Database Info

Grain of salt: Bootloader: TMO Rep

So, I like to vent at companies on Twitter and any other social networks if they are not listening to their customers or taking advantage of loyal customers. So last night I started venting to T-Mobile asking about the bootloader and why we haven't heard anything at all. I mean, i'm sure most of us are on JUMP and could jump if we wanted to, but why, theres nothing better out, yet. Anyways to conclude my conversation with the rep, I got a confirmation from the rep saying:
"Good news! T-Mobile is working with Samsung to hopefully unlock bootloader!"
I tried to press for more information, sources etc but did not have any luck. Pretty much the answer I was given was they are limited on what they can see or do as chat reps.
Well, I'll believe it when I see it, but just thought I would share, that there could possibly be a bright light at the end of the tunnel for some of those loyal users. I for one will be jumping as soon as a more improved Android phone comes out, might have to wait till the end of the year though.

A dump truck full of salt and still nothing new.
People need to take their time and understand the underlying situation. Here's a good summary, apologies for reposting again:
mathieulh said:
The CROM lock does not exist on non-Chinese bootloaders
Samsung's Chinese handsets bootloaders have in 3 types of bootloader locks, the carrier lock, the CROM lock (which is enabled if the Chinese bootloader does not find the "KIWIBIRD" string written in the STEADY partition), and the reactivation lock, they are not carrier locked.
U.S. variants only have the Carrier and reactivation locks, there is no CROM lock to unlock on these devices (or any international variants either), U.S. variants are however carrier locked, the lock is hardcoded in the bootloader code (there is just no execution path to load an unsigned kernel on the consumer carrier locked variant bootloaders, there is no "lock" Qfuse anymore, the bootloader itself just has no carrier unlocking/locking support, it is always locked by design) and the bootloader is tied to the device ID, for example SM-G935F (which is One Time Programmable) and will refuse to run on anything but the device id that is hardcoded within it, obviously the bootloader is signed so you can't modify it, there is also a revocation mechanism involving Qfuses to make sure you can't downgrade to a vulnerable version (should one exist).
There are presumably Engineering versions of the bootloader that allow running unsigned kernels but those have not been leaked and they probably won't run on devices for which the production mode Qfuse has been blown (the device is in Engineering mode when that Qfuse is not set).
Click to expand...
Click to collapse

Um, no......this was not a repost, this was me sharing information that I gained from TMO. I and most tmo users are not active in XDA anymore because of the locked bootloader, so it's news to some people.

DesignGrits said:
So, I like to vent at companies on Twitter and any other social networks if they are not listening to their customers or taking advantage of loyal customers. So last night I started venting to T-Mobile asking about the bootloader and why we haven't heard anything at all. I mean, i'm sure most of us are on JUMP and could jump if we wanted to, but why, theres nothing better out, yet. Anyways to conclude my conversation with the rep, I got a confirmation from the rep saying:
"Good news! T-Mobile is working with Samsung to hopefully unlock bootloader!"
Click to expand...
Click to collapse
Hopefully! keyword. Reps dont know jack. We know more then they know. They are out of loop. This isnt even post worthy lol

DesignGrits said:
Um, no......this was not a repost, this was me sharing information that I gained from TMO. I and most tmo users are not active in XDA anymore because of the locked bootloader, so it's news to some people.
Click to expand...
Click to collapse
He was calling his post a repost, not yours.
Sent from my SM-G935T using XDA-Developers mobile app

Please continue this discussion here:
ROOT DISCUSSION - R.I.P. Sticky Root Guide SM-G935T -> SHOW YOUR TWEETS / E-MAIL / FB

Can I root my Samsung S7 and gert rid of "all things ATT"..?

