Root [International] Knox Security & locked bootloader on new firmwares

ironass · Feb 26, 2014

Samsung has unveiled the new Knox 2.0 Mobile Security platform that will ship with the Galaxy S5 and come to other phones running KitKat.

"The biggest change which Samsung Knox 2.0 brings to the table is different method of handling Android apps. The suite digitally secures Google Play apps data, therefore eliminating the need to run them in a dedicated Knox mode like in the previous version."

"Finally, Samsung will launch a dedicated Knox marketplace. The cloud-based app store will allow companies’ IT administrators to easily install apps on multiple devices."

Source

See, also...

Samsung Debuts Knox 2.0 Mobile Security Platform: MWC

ironass · May 22, 2014

The first Samsung Galaxy S4 model to receive the new Knox Security 2.0 firmware is the GT-i9505, German, unbranded, release, I9505XXUGNE5.

This will be on all future updated firmwares, along with Kids Mode and improvements to TouchWiz.

See...

Galaxy S4 I9505 gets an update with Kids Mode and KNOX 2.0

What does Knox Workspace v2.0 bring according to this...

"Samsung's Knox 2.0 platform has been renamed the Knox Workspace, and includes a number of new features:

Platform security: Upgraded features include TrustZone-Protected Certificate Management, KNOX Key Store, Real-Time Protection for System Integrity, TrustZone-Protected ODE, Two-factor Biometric Authentication and an enhanced Knox framework.
Support for all Android apps from the Google Play Store.
Split-Billing to separate calculate the bills for personal-use apps and professional-use apps.
Two new cloud-based services, KNOX EMM and KNOX Marketplace, and a customization service, KNOX Customization targeted specifically at SMBs. KNOX EMM provides cloud-based mobile device management and identity and access management, while KNOX Marketplace is a store for businesses to purchase KNOX and enterprise cloud apps. KNOX Customization allows users to customize B2B solutions with off-the-shelf hardware."

(Good news for Hawker & Syd... a Kids Mode :lollypop: )

togger161 · Jun 20, 2014

Just got an S4 today and thought I'd have a look on this site (having previously owned an S2) Nice to see so many familiar faces. Thought I'd root the phone - well I have had it for 12 hours now. Been trying to update my Navigon, but Navigon Fresh doesn't see the storage device. Then found out to enable USB mass storage mode I need to root it. No problem I though, was going to do that anyway in order to remove all of the bloatware. Then read all this stuff about Knox security. AP:i9505XXUFNC5 So decided I'm gonna leave it for now and do some reading. I remember the advice from before about flashing in haste, repent at leisure.

ironass · Jun 21, 2014

togger161 said:
Just got an S4 today and thought I'd have a look on this site (having previously owned an S2) Nice to see so many familiar faces. Thought I'd root the phone - well I have had it for 12 hours now. Been trying to update my Navigon, but Navigon Fresh doesn't see the storage device. Then found out to enable USB mass storage mode I need to root it. No problem I though, was going to do that anyway in order to remove all of the bloatware. Then read all this stuff about Knox security. AP:i9505XXUFNC5 So decided I'm gonna leave it for now and do some reading. I remember the advice from before about flashing in haste, repent at leisure.

Hi togger161!

Welcome to the Lunatic Asylum known as the, (International) Galaxy S4 - All Things Root, forum.

As far as Knox is concerned it is, as the Welsh say, "fat accompli", on your firmware, NC5. Unless you need a Knox secure phone for work purposes, (GCHQ, MI5, Mossad, FSB, ALDI, LIDL, etc: ), then you may as well go ahead and root and blow the Knox flag. By and large, Samsung are not using the Knox flag for warranty purposes it would seem. Rather, it is the good old flash counter that we all know and love.

ironass motto... "Flash in haste... repent at leisure"

anoniemouse · Jun 21, 2014

ironass said:
Welcome to the Lunatic Asylum known as the, (International) Galaxy S4 - All Things Root, forum.

