again?
B. Will later android updates give me another clean knox?
C. Are any procedures like triangle away that will keep knox clean?
D. Is warranty the only reason I want a clean knox?
Sent from my SPH-L720 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
A. Yes you can, if you don't want the Knox warranty flag use Safe Root. If you google safe root for S4 you should find the link. The Knox flag is actually tripped when you install a custom recovery. This means if you use cf autoroot, twrp, philz, or any other root or recovery the Knox flag will be tripped. If you want to install a custom rom or mod, then you will trip the Knox flag since those require a custom recovery. If you just want to root and remove bloat, backup with TiBu, install xposed framework modules, or even unlock the hotspot then you can do those without a custom recovery and keep your Knox warranty flag in place.
B. No, once you have tripped the Knox warranty flag, so far the flag is not reset by installing updates or the full stock tar file of a newer version.
C. Not at his time.
D. Yes, at this time the only thing the Knox warranty flag does is show Samsung that your device has been tampered with at one time. Sprint and Assurian still honor the TEP insurance, but if your phone has to be sent to Samsung for repair or warranty that is where you will have problems.
Sent from my icrap 2 using Tapatalk HD
cruise350 said:
D. Yes, at this time the only thing the Knox warranty flag does is show Samsung that your device has been tampered with at one time. Sprint and Assurian still honor the TEP insurance, but if your phone has to be sent to Samsung for repair or warranty that is where you will have problems.
Click to expand...
Click to collapse
Not sure if this is true or not, but wouldn't triggering Knox prevent you from activating the device on a corporate network?
dimm0k said:
Not sure if this is true or not, but wouldn't triggering Knox prevent you from activating the device on a corporate network?
Click to expand...
Click to collapse
Mostlikely YES.
My brother's device had problems with some of their corporate apps (email/portal stuff) designed to look for ROOT and othe security (knox I bet) changes. Is IT guys literally swapped out his phone after he rooted it!
Plus it seems that a whole lot of people are having issue connecting to PEAP WiFi networks; primarily, I'm guessing' Cisco based. [Cisco is notoriously behind the curve. Heck they have security devices (ASAs) that must be accessed with OLD java versions.]
But there ARE some solutions for that around here.
leaderbuilder said:
Mostlikely YES.
My brother's device had problems with some of their corporate apps (email/portal stuff) designed to look for ROOT and othe security (knox I bet) changes. Is IT guys literally swapped out his phone after he rooted it!
Plus it seems that a whole lot of people are having issue connecting to PEAP WiFi networks; primarily, I'm guessing' Cisco based. [Cisco is notoriously behind the curve. Heck they have security devices (ASAs) that must be accessed with OLD java versions.]
But there ARE some solutions for that around here.
Click to expand...
Click to collapse
Your voice to text is making some confusing word choice s
Sent from my SPH-L720 using XDA Premium 4 mobile app
cinnamngrl said:
Your voice to text is making some confusing word choice s
Sent from my SPH-L720 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Only thing I think is really wrong is "Is" instead of "His" (IMHO)... but then again, I'm an IT guy...
That, and I need to put my S4 in my sig! :silly:
leaderbuilder said:
Mostlikely YES.
My brother's device had problems with some of their corporate apps (email/portal stuff) designed to look for ROOT and othe security (knox I bet) changes. Is IT guys literally swapped out his phone after he rooted it!
Plus it seems that a whole lot of people are having issue connecting to PEAP WiFi networks; primarily, I'm guessing' Cisco based. [Cisco is notoriously behind the curve. Heck they have security devices (ASAs) that must be accessed with OLD java versions.]
But there ARE some solutions for that around here.
Click to expand...
Click to collapse
what I need is a hotspot. not too often, but itsa drag not to have it.
cinnamngrl said:
what I need is a hotspot. not too often, but itsa drag not to have it.
Click to expand...
Click to collapse
Hot spot is easy, run the safe root file from your pc to root your phone. Then download the odexed MK2 hot spot mod in post 337 in the hot spot mod thread. Use 7zip or similar app to extract the services.jar and services.odex file to your sdcard. Then use root explorer to copy them to the system/framework directory. It is a good idea to backup the original files. After you copy the new files you will need to change the permissions to rw-r-r. After this is done reboot and enjoy free hot spot. This will not trip knox since you don't have to install a custom recovery.
Sent from my SPH-L720 using Tapatalk
cruise350 said:
Hot spot is easy, run the safe root file from your pc to root your phone. Then download the odexed MK2 hot spot mod in post 337 in the hot spot mod thread. Use 7zip or similar app to extract the services.jar and services.odex file to your sdcard. Then use root explorer to copy them to the system/framework directory. It is a good idea to backup the original files. After you copy the new files you will need to change the permissions to rw-r-r. After this is done reboot and enjoy free hot spot. This will not trip knox since you don't have to install a custom recovery.
Sent from my SPH-L720 using Tapatalk
Click to expand...
Click to collapse
Am i missing some obvious reason that you described the location instead of including a link? BYTW yes, i tried to find it. And thank you
cinnamngrl said:
Am i missing some obvious reason that you described the location instead of including a link? BYTW yes, i tried to find it. And thank you
Click to expand...
Click to collapse
Sorry, but I was responding from my phone and couldn't post links but here you go:
Find the correct MK2 odexed hot spot mod in post #337 of this thread: http://forum.xda-developers.com/showthread.php?t=2256950&page=34
Then you can follow crawj's procedures here to manually install the update without a custom recovery: https://skydrive.live.com/view.aspx...E!131&app=Word&wdo=2&authkey=!AJdLcpl9ak9eZnw
Good Luck
is there a way to remove KNOX completely without tripping the 0x1 flag? has there been developments in this area? seems like everyone's focused on trying to reverse the flag once it's set, but what about the removal of KNOX so that it never sets that flag?
dimm0k said:
is there a way to remove KNOX completely without tripping the 0x1 flag? has there been developments in this area? seems like everyone's focused on trying to reverse the flag once it's set, but what about the removal of KNOX so that it never sets that flag?
Click to expand...
Click to collapse
The problem occurs within the bootloader of the MJA or newer firmware. With that version of the software, Samsung has prevented the downgrading of the bootloader so there is no way to get rid if that feature. You can go through the rom and remove or disable the Knox files, which do nothing for the phone except free up some space. Knox's purpose is to allow Samsung to create a secure environment for corporate and government companies that need to protect their info and intellectual properties. The average user will never need Knox, so it's safe to remove. When Samsung fully implemented Knox with 4.3 they integrated it into the bootloader. Now, all of us assume the Knox warranty flag voids your Samsung warranty, which it probably does, but I believe its true purpose is to void the Knox integrity check so the Knox secure containers know the phone has been tampered with and can't guarantee data security.
Data security is big business and Samsung wants a piece of that pie.
Sent from my icrap 2 using Tapatalk HD
computer programs and knox
so once knox is tripped to 0x1 does that prevent your phone being read by other programs? only reason i ask is because i have tripped knox and some of my data on my phone has been erased (notes, pics, sms, contacts) and the programs i have wont even acknowledge my phone.