So, I'll apologize if this has already been dealt with previously, but I just need to verify what I've been told by a friend who knows Android systems (and Samsung S7 phones) a LOT more than I will ever attempt to understand..
About a year ago, I bought a Samsung Galaxy S7 from a 'rebuilder' (my term) who mentioned at the time "... it was ATT phone..", and, yes, when I turn it on it does the ATT circle jerk logo and has an ATT logo on the back of the phone. This was of no real concern to me, because my service purveyor uses the ATT system (Consumer Cellular), so it's worked well enough. But unfortunately, it also has a boatload of 'semi-proprietary' ATT trash in the phone which I'd like to get rid of. To confuse the matter even more, it appears that I cannot 'unlock' the phone because it has not been associated with an actual active ATT account for close to two years, and it APPEARS that now they refuse to accommodate an unlock code for this phone.
So... according to my friend (Mr. Android Phone), I can 'root' this phone to 'factory original firmware' and make it (in essence) just a plain-old-vanilla Samsung S7 without this rather bogus ATT firmware and the myriad of craplets I'd like to get rid of..
So, I'm here looking for "expertise" in such things because I certainly don't want to 'brick' this pretty nice phone, but I also want to get this to a point where there is no association with ATT in any manner. So my question sorta comes down to: "can I root this and be rid of all things ATT?", and "will this allow me to achieve an 'unlock' without having to play ATT's games? (I had QUITE the discussion with an ATT 'support' dude a couple of hours ago when he flatly refused to give me an unlock code so I could simply ATTEMPT to see if Consumer Cellular's T-Mobile service might work better at my home, since CC tells me I'm right in the center of a brand new rebuilt 4G service area).
Does any of this make any sense to anyone? Pardon my ignorance, but if the IMEI # is somehow 'tethered' to ATT and they won't "release" it, how does rooting help with this? - or is this something more like an 'association' of the IMEI # AND the ATT firmware...? GAH!! I'd just like to be totally rid of all this ATT junk and have the freedom to choose whichever service I want.

CentennialMan said:
So, I'll apologize if this has already been dealt with previously, but I just need to verify what I've been told by a friend who knows Android systems (and Samsung S7 phones) a LOT more than I will ever attempt to understand..
I'd just like to be totally rid of all this ATT junk and have the freedom to choose whichever service I want.
Click to expand...
Click to collapse
Hi There that's a lot of words partner! I'll try make the answer easy to understand and I've cut out much of the post so my reply isn't huge.
1. Yes you can install vanilla firmware which will remove all branding from AT&T and you don't need to root the phone to do this. here is the firmware for your device >>here<< You can also use XAS or XAA. You will see the guide and the Odin you need to flash this firmware.
2. This is another version of Odin on this website if you have any issues with the one on Sammobile. >>here<<
3. Unfortunately you cannot unlock the phone unless the original cell phone provider gives you their half of the unlock key as a code to input to the phone. In the UK once a phone is out of the initial contract period it is illegal for the provider to refuse to give you this code whether your still with them or not. I know in the USA you guys gets ****ed over. The original account holder of the phone can ask for the unlock code but not you.
4. Changing the firmware and unlocking the phone to any network are two different things, flashing unbranded firmware will not unlock the phone the network is tied to. They don't make it that easy!
5. As far as i know T Mobile (USA) has also moved to G930U firmware so you could be lucky with a T Mobile SIM working once the phone is flashed with this firmware but don't hold your breath. Check Sammobile for the T Mobile firmware too.
6. IMEI number is tied to the phone so in theory it can be changed after the phone is rooted and you are able to modify the EFS partition but it is extremely difficult even for veterans like me and it causes lots of problems with cell network registration. Leave well alone if you don't want a completely useless device.
Things to make flashing go easier
1. Turn off FRP lock or sign out of the Google account on the phone or delete it before you do anything, you can put that account back on the phone after flashing.
2. If you enable Developer options make sure " usb debugging" is enabled and OEM unlock, not essential but can help when things go wrong.
3. Anything you want to keep, pics media etc back up or move to SD card, the SD card won't be touched when flashing firmware.
4. Please follow the guides on how to flash correctly.
Any other questions please ask.

It should be noted that if it's an ATT phone it's Snapdragon therefore permanently bootloader locked, OEM Unlock won't actually do anything, that setting only works on Exynos.
The only root method for Snapdragon is to use a leaked engineering bootloader to gain system access, and you can only install the leaked bootloader if your phone is already running old firmware. For up to date phones there is no root method.

Beanvee7 said:
It should be noted that if it's an ATT phone it's Snapdragon therefore permanently bootloader locked, OEM Unlock won't actually do anything, that setting only works on Exynos.
The only root method for Snapdragon is to use a leaked engineering bootloader to gain system access, and you can only install the leaked bootloader if your phone is already running old firmware. For up to date phones there is no root method.
Click to expand...
Click to collapse
Hello mate i'm not sure if your aware but AT&T were initially Qual comm but they've also been using Exynos for a while.

cooltt said:
Hello mate i'm not sure if your aware but AT&T were initially Qual comm but they've also been using Exynos for a while.
Click to expand...
Click to collapse
Source?

