Related
Hello all!
I wanted to create a carrier specific thread for SamFail on the Note 8. Please use this thread to ask any questions you may have, or discuss root!
Please be friendly, helpful and courteous.
Please hit thanks to help me out, and hit thanks to anyone that helps you out!
Thank You!
-Tee Jay
Any roms being cooked up now that we have root?
215Aphillyated said:
Any roms being cooked up now that we have root?
Click to expand...
Click to collapse
I don't think so until we get our bootloader unlocked
A general question about root.. Does getting root means we can switch carrier (move to att/verizon) on tmobile locked phones?
ph33na said:
A general question about root.. Does getting root means we can switch carrier (move to att/verizon) on tmobile locked phones?
Click to expand...
Click to collapse
Can you elaborate by "switching carrier's?" Do you mean putting an att/Verizon sim into a T-Mobile phone? Or flashing a att/Verizon firmware to a T-Mobile phone?
If you're referring to the sim, then no. You'll have to either pay for a service to do it for you or wait for TMobile to unlock it for you.
batsup606 said:
Can you elaborate by "switching carrier's?" Do you mean putting an att/Verizon sim into a T-Mobile phone? Or flashing a att/Verizon firmware to a T-Mobile phone?
If you're referring to the sim, then no. You'll have to either pay for a service to do it for you or wait for TMobile to unlock it for you.
Click to expand...
Click to collapse
Yes I mean using a SIM from a different provider.
Thanks for the info!
Google what Root means, It does not unlock SIM, it just allows for customization
Sent from my SM-N950U using XDA-Developers Legacy app
and it allows you (the one plopping down a grand for this device) to remove all the CRAP that Samsung and your carrier thought it would be in THEIR best interest to put on your phone.
Since samfail doesnt trip knox (afaik) is it possible to unroot and use samsung pay again? Or is that gone regardless?
kitex2 said:
Since samfail doesnt trip knox (afaik) is it possible to unroot and use samsung pay again? Or is that gone regardless?
Click to expand...
Click to collapse
If you flash back to stock, Samsung Pay works fine since we never tripped Knox.
Sent from my SM-N950U using Tapatalk
I'm rooted and trying to figure out how to add a data toggle. Any idea?
piezan said:
I'm rooted and trying to figure out how to add a data toggle. Any idea?
Click to expand...
Click to collapse
what about Tasker and Secure Settings?
Jonathanpeyton said:
what about Tasker and Secure Settings?
Click to expand...
Click to collapse
Thanks for the reply, I have tried secure settings and it did not work. I am unsure how to make Tasker add a toggle. I remember the note 5 we had to add MobileData line some where in csc or something.
CreepyE said:
I don't think so until we get our bootloader unlocked
Click to expand...
Click to collapse
I thought T-Mobo's bootloaders were unlocked by default (as is the T-Mobo's Note 5)?
NP
Piezan,sorry I was vague.Secure Settings has a Tasker plugin that under the right conditions allows you to either build a Tasker Profile ( voice,geofence or whatever ) to toggle Data or straight up make a widget for it...I remember on my Nexus 5 I had a Tasker Profile that as soon as I was about 50 feet from the house I would enter an AutoLocation Geofence I had set (Home) thus toggling my Data in favor of the home WiFi. The main reason I suggested it is that it requires root (for the SS part).
I guess I'll ask here.
When rooted is the 80% limit ,actual or perceived ? I keep reading it's still 100pct just reporting 80.
What exactly breaks or stops working. I know about Android and Samsung pay. But I've read Samsung health which is mind boggling that root would have anything to do with a heart rate sensor.
Lastly my main desire is for one click video download ,and Instagram downloads of stories or vids etc. These are Xposed dependent. Would I be able to use Xposed with samfail. (If not any non root alternatives?)
