Question SecureFolder and KnoxGuard removal - Samsung Galaxy S23 Ultra

Hi all,
I've recently had KnoxGuard finally removed by Samsung. I had used Secure Folder just before I received the email and the PIN worked absolutely fine without any issues. However, I subsequently received the email and restarted my phone and I could see the "OEM unlocking" option but now Secure Folder won't recognise my PIN.
Is this a freakish coincidence or is the removal of KnoxGuard the cause?
I'm running the latest April patch and I do not see the option "Forgot PIN". Any chance of recovering my Secure Folder area? I've tried the PIN so many times that it took 8 hours to give me the option to try again.

Unlocking the bootloader aka OEM Unlock, will brick Knox chip permanently and apps like samsung pass, samsung wallet, Secure folder will become disabled or wont work anymore.

Jake.S said:
Unlocking the bootloader aka OEM Unlock, will brick Knox chip permanently and apps like samsung pass, samsung wallet, Secure folder will become disabled or wont work anymore.
Click to expand...
Click to collapse
Unlocking the bootloader DOES NOT trip the KNOX at all.
Flashing CUSTOM binaries trips KNOX.

JohnTheFarm3r said:
Unlocking the bootloader DOES NOT trip the KNOX at all.
Flashing CUSTOM binaries trips KNOX.
Click to expand...
Click to collapse
Right.

JohnTheFarm3r said:
Unlocking the bootloader DOES NOT trip the KNOX at all.
Flashing CUSTOM binaries trips KNOX.
Click to expand...
Click to collapse
Wrong it does brick the knox chip, it has even been proven and so does it state clearly by samsung. Since even warranty becomes voided once bootloader aka OEM Unlock is made. If it does not brick knox then explain why knox does not work for thecrater after he did OEM unlock and if he now did it?
But it has happened that when you do bootloader / OEM Unlock then knox chip hasn't reacted to it so status remains 0 instead of going 1. So that is just lucky chance. But by default I have seen pics of people doing this unlock and status has changed to 1 after doing the unlock which means KNOX is bricked/tripped.

So my Knox status is 0x0 with OEM Unlock.
Jake.S said:
Wrong it does brick the knox chip, it has even been proven and so does it state clearly by samsung. Since even warranty becomes voided once bootloader aka OEM Unlock is made. If it does not brick knox then explain why knox does not work for thecrater after he did OEM unlock and if he now did it?
But it has happened that when you do bootloader / OEM Unlock then knox chip hasn't reacted to it so status remains 0 instead of going 1. So that is just lucky chance. But by default I have seen pics of people doing this unlock and status has changed to 1 after doing the unlock which means KNOX is bricked/tripped.
Click to expand...
Click to collapse

C9H13N said:
So my Knox status is 0x0 with OEM Unlock.
Click to expand...
Click to collapse
Like I said it happens by lucky chance that it stays 0x0 but most of times it would go 0x1.
I remembered years ago on Sony Xperia z or something where it would do same bug. When you unlock bootloader it would change status from 0 to 1 stating bootloader has been changed. But when I did it then it showed 0 still so when I re-locked bootloader and sent it on warranty repair they wouldn't see that bootloader has been touched. Since status for it showed 0 when it should show 1.

Jake.S said:
Like I said it happens by lucky chance that it stays 0x0 but most of times it would go 0x1.
I remembered years ago on Sony Xperia z or something where it would do same bug. When you unlock bootloader it would change status from 0 to 1 stating bootloader has been changed. But when I did it then it showed 0 still so when I re-locked bootloader and sent it on warranty repair they wouldn't see that bootloader has been touched. Since status for it showed 0 when it should show 1.
Click to expand...
Click to collapse
I just checked my Note 10+, which is also equipped with Dr's Rom: There, too, the Knox status would be 0x0 - although the entire ROM was flashed, as was the modem etc.
It should be clear to everyone that the guarantee claim is lost with a root anyway. However, if the status shows 0x0 and Samsung refuses to repair the device under warranty (as an example) even though the counter shows no intervention, I would personally protest against it...
Still, I don't think it's a coincidence that both of my cell phones, which are OEM Unlock, are so lucky that they both display 0x0...?!

