Does installing stock firmware reset knox? - Galaxy Note 3 Q&A, Help & Troubleshooting

Just wondering if installing stock firmware using Odin resets knox. I of course tripped it without even knowing what it was, and it looks like my banks mobile payment option requires knox 0x0 to work. I've looked at lot of posts on here with regards to resetting the knox counter, etc, but they are pretty outdated and most of the files required to accomplish it are long gone. If anyone could point me in the right direction it would be so helpful. I don't care about having root, I'd prefer to stay on the custom rom I'm on, but if that's not possible I'm willing to go back to stock. I noticed a lot of the threads are asking how to keep root while resetting the knox counter, but I just want to know if installing stock rom will do this for me.

Did a little digging and it looks like its impossible to do. Oh well, mods can close this thread.

Knox so important?
Even my note 3 got 0x20 count i will no bother if no abnormality happen..just carry on and live with it

I think it's only possible on the Exynos version, not on Snapdragon.
As for your bank, maybe it only detects root, NOT knox 0x1
So, you can try Magisk root method instead of the traditional SuperSU, because Magisk can hide root from a couple of apps that detect root, like Google Pay

Related

[Q] N9005 : Is it safe to install cwm/other recovery, will it temper knox

hello guys
I have N9005 Galaxy Note 3
latest UK NG1 rom installed, i found a method of rooting without tempering knox status
but is there any method of install custom recovery without changing knox status
and what are other disadvantages of knox 0x1 except warranty, as my phone doesnt have local warranty
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
effortless said:
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
Click to expand...
Click to collapse
It's nice to see a good, informative response to questions regarding knox.
effortless said:
You can't install a custom recovery or custom kernel without tripping knox.
Knox is not necessarily for warranty but rather for the knox "app" on your phone. Knox is like having two phones in one. If you run the knox app you will see a separate android environment that is considered secure and you can install apps etc in there. People use this knox environment with their work email etc. Typically, if you use your phone and leave a company for example, they will remotely wipe your phone. In this case, only the Knox partition is wiped and your personal phone side remains untouched.
Tripping Knox tells people that Knox's security is not guaranteed anymore and Knox ceases to function on that phone.
If you've never used knox and don't have a need for it, tripping it won't harm you.
Another alternative is safe strap. This lets you use something that looks nearly identical to a custom recovery (with similar functions), but it was created for phones that can't write over their recovery partition. The AT&T and Verizon US phones have a version that works well. The AT&T safestrap works on the T-Mobile Note 3 and might work on your version. Research it and see if it works for you.
Click to expand...
Click to collapse
Efficient and adequate communication Very helpful.

[Q] Does Knox really lock radio updates?

Hi
I'm not overly fussed if Knox is tripped or not. What I do want to know though, is if its true that radio updates can't be applied once its tripped?
Cheers
Why would you think this? I can't think of an obvious rationale for Samsung doing that.
In the narrow sense of whether 0x1 would prevent an automatic OTA update.. I don't know. I've never had reason to suspect or look into that. I can tell you that you can manually update the radio with a 0x1 flag.
.
That's what i figured.
I was reading one of the rooting threads and someone was saying that once he had 0x1 he always get a secure error when trying to flash the radio.
If it's fine then I'll just CF Autoroot rather than fussing with towelroot
What is radio ?
TheMathMan said:
That's what i figured.
I was reading one of the rooting threads and someone was saying that once he had 0x1 he always get a secure error when trying to flash the radio.
If it's fine then I'll just CF Autoroot rather than fussing with towelroot
Click to expand...
Click to collapse
I think he must be confused about the changes that occurred with the 4.3+ OS. The bootloader after 4.3 is more restrictive and will sometimes balk at flashing a radio, but it does so for both 0x0 and 0x1 flags, so it's a moot point. The workaround to that is, if necessary, is to flash a full firmware image which will succeed in updating the radio even with a 0x1 flag.
He probably incremented his Knox flag right around the time 4.3 came out and doesn't realize what is really going on. That behaviour i.e. bootloader authorization failures appears to vary by carrier and radio version FWIW. But again, in the worst case, you can still update your radio by flashing a full firmware image.
You could preserve your Knox flag by using Towel root. But you wouldn't be able to use a custom recovery or kernel without incrementing the flag and I for one would not give up either.
The only things that the flag really effect are the secure storage feature that few use and the supposed effect on your warranty. But it's usually Samsung direct trying to deny a warranty claim due to a 0x1 flag. Most carriers don't care about Knox, so claims made through carriers are typically unaffected. And Samsung can't enforce that prejudice in the EU either.
@pratto
The radio (aka modem) is the firmware component that enables your phone to communicate with the carrier's network.
.
.
Cheers for the info. I'm in the UK so root I will
I'm only after root for the Folder Mount app.
I preferred this method of effectively swapping the external and internal SD cards myself. But either way, I'm sure that you will find root useful.
.