Fastboot and Download mode
I'm on rooted note 8 and booting into Download mode every time to charge the phone to 100% instead of 80%. Using hardware keys to get back to OS every time is uncomfortable and takes too long. Easiest way I know is to do "fastboot reboot" from PC, while the phone connected via USB. However, I cant get my PC to recognize the phone while it is in Download mode - "fastboot devices" lists nothing, and if I try "fastboot reboot" the command prompt just sits on < waiting for device >.
Does anyone know what note 8 specific drivers for Windows 10 x64 need to be installed, or what else to do to make fastboot recognize connected phone in Download mode?
I know the same feeling with the fastboot I can't seem to figure it out. I usually use Minimal ADB and Fastboot and it's worked on most every modern droid I've ever owned I don't see why the Note 8 is so finicky with it. I had no problems with it and my V20.
I know that these things take time, but does anyone have any idea if anyone is working on root for the new updated bootloader? I know that the new bootloader that came with last update broke root but I have not heard or seen anything. I haven't updated but would like to know. ????
Eudeferrer said:
I know that these things take time, but does anyone have any idea if anyone is working on root for the new updated bootloader? I know that the new bootloader that came with last update broke root but I have not heard or seen anything. I haven't updated but would like to know. ????
Click to expand...
Click to collapse
@me2151 mentioned he was looking into a new method as the update started to roll out.....so yes it's being looked into.
Sent from my God Mode 8
My daughters friend just got back from a week long school trip. She went to check her photos and they were all gone. Somehow they were deleted.
She has a Samsung Galaxy S7 sm-G930P phone. Everything I have tried, and read about says this phone cannot be rooted. Is there a way to do a data recovery without rooting? Or would Sprint be able to help recover deleted files or at least root it so we can run testdisk or some other application.
Her firmware is R16NW.G930PVPS7CRH2
If there is a way to root this phone, please let me know. I haven't found any options that work with it.
Thanks.
Mike
marvay said:
My daughters friend just got back from a week long school trip. She went to check her photos and they were all gone. Somehow they were deleted.
She has a Samsung Galaxy S7 sm-G930P phone. Everything I have tried, and read about says this phone cannot be rooted. Is there a way to do a data recovery without rooting? Or would Sprint be able to help recover deleted files or at least root it so we can run testdisk or some other application.
Her firmware is R16NW.G930PVPS7CRH2
If there is a way to root this phone, please let me know. I haven't found any options that work with it.
Thanks.
Mike
Click to expand...
Click to collapse
There is no root due to the bootloader being locked down and no there is no way to unlock the bootloader.
Those pictures are most likely gone. Which should not be the case as every Samsung has the auto backup feature enabled by default.
zelendel said:
There is no root due to the bootloader being locked down and no there is no way to unlock the bootloader.
Those pictures are most likely gone. Which should not be the case as every Samsung has the auto backup feature enabled by default.
Click to expand...
Click to collapse
Thanks, I wanted to make sure I wasn't missing anything. She has the backup turned on, but for some reason the photos are not checked, so I'm guessing it's only backing up the system files.
Thank you.
Hello very friendly helping people!
Im a 10 year iPhone user, but over time i came to hate all the restrictions and so i got myself a K30 Ultra and later today it should finally arrive!
Unfortunately i found out that it doesnt check the Google SafetyNet thingy and i can't use Google Pay with it. That kinda sucks, I never thought about stuff like this on iOS, but I'm confident there is a solution for it.
I found out about rooting my device, but it somehow isn't possible because of the Mediatek chip. But then I also found out that apperenty there IS a way to use the program/thingy that makes the phone pass SafetyNet (Magisk) without the need of a custom ROM.
I'm sorry if im confusing words like rooting im very noobish about all this.
So here are my questions in short form:
1. Can I make Google Pay Work in any way on my Redmi K30 Ultra?
2. Does this also affect my banking apps (I'm using DKB and Kontist) and can this be solved, too?
3. Could you link me some guides how to do it?
4. Is there any danger doing it (like deleting my phone if it doesnt work) and is there a possibility to safe my device on the PC or something like this to be safe?
