MYTHS AND TRUTHS ABOUT KNOX
Important Things You Need To Know
How Does Knox Affect Root Users?
There has been inaccurate information circulating about Knox and how it affects us as root users.
So I have compiled this Q&A and I will update it as questions and answers arise.
CNexus at XDA has made a similar thread:
[FAQ] KNOX and you - xda-developers
Important Things You Need To Know
How Does Knox Affect Root Users?
There has been inaccurate information circulating about Knox and how it affects us as root users.
So I have compiled this Q&A and I will update it as questions and answers arise.
CNexus at XDA has made a similar thread:
[FAQ] KNOX and you - xda-developers
Q: If I have KNOX can I root my device?
Known Facts About KNOX:
- Yes, you can most certainly root your device. KNOX apps may prevent SuperSU from functioning properly but the KNOX bootloader does not prevent one from gaining root access.
- Yes. You may install a custom recovery with Odin. Doing so will trip the KNOX flag. The custom recovery can also be used to flash SuperSU or Superuser to gain root access or to install custom roms, kernels, and modems.
- Yes and no. The only thing the KNOX firmware will not allow you to downgrade is the bootloader. You can install custom roms. You can even install stock roms based on earlier versions of Android as long as they do not include a bootloader. The best method to do this is through a flashable zip via custom recovery. You CANNOT install earlier firmware via Odin. Odin firmware packages contain everything including the bootloader so once you have the KNOX bootloader you may just want to stay away from Odin altogether except for custom recoveries.
- I asked this question when I first got "KNOXed up" and the answer is yes. Once again, all the KNOX bootloader cares about is itself meaning you can flash whatever you want to the device as long as it's not another bootloader and if you don't mind tripping the KNOX flag. You are free to flash roms, kernels, and modems. Bootloader DOES NOT EQUAL Android Build Number DOES NOT EQUAL Modem.
- When you enter download mode, you will see something that looks like this:
- In the above picture KNOX warranty is in tact as the flag is 0x0
- A KNOX warrant void line says 0x1
- If the KNOX warranty void line says 0x1 then you cannot use KNOX software as your device has been flagged as insecure. By this I mean that if your workplace / company supports bring your own device to work for corporate emails etc and they use KNOX to keep security your device will not allow this. You are still able to use future Samsung firmware releases with the KNOX flag 0x1.
- Why most certainly! jdsingle76 has a KNOX-free MK5 ROM which does not have KNOX apps. It also does not contain the KNOX bootloader so if you're still on MD7 or MG2 you can use this method to update to MK5 and not have to worry yourself with KNOX. That ROM can be found here: http://androidforums.com/virgin-mob...exed-deodexed-virgin-mobile-boost-mobile.html
- Instruction for installing the MK5 ROM can be found here: http://androidforums.com/virgin-mob...11-guide-mk5-wip-rooting-mk5-4-3-newbies.html
- Excellent question. This brings us to the known facts about KNOX and what it means.
Known Facts About KNOX:
- Upgrading to newer Samsung firmware MK5 will upgrade the bootloader to KNOX bootloader. this will give an additional 2 lines in download mode about KNOX status.
- Not possible to downgrade to KNOX-disabled firmwares/bootloaders without tripping the KNOX flag (An attempt sets 0x1) (even though some people state, downgrade is possible when omitting the bootloader file in a firmware package: see http://forum.xda-developers.com/show....php?t=2444671, not confirmed)
- Even if you flash a KNOX-enabled firmware via Odin (e.g. the latest fw) Knox will be set to 0x1
- Flashing unsigned or modified images via Odin will set KNOX to 0x1
- Once the KNOX flag gets set to 0x1 there is no way to set it back (that anyone has found yet anyway!) Samsung stated, resetting the flag is impossible
- KNOX is mandatory and can not be completely removed
- Warranty Void is no counter, it is a flag (0,1) it was never seen 0x2 or so
- Mirroring all partitions from a clean 0x0-Device to a 0x1-Device via JTAG produces an unfunctional device (reversible by restoring the 0x1 partitions on the phone)
- KNOX bootloader verifies signatures of kernels and recoveries. No custom ones possible without voiding the KNOX warranty
- If the KNOX warranty void line says 0x1 then you cannot use KNOX software as your device has been flagged as insecure. By this I mean that if your workplace / company supports bring your own device to work for corporate emails etc and they use KNOX to keep security your device will not allow this. You are still able to use future Samsung firmware releases with the KNOX flag 0x1.
- with the new KNOX bootloader root will work, however rooting will trip the KNOX flag