Beanvee7 said:
Source?
Click to expand...
Click to collapse
Don't be smart you know how to use Google?

I did google it, I wouldn't have asked for a source if I found something. But it doesn't matter, you're the one making unsubstantiated claims, the burden is on you to prove it. But since you asked for it:
AT&T's website says Snapdragon
https://i.imgur.com/TdV62Mq.jpg
https://www.att.com/buy/phones/samsung-galaxy-s7-32gb-black-onyx.html
GSM Arena says Snapdragon
https://www.gsmarena.com/samsung_galaxy_s7_(usa)-7960.php
Wikipedia says Snapdragon
https://en.wikipedia.org/wiki/Samsung_Galaxy_S7#Qualcomm_Snapdragon_820_Models
There isn't a single page when googling AT&T S7 Exynos that backs your claim up. The USA also uses completely different network technology than internationally, using the S7 Exynos in the USA is already known to cause issues with LTE, VoWiFi etc. They'd have to do a hardware refresh of the Exynos SoC if they wanted to support it in the USA, which they ain't going to do a for a 3 gen old phone.

Beanvee7 said:
I did google it, I wouldn't have asked for a source if I found something. But it doesn't matter, you're the one making unsubstantiated claims, the burden is on you to prove it. But since you asked for it:
AT&T's website says Snapdragon
https://i.imgur.com/TdV62Mq.jpg
https://www.att.com/buy/phones/samsung-galaxy-s7-32gb-black-onyx.html
GSM Arena says Snapdragon
https://www.gsmarena.com/samsung_galaxy_s7_(usa)-7960.php
Wikipedia says Snapdragon
https://en.wikipedia.org/wiki/Samsung_Galaxy_S7#Qualcomm_Snapdragon_820_Models
There isn't a single page when googling AT&T S7 Exynos that backs your claim up. The USA also uses completely different network technology than internationally, using the S7 Exynos in the USA is already known to cause issues with LTE, VoWiFi etc. They'd have to do a hardware refresh of the Exynos SoC if they wanted to support it in the USA, which they ain't going to do a for a 3 gen old phone.
Click to expand...
Click to collapse
lol ok.

PSA: Using a remote unlocking service for your Moto One 5G Ace may cause the bootloader to be permanently locked.