5. Are their any safety concerns doing "it" (not sure what the solution will be) and should I install an anti virus program on the device? I just read about the cerberus trojan and its kinda scary. I think iOS systems were always pretty safe against those.
6. Anything else i need to know?
Thank you so much! I appreciate it a lot that there is a place where i can go to get help on those things! <3
Google Pay and any other banking apps refuse to work when a rooted Android gets detected by them. BTW: SafetyNet API doesn't purely check whether the device's Android is rooted, as the API is designed to check the overall integrity of device's Android.
jwoegerbauer said:
Google Pay and any other banking apps refuse to work when a rooted Android gets detected by them. BTW: SafetyNet API doesn't purely check whether the device's Android is rooted, as the API is designed to check the overall integrity of device's Android.
Click to expand...
Click to collapse
Hey, thanks for your post!
Are you implying that there is no way around that and its doomed to forever not work on my device?
To clarify things: SafetyNet is run by an app that has implemented this API, it's not run by Android OS itself. Yes, Magisk allows you to lever out this test by manipulating device's fingerprint so you will possibly be able to use Google Pay etc.pp
FYI: Any app not having SafetyNet API implemented easily can check whether Android got rooted / tampered or not. The app simply runs functions like
Code:
isRootNative
isDetectedDevKeys
isDetectedTestKeys
isFoundBusyboxBinary
isFoundDangerousProps
isFoundHooks
isFoundResetprop
isFoundSuBinary
isFoundWrongPathPermission
isFoundXposed
isNotFoundReleaseKeys
isPermissiveSelinux
isSuExists
isMagiskSUExists
isFoundMagisk
isFoundRootCloakingApps
what can't get prevented by Magisk.
jwoegerbauer said:
Yes, Magisk allows you to lever out this test by manipulating device's fingerprint so you will possibly be able to use Google Pay etc.pp
Click to expand...
Click to collapse
Ok, perfect. Would you be able to link me to a guide that shows me how to install Magisk on my device? It has a Mediatek chip so a custom ROM isn't possible (as far as I understand).
Mirardt said:
Ok, perfect. Would you be able to link me to a guide that shows me how to install Magisk on my device? It has a Mediatek chip so a custom ROM isn't possible (as far as I understand).
Click to expand...
Click to collapse
How to install Magisk without a Custom ROM is explained here.
If a Custom ROM like TWRP isn't officially made public for your device then you have to compile TWRP at your own.
This is TWRP and Magisk for the latest firmware on the K30 Ultra. https://mifirm.net/downloadtwrp/166
---------- Post added at 07:39 PM ---------- Previous post was at 07:37 PM ----------
Google Pay on a rooted device with Magisk installed /is/ possible, my Galaxy Note 9 with Dr. Ketan's ROM works with Google Pay and I believe it's due to the CTS Profile fix which is available in its ROM Tool app. So there's going to be some way to make it work with the K30 Ultra.
JaboJG said:
This is TWRP and Magisk for the latest firmware on the K30 Ultra. https://mifirm.net/downloadtwrp/166
Click to expand...
Click to collapse
Oh wow how cool is that, that is custom for the K30 ultra
And do I install that with the guide linked above or do I need some certain skill and experience to do that. It says it isn't tested yet. If I do a mirror of my phone before nothing really bad can happen right?
Google Pay on a rooted device with Magisk installed /is/ possible, my Galaxy Note 9 with Dr. Ketan's ROM works with Google Pay and I believe it's due to the CTS Profile fix which is available in its ROM Tool app. So there's going to be some way to make it work with the K30 Ultra.
Click to expand...
Click to collapse
Nice!!!
Yeah the only think that failed SafetyNet Test is the "CTS profile match". But I can't use those roms for my K30 ultra, right, so I just do it with Magisk?
