yashsingh1/xdaforums huggingface dataset:
[Galaxy S 4 Q&A, Help & Troubleshooting] sharpmarble:
Knox | Flashing Modems/ROMs/Kernels

Hi everyone. I have 4 basic questions about Knox that I haven't been able to get a clear answer on from reading this thread (possibly because they are dumb questions, which, if that's the case they should be easy to answer):

1) Can flashing a modem (LTE or GSM) result in Knox bootloader? (i.e. going from pre-Knox "XXUBMGA" modem to a post-Knox "ZHUDMI1" modem)

2) Can flashing a custom kernel result in Knox bootloader (I know Adam 1.6 specifically has a Knox-free variant but am asking the question more generally as I am interested in testing other kernels such as Ausdim and KT)

3) Is the only way to become infected by the Knox bootloader by flashing firmware (stock or custom) that already contains it?

4) If I don't want Knox bootloader am I stuck on firmware 4.2.2 forever? (assuming old bootloaders will never work with post-Knox firmwares)

My current setup is below:

Device: Samsung Galaxy S4 GT-I9505

ROM: OMEGA v12 [JB 4.2.2]

Baseband:XXUBMGA

Kernel: Abysskernel 1.6.0

Build: Omega v12 - ZHUDMI1

Recovery: Clockworkmod 6.0.3.2

Knox: CSB-CONFIG-LSB 0x30

TouchWiz: 4.2.2-I9505ZHUDMH6

Memory: SanDisk 64GB FAT32

System Status: Official

Everything is working perfectly at the moment with my XXUBMGA modems (including WiFi and LTE) and I am experiencing great battery life (despite the complaints of others using the Abyss kernel). I don't have to update my radio to ZHUDMI1 but I thought it might give me better reception and/or data transmission speeds since it is compatible with my ROM build. Any thoughts on this? I live in Canada.

Thanks!
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
I think you can flash whatever you want as long as it doesn't contain the Knox bootloader, than you are screwed.

So if you are on pre-Knox bootloader, you can flash customer kernel or modem because those don't contain the new bootloader.

However when you flash a newer firmware, you end up with the new bootloader and then there's no way back without tripping the Knox flag to 0x1
[Galaxy S 4 Q&A, Help & Troubleshooting] CarlM34:
Extra line in Download Mode?

Hi....Not sure if anyone has this or even noticed but I have an extra line in download mode below WRITE PROTECTION Enabled

eMMC BURST MODE enabled

Any ideas?

EDIT - Just had a quick search and do not think its anything to be concerned about....hopefully!:)
[Galaxy S 4 Q&A, Help & Troubleshooting] faiyo:
This is exactly what I wanted to say. Thanks!

To people who haven't worked in secure environments, you have to know that you cannot use any technology that is unsigned or unapproved. Even web browser addons, text editors, a mouse/keyboard/lcd screen/printer.... or a trash can! I'm serious. There are secure trash cans for classified things. At my place they were shredded & burned onsite. And the ashes were collected. Then they dont tell u what they do with the ashes. So u see, when it matters, security has to be applied from beginning to end. That's why knox exists. No one cares about ur root apps or phone warranty : - )

Source: several years of these painful jobs

Bonus story for u: Once I was on a secure network and I thought i could sneak around the security team by running a virtual machine and working without constraints. So I got hold of an image and set things up. Then my network stopped working. When I couldnt fix it, I hid my vm and called over the security team. They mumbled a bit and went off to find the key to the router room. They said for some reason my jack was turned off and they fixed it. So when they walked off i fired up the vm again...and promptly lost my network connection again! Now i caught on to how secure this network was.. and I had to call them back. They caught on too and I had to explain what I was doing. Lets just say things weren't the same after that : - (
[Galaxy S 4 Q&A, Help & Troubleshooting] timberwolf60:
[/COLOR]

In order to have it a or kies update and you need a firmware for your region.