TL;DR: Don’t use a remote unlock service if you want to still be able to unlock your bootloader.
DISCLAIMER: I don’t recommend or endorse any of the vendors or tools mentioned in this post. I’m simply mentioning them in the interest of full transparency.
I recently bought a refurbished T-Mobile-locked Motorola Moto One 5G Ace (model XT2113-2). When I first received the device, I successfully unlocked the bootloader by following the instructions on Motorola’s website.
I was mistakenly under the impression that since the phone was paid off I could get it unlocked by T-Mobile directly. However, using the built-in tool to request a “Permanent Unlock” repeatedly failed with error code 255.
I spoke with one chat agent, two phone agents, and one T-Force agent (@TMobileHelp on Twitter) but couldn’t get anywhere with any of them. The T-Force agent ended up telling me that the original owner of the phone would have to request the unlock. Since I purchased it from a reseller on eBay, I have no idea who the original owner is. The eBay seller was likewise unable to help.
I decided to do some research and came to the conclusion that the only working way to unlock an XT2113-2 besides directly through the carrier is to use a remote unlocking service. Further research indicated that eBay is the best and safest place to purchase these types of unlocking services. Finally, I landed on only two vendors on eBay that advertise a remote unlocking service for this model: “quick_unlock89” and “thejmf2011”.
In the process, I also came across a single vendor on eBay (“gfix99”) advertising a T-Mobile unlock eligibility checker service that supposedly queries T-Mobile’s database directly. I have no idea if this service is legitimate or not or what less-than-legal means they have of accessing T-Mobile’s database. However, it was cheap at only $1.65, so I figured I’d order it to see what it said. Sure enough, it showed my device as being locked to T-Mobile.
From what I could tell, there was no appreciable difference between the two unlock vendors, so I went for the cheaper of the two (“quick_unlock89”). For the uninitiated, the way these remote unlocking services work is by connecting to your computer via TeamViewer or some other remote access software. Then, they copy over and run a software called USB Redirector (you can find it by Googling that plus “Incentives Pro”). This redirects your phone’s USB connection to your computer over the internet to the person on the other end. After that, they ask you to boot the phone into the bootloader by holding volume-down and power at the same time. Once you plug in the phone, they take it from there.
I created a Windows VM and used a VPN to have this procedure done on my phone, and I screen recorded the whole session. There’s not much to see, sadly. However, after the process was done, the phone indeed showed that it was unlocked in the Settings app. Also, I paid for a second report from “gfix99”, and the phone is now showing as unlocked in T-Mobile’s database as well, assuming the report is accurate.
However, as soon as they were done with the unlock, I noticed that my bootloader had re-locked. When I tried to unlock it again, I was unable to. Using the fastboot oem get_unlock_data command fails with this error: “Failed to get unlock data.” Attempting to run the fastboot oem unlock command with the unlock code I received from Motorola when I first bought the phone gives this error: “Code validation failure”.
My next step was to try Motorola’s Rescue and Smart Assistant (LMSA) tool, but even after repairing the phone with it, the bootloader unlock still failed with the same errors. Notably, the phone did still show as network unlocked after repairing it with Motorola’s tool.
I did some more digging and was finally able to find some Spanish-language forum posts talking about a program called Moto-Key Tool that is used for remote unlocking the XT2113-2 along with several other models. From what I can tell, this seems to be the tool that these two eBay vendors are using to do these remote unlocks. You can find it with a Google search if you’re so inclined (basically just add “.com” after “moto-key”). It requires the purchase of credits that seem to roughly equate to $1 USD per credit, with the entire unlock procedure requiring 25 credits.
The basic sequence of events that this software uses seems to be as follows:
From the bootloader, it enables “Factory Mode” on the phone and then boots it up into that mode.
Once in Factory Mode, it wipes the IMEI from the phone, runs some other command, and then re-writes the original IMEI back to the phone.
It reboots the phone back to the bootloader and does a factory reset.
It boots the phone back up into the normal Android OS at which point the process is finished.
I attempted to decompile some of the DLLs included with the software to see if I could figure out exactly what it’s doing, but I’m no developer, and I certainly can’t read assembly language. I have some theories as to how it’s accomplishing the unlock, but at the end of the day, it doesn’t really matter for the sake of this post.
It’s important to note that neither of the eBay vendors offering this service say anything in their listings about this being a possible outcome. Personally, I never would have purchased the service had I known that. I use a T-Mobile MVNO, so the network unlock was really a “nice-to-have” for me in case I ever get to travel abroad again. The bootloader unlock is far more important to me.
I reached out to the eBay seller to express my dissatisfaction and request a refund. I’ve copied and pasted the conversation below for transparency. If the mods need me to provide proof I’m happy to do so. I just want any potential customers such as myself to be aware of the type of individuals they’ll be dealing with when they purchase these unlock services.
OP: “Hello, I had unlocked my bootloader before having you do the network unlock. Right after you finished I noticed my bootloader was relocked. I've been trying over and over to unlock it again, but I can't even get fastboot to pull the oem unlock data anymore. It just gives an error message stating "Failed to get unlock data". From what I can find online, it sounds like either the unlock data block has gone missing or is corrupt. Do you have a fix for this?”
Click to expand...
Click to collapse
quick_unlock89: “Sorry we don't support bootloader unlocking. May be factory unlock have brought your phone to initial state.”
Click to expand...
Click to collapse
OP: “I need my bootloader unlocked, and since this network unlock has now rendered me unable to re-unlock the bootloader I'll have to sell this phone and buy another one. Your ad doesn't say anything about this. I never would have purchased the network unlock from you if I would have known this would happen. That's unacceptable to me. Respectfully, I request a refund.”
Click to expand...
Click to collapse
quick_unlock89: “Sorry we don't refund for any software modifications. Can refund if you have any problem in Unlock service. It's factory unlock service so as mentioned in item description. Bootloader unlocking any how voids warranty. If I will force server for refund due to this reason so it will any how blacklist IMEI World wide after refund so I think it's not worth it.”
Click to expand...
Click to collapse
OP: “So let me make sure I'm understanding you. You're threatening that if I request a refund you will blacklist my IMEI in retaliation. Is that correct?”
Click to expand...
Click to collapse
quick_unlock89: “Not me friend. Server will do so if I will ask refund for such an issue which is not related to unlock service because we never faced this kind of issue ever. I can provide you a discount on your next purchase just as a good gesture. I think it will be a win win situation for both of us.”