Thanks so much!!
You need to unlock your bootloader with the Mi Unlock tool then flash TWRP over fastboot, and in TWRP make the appropriate backups and flash Magisk. There's many guides and it's relatively straight forward.
K30 Ultra is basically a brand new phone, it's like a month old. It'll be a while but keep an eye on XDA Forums, on the internet, and on YouTube. Somebody will eventually describe or figure out how to fix the CTS Profile.
I think I'm not gonna modify mine and I'll just wear my Apple Watch to use it for contactless payments.
JaboJG said:
You need to unlock your bootloader with the Mi Unlock tool then flash TWRP over fastboot, and in TWRP make the appropriate backups and flash Magisk. There's many guides and it's relatively straight forward.
K30 Ultra is basically a brand new phone, it's like a month old. It'll be a while but keep an eye on XDA Forums, on the internet, and on YouTube. Somebody will eventually describe or figure out how to fix the CTS Profile.
I think I'm not gonna modify mine and I'll just wear my Apple Watch to use it for contactless payments.
Click to expand...
Click to collapse
Alright, so I read 12384 guides and had a very tiny sense of it. The Mi Unlock tool stopped me, though, and now I'll have to wait another 6 days.
As I understood it, my data will be erased, but can be just be restored by MIUI if backed up before. I'm gonna let you know how it worked after I'll do it in about a week.
Probably I won't have to patience to wait. Google Pay is a really nice to have, but neither voLTE, nor voWifi works on my device, so I for sure have do hack that some weird way, because i have no mobile network at all at home and absolutely need voWifi.
Thank you very much for your kind help! <3
No problem at all.
I'm not sure if Wifi-Calling (voWifi) works with my carrier as I've turned it on with the carrier and in the phone, and it doesn't seem to be making calls over wifi. Not a big deal for me though as I've got Unlimited calls with my carrier.
Please let us know if and when you do flash the TWRP as I'd like feedback before flashing it myself.
Do your banking apps refuse to work or is it only google pay that fails due to the safetynet fail?
JaboJG said:
No problem at all.
I'm not sure if Wifi-Calling (voWifi) works with my carrier as I've turned it on with the carrier and in the phone, and it doesn't seem to be making calls over wifi. Not a big deal for me though as I've got Unlimited calls with my carrier.
Please let us know if and when you do flash the TWRP as I'd like feedback before flashing it myself.
Click to expand...
Click to collapse
Yeah, me too, but I have a very bad connection in my flat so I do need voWifi anyway. I will let you know and hope I won't brick my device. But as I understand it, bricking the device just by flashing twrp is very unlikely, right?
MerlijnD said:
Do your banking apps refuse to work or is it only google pay that fails due to the safetynet fail?
Click to expand...
Click to collapse
Only Google Pay, both of my banking apps work perfectly. I couldnt scan the security bar code though, some internal google app wouldn't allow it. So i had to put in both the (very long) idendification and security numbers in manually.
Alright thanks. Another thing im interested in is if Snapchat works when safetynet fails. Did you do any tests regarding that?
MerlijnD said:
Alright thanks. Another thing im interested in is if Snapchat works when safetynet fails. Did you do any tests regarding that?
Click to expand...
Click to collapse
Not using Snapchat, but I just installed it and it starts without problems. Didn't made an account though.
So I'm gonna be able to flash twrp and Magisk in exactly 14 hours and have some questions i would really appreciate an answer to <3
Using this: https://mifirm.net/downloadtwrp/166
1. The thing i want to flash first is twrp and it is the file called "recovery.img" in the downloaded folder, is that correct?
2. Just flashing twrp is "relatively" safe and if I do a backup and the device bricks by installing Magsik after, i can recover it through twrp, correct?
3. Should I not install todays new security update to MIUI or does that not matter at all?
edit: 4. Do I need/want to have "USB debugging", "Install via USB" and "USBebugging (Security Settings)" enabled or just "OEM unlocking"?
