Hi guys so I'm really sorry if this has been asked millions of times but what I want to know is, does tripping the KNOX flag open a huge risk to normal system functionality not working? Now I know KNOX tripping, prevents you from using KNOX related stuff but does it stop you from an average joe using their phone normally, installing apps, sideloading apps, using the camera.
Tripping knox does affect on phone performance when back to stock ?
No it does not
Tripping knox stops you using Knox and also voids your warranty
(Well so called void, people i know still making claims with Samsung even tho Knox is tripped)
I tripped a year ago, and my device is like a fine wine - gets better as each day passes
is knox on 0x1 and back to stock rom is disable OTA and kies update or not ?
Remember Me? said:
is knox on 0x1 and back to stock rom is disable OTA and kies update or not ?
Click to expand...
Click to collapse
OTA should update yes, Knox is just a security feature, it does not medal with the OS if its broke / disabled i.e. 0x1
So knox is only for warranty, nothing else is
Remember Me? said:
So knox is only for warranty, nothing else is
Click to expand...
Click to collapse
Pretty much Let me explain in more detail.
Actually maybe not, Have a read here:
http://www.samsung.com/uk/business/solutions-services/mobile-solutions/security/samsung-knox
Its a security feature, The security is rendered usless if you root the device (Trip the Knox)
Imagine you have this device that is encrypted with the highest level of security.
You root the device, meaning the Security is no longer in place as 3rd party apps can have Root access and can meddle with the security.
The device trips itself 0x1 to say DONT use this security any more its pointless
The device has been compromised........
Trying to explain it in a much simpler process
Maybe another way to explain:
The business you work for, Give you a nice shiny note 3, They want you to use this device for Work too, But they are happy for you to use it for pleasure too.
Now the applications the Business will install are private apps, May contain sensitive information or access to the company via VPN or anything.
They company its self would not want to trust a user to install ANY apps that could hijack the phone and attack the company's software / connections
So Knox comes along.
The business installs the Business side on Knox, And you as a user can use the phone normally
Normally cannot touch Knox, and Knox cannot touch Normal
If you trip knox i.e. Root, Then the security is pointless, This then disabled knox - Now the business owner knows of the security breach and none of the company applications or connections have been compromised.
KNOX counters only affect two things: Warranty and the KNOX secure system.
Tripping KNOX is similar to breaking the seal on any piece of hardware. It renders your warranty void. This doesn't mean they won't repair it, just that it'll cost you money. You can always get additional insurance if you worry about it. If you're in the EU it doesn't matter at all. (unless you do something to cause a hardware defect.)
Secondly, KNOX has two parts, the counter and the security container. The latter is an environment on your phone in which you can work and store files. (like a virtual machine.). Any files inside the KNOX container can't be accessed outside it. This is mainly aimed at the business and government market. 99% of regular users do not even enable KNOX's security container. (you have to start it yourself, if isn't active by default.)
Tripping the counter disables the container, for obvious security reasons. (so if you have any files inside they're gone.)
It does not affect anything else.
i had rooted my device a month ago and trapped knox but now i cant even install updates for my device so is there any way to recover it ?
So once u root and trip knox u can't receive ota updates? Is flashing with Odin the only way?
Sent from my SM-G900T using XDA Free mobile app
When you root you can't (and shouldn't) use OTA. When you trip KNOX you can't use OTA.
ODIN is the only option. Any update by any method risks disabling the root method, so think very carefully before updating.
knox
This is like a spam and a virus ,any bussiness owner can modify or block you're phone. I was force to install custom rom because knox block and delete google play on my S9+.Read more on google play reviews who install Samsung Knox Manage.
Replying to 5 year old posts and not a Note 3 .
Related
After an unsuccessful installation of ROOT I could run the Knox
So the device manufacturer's warranty void ... What else needs to know in order not to destroy the device?
Nothing, you are god.
No seriously, Knox 0x1 is just a binary counter showing that you have modified your device rendering your customer warranty invalid**. It doesn't affect any of the phone/Knox functions and you can continue using everything as it is.
** If you live in the EU you have a "protected" warranty. You can google/serach around to find more about this it has been discussed numerous times in the forum
shlomoreuven said:
After an unsuccessful installation of ROOT I could run the Knox
So the device manufacturer's warranty void ... What else needs to know in order not to destroy the device?