Click to expand...
Click to collapse
OP: “I'm not asking you to request a refund on your end and reverse the network unlock. I'm asking you directly as the service provider for a refund. It sounds like in this case that means you'll need to write the cost off on your end in order to refund my money and not get my IMEI blacklisted.”
Click to expand...
Click to collapse
quick_unlock89: “Sorry I will have to request refund from server on my end too because I have complete paid for the service too and we don't take any responsibility of software modifications like bootloader unlocking and rooting of devices as these process are already prohibited by companies and void warranties, Owners always do these things on there own risk. If you think it's worth the risk of IMEI blacklisting than I will take my refund and issue you refund too. Thanks”
Click to expand...
Click to collapse
OP: “I guess you must not understand the basics of running a business. If a customer is dissatisfied with your service and requests a refund, you as the business owner are responsible for refunding your customer's money. Then you write it off and take the loss. That's just part of running a business. It sucks, but it is what it is. Again, your listing makes absolutely no mention of not supporting unlocked bootloaders. It makes no mention that if you use your network unlocking service your bootloader will be irreversibly locked forever. It is completely unprofessional and unacceptable as a business owner to tell your customer "too bad" and then threaten to blacklist their IMEI when it is your fault for not disclosing this issue ahead of time in your listing. Obviously you know this is a problem. Also, for your information, bootloader unlocking is not prohibited by Motorola. They themselves provide an official support page that walks you through the process.”
Click to expand...
Click to collapse
quick_unlock89: “Ok, provide me a day time. Let me check if I can do something for you. We are not even sure that is issue is related to Unlock service as we never have any complain regarding this issue ever with any of our client till now. I will offer you a partial refund of 50% payment. Please don't put all the loss on me when there is nothing wrong with the service and your phone is factory unlock now. You have a issue which is very unusual one. If there was any issue related to service than we have 100% refund warranty. Are you okay with it ? I will offer you 50% refund and provide you relock warranty for you IMEI. Done ?”
Click to expand...
Click to collapse
OP: “No, I won't accept that. I feel you've been purposely misleading to me throughout our interaction. First, you don't warn your potential customers in your listing that if they have unlocked bootloaders the network unlock service you provide will cause their bootloaders to be irreversibly re-locked. Second, you told me that unlocking the bootloader is prohibited by Motorola when that is not true at all. Third, you first told me no refunds would be given before then telling me that you would give me a refund but that my IMEI would be blacklisted. And now you're telling me that you'll give me a 50% refund with a "relock warranty" for my IMEI, whatever that means. This is not good business. I shouldn't have to argue with you to get you to offer even a 50% refund, and frankly, I don't put any trust in whatever "warranty" you might offer me. At this point, this device is rendered useless to me. I need it to be both bootloader unlocked and network unlocked, not just one or the other. Now I have to purchase another phone to replace it. Again, I respectfully request a 100% refund from you directly without doing anything that will get the IMEI blacklisted.”
Click to expand...
Click to collapse
quick_unlock89: “It's already a risky process. Source Motorola official site. If Motorola offers bootloader unlocking than get it unlock with them. Contact them if it's not unlocking. You could cause permanent/physical damage to your device. Unlocking your bootloader will not change your device subsidy lock status It's all mentioned on Motorola official site. We don't know it happened because you modified your device. Sorry I can not refund for this kind of fishy issue. Only can refund 50% as a good gesture if you want. If you Opened Fake claims, Bad Feed backs etc. When your device is 100% factory unlock than IMEI will be black listed world wide. You have only yourself to blame. Unless you have a Developer Edition device, once you get the unlock code, your device is no longer covered by the Motorola warranty; in other words, please don't blame us if things go wrong, even if they appear unrelated to unlocking the bootloader. I am not misleading. Every thing is mentioned on Motorola official site.”
Click to expand...
Click to collapse
OP: “So again, just to be 100% clear as to what you're saying. You're threatening me that if I try to get my money back you will purposely blacklist my IMEI worldwide. Is that correct?”
Click to expand...
Click to collapse
quick_unlock89: “We are not responsible for any 3rd party issue on phone specially when you have done a very risky process on phone. If you have any issue regarding Network unlock I am here to answer you. Also if you say Motorola offers bootloader unlock than contact them regarding it. Yes your phone is 100% factory unlock now if you will make fake claims we will blacklist IMEI world wide and it's not a threat it's as per rule already mentioned in our item description regarding fake claims.”
Click to expand...
Click to collapse
OP: “Respectfully, it's not a fake claim to say that you irreversibly damaged my phone during your service and that I'm not satisfied with the results and want my money back. I shouldn't be held hostage by your unprofessional and probably illegal threat to purposely blacklist my IMEI if I complain to eBay. Whatever exploit your "Moto-Key Tool" used to network unlock my phone corrupted the unlock data block, and now the bootloader can't be unlocked again because the OEM unlock data is literally missing from the phone. Motorola openly publishes on their support website how to unlock the bootloader for this device, but now I literally cannot do it because of your tool corrupting that portion of the phone's EEPROM. This is 100% your fault and not mine. I wouldn't even be mad about it if you were up front about this in your listing, but you don't say one word about it. As I mentioned before, I never would have purchased this from you if you had been honest in your listing and stated that this was a risk. Therefore, I feel that I am entitled to a 100% refund from you, and I don't feel that you should be threatening to blacklist my IMEI for requesting it. Yet again, I respectfully request that you refund me 100% of what I paid without doing anything to blacklist the IMEI of this phone.”
Click to expand...
Click to collapse
quick_unlock89: “Ok bro I will any how refund you. We never wish to spoil our relationship with clients but I will hope you reconsider and pay us 50% back because your phone is factory unlock now. And it is not a justified decision to put all claim and blame on us when you yourself know that bootloader unlocking is a risky procedure itself which does void warranty too.”
Click to expand...
Click to collapse
To their credit, they did issue a full refund. I don’t have much faith that they won’t go ahead and purposely blacklist the IMEI anyway. At the very least, I want this information out there for anyone else considering this type of service so it’s not a total loss and the community can benefit.
If you’ve read this far, congratulations! Long story short, if you want an unlocked phone, just buy it unlocked direct from the manufacturer. Dealing with the carriers or these gray-market unlock services isn’t worth the headache.