Thank you so much! I'm very nervous since i didn't read any experiences of rooting the K30 Ultra before and I'm scared of killing it.
Hey Mirardt, good luck. Let us know how you get on!
1. Yeah, you'll use fastboot to flash the recovery.img for TWRP.
2. Do a full backup with TWRP and you should be safe.
3. Doesn't matter, it's just the September Android security update.
4. Yeah turn on USB Debugging and connect your phone to your computer - it will ask you if you want to allow this computer to debug your phone, choose accept and always (or something similar to those words.) Do this before flashing TWRP.
Mirardt said:
So I'm gonna be able to flash twrp and Magisk in exactly 14 hours and have some questions i would really appreciate an answer to <3
Using this: https://mifirm.net/downloadtwrp/166
1. The thing i want to flash first is twrp and it is the file called "recovery.img" in the downloaded folder, is that correct?
2. Just flashing twrp is "relatively" safe and if I do a backup and the device bricks by installing Magsik after, i can recover it through twrp, correct?
3. Should I not install todays new security update to MIUI or does that not matter at all?
edit: 4. Do I need/want to have "USB debugging", "Install via USB" and "USBebugging (Security Settings)" enabled or just "OEM unlocking"?
Thank you so much! I'm very nervous since i didn't read any experiences of rooting the K30 Ultra before and I'm scared of killing it.
Click to expand...
Click to collapse
JaboJG said:
Hey Mirardt, good luck. Let us know how you get on!
1. Yeah, you'll use fastboot to flash the recovery.img for TWRP.
2. Do a full backup with TWRP and you should be safe.
3. Doesn't matter, it's just the September Android security update.
4. Yeah turn on USB Debugging and connect your phone to your computer - it will ask you if you want to allow this computer to debug your phone, choose accept and always (or something similar to those words.) Do this before flashing TWRP.
Click to expand...
Click to collapse
Hey Jabo, nice, I'm gonna do just that! Just for clarification, I use Mi Unlock Tool first, THEN twrp, then backup, then magisk?
I'll let you know and thanks for the good luck!
edit: so the command would be "fastboot flash recovery recovery.img", right?
I'm VERY sorry for the noobish questions.
I'm going to quickly use this thread to ask how to actually unlock the K30 Ultra Bootloader. I did everything the guides said, but Mi Unlock still doesn't recognize the phone when it's plugged in. Any Advice?
Hey guys (especially JaboJG). quick update: Flashing twrp and Magsik both just worked perfectly. no brick. Thanks for your help!!
The only issue is that it didnt help in passing Google Safety Check. I tried almost everything there is and will post my logs of MagiskHide Props in their thread soon.
Also, now some apps don't work anymore because they detect the root. I hope we will find a fix.
macrett said:
I'm going to quickly use this thread to ask how to actually unlock the K30 Ultra Bootloader. I did everything the guides said, but Mi Unlock still doesn't recognize the phone when it's plugged in. Any Advice?
Click to expand...
Click to collapse
No idea, sorry. It just worked for me.
I've successfully rooted my Galaxy Note 3 to play custom boot animations and boot audio. But now I want to try it on my main device; the Galaxy Note 20 Ultra. I only want to modify "bootsamsung.qmg", "bootsamsungloop.qmg", and try adding "PowerOn.ogg". (Is this even possible on newer Samsung phones?)
Thing is, I don't want to root this device because I still want to get security patches and updates without doing complicated flashing procedures, and I still want to get OEM support.
Is there a way to at least root the phone temporarily without voiding the software legitimacy, and still get support for updates?
(If not then guess I'll just wait till 2025 when the phone stops getting software updates)
ASEM1123 said:
I've successfully rooted my Galaxy Note 3 to play custom boot animations and boot audio. But now I want to try it on my main device; the Galaxy Note 20 Ultra. I only want to modify "bootsamsung.qmg", "bootsamsungloop.qmg", and try adding "PowerOn.ogg". (Is this even possible on newer Samsung phones?)