ironass motto... "Flash in haste... repent at leisure"

Now i know why i feel so at home on here.

togger161 · Jun 22, 2014

OK, I'm gonna do it - here are my first dumb question posts on the s4 thread. (I made plenty on the S2 one)

Been doing a little reading about the knox security, and it seems there is a lot of discussion (inc a bounty) for anyone who can come up with a method to reset the trip (in much the same way triangle away does) My first thought is, if Samsung can provide software updates, and carriers can brand the phones and add their bloatware on board, then would this not trip the Knox bit? It obviously doesn't so my second dumb question is, do they use some kind of digital signature to verify the install and avoid tripping the knox bit? Or would the process to brand/update a phone not trip it in the first place?

Seems if you can avoid tripping it, you wouldn't need to reset it?

togger161 · Jun 22, 2014

BTW - I've just been spotted by my better half on these forums again (not been around for some time.)

She said (in a slightly annoyed voice) "You not messing with that phone already are you?" My only defence - "Well you seem to be enjoying Neatrom on my S2."

ironass · Jun 23, 2014

Short answer... Knox Security employs an efuse, which once blown is irreversible. 9 months since release and no-one has come up with a way to reverse the Knox warranty flag, (which is separate from the phone warranty flash counter), and is a good thing for organisations and companies that require phone security as they can monitor the Knox status. Official Samsung/carrier firmware is digitally signed and will not blow the efuse.

ironass · Jul 3, 2014

It looks as though Samsung's Knox Security has caught on and will be incorporated by Google in its, "L", release firmware, across the board. This will mean that all Android devices, not just Samsung's, will have Knox Security pre-installed in the basic Google Android, "L", firmware. This will be welcomed by I.T. managers worldwide and will mean that Android, "L", will be accepted as a secure platform and on a par with the iPhone.

Android L Knox integration is essential in the fight against hackers

anoniemouse · Jul 3, 2014

Just need google to realise that not everyone wants a locked down phone.

Some people buy their phones to use custom software, more so once official support ends for each device.

The way forward should also offer a way on older devices to have an official way of removing knox, that is once support for that device has ended from the manufacturer.

Also not everyone uses their phones in a working envioroment .

logicalotus · Jul 8, 2014

it wouldn't make sense for knox to be for the best interest of protecting phones of people of the government. it is for their benefit to restrict us. why would they have copies of software that we would obviously be able to hack eventually. hell, i'm not a computer genius and i did it. took me about 6 hrs but fort knox is not infallable. knocks is bye bye now.

EarlyMon · Jul 8, 2014

logicalotus said:
it wouldn't make sense for knox to be for the best interest of protecting phones of people of the government. it is for their benefit to restrict us. why would they have copies of software that we would obviously be able to hack eventually. hell, i'm not a computer genius and i did it. took me about 6 hrs but fort knox is not infallable. knocks is bye bye now.

It's an enterprise solution, not a government conspiracy.

And "defeating" Knox just means that your phone is no longer suitable for use in some of the larger companies.

Being rooted is the exact same thing as having administrator rights on a PC. And a lot of companies don't give that to employees.

And Google didn't do it - Samsung did.

Anyway, congratulations on getting rooted.

Root [International] Knox Security & locked bootloader on new firmwares

Extreme Android User

Extreme Android User

Android Enthusiast

Extreme Android User

Android Expert

Android Enthusiast

Android Enthusiast

Extreme Android User

Extreme Android User

Android Expert

Newbie

The PearlyMon

BEST TECH IN 2023

Smartphones

Best Android Phones

Upcoming

Best iPhones

Upcoming

Tablets

Best Tablets

Upcoming

Laptops

Best Laptops

Upcoming

Televisions

Best TVs

Upcoming

Game Consoles

Best Game Consoles

Upcoming

Wearables

Best Wearables

Upcoming

Smart Home

Smart Home Tech

Upcoming

Similar threads