Views:

Manually remove the agent, Endpoint Sensor, and Server & Workload Protection features from a Linux endpoint.

The steps contained within this guide can be used to remove the following from your Linux endpoints:
  • All TrendAI Vision One™ Endpoint Security agent components, including Endpoint Sensor and Server & Workload Protection features
  • Only Server & Workload Protection features
  • Deep Security agents connected to your Protection Managers
Note
Note
If you are manually removing Server & Workload Protection or uninstalling a Deep Security agent, the agent does not notify your Protection Managers when uninstalling. The affected endpoint appears on the Computers page with a status of "Managed (Offline)" or similar. To resolve the issue:
  • Deactivate the agent before you uninstall Server & Workload Protection, or
  • Delete the computer from the list after you uninstall Server & Workload Protection.
If you are attempting to redeploy an agent, Trend Micro recommends doing a complete uninstall of the TrendAI Vision One™ Endpoint Security agent.

Procedure

  1. Uninstall Server & Workload Protection.
    Use one of the following methods to uninstall Server & Workload Protection:
    Note
    Note
    These methods can also be used to remove a Deep Security agent.
    • If your version of Linux provides a graphical package management tool, search for the ds_agent package and use the tool to remove the package.
    • For Linux versions that use the Red Hat package manager (rpm), run the command:
      # sudo rpm -ev ds_agent
    • For Linux versions that use the Debian package manager (dpkg), run the following commands:
      • $ sudo dpkg -r ds-agent
      • $ sudo dpkg --purge ds-agent
  2. Uninstall the TrendAI Vision One™ Endpoint Security agent.
    To remove the TrendAI Vision One™ Endpoint Security agent, Endpoint Sensor, and Basecamp agent program, run the command with root privileges:
    # ./tmxbc uninstall
Comments (0)