[Q] Your phone is compromised (3. Party MDM), what now? - Galaxy Note 3 Q&A, Help & Troubleshooting

Hey Guys,
I'm using a N9005 as my phone. For syncing "work" email an 3. Party MDM App is required. Because of the bad battery life I rooted the phone (knox 0x1) and installed Greenify and a custom kernel. It worked great but because I did a full wipe I needed to install the MDM App again.
Now I am not able to encrypt the device and the MDM tells me that my phone is compromised. I don't know if it is because of root or the missing encryption, knox 0x1 or the kernel?
Anyone has an idea what I can do now (except flashing stock)?
Is there any chance to get a great battery life again without root?
Thanks.

Alex87142 said:
Hey Guys,
I'm using a N9005 as my phone. For syncing "work" email an 3. Party MDM App is required. Because of the bad battery life I rooted the phone (knox 0x1) and installed Greenify and a custom kernel. It worked great but because I did a full wipe I needed to install the MDM App again.
Now I am not able to encrypt the device and the MDM tells me that my phone is compromised. I don't know if it is because of root or the missing encryption, knox 0x1 or the kernel?
Anyone has an idea what I can do now (except flashing stock)?
Is there any chance to get a great battery life again without root?
Thanks.
Click to expand...
Click to collapse
Revert back to Stock kernel at least, it'll be the kernel that will cause the issue because it isn't signed Official, you don't use the KNOX container so that won't be the issue - Although triggering KNOX does stop the device from being encrypted.. but try changing the kernel and see.. It probably won't work though.
I've attached Stock MK2 kernel if you need it.

radicalisto said:
Revert back to Stock kernel at least, it'll be the kernel that will cause the issue because it isn't signed Official, you don't use the KNOX container so that won't be the issue - Although triggering KNOX does stop the device from being encrypted.. but try changing the kernel and see.. It probably won't work though.
I've attached Stock MK2 kernel if you need it.
Click to expand...
Click to collapse
Thanks. But it didn't help. I flashed the stock kernel. When I try to encrypt, the screen goes black and the phone reboots after approx. 30 sec.
I reinstalled MDM but it still shows "compromised".

Alex87142 said:
Thanks. But it didn't help. I flashed the stock kernel. When I try to encrypt, the screen goes black and the phone reboots after approx. 30 sec.
I reinstalled MDM but it still shows "compromised".
Click to expand...
Click to collapse
That'll be the KNOX effect then. Won't be able to encrypt your device anymore I'm afraid

escarth was
radicalisto said:
That'll be the KNOX effect then. Won't be able to encrypt your device anymore I'm afraid
Click to expand...
Click to collapse
Are you sure? Didn't found anything about that around the web.
I did a backup with TWRP and try if going back to stock (unroot) helps...

Alex87142 said:
Are you sure? Didn't found anything about that around the web.
I did a backup with TWRP and try if going back to stock (unroot) helps...
Click to expand...
Click to collapse
Well when KNOX is tripped you can't encrypt your device, you can try going back to full stock and see, but it doesn't work afaik. Have a gander round the forum you'll see some people posting about it.

radicalisto said:
Well when KNOX is tripped you can't encrypt your device, you can try going back to full stock and see, but it doesn't work afaik. Have a gander round the forum you'll see some people posting about it.
Click to expand...
Click to collapse
Good news. After I was so frustrated I wiped and flashed stock.
Encryption worked!!!!
I installed MDM without any error.
Hopefully everything will work now....
Thank you all.

Can you root again after you have encrypted your phone I was trying to do this the other day but with no luck fort it most of been something to do with Knox ??
Sent from my SM-N9005 using xda app-developers app

Alex87142 said:
Good news. After I was so frustrated I wiped and flashed stock.
Encryption worked!!!!
I installed MDM without any error.
Hopefully everything will work now....
Thank you all.
Click to expand...
Click to collapse
Interesting thar Encryption works after triggering KNOX, some conflicting reports that it does not.. Good to know none the less.

Yes you can root but it will wipe and destroy encryption. Encryption not working after root seems to be a common 4.3 bug.
https://code.google.com/p/android/issues/detail?id=58073
Gesendet von meinem SM-N9005 mit Tapatalk

Related

[Q] Does reinstalling stock firmware trip knox on Note 3?