Click to expand...
Click to collapse
Well, you only have 2 problems:
- if you will ever need a warranty repair it MUST be for something that you can PROVE it was Samsung's fault or you will have to pay their (inflated) prices (as an alternative if the phone is completely dead they will never be able to see that knox was 1);
- you might have problems running some programs - the Knox safety container most obviously, but there might be other programs refusing to run (stuff with protected media comes to mind - RIAA are known to be paranoid and to force many other software companies to play at the same level of craziness).
a free bird
Do not be afraid!
Now you are a free bird:laugh:
Try attempts to root and flash custom recoveries
way to go...:good:
I enjoy my N9005 with Knox 0x1 than with Knox 0x0 ?
nothing., it just means that your device has lost its virginity and there's no losing it second time
Depending on where you are, you may have voided your warranty. But in the case that you need repair you can still pay a fee and get serviced.
Nothing to be stressing about
hello guys
I have N9005 Galaxy Note 3
latest UK NG1 rom installed, i found a method of rooting without tempering knox status
but is there any method of install custom recovery without changing knox status
and what are other disadvantages of knox 0x1 except warranty, as my phone doesnt have local warranty
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
effortless said:
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
Click to expand...
Click to collapse
It's nice to see a good, informative response to questions regarding knox.
effortless said:
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
Click to expand...
Click to collapse
Efficient and adequate communication Very helpful.
I need help
please some one .. i need help and it's so important . one of my friend encrypted his data though knox and regardless of what super su and root do with knox and it's disabling knox ... he rooted his phone ! (he is todler and didn't take notice )
anyway his knox now is disabled and he can't access to his data because in security knox is disabled .. how can we enable knox so he can decrypt knox with password and access to his data ... thanks in advance and keep in mind that please guys if you are not sure about how can solve problem without losing data , guide me . data encrypted with knox is so important to him .
target device is Galaxy note 3 n9005 .
If knox is 0x1, then you are out of luck.
celderic said:
If knox is 0x1, then you are out of luck.
Click to expand...
Click to collapse
if we unroot phone can't we just enable it ?
Depends how it's rooted. If Knox Warranty Void is 0x1 - you can't do nothing to it. If device is rooted keeping Knox flag 0x0, there might be a way to recover the data somehow, since Knox shouldnt be locked up.
Spere said:
Depends how it's rooted. If Knox Warranty Void is 0x1 - you can't do nothing to it. If device is rooted keeping Knox flag 0x0, there might be a way to recover the data somehow, since Knox shouldnt be locked up.
Click to expand...
Click to collapse
since Knox shouldnt be locked up " what is tha mean ? he used cf-root , i wonder knox is disabled , and data locked down in on the internal .. if we unroot it won't re enabled ?
if someone root he can't use knox for entire phone life
afraaa said:
since Knox shouldnt be locked up " what is tha mean ? he used cf-root , i wonder knox is disabled , and data locked down in on the internal .. if we unroot it won't re enabled ?
if someone root he can't use knox for entire phone life
Click to expand...
Click to collapse
If he used cf-auto-root Knox warranty is void (you can check that booting phone to download mode, if you don't know how or what that is, Google it. If there is line "Knox Warranty Void 0x1" means warranty is void, and "0x0" means it's fine)
Knox is 0x1 on his phone and that means there is no way to recover data from Knox container, at least as for now, most probably will never be.
Spere said:
If he used cf-auto-root Knox warranty is void (you can check that booting phone to download mode, if you don't know how or what that is, Google it. If there is line "Knox Warranty Void 0x1" means warranty is void, and "0x0" means it's fine)
Knox is 0x1 on his phone and that means there is no way to recover data from Knox container, at least as for now, most probably will never be.
Click to expand...
Click to collapse
yeah i know .. abut all you said ... i know guaranty is void but data to him is much important than phone guaranty .. i guess he should get phone to samsung and tell them " data all i need if you want money or void warranty the ndo it ... i guess the only way is samsung speciallists to bring back data !!! i wonder how he ignore the part that super su want's to disable knox !!!!
i wanna test to unroot and see if knox returns or not
afraaa said:
yeah i know .. abut all you said ... i know guaranty is void but data to him is much important than phone guaranty .. i guess he should get phone to samsung and tell them " data all i need if you want money or void warranty the ndo it ... i guess the only way is samsung speciallists to bring back data !!! i wonder how he ignore the part that super su want's to disable knox !!!!
i wanna test to unroot and see if knox returns or not
Click to expand...
