yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy S23 Ultra] Ashray_Vk:
Hi @BlackMesa123

I got back to getting some time to test this out, and I think it's still broken.

Summary - Fresh installation of Dr Ketan's RoM, setup Magisk, Zygisk, LSPosed, and then your modules for KnoxPatch and the enhancer. Confirmed that the enhancer has installed properly by verifying the icon in the App Info.

Now, trying to create a Work Profile Through Company Portal (Intune), but gets stuck at the screenshot

I'm ready to provide logs for your investigation, if you do get some time. Could you let me know what logs you need ? (And the steps if possible please)

Here are the logs from the LSPosed if they can help.

Once again, thanks for all the help!
[Samsung Galaxy S23 Ultra] BlackMesa123:
Doesn't seems like an issue with this module at all as I couldn't find any relevant error. But I did notice your data partition is not encrypted, so this might be what causes this error in your end.

I auditd : Start at vold.decrypt: none, ro.crypto.state : unsupported, ro.crypto.type : none

I'd also try to add this app in Magisk's DenyList just in case it has any root detection checks under the hood.
[Samsung Galaxy S23 Ultra] Ashray_Vk:
Thanks for the quick response !

The app was indeed part of the DenyList, but the data might indeed be not encrypted, which I currently don't know how to check, or enforce encryption in the rom.
[Samsung Galaxy S23 Ultra] BlackMesa123:
You can clearly see it's not encrypted both in logs and props:

[ro.crypto.state]: [unsupported]

The developer of the ROM you're using disabled it (for no apparent reason?), either go back to stock ROM or enable encryption again (requires stock fstab file in vendor and kernel ramdisk)
[Samsung Galaxy S23 Ultra] Ashray_Vk:
Thanks for the info, I will reach out to the dev of the ROM then.

Best,

Ashray
[Samsung Galaxy S23 Ultra] Ashray_Vk:
@BlackMesa123 - I have been able to successfully go ahead with the stock rom on this, but it seems like I might be doing something wrong with avoiding root detection through the Intune app?

It detects my root, although I have -

1) Changed the app package name of magisk

2) Put the apps in the deny list.

3) Used KnoxPatch Enhancer (might not be related, but just used it as well)

I know this may be out of your scope, but I was wondering if there was any other thing left through which I could hide root for this app. (or if we can find out how it detects root)

Thanks!

Ashray
[Samsung Galaxy S23 Ultra] BlackMesa123:
Try installing Shamiko, remember to also disable "Enforce DenyList" in Magisk Settings.
[Samsung Galaxy S23 Ultra] Ashray_Vk:
I realized the "Enforce DenyList" was disabled. I enabled it and it seems to be working good now. (Hopefully,I should have access to work based data now)

Do you advise it to be disabled?
[Samsung Galaxy S23 Ultra] BlackMesa123:
If you have Shamiko installed it must be disabled.
[Samsung Galaxy S23 Ultra] Dante63:
Just an FYI...

Even if he's using github link, he should have credit you...
[Samsung Galaxy S23 Ultra] Ashray_Vk:
Hi @BlackMesa123

Would you know if this module supports OneUI 6?

I noticed I saw this in the logs -

08-17 14:41:33.589 27818 27818 I LSPosed-Bridge: [KnoxPatch][E][com.microsoft.windowsintune.companyportal]--> MainHook: onHook: One UI 6.0 is not yet supported.

Thanks!

Ashray
[Samsung Galaxy S23 Ultra] BlackMesa123:
The latest upstream build (265a41875) fully supports the latest One UI 6 beta, I've attached the apk below. Anyway, you should only select the apps marked as "Recommended" in the module's LSPosed settings, Microsoft InTune is not a Samsung app that requires hooking so it's ignored by the module.
[Samsung Galaxy S23 Ultra] doc411:
Thanks for knox
[Samsung Galaxy S23 Ultra] Ashray_Vk:
Sorry to bother again @BlackMesa123 , this time on my S23U, on a custom rom, I have an issue where it does not create a work profile..

Would you be kind to take a look into the logs to see if something sticks out as a problem?

(If you need me to test without selecting Intune in the KnoxPatch, I can do that as well. But thought for now that it gets ignored and doesnt make a difference)

Thank you very much!

