Real Clarification on Samsung KNOX - Samsung Galaxy A51 Questions & Answers

I have read a lot about Samsung KNOX and how it is supposed to work, but the more I read the less I know how KNOX is tripped.
I understand what KNOX is, I know how it works and I know the supposed "reasons" it exists.
I also do know, that KNOX has changed a couple of times in the past years, which is perhaps the reason I find to much conflicting information on this topic.
So, since the A51 is quite a new phone, I want to know, how KNOX is tripped on the Galaxy A51.
Is unlocking the bootloader already enough?
Can you unlock the bootloader but flashing anything will make it trip?
What exactly is allowed with the newest KNOX and at which point does it exactly trip?
Can you not modify anything anymore, without tripping KNOX?

since Knox requires a separate login even after phone boots up i would guess it is not accessible with just a booted up and unlocked phone. last i read it created an additional "encrypted sandbox" on the already unlocked phone where data did not cross the sandbox barriers.

Aki-to said:
I have read a lot about Samsung KNOX and how it is supposed to work, but the more I read the less I know how KNOX is tripped.
I understand what KNOX is, I know how it works and I know the supposed "reasons" it exists.
I also do know, that KNOX has changed a couple of times in the past years, which is perhaps the reason I find to much conflicting information on this topic.
So, since the A51 is quite a new phone, I want to know, how KNOX is tripped on the Galaxy A51.
Is unlocking the bootloader already enough?
Can you unlock the bootloader but flashing anything will make it trip?
What exactly is allowed with the newest KNOX and at which point does it exactly trip?
Can you not modify anything anymore, without tripping KNOX?
Click to expand...
Click to collapse
Unolocking the bootloader isn't enough to trip Knox, it trips once you flash a modified file.
Like TWRP, a ROM, etc that doesn't have Samsung's signature of official software.

Related

Root without tripping Knox?