C9H13N said:
I just checked my Note 10+, which is also equipped with Dr's Rom: There, too, the Knox status would be 0x0 - although the entire ROM was flashed, as was the modem etc.
Still, I don't think it's a coincidence that both of my cell phones, which are OEM Unlock, are so lucky that they both display 0x0...?!
Click to expand...
Click to collapse
May be you are checking with app like Phone Info or similar which showing spoofed status
On download mode you can see correct status.

dr.ketan said:
May be you are checking with app like Phone Info or similar which showing spoofed status
On download mode you can see correct status.
Click to expand...
Click to collapse
I'll check this via Download-Mode.

dr.ketan said:
May be you are checking with app like Phone Info or similar which showing spoofed status
On download mode you can see correct status.
Click to expand...
Click to collapse
You are right.
On the S23U, Warranty Void is 0x1 and on the Note10+ it's only 1.

Jake.S said:
Wrong it does brick the knox chip, it has even been proven and so does it state clearly by samsung. Since even warranty becomes voided once bootloader aka OEM Unlock is made. If it does not brick knox then explain why knox does not work for thecrater after he did OEM unlock and if he now did it?
But it has happened that when you do bootloader / OEM Unlock then knox chip hasn't reacted to it so status remains 0 instead of going 1. So that is just lucky chance. But by default I have seen pics of people doing this unlock and status has changed to 1 after doing the unlock which means KNOX is bricked/tripped.
Click to expand...
Click to collapse
It's NOT WRONG. It's literally how IT IS.
The unlocked bootloader doesn't do ANYTHING to KNOX. Flashing ROMS or ROOTING or flashing any CUSTOM partitions trips Knox.
Sorry to break it to you, but you're not well-informed. Even Samsung states it contrary to your claims.
And that can be even seen in the bootloader menu.
Do your research before posting false information.

JohnTheFarm3r said:
It's NOT WRONG. It's literally how IT IS.
The unlocked bootloader doesn't do ANYTHING to KNOX. Flashing ROMS or ROOTING or flashing any CUSTOM partitions trips Knox.
Sorry to break it to you, but you're not well-informed. Even Samsung states it contrary to your claims.
And that can be even seen in the bootloader menu.
Do your research before posting false information.
Click to expand...
Click to collapse
Yes, as far as you don't flash custom binary, knox won't trip.

dr.ketan said:
Yes, as far as you don't flash custom binary, knox won't trip.
Click to expand...
Click to collapse
Exactly my point. Jake.S seems to be stating otherwise and telling that even just by unlocking the bootloader you trip the KNOX which is completely false, even according to Samsung.

JohnTheFarm3r said:
It's NOT WRONG. It's literally how IT IS.
The unlocked bootloader doesn't do ANYTHING to KNOX. Flashing ROMS or ROOTING or flashing any CUSTOM partitions trips Knox.
Sorry to break it to you, but you're not well-informed. Even Samsung states it contrary to your claims.
And that can be even seen in the bootloader menu.
Do your research before posting false information.
Click to expand...
Click to collapse
I was surprised when he said that the OEM unlock was enough to alert Knox...
Always rooted after an OEM unlock, so I never checked if the Knox status changed before I rooted and enabled OEM...
Thanks for the clarification and input! ( :

As far as I know, OEM unlock by itself will not trip Knox, however, flashing a custom ROM definitely will. It's the whole point of the fuse in the CPU.
Anyway, with regards to Secure Folder, I had to delete and recreate the Secure Folder environment because it was getting ridiculous with a message to wait 24 hours.

