Database Users

Samsung KNOX - a warning for the leaked 4.3 roms...

Just been through training for KNOX at work - and without blowing my NDA's - i'll pass on this for you all
If you EVER want to use KNOX - and you run one of the leaked 4.3 roms - NEVER NEVER NEVER flash any custom binaries to the phone again - you can only EVER run an offical untouched rom.
If you ARE running a 4.3 rom - reboot your phone into odin mode and see if you have a KNOX warrenty bit set to 0x0.
if you do - and you EVER want to use KNOX (and after training - im going to be using it meself) - you now can not roll back - or install a custom kernel or pretty much anything apart from further factory roms.
If you install anything else - the KNOX and TIMA systems will blow a fuse on the motherboard of your note2 and you will get flagged with KNOX warrenty bit 0x1.
This is not reversable - ever - without a board replacment.
The only effect will be that you cannot ever run KNOX after this - private or enterprise versions.
The first leaked 4.3 rom didnt have this enabled - the second one did (UEMJ5).
This is enforced in the bootloaders - once you get it - you cant go back.
If you dont care about KNOX - go hard However if your are going to use a BYOD type setup at your work and they want to enforce KNOX and youve blown the fuse in the motherboard - to be blunt - you are screwed Its not reversable sorry.
If you dont know what KNOX is actually about (if youve read "Little Brother" by Cory Doctorow think phone inside a phone type things) check out https://support.samsungknox.com/home and have a chew through it - there are some very good parts to it....
In any case - if you dont care about KNOX - go hard - nothing has changed.
If you DO care about KNOX - your not going to be able to change the firmware on your phone at all ever - if you do you will lose permanently the ability to run KNOX.
if you want to use your phone for work and work wants KNOX and your a custom rom person - your ****outaluck =)
And KNOX is not just the apk's..... its the entire stack from bootloaders upwards....
have fun peoples

I didn't think the Note 2 has the eFuse on its motherboard?

I'm running Hurricane ROM and it hasn't got any KNOX and the new bootloader stuff. I think this problem is with the "original" (leaked) 4.3 ROM

On the one hand I object to this kind of control by Samsung, it's my phone and I resent them wanting to control it.
On the other, I understand that many businesses don't want their staff using their network connections or accessing their data without protection and separation.
I do my best to not use my phone at all for my employers's business, but if they wanted me to and told me knox was obligatory then I would tell them they would have to provide a mobile device for me to use as I would tell them I could/wouldn't be able to promise that I wouldn't lose knox due to custom roms.

FloatingFatMan said:
I didn't think the Note 2 has the eFuse on its motherboard?
Click to expand...
Click to collapse
Backporting and using a fuse that hasnt been exposed or used previously - apparently there are unused fuses in the system there
in reply to Chris189 "I'm running Hurricane ROM and it hasn't got any KNOX and the new bootloader stuff. I think this problem is with the "original" (leaked) 4.3 ROM "
the original didnt give me the fuse setting - the new rom did give me the fuse setting
im curious to find out if a samsung signed rom with knox disabled will allow a rollback offically - but i dont think your going to get any leaking like that.
And from 2k14 going forward - all samsung devices will be running this
also take note of the "SELinux" permissive / enforced state..... enforced may break some apps....
anyways - back to work - "hoo...ray"
have fun peoples

Will root on stock rom and stock bootloader invalidate KNOX?
Sent from my GT-N7100 using XDA Premium 4 mobile app

emgluon said:
Will root on stock rom and stock bootloader invalidate KNOX?
Sent from my GT-N7100 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
From what the Samsung trainers were saying - once KNOX is on there and has that KNOX warrenty bit available (can be seen from odin mode on the phone - power , vol down and home when booting) a rollback will blow the fuse even to a factory rom - not really willing to try it on my note 2 to confirm sorry

Should have said... any idea of rooting 4.3 by whatever method invalidate this KNOX thing.
Had a feeling that most rooting involve flashing at least a insecure bootloader for it to work?
Sent from my GT-N7100 using XDA Premium 4 mobile app

Bull ****

here the solution by dr ketan..do not worry mate.
http://forum.xda-developers.com/showthread.php?t=2500823

cbdrift said:
...If you EVER want to use KNOX - and you run one of the leaked 4.3 roms - NEVER NEVER NEVER flash any custom binaries to the phone again - you can only EVER run an offical untouched rom...
Click to expand...
Click to collapse
Not applicable to Note2. This isn't the S4/Note3.
K thx