Thank **** Canada mandates that all devices have to be sold unlocked since like 2017. And they provide free unlock codes for older phones so you're covered for sure.
I bought a moto g 5g on Amazon, because it was cheaper than the one 5g ace. It's unlocked and it's gonna stay unlocked lmao.

Question New SM-S908E-D/S, and planning on rooting - Got a few quick questions

Hi, guys - I've been a OnePlus fan since they first started selling phones, but stopped at the OP7P. IN the past, I rooted my phones as soon as they came out of the box.
I decided to switch back to Samsung after all these years. I live in the US, and purchased a new global SM-S908E-D/S so that I could continue having a rooted phone.
I was going to try out my global S22 Ultra for a week or so before rooting to make sure that I have good coverage for my connection to AT&T. I saw that the global S22 Ultra has many of the AT&T 4G/5G bands that the US version supports, but there are differences. If I don't have good coverage due to the channel differences, I will look into returning the phone.
So, I have a few quick questions:
I know that I will lose all my data once I unlock the bootloader, but can I configure my phone normally and take all Samsung updates before unlocking the bootloader and rooting the phone? On my previous Samsung devices, bootloader unlocking/rooting was patched/blocked by Samsung, so there was a limited opportunity to unlock the bootloader/root.
If I unlock the bootloader, is there a way to relock the bootloader so that it isn't visible that the phone was previously unlocked? I know the Samsung Knox aimed to always fail a security check if the bootloader was ever unlocked.
Is there a way to configure my global S22 Ultra to support all the US AT&T 4G/5G bands instead of a partial list?
Thanks!
¿GJ?

I know the feeling of coming back to a Samsung after experimenting with the open world,
1. Question isn't really clear - As I understood; Yes - You can use the phone, get OTA and configure until you decide to unlock it. Unlocking the bootloader will wipe all data.
2. You can relock the bootloader - but traces will always remain as Knox is a one way ticket. Once broken, Knox can never be sent back to 0x0. Even after relocking, Samsung Apps such as Health and Pay will not work.
3. So far, No confirmed method.

