Hi
I'm not overly fussed if Knox is tripped or not. What I do want to know though, is if its true that radio updates can't be applied once its tripped?
Cheers
Why would you think this? I can't think of an obvious rationale for Samsung doing that.
In the narrow sense of whether 0x1 would prevent an automatic OTA update.. I don't know. I've never had reason to suspect or look into that. I can tell you that you can manually update the radio with a 0x1 flag.
.
That's what i figured.
I was reading one of the rooting threads and someone was saying that once he had 0x1 he always get a secure error when trying to flash the radio.
If it's fine then I'll just CF Autoroot rather than fussing with towelroot
What is radio ?
TheMathMan said:
That's what i figured.
I was reading one of the rooting threads and someone was saying that once he had 0x1 he always get a secure error when trying to flash the radio.
If it's fine then I'll just CF Autoroot rather than fussing with towelroot
Click to expand...
Click to collapse
I think he must be confused about the changes that occurred with the 4.3+ OS. The bootloader after 4.3 is more restrictive and will sometimes balk at flashing a radio, but it does so for both 0x0 and 0x1 flags, so it's a moot point. The workaround to that is, if necessary, is to flash a full firmware image which will succeed in updating the radio even with a 0x1 flag.
He probably incremented his Knox flag right around the time 4.3 came out and doesn't realize what is really going on. That behaviour i.e. bootloader authorization failures appears to vary by carrier and radio version FWIW. But again, in the worst case, you can still update your radio by flashing a full firmware image.
You could preserve your Knox flag by using Towel root. But you wouldn't be able to use a custom recovery or kernel without incrementing the flag and I for one would not give up either.
The only things that the flag really effect are the secure storage feature that few use and the supposed effect on your warranty. But it's usually Samsung direct trying to deny a warranty claim due to a 0x1 flag. Most carriers don't care about Knox, so claims made through carriers are typically unaffected. And Samsung can't enforce that prejudice in the EU either.
@pratto
The radio (aka modem) is the firmware component that enables your phone to communicate with the carrier's network.
.
.
Cheers for the info. I'm in the UK so root I will
I'm only after root for the Folder Mount app.
I preferred this method of effectively swapping the external and internal SD cards myself. But either way, I'm sure that you will find root useful.
.
Related
hello guys
I have N9005 Galaxy Note 3
latest UK NG1 rom installed, i found a method of rooting without tempering knox status
but is there any method of install custom recovery without changing knox status
and what are other disadvantages of knox 0x1 except warranty, as my phone doesnt have local warranty
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
effortless said:
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
Click to expand...
Click to collapse
It's nice to see a good, informative response to questions regarding knox.
effortless said:
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
Click to expand...
Click to collapse
Efficient and adequate communication Very helpful.
I tried to root with towelroot=not support?:crying:
I tryied vroot and it support,no dare to click, will it trip knox?
Others like geniusroot,kingo root support n trip knox?
Any chances to root without trip knox?
Thank you.
Hello.
I had rooted my Galaxy S4 (i9505), 4.4.2, without triggering the Knox Flag, using CF-Auto-Root, via Odin. The Flash Counter is now 1, due to flashing something, but Knox is 0x0. Flash counter can be reseted by using Triangle Away,
Hope this helps.
http://forum.xda-developers.com/showthread.php?t=2292615
Proof:
https://www.dropbox.com/s/mkjnmpwcq6pz2se/DSC_3831.JPG?dl=0
(no 0x1 flag)
https://www.dropbox.com/s/gctx9ejiin47rrp/Screenshot 2014-10-04 17.08.39.png?dl=0
(device supported by Kies)
https://www.dropbox.com/s/v8hpbmo815ltn1w/2014-10-04 14.09.39.png?dl=0
(SuperUser working)
Mind that you have to install BusyBox from Google Play, cause it does not come with it.
Have fun
costin96 said:
Hello.
I had rooted my Galaxy S4 (i9505), 4.4.2, without triggering the Knox Flag, using CF-Auto-Root, via Odin. The Flash Counter is now 1, due to flashing something, but Knox is 0x0. Flash counter can be reseted by using Triangle Away,
Hope this helps.
http://forum.xda-developers.com/showthread.php?t=2292615
Proof:
https://www.dropbox.com/s/mkjnmpwcq6pz2se/DSC_3831.JPG?dl=0
(no 0x1 flag)
https://www.dropbox.com/s/gctx9ejiin47rrp/Screenshot 2014-10-04 17.08.39.png?dl=0
(device supported by Kies)
https://www.dropbox.com/s/v8hpbmo815ltn1w/2014-10-04 14.09.39.png?dl=0
(SuperUser working)
Mind that you have to install BusyBox from Google Play, cause it does not come with it.
Have fun
Click to expand...
Click to collapse
Thanks to you.Still can not root at the moment fir I9500
Not included - Triangle Away - ! NOT OPERATIONAL ON THE GT-I9500 !