Related

how to backup once before root?

also unlock the boot-loader will effect the warranty or not?
because we need to do the registration on Sony's website.
About unlocking the boot-loader: yes your warranty is no longer valid.
Read all about it here:
http://forum.xda-developers.com/showthread.php?t=1527159
That is why I'm still not decided to go for it or not
(but I have not yet the xperia S, so still time to think about it )
hk5354 said:
also unlock the boot-loader will effect the warranty or not?
because we need to do the registration on Sony's website.
Click to expand...
Click to collapse
reading bin4rys post on page 2 (#12) it says they wont deny warranty unless its found to be due to flashing a custom Rom, so we should be OK
seanicca said:
reading bin4rys post on page 2 (#12) it says they wont deny warranty unless its found to be due to flashing a custom Rom, so we should be OK
Click to expand...
Click to collapse
Certain content on your phone may also be inaccessible due to the removal of DRM security keys and the secure user data partition while unlocking the boot loader.
From Sony's website
What will happen if lost the DRM security keys?

Will my warranty be voided in this case?

I'm new to Sony Mobiles, especially when it comes to rooting and the like. And, from coming from a HTC, it's very different indeed.
I've seen all the rooting information, flashing and the like mentioned on the forum.
And there is the scary messages that "Your warranty may be voided". But, that only affects some people, as far as I know.
After trying out the *#*#SERVICE*#*# code and checking my status, it says...
Rooting Status:
Bootloader Unlock Allowed: Yes
Does this mean that I can root my phone, and the like, and not lose my warranty from Sony. Say I root it and have problems and return it for repair, that they'll fix it. I'm trying to fix the battery drain, but I don't want to root it if my warranty is screwed, and that the shop may refuse it if I return it tomorrow.
I hope someone can help.
Prepaid/Pay as You Go Handset (Ireland)
If you unlock the bootloader you will lose warranty but you can lock it again anyway.
Rooting dose not void the warranty as such, if the phone goes wrong and you need to return it just flash stock firmware.
But, my bootloader is already unlocked out of the box, yes?
Flashing stock firmware, and returning to warranty cover, isn't doable though at present, is it?
No its not unlocked. You have just acces to unlock it, but! You will lose yiur warranty.
Iff you dont birck your phone, you can always relock it and put official firmware on it. Ready to send!
Sent from my LT26i using XDA
Static-Noise said:
But, my bootloader is already unlocked out of the box, yes?
Flashing stock firmware, and returning to warranty cover, isn't doable though at present, is it?
Click to expand...
Click to collapse
No the bootloader is unlockable but not out of the box. Like the google phones you still need to unlock bootloader using the official method using fastboot.
I'm afraid by providing my IMEI, etc., on the Unlockbootloader.sonymobile.com site they'll put it on a blacklist. If I return the phone to the shop tomorrow and give out about the battery, they may see that I've rooted it via IMEI.
Static-Noise said:
I'm afraid by providing my IMEI, etc., on the Unlockbootloader.sonymobile.com site they'll put it on a blacklist. If I return the phone to the shop tomorrow and give out about the battery, they may see that I've rooted it via IMEI.
Click to expand...
Click to collapse
No. You are paranoid. Plus, the only thing they could possible check is if you got the unlock code.
1. You CANNOT "root via IMEI".
2. Simply generating the unlock code does not mean you unlocked your phone.
It's obvious you're not too sure about this, so please trust us when we say:
1. You can unlock, root, and re-lock
2. You can flash the stock, un-rooted FW and re-lock and the service center won't be none the wiser.
Trust us old birds on this.
That sounds much nicer.
It's just coming from HTC it is all very different. I'm just dying to root it to flash .73 firmware and decide if I'll be returning the phone or not.
Many thanks, wise old bird.
Sent from my LT26i using xda premium
Thanks all for the replies. I've thrown thanks your way to show my appreciation.
Considering this thread closed. Feel free to snip any content from it for a stickie, as Sony newbies like myself might require the information in the future.
Thanks again.
Sent from my LT26i using xda premium
Rashkae said:
No. You are paranoid. Plus, the only thing they could possible check is if you got the unlock code.
1. You CANNOT "root via IMEI".
2. Simply generating the unlock code does not mean you unlocked your phone.
It's obvious you're not too sure about this, so please trust us when we say:
1. You can unlock, root, and re-lock
2. You can flash the stock, un-rooted FW and re-lock and the service center won't be none the wiser.
Trust us old birds on this.
Click to expand...
Click to collapse
Below statements need to be accepted before you proceed for the code. That means from the standpoint of Sony they are eligible to say your device is no longer under warranty.
As Static-Noise mentioned IMEI is provided in this case and you never ever know when will they take these stats out and say your warranty has voided.
Code:
Important information
Please note that you may void the warranty of your phone and/or any warranty from your operator if you unlock the boot loader. Sony Ericsson can then no longer guarantee the full functionality of your phone, and will not be responsible for any unsigned custom software being flashed to the phone after the boot loader is unlocked.
Code:
By doing this you may void the warranty of your phone. Sony can then no longer guarantee the full functionality of your phone, and will not be responsible any malfunctions in your phone, or material damages or personal injuries caused by your phone.
Are you sure you want to continue?
I totally agree the service center will not be smart enough to check, even you forgot to re-lock your BL, but better keep the concept clear
I've send 3 times my arc to service centre for small glitches with boot loader being unlocked. They never ever had a clue, even with the superuser app installed and running the famous DooMKernel (Remember the boot screen logo is different)
They will only refuse your phone if you do something stupid that causes your hardware to be fried while your bootloader is unlocked (overclocking a bit too much, etc etc).
Unlocking your bootloader doesn't void any warranty it just "may", but they keep the list incase you send it in with the above problems which will void it, because it would be your own fault and not Sony . General problems (yellow screen, dead pixels, factory recalls) and anything else that can happen to the bootloader locked phone, can still be sent in (Unless you break your phone by your own doing ).
So no worries. Enjoy!
So my phone "Unlock status: Rootable", can be rooted via the .73 image and I won't lose warranty? I'm merely going to block ads, use backup software, freeze Sony apps and maybe CM9 in future. I see no need to overclock or the like. Purely software related.
Tl:dr,
I can safely root it, use it only for software (normal root uses, not overclocking), and restore to out of the box setup without having voided warranty that they'll never know about?
Sent from my LT26i using xda premium

