Dec 14, 2014

How to have a rooted Android 5.0 Lollipop on the Samsung Galaxy S5 (SM-G900F) without tripping KNOX

Credits: Wikipedia - http://en.wikipedia.org/wiki/File:Samsung_Galaxy_S5_back.jpg

Despite having a quite long history of voiding devices’ warranties, with my latest purchase of a Samsung Galaxy S5 16GB (SM-G900F, with the Snapdragon processor), I started a challenge to avoid voiding the warranty.
Therefore, I keep trying rooting my device without tripping KNOX. So far, I have been successful.

However, with the slow arrival of Android 5.0 Lollipop on the Samsung Galaxy S5, it has been difficult to find a way to access the administrator account of our device.
Luckily, _alexndr user at XDA created a Lollipop base ROM with Aroma installer, which can be safely flashed with Odin and Mobile Odin Pro, without triggering a KNOX +1 counter.
That is, it is possible to have Android 5.0 Lollipop on the Samsung Galaxy S5 while keeping a 0x0 KNOX counter.

In this post, I will describe how I did it on my device. But first, three disclaimers.

  1. I am not responsible if you follow these instructions and you brick your device, or if you still trip KNOX in some mysterious ways.
  2. The content of this post was tested on an non-locked Samsung Galaxy S5 16GB, SM-G900F. Although much success has been reported with other variants of the S5, I cannot guarantee success. Not even with the 32GB variant.
  3. I have not written any of the software mentioned in this post. I did not even invented the steps described in this post. All credit goes to the respective content makers. What I am reporting in this post is a convenient summary of scattered pieces of not-so-accessible information found on the Samsung Galaxy s5 XDA forum. I cite the sources whenever possible. Please contact me or drop a comment here if I an acknowledgement is needed, and I will update the post.

Software/ROMs needed

On a Windows PC

  • Odin 3.09 and related Samsung drivers. I am not allowed to link them here. Please avoid the websites odindownload.com/.net, as they contain spyware.
  • SuperSU 2.39-BETA zip file
  • _alexndr Android Lollipop base ROM, plus the extracted flashable Bootloader and Modem:
    • G900FXXU1BNL2_DevBase_alexndr
    • BL_G900FXXU1BNL2
    • CP_G900FXXU1BNL2

The last three files can be found in the official XDA thread [ROM][G900F][ALEXNDR] ★ ANK7 / BNL2 ★ DevBase, Multi CSC, Safe De-Bloat, KNOX 0x0. The ROM should be available in post #2. However, please note that the developer tends to post updated versions along the thread. As of today, the latest versions of all three files can be found in post #454.

On your Galaxy S5


Begin with an installed ANE2 stock ROM. Root it using Towelroot.
Install SuperSU from the Play Store. Let it install SU binaries the “normal” way. Make it disable KNOX. Reboot.
Then, extract the BETA-SuperSU-v2.39.zip file on your PC. Put the file common/Superuser.apk in the internal sdcard of the S5. Install the apk, so that it will update the already present SuperSU. Open SuperSU, and let it update.

What follows has been adapted from post #261 of the ALEXNDR XDA topic.

Be sure that reactivation lock is turned off.
Put the file G900FXXU1BNL2_DevBase_alexndr.zip in your phone internal SD card.

Open Mobile Odin Pro on your S5.
Select the file G900FXXU1BNL2_DevBase_alexndr.zip as “OTA/Update Zip“.
Untick the Everroot option.
As “After flash” option, select to go to download mode.
Initiate the flash by tapping “Flash firmware“.

After a while, the phone will reboot and the Aroma installer will show up. Leave every option as it is, with the following exceptions:
Select “Wipe Data” and “Update stock recovery” options.
Let it install.
Right after it finishes installing, untick the “reboot device” option. We want the phone to enter into download mode instead.

When the phone is in download mode, connect it to your PC and open Odin 3.09.
Select the CP file CP_G900FXXU1BNL2.tar.md5 and the BL file BL_G900FXXU1BNL2.tar.md5, so that both get flashed at the same time.
Start the flash. Odin will flash the files sequentially, telling you to wait 2 minutes for both of them. Now, here Odin told me that the process “failed” (“All threads completed. (succeed 0 / failed 1)“). That is not an issue. Wait for 5 minutes.

Now, (these instructions diverge from those of XDA instructions), disconnect the phone.
Take off the battery and put it back in.
Enter the phone recovery mode by holding VOL UP + HOME + POWER buttons. You will notice the message “Applying Multi-CSC” in the bottom. This step is necessary for solving CSC related issues.
Wipe data/factory reset.
Wipe the cache partition.
Reboot the system.

