Views:

Use the uninstall tool to remove agents from macOS endpoints.

Trend Micro recommends using an mobile device manager software like Jamf Now to deploy the uninstall tool. If you do not have access to an endpoint management software, you can run the tool manually from the endpoint using Terminal.
Note
Note
Make sure your endpoint management software supports macOS deployment and is able to run commands with root permission. For more information, review the support documentation for Apple Platform Deployment on the Apple website.
If you are uninstalling manually, you must have root permission on the endpoint.

Procedure

  1. On the Trend Vision One console, go to Endpoint Security → Endpoint Inventory.
  2. Click Agent Installer.
  3. Click the download the uninstall tool link at the bottom of the Agent Installer screen.
    Note
    Note
    If you do not see the link, you might not have permission to perform this action. Contact your system administrator.
  4. In the Download Uninstall Tool screen, locate macOS and click the Download tool button.
    Note
    Note
    The downloaded uninstall tool expires after seven days.
  5. Deploy the uninstall tool package to the target macOS endpoint and unzip the package.
  6. If you are uninstalling manually, open Terminal and navigate to the location of the tool.
  7. Run the V1ESUninstallTool.app with the command sudo V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --[parameter].
    Target Product
    Parameter
    Command
    Description
    Standard Endpoint Protection
    sep
    sudo V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --sep
    Only uninstalls the Standard Endpoint Protection agent
    Server & Workload Protection
    swp
    sudo V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --swp
    Only uninstalls the Server & Workload Protection agent
    Uninstall all
    all
    sudo V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --all
    Uninstalls the Trend Vision One agent and all related components
    The uninstall tool supports using an alternate JWT file path if you have more than one valid JWT token. Use one of the following commands to specify the JWT file path:
    • V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --[parameter] -j [jwt_token_file]
    • V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --[parameter] --jwt_file [jwt_token_file]
    Replace [jwt_token_file] with the file path and JWT file name you want to use.
    For example, to remove all with an alternative JWT token: V1ESUninstallTool.app/Contents/MacOS/V1ESUninstallTool --all --jwt_file User/MyTokens/jwt.io
    The agent is uninstalled from the endpoint. Endpoint Inventory might take some time to update the information. Some endpoints might require you to manually update the endpoint lists. For more information, see Cleaning Up Uninstalled Agents.