Checked here: http://samsung-updates.com/device/?id=GT-I9505

Now Samsung have different bootloader. Old bootloader like i9505xxUBmg5. New bootloader firmware like xxUDmh8 and on JB 2.3 was xxUEmj5. I suggested you flashed XXUBMG5 which was on old bootloader and it was working great: http://hotfile.com/get/234899296/526397e7/31aa34d/XTE-I9505XXUBMG5-20130710091348.zip

Note for Philippines you have globe, smart and sun providers.

Send via i9505 using TapatalkPro,

ROM: I9505XXUEMJ3_Vega

CSC/Modem: OLBEMJ2(STH)/XXUEMJ3

Kernel/recovery: Stock

SuperSU Pro 1.65, 64GB FAT32 Card

Send via i9505 using TapatalkPro,

ROM: I9505XXUEMJ3_Vega

CSC/Modem: OLBEMJ2(STH)/XXUEMJ3

Kernel/recovery: Stock

SuperSU Pro 1.65, 64GB FAT32 Card
[Galaxy S 4 Q&A, Help & Troubleshooting] Mate996:
Years before the reson I bought a Samsung Galaxy device was it came with an unlocked bootloader so I can did what I want...

With this move that Samsung takes it is my last Samsung device.. :mad::(

Anyway

My Knox counter in the download mode is now 0x0.. I know If I flash custom stuff it will void (0x1). But after I void my warranty can I use any ROM and if I want can I go back to the latest stock w/o problems?
[Galaxy S 4 Q&A, Help & Troubleshooting] CarlM34:
Yes you will be able to flash custom ROM's and yes you can return to the LATEST stock rom without issues.
[Galaxy S 4 Q&A, Help & Troubleshooting] ace_of_spades021:
hi...

my friend has I9500 I know that the latest firmware for I9500 has knox...

but I don't know has knox bootloader too or not?!

another question is if he flash the official 4.3 from Russia can he flash 4.3 from another country without problem and without issue with knox?

I know if I flash official 4.3 can't get back to official 4.2.2 becouse odin failed... but can I flash 4.3 from another country without issue with knox?

please help me to answer his question...

any help will be appriciated
[Galaxy S 4 Q&A, Help & Troubleshooting] Bessagabriel:
Yes, you can flash another 4.3 stocks ROM's without problem!
[Galaxy S 4 Q&A, Help & Troubleshooting] dannyella:
1. No

2. No, i had same set up as you before i upgraded to 4.3 except for the kernel..i was on ausdim kernel..no knox!

3. Yes

4. No. I'm on 4.3 ROM..it uses old bootloader ..no knox!
[Galaxy S 4 Q&A, Help & Troubleshooting] sharpmarble:
Thanks Dannyella. So you have 4.3 and

no knox bootloader

or you have 4.3

with knox bootloader showing 0x0

? I was aware that the latter is possible but unless I missed something on the forums overnight I didn't think it was possible to upgrade to 4.3 firmware without introducing the knox bootloader (since upgrading to 4.3 with old knox bootloader reportedly broke wifi and radio).

Can you please point me to the thread that explains how to run this upgrade?
[Galaxy S 4 Q&A, Help & Troubleshooting] dannyella:
No, never had knox bootloader..sworn not to flash anything with knox..lol..i'm on echoe rom v5, and everything is working fine..installation instructions is on OP--->> http://xdaforums.com/showthread.php?t=2372286
[Galaxy S 4 Q&A, Help & Troubleshooting] leonlfm:
I lost the way complete.

1 week ago I put the latest firmware for Holland on my phone, (PDA: I9505XXUDMHB)

then I returned to Omega V12.

Everything works fine. When I go to the download mode I see the following Knox kernel lock 0 X 0

And Knox warnig void 0 X 1.

Is this a problem when I want to flash the latest V13 4,3 Omega rom.