where is Knox on S5 ?

where is Knox on S5 ? there is no icon or application
Zenk_77 said:
where is Knox on S5 ? there is no icon or application
Click to expand...
Click to collapse
I haven't been able to get it running. There's a setup wizard in /system/apps/ but it doesn't seem to do anything other than reinstall what's already there. Inside the .apk are a couple of link setup apps. When I ran them, Lookout was triggered. No joy, so far.
Zenk_77 said:
where is Knox on S5 ? there is no icon or application
Click to expand...
Click to collapse
It's not like on Note III. Here it is called "privacy mode", and it's triggered with "Settings...privacy mode". It's good to set fingerprints prior first use.
Working quite different, but I like this way.
Privacy mode is not working if You choose Art instead of Dalvik.
Sorry for my english...
is not the same.
KNOX is for business, secure mail, more business applications, etc.
Bump, does anyone know where is knox? I've been using s5 only a few days (s2 before that)... so I'm pretty new to this knox thing, but so far that I've been reading and researching... private mode isn't knox since all private mode does is hide your content... knox is suppose to make a new "layer" basicly a new phone much like dual-boot... or am I mistaken? if I'm not mistaken, then where is knox? I just booted to download mode and there is atleast knox counter... but I cant find the app anywhere...
EDIT: just went to samsung page, and samsung galaxy s5 isn't listed as supported for knox... then why is there knox counter? is it going to support it in future? if so does this mean that if I flash now the counter will not be tripped?
Slow N Stupid said:
Bump, does anyone know where is knox? I've been using s5 only a few days (s2 before that)... so I'm pretty new to this knox thing, but so far that I've been reading and researching... private mode isn't knox since all private mode does is hide your content... knox is suppose to make a new "layer" basicly a new phone much like dual-boot... or am I mistaken? if I'm not mistaken, then where is knox? I just booted to download mode and there is atleast knox counter... but I cant find the app anywhere...
EDIT: just went to samsung page, and samsung galaxy s5 isn't listed as supported for knox... then why is there knox counter? is it going to support it in future? if so does this mean that if I flash now the counter will not be tripped?
Click to expand...
Click to collapse
depends on your carrier
ATT disabled Knox for their phones, check with yours. I hear you can side-load it and it still works but haven't tried. google it.
colonels said:
depends on your carrier
ATT disabled Knox for their phones, check with yours. I hear you can side-load it and it still works but haven't tried. google it.
Click to expand...
Click to collapse
I will confirm with my carrier tomorrow (I doubt it's them, living in a country where there isn't much restrictions in term of technology), but can anyone confirm that the sm-g900f variant do have knox? (I'm on the latest stock rom)
Sent from my SM-G900F using Tapatalk

So... Where's this Knox thing??