Best,

Ashray
[Samsung Galaxy S23 Ultra] Ashray_Vk:
Yeah, I am pretty sure it should be... I had my work profile on OneUI 6, before I decided to unlock BL and root.

If you remember when i had my issue on the N20U, i think i saw the same error messages on that one as well on OneUI 5/5.1
[Samsung Galaxy S23 Ultra] dr.ketan:
Don't waste time before rebloating ROM. Custom ROM is likely deknoxed. So even before trying, yo first needs to rebloat again

DM me later today
[Samsung Galaxy S23 Ultra] mustaph12:
Thank you very much.

I was able to get my secure folder, work profile back with this on s23 ultra One UI 6
[Samsung Galaxy S23 Ultra] Intel Jet:
Hi Salvo/BlackMesa

I have a problem installing Knox Patch on z flip4 device. When I first installed it in the secure folder, the loading screen automatically restarted and now there is a folder on the device, but about 1 minute, the device will not work and restart like a bootloop. Please tell me what is the problem. I have installed enhancer and apk file to activate module. Thank you @BlackMesa123
[Samsung Galaxy S23 Ultra] BlackMesa123:
Did you reboot your device after enabling the module? Please share some system logs.
[Samsung Galaxy S23 Ultra] jeppe4242:
Hey so i tried this on my samsung s10+ with LOS 20 (android 13) and ran into some issues. I downloaded the LSPosed package successfully on Magisk but then when i installed the KnoxPatch APK it said it wasnt compatible with my device, i also dont know what you mean by the LSPosed Manager app as i can not find this anywhere.
[Samsung Galaxy S23 Ultra] BlackMesa123:
The app is only compatible with One UI, as it’s explained in OP.
[Samsung Galaxy S23 Ultra] jeppe4242:
So what i did was add module to Magisk but then the LSPosed was in a zip file, so i extracted one and added to phone and on there i installed the manager.apk and its now on the phone but the knoxpatch app still doesnt want to install
[Samsung Galaxy S23 Ultra] jeppe4242:
Oh i understand, Ill have to flash back stock ROM tomorrow, but i couldnt manage to install Magisk on it, maybe itll be easier with custom recovery like twrp?
[Samsung Galaxy S23 Ultra] BlackMesa123:
Follow the official install instructions: https://topjohnwu.github.io/Magisk/install.html#samsung-devices
[Samsung Galaxy S23 Ultra] BlackMesa123:
LSPosed must be installed like a normal Magisk module, only installing the manager app takes no effect.
[Samsung Galaxy S23 Ultra] ConfusedPotato:
Is there any way to make Secure Folder encrypted again? I found all files totally unencrypted in /data/knox/sdcard

BTW: Somehow I was able to make a secure folder even before applying the patch 🤔

Magisk 26.3

Samsung Galaxy Note 9 SM-N960F

LSPosed 1.9.1 - Zygisk

KnoxPatch 0.6.1
[Samsung Galaxy S23 Ultra] BlackMesa123:
Stock or custom ROM? To have your Secure Folder encrypted you must also have an encrypted data partition.
[Samsung Galaxy S23 Ultra] ConfusedPotato:
Stock Android 10, July 1 2022 Security Patch.
[Samsung Galaxy S23 Ultra] BlackMesa123:
Check if your data partition is encrypted. If that's not the case you need to flash again the full stock firmware and do a factory reset in order to encrypt your internal storage.
[Samsung Galaxy S23 Ultra] ConfusedPotato:
Yeah, not encrypted.

I know it's probably a stupid question, but why can't I do it without reflashing and resetting?

And even if I do encrypt, I will still be able to view the secure folder without the password thru file manager, no?

EDIT: I have flashed dm-verity and forceencrypt disabled, that's probably why it wasn't encrypted in the first place...
[Samsung Galaxy S23 Ultra] BlackMesa123:
To enable back data encryption you need your stock fstab config file in place (both in your vendor partition or/and your kernel images), placing those files back will probably require a factory reset as the phone will need to encrypt your data partition or you'll end up in a boot loop.
[Samsung Galaxy S23 Ultra] ConfusedPotato:
mm, ok, thank you

btw your patch is really amazing, thank you for your work!
[Samsung Galaxy S23 Ultra] smallKING81:
Hello!