I've searched high and low and I'm not able to find a non-tripping version of root. I don't want any fancy roms just rooted stock. Help.<br/>
Nope no way to keep Knox as of now.
But the root method that's out there. Will just flash a recovery and root. It's shouldn't f change the system image. (I could be wrong but last I check.)
I like to keep Knox just in case I need to exchange the phone for any reason
Whats the best method if you have a USA AT&T note edge?
Looking for a way to root without tripping Knox as well...
Someone should start a pledge thread for it, that should get the devs interested...
Beach_Head said:
Looking for a way to root without tripping Knox as well...
Someone should start a pledge thread for it, that should get the devs interested...
Click to expand...
Click to collapse
Probably won't come for a while since not alot of devs have the phone yet.
NitroSS said:
Whats the best method if you have a USA AT&T note edge?
Click to expand...
Click to collapse
There is no current way to root the N915A. AT&T has it locked and so far no one has bothered to try to get it unlocked to achieve root.
Sent from my Samsung Note Edge using Tapatalk
In the same boat witha 915FY , willing to chip in if needed.
I'm sure I read it somewhere, just can't remember ATM....but there is a way to reactive Knox After rooting correct? I have the tmobile n915t.
strboy said:
I'm sure I read it somewhere, just can't remember ATM....but there is a way to reactive Knox After rooting correct? I have the tmobile n915t.
Click to expand...
Click to collapse
Dont think so mate... else what would be the point ? or even the hold up here ? just root and reset ?
If it were possible it woulda been announced by now i guess...
strboy said:
I'm sure I read it somewhere, just can't remember ATM....but there is a way to reactive Knox After rooting correct? I have the tmobile n915t.
Click to expand...
Click to collapse
As I understand it, KNOX flag is basically written as a "fuse". Once it's triggered, there's no going back.
And everyone, for the love of all things good and pure, AT&T and Verizon have locked bootloaders and there are NO root methods currently available. KNOX is irrelevant.
Finally, for anyone wondering about a non-KNOX-tripping method for actually ROOTABLE devices, nope. Not yet as far as I know. But why? Carriers still service phones that have the flag tripped.
jooniloh said:
As I understand it, KNOX flag is basically written as a "fuse". Once it's triggered, there's no going back.
And everyone, for the love of all things good and pure, AT&T and Verizon have locked bootloaders and there are NO root methods currently available. KNOX is irrelevant.
Finally, for anyone wondering about a non-KNOX-tripping method for actually ROOTABLE devices, nope. Not yet as far as I know. But why? Carriers still service phones that have the flag tripped.
Click to expand...
Click to collapse
In theory yes , you still get serviced but that mostly depends on the IQ of the person on the other end.
Im currently in Portugal. I took my note 3 to service and the knox was tripped . Battery Issue. They refused . I called customer service. They refused.
"If you tampered with the device, its your own fault"
I explained in other countries its still serviced , in France for example.
"this is not other countries , this is not France."
I have a 915FY now and , if possible , I would like to avoid this situation.
siriom said:
In theory yes , you still get serviced but that mostly depends on the IQ of the person on the other end.
Im currently in Portugal. I took my note 3 to service and the knox was tripped . Battery Issue. They refused . I called customer service. They refused.
"If you tampered with the device, its your own fault"
I explained in other countries its still serviced , in France for example.
"this is not other countries , this is not France."
I have a 915FY now and , if possible , I would like to avoid this situation.
Click to expand...
Click to collapse
Hmm I see. I wasn't aware of that issue. The service centers here have seen that the KNOX flag is tripped on my devices and still serviced them. All I can say is, pretty much everything that works for the note 4 (except roms) has been compatible with the edge (including root tools, TWRP, recovery-flashable mods, system file tweaks, etc.), so if any progress is made on finding a non-KNOX-tripping method, you're gonna see it on the Note 4 forums first. I'd keep an eye on that for any updates concerning your model.
I was hoping Geohots work on TowelRoot might be adapted somehow for 4.4.4 and eventually used for Note4/edge.(it stopped working for anything over 4.4.2 i was told)
I heard hes working for google now so he cant help anymore...
siriom said:
I was hoping Geohots work on TowelRoot might be adapted somehow for 4.4.4 and eventually used for Note4/edge.(it stopped working for anything over 4.4.2 i was told)
I heard hes working for google now so he cant help anymore...
Click to expand...
Click to collapse
Towelroot was only ever supposed to work on the S5. That it worked on anything else at all was chance. Anyways, it hasn't been updated in ages so don't hold your breath. If you really need root, I'd just go with one of the available methods. If you need it serviced, flash a stock ROM, go to a service center for your carrier, and act stupid. Don't start talking about root and all that. That has worked 100% of the time for me. When you took it in for service in the past (when they didn't service it) was your phone still rooted or have a custom recovery installed?