For my waranty it's no problem, never had one problem with samsung.
[Galaxy S 4 Q&A, Help & Troubleshooting] CarlM34:
No mate....you will be fine flashing V13;)
[Galaxy S 4 Q&A, Help & Troubleshooting] leonlfm:
Thanks for your answer.:good:
[Galaxy S 4 Q&A, Help & Troubleshooting] sharpmarble:
You have opened up a whole new world of awesomeness to me and for that I am grateful. :good:
[Galaxy S 4 Q&A, Help & Troubleshooting] JackYack13:
The S4 is definately my last Samsung phone.
[Galaxy S 4 Q&A, Help & Troubleshooting] ekizov13:
Me too Samsung kills all personal modifications
[Galaxy S 4 Q&A, Help & Troubleshooting] bill1clinton:
Hi Guys,

I have read most of this thread regarding Knox and I am still somewhat confused. Can someone shed some light on my question below? Thanks guys.

If I am not concerned whatsoever about warranty, does the new Knox bootloader interfere with getting a successful root?
[Galaxy S 4 Q&A, Help & Troubleshooting] IberianPrince:
From what I understand after spending nearly 3 hours reading, you're okay to root if you're not concerned about Knox warranty.

---------- Post added at 01:33 AM ---------- Previous post was at 01:02 AM ----------

If we're to look in our phones where we initiate an OTA update, just below is the Legal Information tab. In there is everything Samsung needs to cover themselves and do what they like legally once we alter the phone's software and tamper with how the phone was intended to be used.

I think I'm right that we agree to all that legal rubbish during the initial setup once out the box, so we don't really have an argument against them unfortunately :(
[Galaxy S 4 Q&A, Help & Troubleshooting] Zibri:
You are confusing the phone warranty with the KNOX warranty. KNOX Warranty means that the phone is SAFE to use KNOX, with modified bootloaders or modified recoveries, the phone becomes UNSAFE so the "WARRANTY that KNOX will be enough to secure your data" will be void. That will NOT void your phone warranty.

Now a question: I'm on 4.2.2 and with knox bootloader. All knox statuses are 0x0 and bootloader, recovery and firmware are STOCK.

Is there any way I can go back to normal bootloader without setting any nasty flags?

Did anyone in my situation try a full phone erase and a full factory flash? I see no reason this should not work.

IMHO to step back to non knox system we should:

1) full wipe.

2) full ODIN flash of a factory firmware.

3) full wipe again just to be paranoid but this should not be needed.

4) boot in download mode and see if there is any flag.

If this will result in a knox flag set, then who sets it?

What doesn't get deleted?
[Galaxy S 4 Q&A, Help & Troubleshooting] mega00:
So I am one of the unlucky ones who upgraded to knox before knowing this...

But I do not concern about warranty, just one thing makes me annoying, did anyone also found that when booting with a custom kernel, there's a message on the first screen saying set warranty bit, and sometimes the device got stuck there. I have to long press the power button to restart the booting process. Sometimes the device restarts by itself due to unstable system, and I find the device stuck in boot screen for hours if I don't check it, making me unreachable by mobile.

Did anyone noticed this problem, and has a solution?

---------- Post added at 10:34 AM ---------- Previous post was at 10:29 AM ----------

I had tried many times myself and get to the conclusion that, your 2) step is not possible.
[Galaxy S 4 Q&A, Help & Troubleshooting] Enfield bullet:
guys i'm unable to flash official 4.2.2 vodafone through odin it giving me fail error every time....it happens when i flashed official 4.3 through odin...knox warranty void: 0x1 written when i go in download mode??? so there is no way to downgrade? other members say that i can't downgrade now..
[Galaxy S 4 Q&A, Help & Troubleshooting] Hen-3:
Yep no way to downgrade.

On the other hand you have 0x1 so you can root and flash all you want.
[Galaxy S 4 Q&A, Help & Troubleshooting] dannyella:
Knox is doing what it's supposed to do and doing it well... Wouldn't mind having it if i were in the corporate world, but im not.. So it's useless for me.. I just dont get why samsung is forcing it on everyone..
[Galaxy S 4 Q&A, Help & Troubleshooting] LoveMyNewTelephone:
As a warning:

I've waited for two weeks before flashing a ROM. Just to be safe.