I have Samsung Galaxy M51, Android 12, rooted by Magisk 26.3, LSPosed 1.9.1-6990-zygisk. I don't have Knox Folder after flashing KnoxPatch 0.6.1 sep-lite (normal 0.6.1 doesn't install) and Knox Patch Enhancer 0.4. I noticed 2 lines in Knox features (see attached screenshot):

KNOX_SUPPORT_DAR_DUAL = false

KNOX_SUPPORT_DAR_DUAL_DO = false

BTW, SH and SHM are working.
[Samsung Galaxy S23 Ultra] BlackMesa123:
The module doesn’t adds Secure Folder support for those devices that don’t have it, for that you’ll need a custom ROM.
[Samsung Galaxy S23 Ultra] TwilightxSaga:
Can someone help me please. When I first purchased my watch for my S22 Ultra it was working fine as I was on a shealth program in the version 5. I saw my galaxy store had an update and I tried updating it but of course it wouldn't work. Recently I decided to look online to try see if I can update it through the back door and got stock with a factory reset watch. Everytime it tried to pair it connects but when it goes through thr process it comes to a screen with pairing my watch again and on my watch it says connection failed. I have installed multiples of modules to try to get it to connect but it would not. Any and I mean any help would be sufficient
[Samsung Galaxy S23 Ultra] smallKING81:
OK, I flashed Indian CSC-file and now I have Secure Folder but I still have these 2 lines:

KNOX_SUPPORT_DAR_DUAL = false

KNOX_SUPPORT_DAR_DUAL_DO = false
[Samsung Galaxy S23 Ultra] BlackMesa123:
DualDAR is only available on higher end devices.
[Samsung Galaxy S23 Ultra] rgrapow:
Hi:

I have a problem with pairing my galaxy watch 4 (GW4):

I installled lposed, knox patcher and enhancer to pairing with GW4 on OneUI 4.1 and It worked until the next reboot, Bluetooth pairing was lost so I had to run the watch setup again like the first time, this happens every reboot.

Just to mention that in LPOSED it shows this message:

"LSposed partially activated: SEPolicy is not loaded properly", I don't know if this message has to do with that problem

Magisk was installed (or flashed) using TWRP

Any advice?.

Thanks...
[Samsung Galaxy S23 Ultra] BlackMesa123:
You might also need to flash BluetoothLibraryPatcher.
[Samsung Galaxy S23 Ultra] rgrapow:
Thank you very much, it worked!!!, you're god.
[Samsung Galaxy S23 Ultra] Dragon Kumera:
What other features are lost when knox breaks? (smart things or dex?)
[Samsung Galaxy S23 Ultra] Pressa:
Good morning everyone.

I have a strange problem with my phone (Galaxy SM-S918B - S23 Ultra).

The ROM is S918BXXS3AWHR, rooted with the latest version of Magisk.

LSPosed loaded and active; KnoxPatch installed and updated to ver. 0.6.1

My Watch 4 Classic connects regularly and everything works perfectly, except when I try to calibrate it to launch blood pressure or ECG: I get the "watch disconnected" message.

Any suggestions?

Thank you
[Samsung Galaxy S23 Ultra] waterpolo:
I had the same with GW4. I solved this by resetting GW4. May be a restore with latest backup is also working.
[Samsung Galaxy S23 Ultra] ConfusedPotato:
Hi! I have reinstalled the system with encryption this time, but still all the files in /data/knox are freely readable. Somehow I was again able to initialize a folder without even the module installed, maybe my phone is special or something, its very weird that the sf works even without a patch
[Samsung Galaxy S23 Ultra] nicoco19:
Hello everyone,

I have a Samsung Galaxy S23 ULTRA rooted on ANDROID 13 (EUROPEAN VERSION) and I also have a Samsung Galaxy Watch 5 Classic.

I just saw that I can finally download the new ANDROID 14 ROM (EUROPEAN them VERSION) and install it on my Samsung Galaxy S23 ULTRA.

I saw that it was also possible for me to root my Galaxy S23 ULTRA again once I upgraded to ANDROID 14 with Magisk, that the tutorial was the same. So far nothing too hard for me lol.

Under Android 13 and rooted phone, by following your tutorial I was able to restore the functionality of Samsung Knox using [APP][XPOSED/MAGISK] KnoxPatch v0.6.1.

