Taegis Endpoint Agent Uninstall
integrations endpoints edr taegis agent secureworks
Uninstall Taegis™ XDR Endpoint Agents via the function built in to XDR or follow the alternative steps relevant to your OS below.
Uninstall via XDR ⫘
To uninstall one or more agents via the XDR Endpoint Agents page, see Uninstall Taegis Agents.
Note
The Uninstall Agents action is available only for supported Taegis Endpoint Agents that are both Active and Connected. Uninstall Agents is supported by all Windows and Linux versions and macOS version 2.0.9 and later.
Note
Using uninstall within XDR will automatically archive the endpoint. If reinstalling on the same endpoint, you will need to manually un-archive the endpoint.
Windows Uninstall ⫘
Uninstall the agent via command line or Control Panel. An uninstall removes all Taegis Endpoint Agent binaries and registry entries.
Uninstall via Command Line Using MSI Installer ⫘
At an administrator command line prompt, use the following command:
msiexec /x <path> /quiet /norestart /l*vx TaegisAgentUninstall.txt
We recommend you add the /quiet flag for a quiet uninstallation, the /norestart flag to prevent the endpoint from restarting, and the /l*vx flag to enable logging for all uninstall actions.
Note
If Tamper Protection is enabled, you must enter the tamper protection token generated from Agent Settings in XDR in order to successfully uninstall the agent.
- If you add the
/quietflag, which suppresses UI interaction, add the newTOKEN=<uninstall_token_value>argument to the above command:
msiexec /x <path> /quiet /norestart TOKEN=<uninstall_token_value> /l*vx TaegisAgentUninstall.txt
- If you do not add the
/quietflag, enter the token in the popup that displays:
Enter Tamper Protection Token
All Taegis Endpoint Agent binaries and registry entries are removed with an uninstall log located in the TaegisAgentUninstall.txt file.
Uninstall via Control Panel ⫘
- From the Windows Control Panel, go to Programs and Features, select Taegis Agent, and then choose Uninstall.
- Confirm the action, and then select Yes from the User Account Control dialog, entering admin credentials, if prompted.
Note
If Tamper Protection is enabled, you must enter the tamper protection token generated from Agent Settings in XDR in order to successfully uninstall the agent.
Enter Tamper Protection Token
- The agent uninstalls with all agent binaries and registry values removed from the endpoint and no uninstall log created.
macOS Uninstall ⫘
Note
If Tamper Protection is enabled, you must enter the tamper protection token generated from Agent Settings in XDR in order to successfully uninstall the agent.
- From the menu bar, select the Secureworks® Taegis™ icon, then select Open Secureworks® Taegis™
- Select Uninstall lock from the left, then enter the token copied from Agent Settings in XDR and select Continue.
Enter Tamper Protection Token
- Ensure that the Taegis Endpoint Agent is not running on the system. From the dock, right-click the Taegis icon, then select Quit.
Quit App
- From the Applications folder, locate SecureworksTaegis, right-click, and select Move to Trash to uninstall.
Move to Trash
- A dialog displays a message that the system extensions will also be removed. Select Continue.
Continue to Remove Extensions
- The Taegis Endpoint Agent has been successfully uninstalled.
Linux Uninstall ⫘
Run the following command:
- For Fedora-based distributions like CentOS
yum remove taegis-agent.x86_64 -y
- For Debian-based distributions like Ubuntu
apt remove taegis-agent -y