Thing is, I don't want to root this device because I still want to get security patches and updates without doing complicated flashing procedures, and I still want to get OEM support.
Is there a way to at least root the phone temporarily without voiding the software legitimacy, and still get support for updates?
(If not then guess I'll just wait till 2025 when the phone stops getting software updates)
Click to expand...
Click to collapse
It's a "have one's cake and eat it too" problem.
yes, you can modify phone without rooting phone.
no, you can't modify phone without losing knox/warranty.
no, you can't receive updates on modified phone.
aIecxs said:
yes, you can modify phone without rooting phone.
no, you can't modify phone without losing knox/warranty.
no, you can't receive updates on modified phone.
Click to expand...
Click to collapse
Ah, so even if it's not rooted it'll void the legitimacy when modified?
well that's a bummer
ASEM1123 said:
Ah, so even if it's not rooted it'll void the legitimacy when modified?
well that's a bummer
Click to expand...
Click to collapse
It is obvious that root is a modification of the system.
on locked bootloader no modifications allowed by secure boot chain of trust.
you already trip knox when unlocking bootloader, even if running completely stock ROM.
yeah, i was just hoping if there was a way somehow.
Thanks y'all.
Im considering getting one but i have few questions:
1. Is/will it be possible to lock the bootloader? (Not relock, just lock aka return it to original?)
2. Is it possible to have paralel apps? Like Island app but no root needed?
3. Is it possible to block bloat installing every update/disable the wizard? (Again, no root)
4. Can you hide/disable every unwanted app or via adb?
5. Hows watching movies on it?
6. Will custom roms exist?
7. Apparently Samsung doesnt use A/B. Is this true?
Korothi said:
Im considering getting one but i have few questions:
1. Is/will it be possible to lock the bootloader? (Not relock, just lock aka return it to original?)
Click to expand...
Click to collapse
Please clarify on what you're asking. The bootloader comes locked by default. On unlockable devices, it is always possible to relock the bootloader, but you must perform a clean flash of the factory firmware before doing so. Attempting to lock the bootloader on custom firmware will render your device inoperable.
Korothi said:
2. Is it possible to have paralel apps? Like Island app but no root needed?
Click to expand...
Click to collapse
What do you mean by "parallel apps"?
Korothi said:
3. Is it possible to block bloat installing every update/disable the wizard? (Again, no root)
Click to expand...
Click to collapse
No. Root is required to remove bloat.
Korothi said:
4. Can you hide/disable every unwanted app or via adb?
Click to expand...
Click to collapse
Not without root.
Korothi said:
5. Hows watching movies on it?
Click to expand...
Click to collapse
This is a flagship device; I would expect movies would be just fine.
Korothi said:
6. Will custom roms exist?
Click to expand...
Click to collapse
Eventually.
Korothi said:
7. Apparently Samsung doesnt use A/B. Is this true?
Click to expand...
Click to collapse
Yes. Samsung has continued to use the bespoke recovery model. This makes Samsung devices slightly more complicated to flash, but TWRP helps make it easier.
I managed to have a duplicated app (Revolut) setting up the personal area
For social like WhatsApp this feature is integrated and easier.
V0latyle said:
Please clarify on what you're asking. The bootloader comes locked by default. On unlockable devices, it is always possible to relock the bootloader, but you must perform a clean flash of the factory firmware before doing so. Attempting to lock the bootloader on custom firmware will render your device inoperable.
Click to expand...
Click to collapse
Korothi said:
Im considering getting one but i have few questions:
1. Is/will it be possible to lock the bootloader? (Not relock, just lock aka return it to original?)
Click to expand...
Click to collapse
Worth to mention, Once you unlock bootloader and flash custom binary, you can relock bootloader later after flashing stock firmware first but still it leaves footprint and certain features will be stopped working forever. e.g Samsung Pass and Pay and may be more.
