Taegis Endpoint Agent Uninstall
integrations endpoints edr taegis agent secureworks
To uninstall the Taegis™ XDR Endpoint Agent, follow the steps relevant to your OS.
Windows Uninstall ⫘
Uninstall the agent via Secureworks® Taegis™ XDR, command line, or Control Panel. An uninstall removes all Taegis Endpoint Agent binaries and registry entries.
Uninstall via XDR ⫘
- From the XDR left-hand side navigation, select Endpoint Agents → Summary.
- Select the Hostname entry for the endpoint you would like to uninstall the agent from.
- Select the three dot Actions icon from the side drawer summary view, or open the detailed view and select the Actions menu.
Uninstall Agent
- Choose Uninstall Agent. The agent uninstalls on the selected endpoint, with all agent binaries and registry entries removed, except for an uninstall log located at
%PROGRAMDATA%\SecureWorks\TaegisAgent\TaegisAgentUninstall.txt.
Note
Using uninstall within XDR will automatically archive the endpoint. If reinstalling on the same endpoint, you will need to manually un-archive the endpoint.
Tip
To perform this action for multiple Windows Taegis Endpoint Agents at once, see Uninstall Taegis Agents
Uninstall via Command Line Using MSI Installer ⫘
At an administrator command line prompt, use the following command:
msiexec /x <path> /quiet /norestart /l*vx TaegisAgentUninstall.txt
We recommend you add the /quiet flag for a quiet uninstallation, the /norestart flag to prevent the endpoint from restarting, and the /l*vx flag to enable logging for all uninstall actions.
All Taegis Endpoint Agent binaries and registry entries are removed with an uninstall log located in the TaegisAgentUninstall.txt file.
Uninstall via Control Panel ⫘
- From the Windows Control Panel, go to Programs and Features, select Taegis Agent, and then choose Uninstall.
- Confirm the action, and then select Yes from the User Account Control dialog, entering admin credentials, if prompted.
- The agent uninstalls with all agent binaries and registry values removed from the endpoint and no uninstall log created.
macOS Uninstall ⫘
Note
The Uninstall Agent action in XDR is not supported for remotely uninstalling the Taegis macOS agent at this time. The Taegis macOS agent leverages system extensions that require an admin password that cannot be passed from XDR to be disabled so the agent can be uninstalled. To uninstall the Taegis macOS agent, follow these macOS Uninstall steps.
- Ensure that the Taegis Endpoint Agent is not running on the system. From the dock, right-click the Taegis icon, then select Quit.
Quit App
- From the Applications folder, locate SecureworksTaegis, right-click, and select Move to Trash to uninstall.
Move to Trash
- A dialog displays a message that the system extensions will also be removed. Select Continue.
Continue to Remove Extensions
- The Taegis Endpoint Agent has been successfully uninstalled.
Linux Uninstall ⫘
Run the following command:
- For Fedora-based distributions like CentOS
yum remove taegis-agent.x86_64 -y
- For Debian-based distributions like Ubuntu
apt remove taegis-agent -y