I don't know why Samsung implemented this stupid thing for Note2, maybe we can have 4.3 month earlier without this totally uselles ****, or have 4.3 with useful Note 3 things....do anyone know which manager decided about this ****?
Thx Jiri

note2 n7100 india running on 4.3 N7100XXUEMJ5
sora9009 said:
here the solution by dr ketan..do not worry mate.
http://forum.xda-developers.com/showthread.php?t=2500823
Click to expand...
Click to collapse
yes i tried it. it worked well for me.but wen i tried to go back to 4.1.2 i had no network and cudnt make calls from my phone.i flashed 4.3 N7100XXUEMJ5 back and its working well for now.anyone else had such problem? any solutoins?

vickyvc said:
yes i tried it. it worked well for me.but wen i tried to go back to 4.1.2 i had no network and cudnt make calls from my phone.i flashed 4.3 N7100XXUEMJ5 back and its working well for now.anyone else had such problem? any solutoins?
Click to expand...
Click to collapse
Did you have your IMEI when you flashed back? May have needed to restore your EFS? Or reflash the original modem?

To put the Knox worries aside, I did the following test.
Install newest leak (MJ5) bootloader (with knox). Warranty bit was 0.
Installed MI6 and installed knox which worked. Warranty bit was 0.
Flashed CWM recovery from Odin, suprisingly knox was still working. Warranty bit was still 0. Binary flash counter increased
Restored CM10.2 Nandroid backup. Warranty bit was still 0
So it seems that with the MJ5 bootloader, no knox fuse is being blown and you are able to rollback to a previous version without issues (if you have backed up EFS when you want to go back from 4.3 -> 4.1).

official font?

note 2 running on 4.3 N7100XXUEMJ5
Bert.C said:
Did you have your IMEI when you flashed back? May have needed to restore your EFS? Or reflash the original modem?
Click to expand...
Click to collapse
wen i went to 4.1.2 my IMEI was 004999010640000 and wen i flashed back to 4.3 N7100XXUEMJ5 it restored my original IMEI.
thanks for replying so fast........

FloatingFatMan said:
I didn't think the Note 2 has the eFuse on its motherboard?
Click to expand...
Click to collapse
The efuse thingy is complete bullcrap ( even on S4 or N3 ) :silly:
http://forum.xda-developers.com/showthread.php?t=2504258
---------- Post added at 08:52 PM ---------- Previous post was at 08:49 PM ----------
vickyvc said:
yes i tried it. it worked well for me.but wen i tried to go back to 4.1.2 i had no network and cudnt make calls from my phone.i flashed 4.3 N7100XXUEMJ5 back and its working well for now.anyone else had such problem? any solutoins?
Click to expand...
Click to collapse
if u want to go back to 4.1.2 u need newer builds which have the new EFS changes ( older builds will show fake IMEI if u don't have backup from the old EFS )

Mj5 bootloader can easily be downgraded to the previous bootloader without any issues
Sent from my GT-N7100 using XDA Premium 4 mobile app

srfairhurst said:
Bull ****
Click to expand...
Click to collapse
So it sounds as if this thread is inaccurate. Is it complete bs or are precautions actually needed for Note 2 users?
Sent from my SPH-L900 using Tapatalk

[Q] AVG Rooted Anti-theft, does it trip Knox?

Hi,
I'm trying to find out if I can install the AVG Anti-theft (free, rooted) app without tripping knox. It wants to either do a direct write or have me flash a update.zip in case I don't have NAND access (S-OFF). Do I? Anyone tried this? I like AVG's Anti-theft and it's free. Just wondering if I'll screw up my device flashing it. I haven't found anything via google. TIA.

This is a good question actually. I just rooted my Note 3 using Knox and USB 3.0 last night for the first time. I had the N3 since day 1 but had no PC to root it. Finally was able to pick up my new PC so I went ahead and rooted just being excited I was able to. But now that u mention it, before rooting with Knox I was using the paid version of Lookout mobile security and I thought when I rooted it would have wiped my phone completely but I still had all my apps. Needless to say Lookout was still installed and is still working after root without issue so far. Wether or not I tripped Knox idk? I did get the pop up asking me if I wanted to disable Knox after rooting which I said yes to, but at the time I wasn't even thinking about the fact I had Lookout installed. Like I said no issues so far, but if I tripped the counter or not I do not know? I'm not sure how u check even?
Sent from my SM-N900V using Tapatalk

You can check by booting into download mode with vol down + home + power i believe. It will say know 0x0 or 0x1. Interesting that you were able to install Lookout. Which method did you choose? was their an option? I'm using AVG, which lets you do writes to protected areas which is why I made this thread...