Now, do the actual first boot of the device. Please note that it will take quite some time for the first boot to work. It took about 7 minutes for me.
Perform the first configuration of your phone. Do not open SuperSU and do not install any other app.
Install Root Checker from the Play Store. Restart the phone.
Wait for 2-3 minutes after the boot. Open Root Checker. At this point, root should be working.

Open SuperSU to verify that rooting was successful.
Verify that your KNOX counter is still 0x0 by booting into Download Mode.

Please note that the first boots result in a quite slow device, partially because of all the Google Play updates. On a similar line, the battery life starts short for the first cycles. These issues all go away after a couple of days.

As a side note, I did also flash a PIT file right after flashing CP + BL in Odin, without rebooting the phone. If the procedure of this post fails, try to flash a PIT file, too. I recommend to not flash a PIT file the first time your try the procedure outlined in this post.

Featured Image credits: Wikipedia.

written by dgraziotin

Dr. Daniel Graziotin received his PhD in computer science, software engineering at the Free University of Bozen-Bolzano, Italy. His research interests include human aspects in empirical software engineering with psychological measurements, Web engineering, and open science. He researches, publishes, and reviews for venues in software engineering, human-computer interaction, and psychology. Daniel is the founder of the psychoempirical software engineering discipline and guidelines. He is associate editor at the Journal of Open Research Software, academic editor at the Research Ideas and Outcomes (RIO) journal, and academic editor at the Open Communications in Computer Science journal. He is the local coordinator of the Italian Open science local group for the Open Knowledge Foundation. He is a member of ACM, SIGSOFT, and IEEE.

  • Ken Apr 17, 2015 Reply

    So am I to understand that you can keep root, while running lollipop if i follow these steps?

    Sorry, I’m a little new to this and I managed to towelroot my S5 before ATT brought their OTA updates last year.

    • dgraziotin Apr 17, 2015 Reply

      Yes. This is for starting with Android 4.4.2, rooting it, and installing Lollipop and keeping root. Without tripping Knox. If you do not care about knox, there are other easier methods to be followed.

      • Waleed Mahroos Aug 24, 2015 Reply

        I do not care about knox, could you please guild me to the other easier methods to root my Note 3 Android Version 5.0 Model Number SM-N9005

  • CRM Apr 18, 2015 Reply

    Would this work with a Verizon Galaxy S6 when the .tar.md5 becomes available?

    • dgraziotin Apr 18, 2015 Reply

      I don’t think so. All the material here is for the S5 (especially ALEXNDR’s DevBase Rom, which you would need to use). Additionally, the S6 comes with Lollipop already.

  • Jody Vasilopoulos Jul 11, 2015 Reply

    Not working for me, Hope this is fixed soon

  • Abhirav Jul 16, 2015 Reply

    I already updated my s5 using OTA; can someone please tell me how to root using towelroot as the original mod string is not working on the new kernel. Please help

    • Daniel Graziotin Jul 17, 2015 Reply

      For this method to work, you would need to downgrade to Android 4.4.4 first. This is possible and permitted using Odin. No warranty avoided.

      • tony Sep 30, 2015 Reply

        DO not try this, today I tried downgrading my SM-G900a to 4.4.4 using Odin and bricked it. Solved the brick by flashing a stock kernel and stock partition onto the phone, but it took me forever to find the files and blogs about the problem. I repeat, do not try this.

        • dgraziotin Sep 30, 2015 Reply

          Tony, this method is for SM-G900F. You have SM-G900A.

  • abosbet Jul 24, 2015 Reply

    After it starts flashing the new rom , the phone goes into download mode and does not reboot, so i am not able to do the steps with the aroma installer !!?
    do u have any idea ?

    • dgraziotin Jul 24, 2015 Reply

      It is not supposed to reboot after flashing. It should start the Aroma installer automatically. It might take a while.

  • Baljeet Jun 8, 2016 Reply


    Wow!! it’s working fine…..

  • Tomer Ben-Arye Jun 28, 2016 Reply

    Just to be sure.
    If I’m on over 5.0
    I need to downgrade to 4.2.2 using
    G900FXXU1ANE2 rom.
    Knox will still be 0x0.
    Then toweltool then rest of process.
    Am I right?

    • Tomer Ben-Arye Jun 28, 2016 Reply

      Over = Ver

    • Daniel Graziotin Jun 29, 2016 Reply

      Yes. Please note that this post was written nearly two years ago. There might be other ways now. Is your S5 still under warranty? If not, tripping Knox might be an option for you.

Leave a comment