Click to collapse
Oh god. Knox warranty void means Knox is not secure anymore. You can't recover data no matter what you do. If you unroot, it changes nothing.
Read this article from Samsung about Knox and CF-Auto-Root.
It clearly says: "Once the e-fuse bit is burned, a Samsung KNOX-enabled device can no longer create a KNOX Container, or access the data previously stored in an existing KNOX Container. This is a mechanism to ensure that enterprise data will be protected as long as the rooting attempt is detected."
Spere said:
Oh god. Knox warranty void means Knox is not secure anymore. You can't recover data no matter what you do. If you unroot, it changes nothing.
Read this article from Samsung about Knox and CF-Auto-Root.
It clearly says: "Once the e-fuse bit is burned, a Samsung KNOX-enabled device can no longer create a KNOX Container, or access the data previously stored in an existing KNOX Container. This is a mechanism to ensure that enterprise data will be protected as long as the rooting attempt is detected."
Click to expand...
Click to collapse
okay ... thanks for your time . really appreciated . if anyone knows other useful thing please let me know , this data is now not accessible is so critical unfortunately
Hi.
I can't find answer to this. I know that triangle away delete the number of installed custom roms but does they have any way to check that i had custom roms? I know the issues with samsung and warranty policy so i want to be sure that i can fight back if they refuse to fix my phone because of knox. (overheating) If they do this, this will be my last samsung phone.
Triangle Away worked when all the S4 had was the flash counter, but it doesn't do anything when it comes to the Knox flag. Once the Knox flag is tripped by installing a custom recovery, it stays tripped. There is no way to reset it. So Samsung has an easy way to check.
If warranty is a concern, there are ways to root that do not trip the flag. However, you're stuck with Touchwiz.
Strephon Alkhalikoi said:
Triangle Away worked when all the S4 had was the flash counter, but it doesn't do anything when it comes to the Knox flag. Once the Knox flag is tripped by installing a custom recovery, it stays tripped. There is no way to reset it. So Samsung has an easy way to check.
If warranty is a concern, there are ways to root that do not trip the flag. However, you're stuck with Touchwiz.
Click to expand...
Click to collapse
Oh i know it (i used to change firmware on old sony ericsson phones). I can lie about the knox since some people get it changed by samsung tools, thats why im asking if they have any other way than knox, like under bootloader. My phone is overheating because of hardware problem, i want to be prepared for service reject (stories about rejecting repair of defective screen etc.).
They might not even check the flash counter. You can give it a shot. The worst that might happen is that they send it back (Unless they repair it without consulting with you and charge you for it).
My phone also gets pretty hot when playing games and the phone is charging at the same time. It burns my finger if I keep it in one place, literally.
I guess that's how they intended it to work..
@VanHelsing091: I misunderstood your question. Sorry about that. As GDReaper points out, they may not even check for a tripped Knox flag. If they don't, there's really no way we know of that they can tell if the device has had a custom ROM flashed.
@GDReaper
But mine is getting 50 degrees on main screen, watching photos etc. over 65 while doing anything else, over 70 while charge and using chrome even on locked cpu clocks under 1300mhz.
@Strephon Alkhalikoi
Thanks. If they refuse to repair my phone on warranty because of knox - that will be a lie (damaging phone by custom rom... sure, without touching OC in kernel tools), so i wanted to be sure if i can lie too about phone history, it happened before triggering knox anyway.
Im hoping for the best and good service, if not then i may start one of those big posts about company vs user. Thanks again.
Anyone know how to install knox on rooted s7 edge....
Anyone know how to install a Anti virus on a full infected PC
"Same thing, Knox is a security suit, it isolates part of the system. keeping the security of a device, Rooting your device breaks this security rendering it useless"
Even if KNOX is 0x0 and rooted "Theoretically" it still checks for root access.
The only way is to go back to Stock. Thus is the exact reason we issue devices with Knox, To stop people rooting the device and granting them-self access to parts we wish to not be accessed (The reason list is endless)
This has been asked many a times before on CF-Root thread