status code and warranty

Hi guys, does unlocking bootloader void the warranty?
Is there any status code (like nexus 6) in our nexus 9?
1. Yes
2. Sure, the boot loader will say unlocked or locked, if that's what you're asking
"I'd Totally Hug You, If That Was Something I Did"
no, i'm talking about a status code that is present in nexus 6 and can be 0-1-2
Is there this king of code in nexus 9 or only locked or unlockes status
He's talking about a flag that shows if the bootloader has been unlocked and then subsequently relocked.
cam30era said:
He's talking about a flag that shows if the bootloader has been unlocked and then subsequently relocked.
Click to expand...
Click to collapse
I don't recall seeing that mentioned in this forum ever, but I just relocked mine before returning it. I imagine the people at repair centers won't go searching for the status code, since that's more work for them.
"I'd Totally Hug You, If That Was Something I Did"
Yes, there is a status code. When I unlocked my new device yesterday, it said status code 1. I don't expect it to be any sort of issue though.
jonathan3579 said:
Yes, there is a status code. When I unlocked my new device yesterday, it said status code 1. I don't expect it to be any sort of issue though.
Click to expand...
Click to collapse
do you think that it can be a problem with the warranty?
Where can you see it? Can you make a screen?
Leoncino said:
do you think that it can be a problem with the warranty?
Where can you see it? Can you make a screen?
Click to expand...
Click to collapse
The fact that it isn't readily visible (I can't find it again, lol) should be in our favor. I can tell you that I did not see it until I unlocked the bootloader and flashed the 5.1.1 images. I relocked the bootloader and it isn't showing so I feel confident calling it a non issue. It's gonna bother me not knowing at what step it showed it though. ?
jonathan3579 said:
The fact that it isn't readily visible (I can't find it again, lol) should be in our favor. I can tell you that I did not see it until I unlocked the bootloader and flashed the 5.1.1 images. I relocked the bootloader and it isn't showing so I feel confident calling it a non issue. It's gonna bother me not knowing at what step it showed it though.
Click to expand...
Click to collapse
this is funny xD i unlocked my bootloader and i don't see any status cose, i tryed relocking and unlocking again, and i don't see nothink xD
i hope that the think you've seen wasn't a status cose, but people here says that they simple relocked bootloader and RMA, so i hope that this isn't a problem
(in nexus 6 the status code is visible in the bootlader, but here we have only locked/unlocked status, also status code in motorola was made by motorola