I have a phone which has a lot of problems after the KitKat update.
Now I want to try to reinstall KitKat. Samsung doesn't provide this, so I want to use ODIN and the firmware from SamMobile.
Does anybody know if I will do this that it will trip the Knox counter?
What if you try to just reset the phone to factory settings? I wouldn't know anything about Knox though. Hope you sort it out. :fingers-crossed:
Cootje_NL said:
I have a phone which has a lot of problems after the KitKat update.
Now I want to try to reinstall KitKat. Samsung doesn't provide this, so I want to use ODIN and the firmware from SamMobile.
Does anybody know if I will do this that it will trip the Knox counter?
Click to expand...
Click to collapse
no it wont
markslo112 said:
What if you try to just reset the phone to factory settings? I wouldn't know anything about Knox though. Hope you sort it out. :fingers-crossed:
Click to expand...
Click to collapse
Tnx for the tip. Already tried that 2 times. No luck
Cootje_NL said:
I have a phone which has a lot of problems after the KitKat update.
Now I want to try to reinstall KitKat. Samsung doesn't provide this, so I want to use ODIN and the firmware from SamMobile.
Does anybody know if I will do this that it will trip the Knox counter?
Click to expand...
Click to collapse
it won't trip Knox, i tried it several times as long as they are official roms
Cootje_NL said:
I have a phone which has a lot of problems after the KitKat update.
Now I want to try to reinstall KitKat. Samsung doesn't provide this, so I want to use ODIN and the firmware from SamMobile.
Does anybody know if I will do this that it will trip the Knox counter?
Click to expand...
Click to collapse
long as they are official samsung roms you be ok....
I reinstalled my firmware and I can confirm that it indeed won't trip Knox.
As it might be useful I also want to share that updating using my Mac (with VMWare for Windows) gave me a lot of troubles. After using a native Windows laptop the update went fine.
Too bad it didn't solve my problem. Going back to the store to claim my warranty.
jaythenut said:
no it wont
Click to expand...
Click to collapse
So forgive me if I'm asking a stupid question here but I thought that if I root my Note 3 I will automatically trip the Knox counter, even before I get anywhere near flashing a new ROM - stock or custom. Is that not true then?
Medical HRH said:
So forgive me if I'm asking a stupid question here but I thought that if I root my Note 3 I will automatically trip the Knox counter, even before I get anywhere near flashing a new ROM - stock or custom. Is that not true then?
Click to expand...
Click to collapse
You won't trip Knox if you install a KK rom but will if you try to flash bak JB.
Any form of rooting will trip Knox. There used to be safe ways that didn't but with the introduction of the newer bootloaders this is no longer guaranteed...
Have you tried backing up any info you want to keep to a pc then factory resetting, I found KK was a b!tch until I reset it due to old JB data scraps causing issues...
ultramag69 said:
You won't trip Knox if you install a KK rom but will if you try to flash bak JB.
Any form of rooting will trip Knox. There used to be safe ways that didn't but with the introduction of the newer bootloaders this is no longer guaranteed...
Have you tried backing up any info you want to keep to a pc then factory resetting, I found KK was a b!tch until I reset it due to old JB data scraps causing issues...
Click to expand...
Click to collapse
I'm on stock 4.3 and not having any issues at the moment - other than my Note 3 not picking up the 4G signal on 3 for some infuriating reason.
So can I flash a stock KK rom without rooting then? I'm probably being thick but thought you had to be rooted to flash any kind of ROM?
Medical HRH said:
I'm on stock 4.3 and not having any issues at the moment - other than my Note 3 not picking up the 4G signal on 3 for some infuriating reason.
So can I flash a stock KK rom without rooting then? I'm probably being thick but thought you had to be rooted to flash any kind of ROM?
Click to expand...
Click to collapse
You have to be rooted to flash the custom roms provided here and that will mostly be thru recovery. It will surely trip knox. To flash stock roms from sammobile you don't need root. That can be done thru odin.
Sent from my SM-N9005 using XDA Premium 4 mobile app
I would suggest however, if you are network locked to unlock 1st... If you need to flash a separate modem afterwards this can trip Knox as you aren't really using a "Stock rom"...
Also make sure re-activation lock is OFF.... If you go to Kitkat and you don't have a KK rom yet you are stuck with a softbricked phone until you do get the KK rom... You can't go back to JB after flashing KK rom due to a new bootloader...

