CF-Auto-Root is an ODIN-based rooting method and works on almost all Samsung devices including the latest model GALAXY Note 3. The idea behind it is simple: it flashes a modified recovery.img and cache.img where the device boots into the modified recovery image. It then installs ChainfireÂ’s SuperSU on the system partition (rooting the device), re-flashes back the stock recovery image, and cleans the cache. The method is popular primarily because it is the easiest way to root Samsung devices.

However, due to the use of a customized recovery image, CF-Auto-Root will trigger the security protection embedded in the trusted boot process, and an e-fuse will be burned to indicate that a non-KNOX kernel image has been loaded to the device. For example, some KNOX security mechanisms, such as SE for Android, will trigger an e-fuse if the system is booted with an arbitrary kernel, kernel initialization script or data, and therefore be disabled and no longer function correctly.

The sole purpose of this fuse-burning action is to memorize that a kernel or critical initialization scripts or data that is not under SamsungÂ’s control has been put on the device.

Once the e-fuse bit is burned, a Samsung KNOX-enabled device can no longer create a KNOX Container, or access the data previously stored in an existing KNOX Container. This is a mechanism to ensure that enterprise data will be protected as long as the rooting attempt is detected.