I flashed 'I9505XXUEMJ5-ODEX-MEGA-KNOX_0x0-FULL' from DjeMBeY. Which was supposed to be safe for your Knox Flag.

Alas, it wasn't so safe. Now, there are warnings all over that thread, but there weren't before.

Well, now that my Knox flag is 0x1, I have the freedom to test all sorts of custom ROMs. My only fear really is that it will have its effect when I want to sell the device.
[Galaxy S 4 Q&A, Help & Troubleshooting] Dryvadeum:
That'll only be a problem if you sell your phone whilst it's still under warranty. Most phones only come with a 1 year warranty unless you pay for extra coverage - by that time you'll probably be wanting to sell your phone anyway.
[Galaxy S 4 Q&A, Help & Troubleshooting] LoveMyNewTelephone:
I live in The Netherlands. As I understand it, warranty shouldn't be an issue here (in the EU). All devices get 2 years of warranty by law, even if you modify the software.

I just think that a potential buyer might think of it as a less-than-perfect device because of the Knox flag.
[Galaxy S 4 Q&A, Help & Troubleshooting] kantjer:
I don't think it's an issue for the fast majority of users. Except for us hardcore flashers here on XDA 99% percent of the general users won't have a clue what knox is and most likely will never have to deal with it.
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
That's because the majority of the users don't flash custom software like we do.

They stay on stock firmware and so their Knox flag will always stay 0x0
[Galaxy S 4 Q&A, Help & Troubleshooting] kantjer:
That's exactly what I mean, that's also why Samsung probably doesn't give a toss what we custom ROM flasher want.

We are only a very,very small percentage off the total user base. And now with the rapid decline of the corporate Blackberry user numbers they want to have a piece of the much bigger corporate market.

Not good for for us, but understandable from there point of view. If they succeed, time will tell.

And I think the issue could seasonally be solved if Samsung made it clear that the knox status wont have any negative effect on Hardware warranty. Then they can keep everyone happy.

The corporate market can have application only running if knox isn't tripped and we custom ROM users won't have to worry about hardware warranty. But unfortunately I'm not the boss at Samsung.
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
That's why I think that Samsung won't make an issue in warranty for us small percentage custom flashers, especially since our EU guidelines say that we can alter the software and don't lose warranty :D

(am I glad to be living in a EU country, hehehe).

However Samsung claims to have introduces Knox for consumers who bring their PERSONAL device to work and use it also business-wise.

The most devices are still sold to normal consumers and not to companies.

That way they are targetting the business market.

The only thing that I can't understand from Samsung is why they have forced Knox upon ALL users rather than make it available as extra option, so customers can choose if they want to have Knox or not.

It's that attitude from Samsung that will cost them buyers, I'm sure of it.
[Galaxy S 4 Q&A, Help & Troubleshooting] Dryvadeum:
It's corporate control with a somewhat totalitarian regime under the guise of a "security feature". I thought Samsung were South Korean, not North Korean...
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
+1
[Galaxy S 4 Q&A, Help & Troubleshooting] jonatutu:
I have read about some firmware doesnt have knov flag implemented, for example like

MG5 (i9505 singapore phone) the one I am using so I dont see a knov in my download mode.

I have flash a number of custom kernel due to the instability on my phone but I have being using

stock 4.2.2 TW firmware all this time and I dont get to see the knov flag because of my MG5 baseband.

So will a custom kernel with stock firmware 4.3 (planning to flash the original firmware push for my country)

trigger knov flag?
[Galaxy S 4 Q&A, Help & Troubleshooting] malybru:
Hi,

Yes.

Anything "Custom" will trigger the Knox flag

:)
[Galaxy S 4 Q&A, Help & Troubleshooting] jjnhl68:
That is a good question. I would accept this if they state some kind of warning before new FW updates about Knox related changes.

I don't know if that is their obligation to do, but I think it would be fair - play.

I wouldn't buy S4 if I would knew about this and I'm sure many of you wouldn't too.