My question is this, if I upgrade to ANDROID 14 and root my phone, by following your tutorial again, I will be able to restore the functionality of Samsung Knox using [APP][XPOSED/MAGISK] KnoxPatch v0 .6.1 ?????

I prefer to wait and get answers from you before launching into the ANDROID14 update and ROOT.

Thank you all for taking the time to read my message and thank you in advance for your help.

Nicoco19
[Samsung Galaxy S23 Ultra] BlackMesa123:
KnoxPatch already supports One UI 6 since the version 0.6.1, so you can upgrade to One UI 6 without any issues.
[Samsung Galaxy S23 Ultra] NotYourMuffin:
Is possible to use this with lspatch?
[Samsung Galaxy S23 Ultra] ditternation:
No.
[Samsung Galaxy S23 Ultra] ditternation:
I read there is samsung checkout support now on github. So you mean samsung pay? Cause I tried many things but it doesn't work. Thanks.
[Samsung Galaxy S23 Ultra] BlackMesa123:
No, it’s two completely different apps.
[Samsung Galaxy S23 Ultra] ditternation:
Ooh ok.
[Samsung Galaxy S23 Ultra] supermaus100:
Gibt es dazu ein Video-Tutorial?
[Samsung Galaxy S23 Ultra] NOMIOMI:
and OTA firmware ?
[Samsung Galaxy S23 Ultra] Marucins:
After activating the module in KernelSU, the system that is RW becomes RO. Can this be changed somehow?
[Samsung Galaxy S23 Ultra] YMatrix:
Hey,

I have this installed on my S23+ with A14 latest December security patch.

Even though I have both knox patch + enhancer magisk module installed, I can't get Samsung Health Monitor to work - I get the device is basic status message.

Any advice?

EDIT:

Stupid Me - I mistakenly removed the tick for samsung health monitor in the knox patch settings
[Samsung Galaxy S23 Ultra] david082321.tw:
Sorry it may have been a bit off topic.

Can I spoof the Telephone app or Samsung Pay's country (CSC)?

Because my CSC does not support call recording (however, national law allows it), and I flashed it to another country's CSC to support recording. But I can't use Samsung Pay now.

When I saw this app, I thought maybe you could solve it, or could provide me with some ideas. That can help me use call recording and Pay at the same time.

Thank you very much.
[Samsung Galaxy S23 Ultra] waterpolo:
When you unlock the device then you can't use anymore Samsung Pay, because Samsung Knox is tripped.

Search on the Web where it's explained.
[Samsung Galaxy S23 Ultra] snrxx9977:
Merhaba s23 ultra root yok güvenli klasör çalışmıyor nasıl yapabilirim
[Samsung Galaxy S23 Ultra] wyt18:
Can this patch help with enabling Samsung Pay on Galaxy Watches that are paired with a rooted phone? Not looking to use Samsung Pay on the phone, just on the (unrooted) watch ...
[Samsung Galaxy S23 Ultra] dr.ketan:
Samsung Pay on watches works (connected to rooted phone) even without any patch. Simply hide Payment framework in magisk enforce hide list on rooted mobile provided your watch supports SPay. You have asked to "help in enabling", if that mean you don't have option for SPay in watch then it won't, nor with this patch too.

PS : I am using it same way on GW4 LTE with rooted S23 Ultra.
[Samsung Galaxy S23 Ultra] wyt18:
Thanks for the quick reply! It was working for me too on my GW4 (magisk kitsune, shamiko, denylist), and Watch plugin 2.7.x

I just upgraded to the GW6C and it forces me to use the 5.x version of the SPay Watch Plugin, which now checks that Samsung Pay on the phone works before it allows the Wallet app on the watch to work. I downgraded the Watch Plugin to 2.7.x but there is a forced update to the latest 5.x

Can I ask what version of Watch Plugin you are using?
[Samsung Galaxy S23 Ultra] dr.ketan:
I am away from phone, remind me later evening.
[Samsung Galaxy S23 Ultra] wyt18:
Thanks - would be great to also know what apps you put in denylist, and whether you are able to add new cards if you're on the 5.x Watch Plugin version
[Samsung Galaxy S23 Ultra] dr.ketan:
Plugin 5.1.10.20006

That's only what I added to denylist

I don't remember if card been added while I was in same version or updated plugin later

Device setup is

magisk alpha latest +play integrity fix latest +Shamiko 1.0(290)
[Samsung Galaxy S23 Ultra] wyt18:
Thanks. Plugin was updated in Nov 23. Basically with the new plugin I am no longer able to register with SPay on the phone since plugin now forces a phone-based SPay check
[Samsung Galaxy S23 Ultra] snrxx9977:
Hi I bought s23 ultra phone no root knox counter 0 and how can I open secure folder without rooting
[Samsung Galaxy S23 Ultra] dr.ketan:
Hope I don't misunderstood you!