shutin said:
You can check by booting into download mode with vol down + home + power i believe. It will say know 0x0 or 0x1. Interesting that you were able to install Lookout. Which method did you choose? was their an option? I'm using AVG, which lets you do writes to protected areas which is why I made this thread...
Click to expand...
Click to collapse
I honestly don't remember what permissions or method I chose with Lookout on my N3. like I said I installed the premium version before rooting and it just ended up staying on the phone. Only reason I was even using Lookout was because I recently picked up the Z1s on my T-Mobile line and it came with the premium service of Lookout for free so I figured what the hell and installed it on my Verizon N3 as well. I'm sure whatever method I chose was just the method Lookout suggests by default though. I'll have to try n check n see if I tripped it or not and I'll let ya know.
Sent from my SM-N900V using Tapatalk

Ibkevin said:
I honestly don't remember what permissions or method I chose with Lookout on my N3. like I said I installed the premium version before rooting and it just ended up staying on the phone. Only reason I was even using Lookout was because I recently picked up the Z1s on my T-Mobile line and it came with the premium service of Lookout for free so I figured what the hell and installed it on my Verizon N3 as well. I'm sure whatever method I chose was just the method Lookout suggests by default though. I'll have to try n check n see if I tripped it or not and I'll let ya know.
Sent from my SM-N900V using Tapatalk
Click to expand...
Click to collapse
cool man, let us know the results. of course, you might have tripped know some other way but im very curious to find out your status. thanks for your help.

So... Where's this Knox thing??

Hey all,
I have an s5 on EE in the UK.
Heard about this Knox security software. It shows in my list of installed apps yet I can't seem to locate where it is?
Also debating root... Not sure if it's worth it, but did want to have a look at Knox.
Thanks

PIzzimperfect said:
Hey all,
I have an s5 on EE in the UK.
Heard about this Knox security software. It shows in my list of installed apps yet I can't seem to locate where it is?
Also debating root... Not sure if it's worth it, but did want to have a look at Knox.
Thanks
Click to expand...
Click to collapse
knox is a security implemented by samsung, it is active in the background, has no app for that. basically it "protects" samsung warranty better than the triangle in download mode witch shows how many imes you flashed, if you had roted ur device, in download mode will show u have 0x1 warranty voided.<---- thats basically KNOX.
Sent from my SM-G900H using XDA Free mobile app

Ahh ok.. Thank you.
Wow Samsung, you suck.

PIzzimperfect said:
Ahh ok.. Thank you.
Wow Samsung, you suck.
Click to expand...
Click to collapse
you are in the UK so Knox doesn't void your warranty once tripped

DSA said:
you are in the UK so Knox doesn't void your warranty once tripped
Click to expand...
Click to collapse
I check my insurance which I took out for my phone when I got it. They state that modifying or rooting will make my insurance void. How annoying. Is there some legality involved?
Thanks!

fenchai said:
knox is a security implemented by samsung, it is active in the background, has no app for that. basically it "protects" samsung warranty better than the triangle in download mode witch shows how many imes you flashed, if you had roted ur device, in download mode will show u have 0x1 warranty voided.<---- thats basically KNOX.
Sent from my SM-G900H using XDA Free mobile app
Click to expand...
Click to collapse
No. ^
KNOX is a security container -> a place where you install apps inside a secure container that cannot be tampered with on a high level TrustZone security algorithm.
It's great that the person above said what it essentially does to your device, but what he explained above is what happens when the TrustZone between the software and the hardware is breached during root/downgrade/unsigned flashing. This essentially would allow the viewer of the KNOX status to know when the device does not trust it's own body with secure enterprise level apps (Application Integrity), hence the KNOX warranty bit will be set from 0x0 to 0x1 meaning "I will not ever run a secure container anymore".
You won't find KNOX 2.0 on your device as this is now a paid service for enterprises at a rate of $3.60 and it is only set up on your device when you have the KNOX 2.0 kit deployed on your device, unlike KNOX 1.0 where you get to enter KNOX mode anytime you want.