Also, Samsung knew about us here, and they don't care.

So, considering everything, i'm done with Samsung, ciao!!!
[Galaxy S 4 Q&A, Help & Troubleshooting] yvliew:
can i?

Just to be sure about flashing this KNOX update. What I wanna know is,

1. Will I be able to use custom recovery to flash customs rom in the future if I have KNOX?

2. Will I be able to flash Google Play Edition roms from i9505G in the future if I have KNOX?

3. Is it ok to have KNOX if I don't care about warranty.
[Galaxy S 4 Q&A, Help & Troubleshooting] ace_of_spades021:
after I enter the wrong password then i find the knox password with pin but I can't enable knox again...

it say device not athorize...

any help?!
[Galaxy S 4 Q&A, Help & Troubleshooting] kantjer:
yes to all 3 questions.But you will trip the knox flag on 1 and 2
[Galaxy S 4 Q&A, Help & Troubleshooting] timberwolf60:
Bmg5 was on old bootloader, so is a good time for you to flash customer ROM. You can reset flash counter by triangle away.

If official 4.3 come to Singapore. Then no more customer recovery/ROM for you if you worry of knox counter changed to 0x1 which void the warranty for sure in Singapore. Even you cannot downgraded to the older firmware. If you don't care about warranty then you are free to do whatever you like. Meantime I was on leak firmware JB 4.3 for Asia which was for Singapore as well. i9505xxUDmh6 on new bootloader for Singapore as well. All firmware with UD 4.2.2 and UEmj3 was knox enabled bootloader.

Send via i9505 using TapatalkPro,

ROM: I9505XXUEMJ3_Vega

CSC/Modem: OLBEMJ2(STH)/XXUEMJ3

Kernel/recovery: Stock

SuperSU Pro 1.65, 64GB FAT32 Card
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
Kantjer gave you the wrong/incomplete info, the correct info is :

1. yes and no, you can flash custom roms/recovery, but you will permanently disable Knox as the Knox warranty will be void (0x1). You can't use Knox containers then anymore.

2. Same as point 1.

3. Knox is just a secure environment to use corporate apps (like email, calendar, etc) which can't be used anymore once you tripped the Knox warranty (0x1). If you don't care about the corporate apps and the Knox environment, than you can flash whatever you want......just don't flash a pre-Knox firmware as it will result in a non-bootable phone
[Galaxy S 4 Q&A, Help & Troubleshooting] orangedeal:
Deleted.
[Galaxy S 4 Q&A, Help & Troubleshooting] yvliew:
but Google Play Edtion rom might never have KNOX. So if I flash knox now means I won't be able to flash GPE anymore?
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
This is a KNOX related topic, not a general topic.

Please visit the general topic to get your question answered.

---------- Post added at 01:20 PM ---------- Previous post was at 01:15 PM ----------

It's actually quite easy :

Flash Knox firmware = new bootloader

(Re)flash pre-Knox firmware = old bootloader --> Knox warranty void (0x1)

GE ROM = old bootloader, so your Knox warranty will be void and you can't use Knox anymore as corporate environment as it will be permanently disabled.

When you flash old bootloader (pre-Knox firmware) when you had flashed a Knox firmware (new bootloader), there will always stay something behind which causes the Knox warranty flag (0x1).

I know, it's a b**tch, but unfortunately it's (currently) that way and no other solution.
[Galaxy S 4 Q&A, Help & Troubleshooting] JackYack13:
You can't revert to the old bootloader once you have the new one.
[Galaxy S 4 Q&A, Help & Troubleshooting] speedme:
That's what I said in a previous post....that it will end up in a non-bootable device.
[Galaxy S 4 Q&A, Help & Troubleshooting] leijonasisu:
Samsung will never give you a new device. EVER.

If the phone is so damaged that you need a new device then you damaged it yourself.

If it's a hardware problem they will just replace what is broken. If the circuit-board dies then they will just replace that (you still have to keep the shell of your old phone with all the dents and scratches etc). You will never get a new phone. Warranty covers

repair

not replacement.