V0latyle said:
No. Root is required to remove bloat.
Click to expand...
Click to collapse
V0latyle said:
Not without root.
Click to expand...
Click to collapse
Yes you can remove, disable unwanted bloatware via ADB commands. Personally I've disabled samsung dex and similiar unwanted programs, removed swiftkey and other bloat....
Klaudas said:
Yes you can remove, disable unwanted bloatware via ADB commands. Personally I've disabled samsung dex and similiar unwanted programs, removed swiftkey and other bloat....
Click to expand...
Click to collapse
Any guide and list of what is safe to remove?
Fl1nt91 said:
Any guide and list of what is safe to remove?
Click to expand...
Click to collapse
There is a guide. Search XDA for this thread "Samsung Galaxy One UI - Optimization Guide". You will find there everything you need to debloat by your needs.
dr.ketan said:
Worth to mention, Once you unlock bootloader and flash custom binary, you can relock bootloader later after flashing stock firmware first but still it leaves footprint and certain features will be stopped working forever. e.g Samsung Pass and Pay and may be more.
Click to expand...
Click to collapse
Safetynet fix will not help?
Also what i meant was not relock state for bootloader. I meant lock. For example MSM tool in oneplus locks bootloader (locks, not relocks)
Also "parallel apps" is a feature where you can setup 2 discords for example. It can be built in or if you have root - island app.
Korothi said:
Safetynet fix will not help?
Also what i meant was not relock state for bootloader. I meant lock. For example MSM tool in oneplus locks bootloader (locks, not relocks)
Also "parallel apps" is a feature where you can setup 2 discords for example. It can be built in or if you have root - island app.
Click to expand...
Click to collapse
I don't understand still between lock and relock
As explained above by @V0latyle default state of device is locked. If you want you can unlock it. But once you unlock and flash custom binary you can never lock again as same state before you unlocked. You can relock bootloader with missing some features forever. Nothing can help to restore said functions.
Samsung have two features which give you dual app
1.Dual Apps
2.Secure folder
With both these utilities you can use same app in two environments. Again not all apps may supported.
dr.ketan said:
I don't understand still between lock and relock
As explained above by @V0latyle default state of device is locked. If you want you can unlock it. But once you unlock and flash custom binary you can never lock again as same state before you unlocked. You can relock bootloader with missing some features forever. Nothing can help to restore said functions.
Click to expand...
Click to collapse
To expand on this: Samsung uses Knox Guard and other features to detect whether custom images have been flashed to the device. If this is true, some apps and functions that depend on Knox status may not work.
This is in contrast to other OEMs such as Google - the Pixel series can be restored to factory stock with a locked bootloader, and there will be no trace of the device ever having been modified.
What you can do, on either stock or custom firmware, as long as you're rooted with Magisk, is use Magisk modules such as Universal SafetyNet Fix to spoof device responses to Play Integrity attestation, as well as "hide" Knox status. However, again, this requires root. Magisk modules cannot be used without Magisk root.
To try to explain this simply:
Stock firmware, never unlocked: Knox OK: secure functions will work.
Stock firmware, locked but previously unlocked, custom firmware never installed including Magisk patch and/or recovery, Knox should be OK.
Stock firmware, locked but previously unlocked with custom firmware, Knox tripped: secure functions will not work.
Stock/custom firmware, unlocked, rooted with Magisk, attestation responses fixed via Magisk module: Knox status should not matter, Android/Google secure functions should work but Samsung apps that depend on Knox may not.
It is not possible to reset Knox status once tripped.
Therefore, if the device has ever been modified, even if it's just a Magisk patch, re-locking the bootloader will not return it to the "pure" factory state. So, if you are wondering whether to unlock the bootloader, understand that once anything is modified, you are committed and there is no way back. If you don't intend on modifying anything, don't unlock.