Thanks, @JazonX - That's what I was looking for.
The question for #1 was revolving around how in the earlier days of rooting, it was a cat & mouse chase to stay ahead of the manufacturers with rooting. Some devices I have owned (Amazon FireTV sticks, and my Samsung S4 Tablet, for example) would be rootable for a short period of time, where if you didn't unlock the bootloader and root immediately, you would get an update from Samsung that patched the hole and it was never rootable afterwards.
I was asking if the SM-S908E-D/S would always be rootable (maybe because of the EU?), so that I could use the phone as a normal device, accept all the Samsung updates, and not be concerned that a Samsung update would come along that permanently blocked the bootloader and rooting.
I could decide in a few weeks that the phone was good on AT&T, and then be able to root it at that point.

Unlocking the bootloader doesn't trip Knox. Rooting does.
There are a few "patched" Knox apps that you can use, shealth, private share and secure folder. These are included with beyondrom and Dr ketans rom.

@MRDOCA - Thanks, that's good to know.
I unlocked my bootloader, and I am attempting my first manual Firmware update (not rooting at this time).
I downloaded and ran Frija, which asks for my CSC. Looking into my phone's Software settings, I see that my CSC is CHO/CHO,CHO/CHO/CHO - Which appears to be in Chile. Even though I am in the US on the AT&T network, I'm assuming that I just use the CHO CSC in Frija and my phone will re-adapt to the AT&T network after my update?

Question Is there any way to disable Knox KG lock

Hello Everyone
I purchased a S22 ultra for a couple of buck.
And it has the Samsung KG lock. As the previous owner hasn't completed the payments.
I spoke to Samsung, But they refused to deal with the matter because it requires the original purchaser.
I wast thinking of just trying to make use of this phone before selling it for parts. I have temporarily bypassed the Setup screen (Using the Accessibility menu). I have access to setting and the one ui home. But I cannot enable Developer options. Is there any way I can enable it to unlock OEM

Legally no, you cannot do anything if Samsung themselfs do not want to unlock the phone.
Illegally you probably can, but on this forum you will not get the answers as any illegal link/information is forbidden.

joenamcoutinho said:
Hello Everyone
I purchased a S22 ultra for a couple of buck.
And it has the Samsung KG lock. As the previous owner hasn't completed the payments.
I spoke to Samsung, But they refused to deal with the matter because it requires the original purchaser.
I wast thinking of just trying to make use of this phone before selling it for parts. I have temporarily bypassed the Setup screen (Using the Accessibility menu). I have access to setting and the one ui home. But I cannot enable Developer options. Is there any way I can enable it to unlock OEM
Click to expand...
Click to collapse
Rooting will disable Knox. It's not illegal, it can void your warranty though. Trying to bypass the phone being disabled because it wasn't paid off, that is not legal.
About Knox Guard's Mobile Number (IMSI) Lock Policy

gernerttl said:
Rooting will disable Knox. It's not illegal, it can void your warranty though. Trying to bypass the phone being disabled because it wasn't paid off, that is not legal.
About Knox Guard's Mobile Number (IMSI) Lock Policy
Click to expand...
Click to collapse
Rooting would disable Knox...but you can't root without unlocking the bootloader. You can't unlock the bootloader without unlocked Knox.
Furthermore...the lock that is active in this particular situation in not the same. This is called KnoxGuard....and it active ant the bootloader level...and therefore not removable.

verszipo said:
Legally no, you cannot do anything if Samsung themselfs do not want to unlock the phone.
Illegally you probably can, but on this forum you will not get the answers as any illegal link/information is forbidden.
Click to expand...
Click to collapse
But what if a man has been fooled and and have purchased a 2nd devices ,having k g lock, as due to lack of knowledge of the new security system introduced by the companies , there should be a way to deal with this situation , i understand it is illegal but after all it all demand case to case.

nikubapu said:
But what if a man has been fooled and and have purchased a 2nd devices ,having k g lock, as due to lack of knowledge of the new security system introduced by the companies , there should be a way to deal with this situation , i understand it is illegal but after all it all demand case to case.
Click to expand...
Click to collapse
There are ways...but they are definitely not to talked about on this forum...because it is illegal.