[QUESTION] KNOX and OTA's

Im aware you cant reset knox counter thats not what im asking. After you trip knox and root using CF method, can you flash stock everything with Odin and take OTA's normally?
charlie-n said:
Im aware you cant reset knox counter thats not what im asking. After you trip knox and root using CF method, can you flash stock everything with Odin and take OTA's normally?
Click to expand...
Click to collapse
I have a similar question... currently Rooted and have been getting an update message for system update> Can I accept it?
charlie-n said:
Im aware you cant reset knox counter thats not what im asking. After you trip knox and root using CF method, can you flash stock everything with Odin and take OTA's normally?
Click to expand...
Click to collapse
Good question, I am coming from the EVO Lte, and am new to Samsung. So I am a little curious as well.
I have the same question. I've searched the forums and can't find a definite answer. Some say you can flash back to stock and accept OTAs with Knox still tripped, while others say that Knox being 0x1 will disable OTAs completely.
blackrabbitklan said:
I have the same question. I've searched the forums and can't find a definite answer. Some say you can flash back to stock and accept OTAs with Knox still tripped, while others say that Knox being 0x1 will disable OTAs completely.
Click to expand...
Click to collapse
I think OTAs will not work, but you can still update via Kies.
BLuFeNiX said:
I think OTAs will not work, but you can still update via Kies.
Click to expand...
Click to collapse
Thanks for the info. That won't be a problem for me, but if I ever end up selling the device, I guess I'll have to explain the situation to the potential buyer. I've read there's an OTA out of the box on some devices, and mine will be here tomorrow. I was gonna play around with it completely stock just in case I have any issues and have to send it back. Once I'm sure I'm keeping it, if there is an update, I'll root first and then flash back to see what happens. I'll update this thread with my results.
BLuFeNiX said:
I think OTAs will not work, but you can still update via Kies.
Click to expand...
Click to collapse
How do you update via Kies ?
trevagreene said:
How do you update via Kies ?
Click to expand...
Click to collapse
Based on my experience with my siii and other samsung devices it's more or less:
1) Make sure kies is up to date (I usually get prompted, otherwise go to "information>check for updates" at the top of kies)
2) plug in your phone (if you have pin or some other security system make sure you unlock it and on the home screen)
3) You should see the device under connected devices
4) At this point I usually get prompted, if you don't make sure the device is selected and look under "firmware information" and it should either allow you to update or tell you the device is up to date.
I rooted my s5 after 1 week, of course Knox status has changed and ota is not working, because Rom status is custom.After doing factory reset ota is working, as well as Rom status is official. I have to mention that I did rooting because of blocking ads and unwanted apps, so I do not use any custom Rom.hope this could help to understand Knox and ota difficulties.
Odesláno z mého SM-G900F pomocí Tapatalk
standa75 said:
I rooted my s5 after 1 week, of course Knox status has changed and ota is not working, because Rom status is custom.After doing factory reset ota is working, as well as Rom status is official. I have to mention that I did rooting because of blocking ads and unwanted apps, so I do not use any custom Rom.hope this could help to understand Knox and ota difficulties.
Odesláno z mého SM-G900F pomocí Tapatalk
Click to expand...
Click to collapse
So was rooting preserved after you did a factory reset? Was the knox counter status back to 0 or was it still tripped
vayu said:
So was rooting preserved after you did a factory reset? Was the knox counter status back to 0 or was it still tripped
Click to expand...
Click to collapse
I am still rooted after factory reset via stock Rom. Knox status is tripped. Afaik there is not known solution how to reset Knox to previous state now.
Odesláno z mého SM-G900F pomocí Tapatalk
Can someone please explain to me what is this KNOX and what does it do. How can I check its status?!
It's like the triangle on various Samsung devices. From what I understand, it will display a message or counter if you've modified the OS. This basically tells a service tech or phone carrier employee that you messed with the phone and voided your warranty. As stated, it also disables OTAs as well.

Camera crash after modem update

Hi guys,
After updating my modem with ZHUFNL1 (GSM_Modem_ZHUFNL1_and_LTE_Modem_ZHUFNL1.tar), the camera stopped working. I tested multiple different ROMs, and a full system wipe, with no luck. I have a Knox free bootloader, that means I don't even have the Knox warranty 0x0 message. Never upgraded to Knox roms. I saw in a post about installing a full ROM (bootloader and all) in order to get the camera fixed, but not sure if that would also get me knoxed? What are my options here?
Thanks!
You will receive knox if you update.
But it can be removed if you have root. Or you can flash a stock rom that has knox removed.
I assume you don't have anymore warranty since the latest versions of the s4 come with the knox bootloader.
So it won't matter if you get knox and root the phone. There's no warranty to lose.
GDReaper said:
You will receive knox if you update.
But it can be removed if you have root. Or you can flash a stock rom that has knox removed.
I assume you don't have anymore warranty since the latest versions of the s4 come with the knox bootloader.
So it won't matter if you get knox and root the phone. There's no warranty to lose.
Click to expand...
Click to collapse
Thank you...I'd like to try first without knox. What do you mean it can be removed if I have root? I don't quite understand that.
Could you point me to a stock ROM with no knox?
EDIT: Oh I see, you talk about removing the app part from the ROM, but not the bootloader, right? Still, I'd like to install a knox-less ROM first...
timonoj said:
Thank you...I'd like to try first without knox. What do you mean it can be removed if I have root? I don't quite understand that.
Could you point me to a stock ROM with no knox?
EDIT: Oh I see, you talk about removing the app part from the ROM, but not the bootloader, right? Still, I'd like to install a knox-less ROM first...
Click to expand...
Click to collapse
http://forum.xda-developers.com/galaxy-s4/i9505-develop/rom-bhp-rom-v6-supercharged-t2833146
That is a knox free rom.
I haven't used it personally. though.