Hey all,
I have an s5 on EE in the UK.
Heard about this Knox security software. It shows in my list of installed apps yet I can't seem to locate where it is?
Also debating root... Not sure if it's worth it, but did want to have a look at Knox.
Thanks
PIzzimperfect said:
Hey all,
I have an s5 on EE in the UK.
Heard about this Knox security software. It shows in my list of installed apps yet I can't seem to locate where it is?
Also debating root... Not sure if it's worth it, but did want to have a look at Knox.
Thanks
Click to expand...
Click to collapse
knox is a security implemented by samsung, it is active in the background, has no app for that. basically it "protects" samsung warranty better than the triangle in download mode witch shows how many imes you flashed, if you had roted ur device, in download mode will show u have 0x1 warranty voided.<---- thats basically KNOX.
Sent from my SM-G900H using XDA Free mobile app
Ahh ok.. Thank you.
Wow Samsung, you suck.
PIzzimperfect said:
Ahh ok.. Thank you.
Wow Samsung, you suck.
Click to expand...
Click to collapse
you are in the UK so Knox doesn't void your warranty once tripped
DSA said:
you are in the UK so Knox doesn't void your warranty once tripped
Click to expand...
Click to collapse
I check my insurance which I took out for my phone when I got it. They state that modifying or rooting will make my insurance void. How annoying. Is there some legality involved?
Thanks!
fenchai said:
knox is a security implemented by samsung, it is active in the background, has no app for that. basically it "protects" samsung warranty better than the triangle in download mode witch shows how many imes you flashed, if you had roted ur device, in download mode will show u have 0x1 warranty voided.<---- thats basically KNOX.
Sent from my SM-G900H using XDA Free mobile app
Click to expand...
Click to collapse
No. ^
KNOX is a security container -> a place where you install apps inside a secure container that cannot be tampered with on a high level TrustZone security algorithm.
It's great that the person above said what it essentially does to your device, but what he explained above is what happens when the TrustZone between the software and the hardware is breached during root/downgrade/unsigned flashing. This essentially would allow the viewer of the KNOX status to know when the device does not trust it's own body with secure enterprise level apps (Application Integrity), hence the KNOX warranty bit will be set from 0x0 to 0x1 meaning "I will not ever run a secure container anymore".
You won't find KNOX 2.0 on your device as this is now a paid service for enterprises at a rate of $3.60 and it is only set up on your device when you have the KNOX 2.0 kit deployed on your device, unlike KNOX 1.0 where you get to enter KNOX mode anytime you want.

[Q] Knox app don't install

Hey guys, hope someone can help me.
I factory reseted my note 3 today, my Knox is 0x1 but my system custom is official... I can install all normally, like S health, s translator, kids mode etc, but when I try to install Knox app, the app opens and show an animation, after a message asking for wait a minute, and after that the app simply closes, and when I reopen, it do the same... Can it be because of the Knox 0x1? I believe that isn't 'cuz I remember that I can install it before...
Thanks.
Nobody?
Dude, c'mon, common sense. Or Google for 4 minutes.
Sent from my N9005
Do you think that I posted here because I didn't used Google? C'mom, commom sense dude. Of course if I founded something on Google I wouldn't post here.
You Knox security is tripped. That's what the 0x1 indicates. Know will no longer run on your phone.
Sent from my SM-N900P using Tapatalk
I knew what 0x1 indicates, what I didn't knew is that the knox tripped even with system status official don't let the Knox app run...

[N910C]Is there a way to root without tripping knox

Hi all. İ wonder is there a way to root without tripping knox like Towelroot etc? I don't want to trip knox counter...
Not possible on any Note 4 variant.
abdyasar said:
Hi all. İ wonder is there a way to root without tripping knox like Towelroot etc? I don't want to trip knox counter...
Click to expand...
Click to collapse
There is a way you could try but the last time I checked it wasn't supported for the Galaxy Note 4's. It's an app that roots your phone by literally The Click (Tap) of a Button. It's called Towel Root by geohot. You can find it here.
Try it out and let me know if it works. Hope this helped.
It takes longer to type "Thanks" than to press the button. Make your life easier
i guess it does not support anything exept snapdragon
Well, that's the best you can get at the moment. Sorry. I too was trying to root without tripping knox counter but really it doesn't matter that much. I mean I've never destroyed a phone in any way to need a replacement or damage it in any unrecoverable way that I would have to take it to my Service Provider to fix it (plus they don't have a clue about phones at MTN, I don't know how they hire those people when they can't even explain how to edit your Network Settings).
Sent from my Samsung Galaxy Note 4 (SM-N910C) using the XDA Free mobile app.
It takes longer to type "Thanks" than to press the button. Make your life easier
I tried Towelroot and it fails.
Towelroot used an exploit to gain root without tripping Knox. That exploit was also a security vulnerability and was fixed by Samsung on the Note 3 and S5 later software updates. The Note 4 and S6 come with that fix built-in and towelroot will not work. Which is a good thing because the same exploit could be used by a third party to gain FULL access to your phone.

Categories

Resources