I have some question about Knox

Hi
I have bought me a new samsung s5 and I really want to flash a different rom and kernel but now I wonder if someone can tell me if the warranty is gone if I do that (if I understood it right it would trigger the knox)?,is there any way to reset the knox thing?
best regards
Peter
Sent from my GT-I9505 using XDA Free mobile app

shysstkille said:
Hi
I have bought me a new samsung s5 and I really want to flash a different rom and kernel but now I wonder if someone can tell me if the warranty is gone if I do that (if I understood it right it would trigger the knox)?,is there any way to reset the knox thing?
best regards
Peter
Sent from my GT-I9505 using XDA Free mobile app
Click to expand...
Click to collapse
Look here http://omegadroid.co/wanted-knox-void-warranty-0x1/ for instance and KNOX cannot be reset atm. You can root with Towelroot without tripipng KNOX but flashing a kernel or custom recovery will set KNOX on 0x1. Yes, tripping KNOX will void warranty in some regions depending on local laws. In the EU it doesn`t unless the oem can prove that rooting was the cause of the defect.

shysstkille said:
I really want to flash a different rom and kernel but now I wonder if someone can tell me if the warranty is gone if I do that (if I understood it right it would trigger the knox)?,is there any way to reset the knox thing?
Click to expand...
Click to collapse
Knox doesn't matter to most people. Samsung will, particularly in North America disavow a warranty if Knox is tripped. But most people don't deal with Samsung for warranty issues. They deal with their carrier and most carriers don't care about Knox.And stronger consumer protection legislation in the EU means that your warranty rights cannot be summarily dismissed. You signature suggests that you may be in the EU in which case it isn't likely an issue for you. Do a forum search to see how your carrier, which you neglected to name, handles warranty claims.
A forum search would have given you better answers to all of your questions. You would find threads demonstrating that Knox can be reset. But it has only been demonstrated in limited and experimental conditions so far. It's not yet clear how widely that could be applied and isn't likely to be easily accessible to you anytime soon. A custom recovery, custom kernel or some older root methods will trip Knox.
If you are unwilling to trip Knox, then use towel root which shouldn't increment Knox and Safestrap to run your ROM. It's a lot more cumbersome and limits your choices. But you pick your poison and drink it.
.

fffft said:
Knox doesn't matter to most people. Samsung will, particularly in North America disavow a warranty if Knox is tripped. But most people don't deal with Samsung for warranty issues. They deal with their carrier and most carriers don't care about Knox.And stronger consumer protection legislation in the EU means that your warranty rights cannot be summarily dismissed. You signature suggests that you may be in the EU in which case it isn't likely an issue for you. Do a forum search to see how your carrier, which you neglected to name, handles warranty claims.
A forum search would have given you better answers to all of your questions. You would find threads demonstrating that Knox can be reset. But it has only been demonstrated in limited and experimental conditions so far. It's not yet clear how widely that could be applied and isn't likely to be easily accessible to you anytime soon. A custom recovery, custom kernel or some older root methods will trip Knox.
If you are unwilling to trip Knox, then use towel root which shouldn't increment Knox and Safestrap to run your ROM. It's a lot more cumbersome and limits your choices. But you pick your poison and drink it.
.
Click to expand...
Click to collapse
thanks all for your answer,For the moment I have towelroot in my phone but is there any difference between towelroot and a "normal"root?,I mean is it more limits when I use towelroot?,on my samsung s4 I have a "normal" root.
Sent from my GT-I9505 using XDA Free mobile app

shysstkille said:
is there any difference between towelroot and a "normal"root?,I mean is it more limits when I use towelroot?,on my samsung s4 I have a "normal" root.
Click to expand...
Click to collapse
No, root is root. Towel root is just a nickname to the latest way to obtain root.
.

fffft said:
No, root is root. Towel root is just a nickname to the latest way to obtain root.
.
Click to expand...
Click to collapse
åh,Nice,thanks a lot mate
Sent from my GT-I9505 using XDA Free mobile app

How do I check the Knox counter?.... :/
Sent from my SAMSUNG-SM-G900A using XDA Premium 4 mobile app

Toxicoblivion said:
How do I check the Knox counter?
Click to expand...
Click to collapse
A forum search would have told you this.. look on the download mode page, in the system properties or install an app like Phone Info.
.

shysstkille said:
thanks all for your answer,For the moment I have towelroot in my phone but is there any difference between towelroot and a "normal"root?,I mean is it more limits when I use towelroot?,on my samsung s4 I have a "normal" root.
Sent from my GT-I9505 using XDA Free mobile app
Click to expand...
Click to collapse
Towelroot uses an exploit so it won't trip your KNOX counter.
Using regular root on the GS5 trips KNOX.
But as stated above, flashing a custom recovery, kernel or ROM will trip KNOX regardless.
---------- Post added at 07:59 PM ---------- Previous post was at 07:58 PM ----------
Toxicoblivion said:
How do I check the Knox counter?.... :/
Sent from my SAMSUNG-SM-G900A using XDA Premium 4 mobile app
Click to expand...
Click to collapse
You can either use download mode like the guy who replied to you or download an app off playstore called Phone Info.
https://play.google.com/store/apps/details?id=org.vndnguyen.phoneinfo&hl=en