Galaxy S4 USC Unroot?

Hello,
I have a galaxy s4 on 4.4.2 that I rooted using kingroot a while back. It is a US Cellular SCH-R970. Knox has not been tripped. Under device status it says the phone is custom. This means I cannot update to 5.0.1.
My question is, how would I return the phone to official status without 1. Tripping knox, and 2. Keeping all of my data. Also, do you know if I can root with kingroot once I get on 5.0.1.
Baseband is R970TYUFNK1.
Thank You!
Hi,
Flash a proper complete stock firmware via ODIN. Firmware for R970TYUFNK1 is R970TYUFNK1 (itself).
Sent from my GT-I9500
krasCGQ said:
Hi,
Flash a proper complete stock firmware via ODIN. Firmware for R970TYUFNK1 is R970TYUFNK1 (itself).
Sent from my GT-I9500
Click to expand...
Click to collapse
Would you happen to know where I can find a download for that? Also wouldn't flashing that delete everything?
Thanks for all the help!
BeastMode6 said:
Would you happen to know where I can find a download for that? Also wouldn't flashing that delete everything?
Thanks for all the help!
Click to expand...
Click to collapse
SamMobile, Samsung Updates, or via SamFirm app. I usually rely on SamFirm.
Edit: As long as Re-partition and NAND Erase All is unticked on Odin, it should be fine.
PS Note: You can install newer firmware over your current firmware via Odin, too.
Sent from my GT-I9500
krasCGQ said:
SamMobile, Samsung Updates, or via SamFirm app. I usually rely on SamFirm.
PS Note: You can install newer firmware over your current firmware via Odin, too.
Sent from my GT-I9500
Click to expand...
Click to collapse
This won't delete anything on my phone though, right?
BeastMode6 said:
This won't delete anything on my phone though, right?
Click to expand...
Click to collapse
It would be wise to backup and wipe data before flashing. Otherwise you might encounter problems.
And do not use kingoroot to root lollipop. It used to not work or cause problems. Use cf autoroot method, if your device is supported.
GDReaper said:
It would be wise to backup and wipe data before flashing. Otherwise you might encounter problems.
And do not use kingoroot to root lollipop. It used to not work or cause problems. Use cf autoroot method, if your device is supported.
Click to expand...
Click to collapse
Problem is cf auto root trips knox.
If I flash R970TYUgoh2 would I keep knox at 0x0 and all of my apps? Then I can root with kingroot.
BeastMode6 said:
Problem is cf auto root trips knox.
If I flash R970TYUgoh2 would I keep knox at 0x0 and all of my apps? Then I can root with kingroot.
Click to expand...
Click to collapse
Yes, but backup is mandatory. About Kingroot, see again previous post.
Sent from my GT-I9500
BeastMode6 said:
Problem is cf auto root trips knox.
If I flash R970TYUgoh2 would I keep knox at 0x0 and all of my apps? Then I can root with kingroot.
Click to expand...
Click to collapse
Having knox triggered is just a bunch of crap from Samsung to scare you. Unless you actually use knox. Or if you are afraid from losing your warranty. Which is also crap, because, whilst reading the warranty file, I saw that it won't cover water damage, it won't cover a broken screen and a bunch of other stuff. The only thing it covers is actual hardware failure. And if the phone is new, that's pretty unlikely. Even if it does fail, Samsung has no way to see if knox has been triggered until they change your hardware and are able to boot up the phone. At that point they can't refuse to take it into warranty service anymore.
GDReaper said:
Having knox triggered is just a bunch of crap from Samsung to scare you. Unless you actually use knox. Or if you are afraid from losing your warranty. Which is also crap, because, whilst reading the warranty file, I saw that it won't cover water damage, it won't cover a broken screen and a bunch of other stuff. The only thing it covers is actual hardware failure. And if the phone is new, that's pretty unlikely. Even if it does fail, Samsung has no way to see if knox has been triggered until they change your hardware and are able to boot up the phone. At that point they can't refuse to take it into warranty service anymore.
Click to expand...
Click to collapse
Wow, that warranty is a load of ****. Also the phone is over a year old so I'd doubt it's still under warranty anyway.
What would you recommend to make a backup? I don't have fast Internet at all (300 kbps down), so I think a local backup would be more efficient.
Thanks for all the help! Have a good Christmas!
BeastMode6 said:
Wow, that warranty is a load of ****. Also the phone is over a year old so I'd doubt it's still under warranty anyway.
What would you recommend to make a backup? I don't have fast Internet at all (300 kbps down), so I think a local backup would be more efficient.
Thanks for all the help! Have a good Christmas!
Click to expand...
Click to collapse
Since it is rooted I suggest titanium backup to backup apps and data.
GDReaper said:
Since it is rooted I suggest titanium backup to backup apps and data.
Click to expand...
Click to collapse
OK I flashed 5.0.1 successfully, all my data carried over. Now I need to root. Do you know where I can download the cf autoroot files for jflteusc or sch-r970 on 5.0.1?
There is a cf auto root thread in the general section. Or you could simply google "cf auto root s4".
Make sure to read the thread.
GDReaper said:
There is a cf auto root thread in the general section. Or you could simply google "cf auto root s4".
Make sure to read the thread.
Click to expand...
Click to collapse
I got it, now on 5.0.1 rooted. Would it be safe to install cwm via odin?
BeastMode6 said:
I got it, now on 5.0.1 rooted. Would it be safe to install cwm via odin?
Click to expand...
Click to collapse
cwm is outdated. Use twrp. And yes, you can install it via odin or other methods.
GDReaper said:
cwm is outdated. Use twrp. And yes, you can install it via odin or other methods.
Click to expand...
Click to collapse
OK I have that installed now. I'm looking for some new roms and found that there are practically none for the sch-r970. Could I just use roms for the gt i9505 (jflte) or would this not work at all? I'm looking for a 6.0 rom.
JDCTeam AOSP has your device model on the support list. They have Lollipop and Marshmallow.
But you should be able to use other GT-I9505 roms too.
GDReaper said:
JDCTeam AOSP has your device model on the support list. They have Lollipop and Marshmallow.
But you should be able to use other GT-I9505 roms too.
Click to expand...
Click to collapse
Under their downloads section they have 2 untagged files (doesn't say GSM or cmda) and one GSM (won't work). Will one of the untagged roms work?
BeastMode6 said:
Under their downloads section they have 2 untagged files (doesn't say GSM or cmda) and one GSM (won't work). Will one of the untagged roms work?
Click to expand...
Click to collapse
Marshmallow roms have been split into gsm and cmda, due to changes in the radio. You have a cmda device.
The initial build of aosp marshmallow was for both cmda and gms devices. The newest build (the december 24th build) is split into two. Gsm version has been released but cmda version needs more work.
So you will have to download the 6th december build which was unified. Or the lollipop builds.
Lollipop builds have a different thread and a different link.