Triggered KNOX without doing anything

I just found out my knox is 0x1 now. I did not root or do anything to my s6. Updated to 5.1.1 . But there is one thing I am not sure if that will triggered knox.
I set up Find my mobile and on the reactivation lock. After that I tried to boot into recovery to do a factory reset. But it shows the reactivation lock and wasn't able to boot into recovery. So I boot into my phone and turn it off. I was able to factory reset my phone again. After that I tried looking at the info, it says KNOX is 0x1. I am sure before that was 0x0 as I have checked it. Will trying to boot into recovery while reactivation lock is on trigger the knox? Hope someone have information about this. And hope other don't make the same mistake as I do if you do not want to tripped your knox.
My phone wasnt rooted on 5.0.1 and knox was 0x1.. after installing 5.1.1, mine went also to 0x1 ???
Verstuurd vanaf mijn SM-G920F met Tapatalk
This may actually be good news. If there's a bug in that process, then the Knox warranty bit effectively becomes void for warranty issues. Samsung itself tripping Knox would be fantastic.
Bring your S6 back to Samsung...
r3ferrei said:
This may actually be good news. If there's a bug in that process, then the Knox warranty bit effectively becomes void for warranty issues. Samsung itself tripping Knox would be fantastic.
Click to expand...
Click to collapse
You do not loose your warranty by tripping Knox, not in the EU anyway
godutch said:
You do not loose your warranty by tripping Knox, not in the EU anyway
Click to expand...
Click to collapse
Any proof? Installing Root or Custom Rom can and will void warranty, as does tripping Knox which requires you to root, in and out of the EU and you will not beat Samsung if you try to contest it as it's set in stone. Modifications to the software or the hardware on a phone will void warranty whether you want to believe it or not.
As to the topic, yes, of course you did nothing to your phone, we believe you
Jonathan-H said:
Any proof? Installing Root or Custom Rom can and will void warranty, as does tripping Knox which requires you to root, in and out of the EU and you will not beat Samsung if you try to contest it as it's set in stone. Modifications to the software or the hardware on a phone will void warranty whether you want to believe it or not.
Click to expand...
Click to collapse
I'm in the US so I can't speak from first-hand; but Europe has different laws about warranty void and manufacturer servicing. KNOX has no bearing on whether your phone is warranty void or not in EU, or so says everyone from Europe from the past 2 years since KNOX was released.
Also, 5.1.1 on T-Mobile S6 KNOX is still 0x000, so it might help to post which carrier update is flipping KNOX because it might not be a Samsung issue but more a carrier issue.
Jonathan-H said:
As to the topic, yes, of course you did nothing to your phone, we believe you
Click to expand...
Click to collapse
There are actually people that occupy these forums without modifying their phones... shocker. Not everyone pokes their phone internals.
I have brought my phone back to samsung service center. I mentioned to the technician that the KNOX is triggered. He says that doesn't matter. My phone still in FULL WARRANTY. I was having all sorts of problem with my phone like auto shut down, hang, vibrates all of a sudden( like apps are getting error) ..
When I bring it in, they said will try to flash the rom for me, but after 5min waiting, they came out and said it was a hardware problem. I think it's getting a motherboard replacement. Will need a couple days.
PS: BTW, I'm from Malaysia.
Also in reply to Jonathan H "As to the topic, yes, of course you did nothing to your phone, we believe you"
Yes, I haven't tried any root . Else there wasn't any point creating this topic for discussion.
godutch said:
You do not loose your warranty by tripping Knox, not in the EU anyway
Click to expand...
Click to collapse
I dont care warranty.. however i want to be able to use S Pay
Verstuurd vanaf mijn SM-G920F met Tapatalk
AskinSavascisi said:
I dont care warranty.. however i want to be able to use S Pay
Verstuurd vanaf mijn SM-G920F met Tapatalk
Click to expand...
Click to collapse
Until S Pay even exists all this BS about S Pay and Knox is just that BS. If you have absolute proof that S pay is affected, then please show the evidence. Otherwise its all hypothetical gobbledygook. Blogs and stuff posted by individuals that have no real clue. The service doesn't even exist yet. Just like Tripping knox voiding warranties at least in the US. I have had my warranty fully accepted after rooting and tripping knox. Seems like there's more old wives tales stuff being stated on XDA now adays then the actual truth. My 2c......
I had my board changed btw, now my knox is 0x0 . It's a newer board manufactured in May too. It's all good now.

KNOX, Rooting, changing kernel

Hello,
Came from a Nexus device and I have some questions about "unlocking" etc.
When i want to install a custom kernel, do I need to unlock KNOX? What is knox?
If I unlock my phone, can i go back?
Thanks
Knox is in general a security feature. It is used for example for BYOD but it also brings a malwarescanner/antivirussoftware.
You dont have to unlock the bootloader since samsung phones come unlocked by default.
But if you install any custom software (kernel, rom) you knox flag will be triggered and this is not reversible.
Furthermore, this will disable Samsung Pay. Once KNOX is tripped, Samsung Pay is disabled forever on that particular device.

Magisk v14 - does it offer root without tripping Knox?