Triangle Away can be used to reset the flash counter after installing CF-Root. The flash counter keeps track of how many custom firmwares you have flashed, as this voids warranty. (No idea what this about ? Read up on it, you will want to use this !)
ttkyy said:
Thanks to you
Click to expand...
Click to collapse
Bear in mind, that I am not 100% sure that it will work on ALL Galaxy S4 devices (I mean not trigger it).
Also bear in mind that OTA (Over the air update) will NOT work, it will return the message "Phone was been personalized."
Although, Kies sees it. Also make sure you don't have Knox mode activated or installed.
LATER EDIT:
I see that Triangle Away is only for the Qualcomm Galaxy S4 (9505). That means that you can't, at this moment, reset the flash counter. There are basically two things to worry about:
- Knox Flag -> as which seems so, I avoided it by installing that CF-Auto-Root on my 9505. I am not sure about avoiding it on 9500, but it should work.
- Flash Counter -> it raises everything you flash something via download mode. If it's 0, in Settings > About Phone > Status >Phone Status, it will return "Original" or something. If it's anything else than 0 (like 1, which I currently have cause I re-flashed root due to some tiny problem), it will return "personalized" or something like it. That will still void warranty IF the phone is sent to warranty like that, but will NOT trigger Knox. Also that will stop OTA Updates from working, but Kies updates will work (for some reason, samsung bug, use it ).
I have no idea how to help you regarding that Flash Counter on the 9500.
costin96 said:
Bear in mind, that I am not 100% sure that it will work on ALL Galaxy S4 devices (I mean not trigger it).
Also bear in mind that OTA (Over the air update) will NOT work, it will return the message "Phone was been personalized."
Although, Kies sees it. Also make sure you don't have Knox mode activated or installed.
LATER EDIT:
I see that Triangle Away is only for the Qualcomm Galaxy S4 (9505). That means that you can't, at this moment, reset the flash counter. There are basically two things to worry about:
- Knox Flag -> as which seems so, I avoided it by installing that CF-Auto-Root on my 9505. I am not sure about avoiding it on 9500, but it should work.
- Flash Counter -> it raises everything you flash something via download mode. If it's 0, in Settings > About Phone > Status >Phone Status, it will return "Original" or something. If it's anything else than 0 (like 1, which I currently have cause I re-flashed root due to some tiny problem), it will return "personalized" or something like it. That will still void warranty IF the phone is sent to warranty like that, but will NOT trigger Knox. Also that will stop OTA Updates from working, but Kies updates will work (for some reason, samsung bug, use it ).
I have no idea how to help you regarding that Flash Counter on the 9500.
Click to expand...
Click to collapse
Thanks again.
I just hav to avoid to take the risk and prevent warranty void,the answer is not to root at the moment.
Thanks gain:good:
Hi guys so I'm really sorry if this has been asked millions of times but what I want to know is, does tripping the KNOX flag open a huge risk to normal system functionality not working? Now I know KNOX tripping, prevents you from using KNOX related stuff but does it stop you from an average joe using their phone normally, installing apps, sideloading apps, using the camera.
Tripping knox does affect on phone performance when back to stock ?
No it does not
Tripping knox stops you using Knox and also voids your warranty
(Well so called void, people i know still making claims with Samsung even tho Knox is tripped)
I tripped a year ago, and my device is like a fine wine - gets better as each day passes
is knox on 0x1 and back to stock rom is disable OTA and kies update or not ?
Remember Me? said:
is knox on 0x1 and back to stock rom is disable OTA and kies update or not ?
Click to expand...
Click to collapse
OTA should update yes, Knox is just a security feature, it does not medal with the OS if its broke / disabled i.e. 0x1
So knox is only for warranty, nothing else is
Remember Me? said:
So knox is only for warranty, nothing else is
Click to expand...
Click to collapse
Pretty much Let me explain in more detail.
Actually maybe not, Have a read here:
http://www.samsung.com/uk/business/solutions-services/mobile-solutions/security/samsung-knox
Its a security feature, The security is rendered usless if you root the device (Trip the Knox)
Imagine you have this device that is encrypted with the highest level of security.
You root the device, meaning the Security is no longer in place as 3rd party apps can have Root access and can meddle with the security.
The device trips itself 0x1 to say DONT use this security any more its pointless
The device has been compromised........
Trying to explain it in a much simpler process
Maybe another way to explain:
The business you work for, Give you a nice shiny note 3, They want you to use this device for Work too, But they are happy for you to use it for pleasure too.
Now the applications the Business will install are private apps, May contain sensitive information or access to the company via VPN or anything.
They company its self would not want to trust a user to install ANY apps that could hijack the phone and attack the company's software / connections
So Knox comes along.
The business installs the Business side on Knox, And you as a user can use the phone normally
Normally cannot touch Knox, and Knox cannot touch Normal
If you trip knox i.e. Root, Then the security is pointless, This then disabled knox - Now the business owner knows of the security breach and none of the company applications or connections have been compromised.