[Q] General inquiry about KNOX and FW types

Hello all,
I searched the forums round and round, and couldn't find my answers so I hope you will be able to help me out.
i'm looking for a new phone and decided I want to go with the S5. that was before i learned about KNOX and it's wonderful ways.
i'm a heavy modder, who will most definitely use a custom recovery and ROM/kernel.
my questions are:
1. would it be possible to flash a custom recovery / rom / kernel / modem despite KNOX being preset?
2. other then getting this 0x1 and voiding my official warranty, are there any other result to this? will something not work?
3. assuming I get an unlocked international phone, is there any need to mess/change my FW? or is that just part of guides for rooting without tripping KNOX ?
Basically, I want to be sure that I could do whatever I want to the phone without getting stuck or turning it unusable because of KNOX. my current phone is a Nexus 4 and it has been heaven. I want to preserve this feeling
thanks for the help guys, appreciate it!

Did you tried Towelroot method for rooting your device? I heard that doesn't trigger knox..

I would imagine my rooting the phone is the least of my worries.
as far as I know - and this is one of my questions - flashing a custom recovery and or rom will 100% trip KNOX.
not that I care, I just need to know if this is true..and my other questions as well
thanks!

A brief answer
If you - as you say "i'm a heavy modder" Samsung phones are not for you

I've heard tales of people having issues flashing modems when knox is triggered. I have not checked that out for myself Joe have I searched any further into the matter.
I plan on breaking knox soon though because screw knox.
Sent from my SM-G900F using Tapatalk

chainbr3ak said:
A brief answer
If you - as you say "i'm a heavy modder" Samsung phones are not for you
Click to expand...
Click to collapse
This answer really worries me to be honest.
could you elaborate?
I don't really care about KNOX, and as long as I can mod away and jump back and forth between modems/roms/kernels - I don't care for the warranty.
If indeed there is truth in the matter, and modem flashing will become a problem if KNOX is tripped, then this would be a deal breaker for me on this phone.
anyone care to add more info here?

Amornik said:
This answer really worries me to be honest.
could you elaborate?
I don't really care about KNOX, and as long as I can mod away and jump back and forth between modems/roms/kernels - I don't care for the warranty.
If indeed there is truth in the matter, and modem flashing will become a problem if KNOX is tripped, then this would be a deal breaker for me on this phone.
anyone care to add more info here?
Click to expand...
Click to collapse
You can, but you will always have problems like network, connection,calls, bugs and so on
Samsung devices do not provide the old pleasure as previously
Knox killed freedom of developers and people who like customizations

I would really appreciate an answer from someone who knows for sure.
does tripping KNOX disables the option to upgrade/downgrade the modem?

Amornik said:
I would really appreciate an answer from someone who knows for sure.
does tripping KNOX disables the option to upgrade/downgrade the modem?
Click to expand...
Click to collapse
No, KNOX tripping is only at the moment a warranty void solution for samsung. its like the flash count flags.
basically if you trip knox. you're already in it. you do what you want

Amornik said:
I would really appreciate an answer from someone who knows for sure.
does tripping KNOX disables the option to upgrade/downgrade the modem?
Click to expand...
Click to collapse
I bought my phone with ANCE firmware and the KNOX was tripped in the first hour by CF-AutoRoot. Now I'm on ANG2, flashed with Odin and the modem is updated correctly.

Dark_Avenger said:
I bought my phone with ANCE firmware and the KNOX was tripped in the first hour by CF-AutoRoot. Now I'm on ANG2, flashed with Odin and the modem is updated correctly.
Click to expand...
Click to collapse
Now i'm a bit confused when you say you upgrade the FW, you mean the modem baseband, right ?

Amornik said:
Now i'm a bit confused when you say you upgrade the FW, you mean the modem baseband, right ?
Click to expand...
Click to collapse
Exactly, but with full stock image flush (including bootloader). The full stock tar.md5 form sammobile includes the modem/bootloader/rom. I think that the important thing is to have a modem which is compatible with the bootloader (same version). Didn't try to mix different bootloader/modem(baseband) versions.

Tripping KNOX will only disable the feature which allows you to store some data on a encrypted part of the device (Mostly comercial use) when KNOX is tripped any data stored on the 'special' partition is destroyed.
So there are only 2 things that will be affected, your warranty (Not a problem in Europe) and the special partition that I explained earlier.
Sent from my SM-G906S using XDA Premium 4 mobile app

Thanks guys, excellent replies !
So...I did it !
I went and bought a brand new S5, and tripped KNOX within the hour. Man, did it feel sooo good !
custom recovery up, rom up, here we go!