Hi guys
Magisk v14 has been released and it now offers installation without using custom recovery and still avaialble to use OTA's - does this mean I can root with Magisk (which it says is done by ADB) without tripping Knox? Description is below
"New Installation Method
Nearly a month ago, I introduced a way to install Magisk through ADB. This is nice for devices with no custom recovery support, or for people like me who wants to preserve stock recovery to apply OTAs. To make things even easier, I have added this feature natively into Magisk Manager. In Magisk Manager you can provide your stock boot image (in both raw image format or tar-ed up ODIN flashable format), the app will then patch the provided image. Other required files and scripts are extracted within the app's data, and will be picked up automatically while booting up once with a magisk patched boot image. Check the new instructions in the OP for more info.
Once your device has Magisk installed, you can install Magisk modules through Magisk Manager without custom recoveries. The powerful systemless interface means that you can literally do anything to your device - of course systemless-ly!"
I'm also interested in this. Hope someone knows if we can finally get root without tripping Knox.
Exactly.... if so then it really is the best of all worlds in my eyes
No, absolutely not. It still mods the boot.img which requires an unlocked bootloader. As soon as you unlocked the bootloader and it detects anything custom (Does not matter how it got there, if it's there, it's there) it will trip the fuse.
But doesn't the g955f already have an unlocked bootloader.. hence why it was easier to root before the g955u?
Knox is secure. It is only secure because the phone is not modified.
If you could root the phone and still use Knox then you (or someone else) could hack Knox. Do you want that?
RR-99 said:
Knox is secure. It is only secure because the phone is not modified.
If you could root the phone and still use Knox then you (or someone else) could hack Knox. Do you want that?
Click to expand...
Click to collapse
[upvote]
meddylad said:
But doesn't the g955f already have an unlocked bootloader.. hence why it was easier to root before the g955u?
Click to expand...
Click to collapse
It's bootloader doesn't work the same way a normal bootloader does. It still detects anything custom and will trip Knox if it does.
If you don't check the OEM Unlock option in settings, your phone will brick because the bootloader is locked. If you do check it, it's unlocked but still checks for custom firmware which then trips Knox.
Interceptor777 said:
It's bootloader doesn't work the same way a normal bootloader does. It still detects anything custom and will trip Knox if it does.
If you don't check the OEM Unlock option in settings, your phone will brick because the bootloader is locked. If you do check it, it's unlocked but still checks for custom firmware which then trips Knox.
Click to expand...
Click to collapse
through "embedded flash"
can be ignored Knox
And I got my hopes up for being able to root this phone I'll be getting in my post this week... Well, two years without root on that one it'll be unless some genius finds a way.
Interceptor777 said:
It's bootloader doesn't work the same way a normal bootloader does. It still detects anything custom and will trip Knox if it does.
If you don't check the OEM Unlock option in settings, your phone will brick because the bootloader is locked. If you do check it, it's unlocked but still checks for custom firmware which then trips Knox.
Click to expand...
Click to collapse
The G955u doesn't trip Knox with root, but it's system level because of the locked bootloader. What it does break though is SafetyNet which kills Samsung Pay and such.
I really need the auto recording feature which is blocked in my country. So need to root this without tripping.

Does unlocking bootloader trip knox?

Hello Everyone!
Okay, here's the thing, i wanted to root my Samsung Galaxy A51 (SM-A515F) Firmware: EUH1(KSA). I've unlocked my bootloader, then thought that i didn't want to risk bricking my phone rooting it so i stopped. But i noticed that just unlocking bootloader trips Safetynet apparently(which sucks) and it trips knox too, which i believed since I can't use security folder and Samsung pass anymore and it kept insisting that my phone is 'rooted' (which it isn't, just the bootloader unlocked). I then went into ODIN mode to verify it, and found it that my knox counter is still 0 (000000).
TL;DR, so does unlocking bootloader trip knox? cause most of the sites, threads, guides I've went to generally says it does. Thnx for answering.

Categories

Resources