On never rooted device it's stock feature

Search settings for secure folder
[Samsung Galaxy S23 Ultra] snrxx9977:
Yes, you got it right, my product is server registered and secure folder and pass do not work in any way, I do not want to root the phone. Is there a solution without rooting?
[Samsung Galaxy S23 Ultra] snrxx9977:
How can I implement it without root
[Samsung Galaxy S23 Ultra] waterpolo:
Not possible.
[Samsung Galaxy S23 Ultra] devaponnadsm:
@dr.ketan I see you are on rooted S23. I am planning to buy new phone.

Can I root S23 Ultra and use Samsung Health with this patch? I don't need Samsung Wallet. GPay will work, I think. I also need Galaxy Werable, Buds 2 Pro Manager and Watch manager to work correctly. What other features will be tripped when rooted?

Just need to confirm because the device is highly costly.
[Samsung Galaxy S23 Ultra] Mogwway:
So have you tried again to make samsung wallet work? Or is it impossible if so what is stopping it from working?
[Samsung Galaxy S23 Ultra] Cargonausorus:
Can no longer launch Samsung Health without the error message: unauthorized changes have been made... even with this patch. Is there a solution or a patch, module like in your Rom for the S24 Ultra or Health works perfectly?
[Samsung Galaxy S23 Ultra] Cargonausorus:
After a day of research and battle, I installed this module samsung_tima_v1.0 tima v1.0 then re-installed Health from the playstore and its micracle rework!!!
[Samsung Galaxy S23 Ultra] westfielddriver:
Hi all,

I use Lineage OS 20 (=Android 13) on my Samsung S10, rooted with Magisk 27.0 installed.

Magisk Modules:

GoogleSpoofForWear

Play Integrity Fix

Systemless Hosts

Zygisk . LSPosed

Magisk Settings:

Denylist enforced

I cannot install KnoxPatch.

Error message: The App was not installed since it is not compatible with you Smartphone.

What am I doing wrong?

Thanks a lot, guys!

Jürgen
[Samsung Galaxy S23 Ultra] BlackMesa123:
KnoxPatch is only compatible on One UI ROMs, there's no reason to install this in AOSP.
[Samsung Galaxy S23 Ultra] westfielddriver:
Thanks a lot, that saves a lot of time although I am not happy with this. I'll try to find an alternative. Thanks again :)
[Samsung Galaxy S23 Ultra] BlackMesa123:
There's no alternative simply because Knox is not a thing in AOSP ROMs, there's nothing to patch. You're probably looking for a way to get Galaxy Wearable apps to work on AOSP, in this case you should instead use something like https://github.com/Simon1511/WearableSpoof
[Samsung Galaxy S23 Ultra] l_ornoir:
Im having a weird issue with enhanced data protection i need to restore a save from Samsung cloud but i encrypted it and when i put the key in i get an error saying

Knox Matrix doesn't respond

Idk if that can be fixed
[Samsung Galaxy S23 Ultra] loumaros:
Has anyone succeeded to create a work profile using this? I am failing the authentication :/
[Samsung Galaxy S23 Ultra] devaponnadsm:
The repository has been archived. What happened?
[Samsung Galaxy S23 Ultra] zubaiirahmad:
I have patched approved Samsung galaxy s10+ with android 11 (One UI 3.1) . I have installed Knoxpatch using LSPosed. I also installed Knoxpatch enhancer using Magisk. But still my Secure Folder has not being creating. even in knoxpatch app know_support_secure_folder is not showing. can you please help me to fix it?
[Samsung Galaxy S23 Ultra] catelusii:
Can I choose wich Knox future I want to be activated on myb phone?

I do not need Guardian Knox for ex.