KNOX counters only affect two things: Warranty and the KNOX secure system.
Tripping KNOX is similar to breaking the seal on any piece of hardware. It renders your warranty void. This doesn't mean they won't repair it, just that it'll cost you money. You can always get additional insurance if you worry about it. If you're in the EU it doesn't matter at all. (unless you do something to cause a hardware defect.)
Secondly, KNOX has two parts, the counter and the security container. The latter is an environment on your phone in which you can work and store files. (like a virtual machine.). Any files inside the KNOX container can't be accessed outside it. This is mainly aimed at the business and government market. 99% of regular users do not even enable KNOX's security container. (you have to start it yourself, if isn't active by default.)
Tripping the counter disables the container, for obvious security reasons. (so if you have any files inside they're gone.)
It does not affect anything else.
i had rooted my device a month ago and trapped knox but now i cant even install updates for my device so is there any way to recover it ?
So once u root and trip knox u can't receive ota updates? Is flashing with Odin the only way?
Sent from my SM-G900T using XDA Free mobile app
When you root you can't (and shouldn't) use OTA. When you trip KNOX you can't use OTA.
ODIN is the only option. Any update by any method risks disabling the root method, so think very carefully before updating.
knox
This is like a spam and a virus ,any bussiness owner can modify or block you're phone. I was force to install custom rom because knox block and delete google play on my S9+.Read more on google play reviews who install Samsung Knox Manage.
Replying to 5 year old posts and not a Note 3 .
Hi!
I'm trying to go back to stock to try knox features like secure folder. I have restored my device (Spain unbranded) with SmartSwitch and flashing firmware through Odin.
My problem is that Knox and Secure folder says that it can not work because I have installed unauthorized software. SafetyNet passes, on download mode, I see all official, and Apps (like banking apps) works fine without detecting root.
I have warranty void bit = 1. This means that, even flashing again stock firmware, I will never be able to use Knox? I'm worried about using root cloacks methods because of something stops working (for example due an update) I will unable to access to secure folder.
Thanks a lot in advance!
runtime_Err0r said:
Hi!
I'm trying to go back to stock to try knox features like secure folder. I have restored my device (Spain unbranded) with SmartSwitch and flashing firmware through Odin.
My problem is that Knox and Secure folder says that it can not work because I have installed unauthorized software. SafetyNet passes, on download mode, I see all official, and Apps (like banking apps) works fine without detecting root.
I have warranty void bit = 1. This means that, even flashing again stock firmware, I will never be able to use Knox? I'm worried about using root cloacks methods because of something stops working (for example due an update) I will unable to access to secure folder.
Thanks a lot in advance!
Click to expand...
Click to collapse
As your knox is tripped already i.e. showing 0×1 so you will never be able to use knox related security features as well as samaung pay on your phone..When knox is tripped once while in rooting or trying any unauthorised software installation, it will never been reset to initial state either by trying to install stock firmware again..
DroidHackeR said:
As your knox is tripped already i.e. showing 0×1 so you will never be able to use knox related security features as well as samaung pay on your phone..When knox is tripped once while in rooting or trying any unauthorised software installation, it will never been reset to initial state either by trying to install stock firmware again..
Click to expand...
Click to collapse
Ok thanks a lot for the info!
runtime_Err0r said:
Ok thanks a lot for the info!
Click to expand...
Click to collapse
https://forum.xda-developers.com/s7-edge/how-to/guide-secure-folder-samsung-knox-s-t3560079
^^That thread has a tutorial on how to get knox features working if your knox was tripped however I don't think it will as secure as it would be if used the knox features without knox being tripped.
runtime_Err0r said:
Ok thanks a lot for the info!
Click to expand...
Click to collapse
I can recommend you flashing ambasadii's ROM. I'm currently using it with the latest SuperStock Kernel and have secure folder fully working. You'll have to download the full 10.1 ROM and the 10.2 OTA which is about 500mb
Just wondering if installing stock firmware using Odin resets knox. I of course tripped it without even knowing what it was, and it looks like my banks mobile payment option requires knox 0x0 to work. I've looked at lot of posts on here with regards to resetting the knox counter, etc, but they are pretty outdated and most of the files required to accomplish it are long gone. If anyone could point me in the right direction it would be so helpful. I don't care about having root, I'd prefer to stay on the custom rom I'm on, but if that's not possible I'm willing to go back to stock. I noticed a lot of the threads are asking how to keep root while resetting the knox counter, but I just want to know if installing stock rom will do this for me.
Did a little digging and it looks like its impossible to do. Oh well, mods can close this thread.
Knox so important?
Even my note 3 got 0x20 count i will no bother if no abnormality happen..just carry on and live with it
I think it's only possible on the Exynos version, not on Snapdragon.
As for your bank, maybe it only detects root, NOT knox 0x1
So, you can try Magisk root method instead of the traditional SuperSU, because Magisk can hide root from a couple of apps that detect root, like Google Pay