[Q] Custom rom install history - Samsung Warranty Service - i9505

Hi.
I can't find answer to this. I know that triangle away delete the number of installed custom roms but does they have any way to check that i had custom roms? I know the issues with samsung and warranty policy so i want to be sure that i can fight back if they refuse to fix my phone because of knox. (overheating) If they do this, this will be my last samsung phone.
Triangle Away worked when all the S4 had was the flash counter, but it doesn't do anything when it comes to the Knox flag. Once the Knox flag is tripped by installing a custom recovery, it stays tripped. There is no way to reset it. So Samsung has an easy way to check.
If warranty is a concern, there are ways to root that do not trip the flag. However, you're stuck with Touchwiz.
Strephon Alkhalikoi said:
Triangle Away worked when all the S4 had was the flash counter, but it doesn't do anything when it comes to the Knox flag. Once the Knox flag is tripped by installing a custom recovery, it stays tripped. There is no way to reset it. So Samsung has an easy way to check.
If warranty is a concern, there are ways to root that do not trip the flag. However, you're stuck with Touchwiz.
Click to expand...
Click to collapse
Oh i know it (i used to change firmware on old sony ericsson phones). I can lie about the knox since some people get it changed by samsung tools, thats why im asking if they have any other way than knox, like under bootloader. My phone is overheating because of hardware problem, i want to be prepared for service reject (stories about rejecting repair of defective screen etc.).
They might not even check the flash counter. You can give it a shot. The worst that might happen is that they send it back (Unless they repair it without consulting with you and charge you for it).
My phone also gets pretty hot when playing games and the phone is charging at the same time. It burns my finger if I keep it in one place, literally.
I guess that's how they intended it to work..
@VanHelsing091: I misunderstood your question. Sorry about that. As GDReaper points out, they may not even check for a tripped Knox flag. If they don't, there's really no way we know of that they can tell if the device has had a custom ROM flashed.
@GDReaper
But mine is getting 50 degrees on main screen, watching photos etc. over 65 while doing anything else, over 70 while charge and using chrome even on locked cpu clocks under 1300mhz.
@Strephon Alkhalikoi
Thanks. If they refuse to repair my phone on warranty because of knox - that will be a lie (damaging phone by custom rom... sure, without touching OC in kernel tools), so i wanted to be sure if i can lie too about phone history, it happened before triggering knox anyway.
Im hoping for the best and good service, if not then i may start one of those big posts about company vs user. Thanks again.