No. The moment you have a knox bootloader the moment you flash or root anything you will trip the flag. Even if you use root de-la-vega. It'll set your firmware to custom 0x1. Which basically shows you modified the device. Read the f£@45! thread for christ's sake it's all so obvious now what you can and can't do. You want to know for sure, test it yourself and report your findings. That's what this forum is for.

This is not the place to ask, you've been told a million times. Seriously..?

Why do you ask this here? This is the wrong thread.. what is wrong with you people?

Wrong thread also.. ask in the general section. No one is gonna bother with replying here.

Dude what part of If you flash

ANYTHING

with a Knox enabled bootloader, the flag is tripped to 0x1. Except root de-la-vega. But the Custom Firmware is still tripped to 0x1 don't you understand? It's really not that hard to understand that you cannot flash or touch your phone with ODIN after you get a Knox bootloader, without tripping the flag.

In EU all digital appliances etc. TV, Phone, Fridge etc. all have to have a minimum 2 year warranty.

I got 2 years on my phone. Which is why it's such a pain in the ass that I can't modify it any more.

Makes the €50 or so of rooted apps that I bought useless and also pretty much destroys the functionality of my phone.

I bought a €700 brick.
[Galaxy S 4 Q&A, Help & Troubleshooting] nish983:
is there any way to get knox conatiner workin on rooted i9500??
[Galaxy S 4 Q&A, Help & Troubleshooting] bombaybadboy:
I have upgraded to 4.3 and rooted, of course I have been flagged warranty 0x1 but simple question I hope. My 4.2.2 Cwm won't be much use now right? Just wondered if I should delete and gain back the storage
[Galaxy S 4 Q&A, Help & Troubleshooting] malybru:
Hi,

CWM will not replace the Knox bootloader.

Flashing an older firmware with knox will give you an unusable phone.

So,maybe just save it to your PC ,just in case someone eventually figures a way around the knox pox.

:)
[Galaxy S 4 Q&A, Help & Troubleshooting] malybru:
EDIT:

Wait,what variant of the phone do you have?
[Galaxy S 4 Q&A, Help & Troubleshooting] bombaybadboy:
Thank you, only had the phone 2 weeks now and playing catchup. Warranty isn't any big deal for me I would have broken it anyway. I just keep a backup to get me out of trouble, I will make a new one, thanks for the quick reply :thumbup:

I have exynos 5 octo i9500 so I guess the wrong device :)
[Galaxy S 4 Q&A, Help & Troubleshooting] malybru:
Hi,

I did not think that the i9500 had the knox pox ,yet.

So, you are saying that it now does.

[MENTION=2288048]Hawke84[/MENTION] needs to update the first post again! :eek:

:)
[Galaxy S 4 Q&A, Help & Troubleshooting] donalgodon:
That's good news, but how far can I go with Stock ROMs at this point? I mean, the 4.3 ROMs will likely require newer bootloaders if the leak is any indication.

What's the last Non-Knox Stock ROM?

I realize that 4.2.2 ROMs can be flashed without the new Knox bootloader, but that party's sure to end soon. I just want to be prepared.
[Galaxy S 4 Q&A, Help & Troubleshooting] paras:
Did this apply to I9500?

Sent from my HTC One
[Galaxy S 4 Q&A, Help & Troubleshooting] scandiun:
How do you backup apps+data when you have Know? I guess the only possible way is to use adb backup...
[Galaxy S 4 Q&A, Help & Troubleshooting] donalgodon:
I think someone posted a work command line around that you can enter into the terminal emulator, but I'm not sure what it was.
[Galaxy S 4 Q&A, Help & Troubleshooting] malybru:
Hi,

I was on MGA pre-rooted from DjeMBeY, and I believe that was the last stock one.

The poo hit the fan after that with the introduction of the MH8 firmware.

Personally, I am sticking with AOSP for the time being...

:)
[Galaxy S 4 Q&A, Help & Troubleshooting] Hawke84:
Hi no only i9505