Will restored rooted phone allow to use Knox again

Hello,
I was a little bit to fast to root my s7 edge. My company now requires me to use knox to be able to use their exchange services for contacts,mail and calendar.
So my questions is: will I be able to use knox again if I factory restore my phone again? I have only rooted the phone and NOT flashed twrp yet.
Thank you in advance!
re: knox
karstensson said:
Hello,
I was a little bit to fast to root my s7 edge. My company now requires me to use knox to be able to use their exchange services for contacts,mail and calendar.
So my questions is: will I be able to use knox again if I factory restore my phone again? I have only rooted the phone and NOT flashed twrp yet.
Thank you in advance!
Click to expand...
Click to collapse
No it won't.
Once Knox is tripped there is nothing you can do that will allow you to use knox again.
Factory reset and restore will not change the knox status.
Good luck,
Have a great day!
damn! Then i guess i'll have to buy another phone for work Then i guess i can install xposed and twrp as well
karstensson said:
damn! Then i guess i'll have to buy another phone for work Then i guess i can install xposed and twrp as well
Click to expand...
Click to collapse
Whats the point, you will trip knox again installing twrp, so you wont be able to use it for work
Sent from my SM-G930F using XDA-Developers mobile app
wegiwegi said:
Whats the point, you will trip knox again installing twrp, so you wont be able to use it for work
Sent from my SM-G930F using XDA-Developers mobile app
Click to expand...
Click to collapse
Sorry i was a bit unclear in my last post. Of course i meant installing twrp on the current device where knox is already tripped.

Categories

Resources