New to Samsung devices, but just need to make sure

Hello all,
This is my first Samsung device, the Galaxy S7 Edge Dual sim (SM-G935FD) bought from UAE.
I used to install TWRP and root every android phone I had before, so I am still not sure whether to root this one. I already have the files required for rooting, but I noticed that there are 2 ways of rooting:
1. Using Odin to install TWRP and then from there install SuperSU.
2. CF-Auto-Root.
What is/are the difference(s) in both methods?
My other question is: I read that rooting will trip Knox, and there is NO WAY to get it back to normal even flashing the original ROM. Is that the case?
One last thing, I am now stuck in the download mode (turned off the phone, pressed "Volume down", "Home" and "Power"), I did that just to check the info on the top left (model and warranty void...) but I cannot seem to restart the phone even by pressing the power button for more than 20 seconds, how can I turn the phone off then back on?
Thank you
*****EDIT*****
Regarding my last question (stuck in Download mode), pressing the same combination got me back to start the phone normally
Cf-AutoRoot will root your phone but then you will have to put your recovery on also usually flashed with Odin anyway or an app if it's working for the Galaxy S7... Twrp plus superuser will root and you'll have the recovery installed.... They both will trip your official (0x0) knox and make it (0x1) custom.... You can always go back to stock rom and get OTA updates but your knox will remain at 0x1......this is supposed to void the warranty but depending on where you live it won't make a difference.... Also if you want to flash roms and mods and kernels just use the twrp method and if you just want root and to be able to use root permission apps use the Cf-AutoRoot.... As of right now I haven't rooted because there aren't to many Roms available... I'm sure I will cause I miss titanium backup and the ability to get rid of all the bloat ware (especially Facebook & Microsoft ****).... The phone runs great without root and battery is excellent.... The last reason I was waiting was Samsung pay won't work with tripped Knox counter.... I live in the US but have the international 935F... So it doesn't look like this variant will support Pay anytime soon.... Probably gonna root when development picks up a little....
*edit*... Always have a stock rom just in case saved to your computer just in case... That would of saved me lots of freak outs and headaches years ago... Now it's the first thing I do before Rooting or flashing anything to my phone
Galaxy S7 edge
Kjc99 said:
Cf-AutoRoot will root your phone but then you will have to put your recovery on also usually flashed with Odin anyway or an app if it's working for the Galaxy S7... Twrp plus superuser will root and you'll have the recovery installed.... They both will trip your official (0x0) knox and make it (0x1) custom.... You can always go back to stock rom and get OTA updates but your knox will remain at 0x1......this is supposed to void the warranty but depending on where you live it won't make a difference.... Also if you want to flash roms and mods and kernels just use the twrp method and if you just want root and to be able to use root permission apps use the Cf-AutoRoot
Galaxy S7 edge
Click to expand...
Click to collapse
Thank you for the detailed reply.
I made a research yesterday on Knox (as I said, this is my first Samsung device), and I just wanted to make sure that I understood things properly.
So now after reading, tripping Knox will disable Samsung Pay (I do not have it in my country) so that is not going to make any difference. But, what about paying using the fingerprint sensor in Google Play, will it stop working if Knox is tripped? I also use the fingerprint sensor to login to my mobile banking app (instead of typing the password every time I want to login), will that stop too? I guess not but again just to be sure.
Thanks a lot once again.
I know when I rooted my S6 all the fingerprint stuff still worked so I dont think it will make a difference... Im not sure with the S7 edge but I would think it would still work cause all of those require a typed password before you use your fingerprint(1st setup only) Then use your fingerprint there after... .. Doesn't have anything to do with Knox
Galaxy S7 edge
yep, it all still works. just Samsung pay & private mode.

[ROOT/KNOX] Consequences?

Hi,
I've never rooted a Knox device before, and I can't find any good generic FAQ about this subject. If there is, feel free to direct me to it and delete this post.
I've read about flashing without tripping Knox, but only other devices. It seemed to involve not flashing the recovery though... Does anyone know anything about this?
If I cannot flash without tripping Knox, can I use XPOSED/MAGISK to make my apps work as normal? Or is this only for apps that detect the device is rooted?
Will my fingerprint scanner still work in Paypal, my banking app, Samsung Pass, etc? (Not sure if this is Knox or Root related in this instance)
If no to either of the previous two questions: is there a complete list of apps that are affected by the Knox flag?

Categories

Resources