Unlocking bootloader and warranty

I've had amy Mate 10 Pro for a week now and am enjoying it so far. I have always rooted all my phones and want to root this one as well. I have applied for my unlock code and received it. One thing I was wondering about, Huawei say they record that you have asked for the unlock code for warranty reasons.
So......... As I have my code, does that mean they would not honour the warranty even if I dont unock the phone and leave as it is??
If so, I may as well go ahead and root!!
Thanks
Hi ya, I did the same thing as you, applied for it and then it said they record that you asked for it. I believe when you unlock the bootloader it goes to unlocked and you get the splash screen warning on every boot, but if you relock the bootloader, it's shows relocked and not locked. So aslong as you haven't unlocked it , then it will show locked and your warranty should still be intact, but the thread by mankindtw is able to unlock and relock without the code and I believe still shows as locked after relocking for warranty purposes. Hope that helps.
DANIELWHITT said:
Hi ya, I did the same thing as you, applied for it and then it said they record that you asked for it. I believe when you unlock the bootloader it goes to unlocked and you get the splash screen warning on every boot, but if you relock the bootloader, it's shows relocked and not locked. So aslong as you haven't unlocked it , then it will show locked and your warranty should still be intact, but the thread by mankindtw is able to unlock and relock without the code and I believe still shows as locked after relocking for warranty purposes. Hope that helps.
Click to expand...
Click to collapse
Thats great. Thanks for the info. Coming from Samsung with e-fuses I just wanted to know what the situation is with Huawei!
No efuses to blow in this phone. My last one was an s8, so I know all about that. Enjoy.

Relock bootloader

Is there any way to relock the bootloader on exynos s9+? Ive tried reflashing stock via Odin but the bootloader is still unlocked and not allowing me to use android pay etc.
I know knox will be tripped but there's no reason that I can't use android pay with a non rooted phone surely? I've tried the root checker app as well and that shows that I do not have root.
When I check in developer options it says the bootloader is already unlocked and the slider is to the left for the oem unlock option. I have tried to slide it to the right which factory resets the device but then on going into developer options again it still shows as the same status (bootloader already unlocked with oem unlock slider to the left)
What can I do to get my phone properly back to stock?
Thanks
hookguy said:
Is there any way to relock the bootloader on exynos s9+? Ive tried reflashing stock via Odin but the bootloader is still unlocked and not allowing me to use android pay etc.
I know knox will be tripped but there's no reason that I can't use android pay with a non rooted phone surely? I've tried the root checker app as well and that shows that I do not have root.
When I check in developer options it says the bootloader is already unlocked and the slider is to the left for the oem unlock option. I have tried to slide it to the right which factory resets the device but then on going into developer options again it still shows as the same status (bootloader already unlocked with oem unlock slider to the left)
What can I do to get my phone properly back to stock?
Thanks
Click to expand...
Click to collapse
Actually there is a good reason why google pay wouldn't work even if the device isn't rooted. There are Payment/banking (and other apps I am sure) require that the device be secure. With the bootloader unlocked the security on your device is severely weakened.
Did you root the phone at all, flash anything to the phone or do anything to modify it at all (something like this as an example). If there was nothing at all done to the phone other then toggling the oem unlock, then it sounds like flashing the proper firmware to the phone, unticking the oem unlock option and factory resetting the phone should work.
If knox is tripped then there is no reversing that. Google searching also shows this would be a likely cause as to why you can not relock the bootloader.. Once knox is tripped it is irreversible (this is because it is an E-fuse), not even flashing stock will not make it go away.
I think your best bet at this point might actually be to have root and then use Magisk to hide root from the apps you want to use. I'm not sure which apps this will work for but it's probably worth looking into since there may be no going back with your bootloader
Thank you for the help guys. I did suspect that may be the case and I wouldnt be able to relock but it seemed some people were able to.
Will just root with magisk and use magisk hide to make it work. Thanks!

Categories

Resources