I buyed my mobil from ebay at a verry good price, and now I am afraid to be buyed with a plan.
[Samsung Galaxy S23 Ultra] CharaDev :D:
Hello i found out that knox patcher on github is only readonly is it dead??
[Samsung Galaxy S23 Ultra] Anhlatuananh:
Ls xposed has been archived so this repo is useless too
[Samsung Galaxy S23 Ultra] CharaDev :D:
I know but cant they just move it to magisk ?
[Samsung Galaxy S23 Ultra] Androiduser2390:
You can still make lsposed modules. Stupid archive and all shut down due to concerns about the LSPosed developer being in China that makes people believe it is spyware. Anyone gonna fork this
[Samsung Galaxy S23 Ultra] devaponnadsm:
It's open source. Why should we fear? I hope KnoxPatch is not dead, it is a great module.
[Samsung Galaxy S23 Ultra] Badger50:
Thread cleaned.

Greetings to all. A friendly reminder if I may with regards to XDA Rule 2.4:

Please let us keep geopolitical discussions off of XDA. There are plenty of other platforms that you can subscribe to for such discussions. Thank you.

-Regards: Badger50
[Samsung Galaxy S23 Ultra] Yannn:
Does it works with Dr Ketan Rom's ?
[Samsung Galaxy S23 Ultra] phoberus:
Someone wants to sell me their Tab S9 Ultra very cheap, but the Knox security is triggered. I don't use Samsung Pay and secure folders. Do I have any other limitations if I flash Magisk and this module? Or should I pay more for a device with Knox working?
[Samsung Galaxy S23 Ultra] Androiduser2390:
No other limitations although smart view's view function might not work (might be a glitch with 6.0)
[Samsung Galaxy S23 Ultra] Qarrier:
Any solution for non-rooted device but it have been tripped ?
[Samsung Galaxy S23 Ultra] Valiante:
@BlackMesa123 I'm not sure you're aware but LSPosed was forked and is in active development again: https://github.com/mywalkb/LSPosed_mod

Your module was indispensable to the community and it would be great to have the project up and running again.
[Samsung Galaxy S23 Ultra] Chaitanyapatel8880:
I have same issue. I tried reconfiguring matrix from instructions provided by samsung... but still same problem.

I did not have that before.
[Samsung Galaxy S23 Ultra] Nicomi:
HELLO

SM-S9110,S23

Unable to use secure wifi

and the following message pops up
[Samsung Galaxy S23 Ultra] tester2:
Side question: what is an name of the app with this CPU/GPU gauges on screenshots?
[Samsung Galaxy S23 Ultra] waterpolo:
BTW latest release is v0.7.0 (Enhancer v0.4)
[Samsung Galaxy S23 Ultra] Xdadoggy:
Same question here. I used knox patch a long time without problems, but now im back to stock and still wanna use S-Health... any solution?
[Samsung Galaxy S23 Ultra] waterpolo:
did you format data of the S-Health. I have no issue with stock (and Magisk root).
[Samsung Galaxy S23 Ultra] Xdadoggy:
Ah, sorry, with "stock" I mean "unrooted", so stock with knox tripped.
[Samsung Galaxy S23 Ultra] waterpolo:
KnoxPatch is working with LSPosed which need root. I think it is not working when you are "unrooted".
[Samsung Galaxy S23 Ultra] Xdadoggy:
Yes i know.

So the question is:

https://xdaforums.com/t/app-xposed-...e-samsung-knox-features.4549179/post-89475119
[Samsung Galaxy S23 Ultra] Peter Griffin:
Is there a similar tool for older Samsung Galaxy devices Before the Galaxy S10 ? (S6, S7, S8, S9, S10 etc...)
[Samsung Galaxy S23 Ultra] Dante63:
It's pretty much straightforward, root it again to hide knox or sell the phone to buy a new one and don't root it...

Once knox is tripped, the phone is useless without root, it's a one way path...
[Samsung Galaxy S23 Ultra] Xdadoggy:
No, it isnt. There are older versions of a "knox-patched" health apk, specially made for such cases (knox tripped without root) . So why isn't it legitimate to ask for a different, sensible solution and be told to " root or buy new"? Meeeh.....
[Samsung Galaxy S23 Ultra] Valiante:
Someone answered you already but you keep asking the same question. So now because you don't like it, you're giving attitude towards someone else who's telling you the same thing.