Uninstall Deep Security

Applies to on-premise Deep Security software installations only

When you manually uninstall an activated agent/ relay from a computer, the computer doesn't notify Deep Security Manager that the software has been uninstalled. On Computers, the computer's status will be "Managed (Offline)" or similar, depending on the context. To avoid this, on Deep Security Manager, either:

  • Deactivate the agent or relay before you uninstall it, or
  • Delete the computer from the list after you uninstall

In this article:

Uninstall Deep Security Relay

A Deep Security Relay is an agent where you have enabled the relay feature, so in order to remove the relay, you must uninstall the agent software.

Uninstall a relay (Windows)

Before updating or uninstalling a Deep Security agent or relay on Windows, you must disable agent self-protection. To do this, on the Deep Security Manager, go to Computer editorTo open the Computer editor, go to the Computers page and double-click the computer that you want to edit (or select the computer and click Details). > Settings > General. In Agent Self Protection, and then either deselect Prevent local end-users from uninstalling, stopping, or otherwise modifying the Agent or enter a password for local override.

From the Windows Control Panel, select Add/Remove Programs. Double-click Trend Micro Deep Security Agent, and click Remove.

Alternatively, you can uninstall from the command line:

msiexec /x <package name including extension>

For a silent uninstall, add /quiet.

Uninstall a relay (Linux)

To completely remove the relay and any configuration files it created on a platform that uses the Red Hat package manager (rpm), such as CentOS, Amazon Linux, Oracle Linux, SUSE, or CloudLinux, enter the command:

# sudo rpm -ev ds_agent
Stopping ds_agent: [ OK ]
Unloading dsa_filter module [ OK ]

If iptables was enabled prior to the installation of the relay-enabled agent, it will be re-enabled when the relay-enabled agent is uninstalled.

Remember to remove the relay-enabled agent from Deep Security Manager's list of managed computers, and to remove it from the relay group.

Uninstall Deep Security Agent

Before updating or uninstalling a Deep Security Agent or Relay on Windows, you must disable agent self-protection. To do this, on the Deep Security Manager, go to Computer editorTo open the Computer editor, go to the Computers page and double-click the computer that you want to edit (or select the computer and click Details). > Settings > General. In Agent Self Protection, and then either deselect Prevent local end-users from uninstalling, stopping, or otherwise modifying the Agent or enter a password for local override.

Uninstall an agent (Windows)

Before updating or uninstalling a Deep Security agent or relay on Windows, you must disable agent self-protection. To do this, on the Deep Security Manager, go to Computer editorTo open the Computer editor, go to the Computers page and double-click the computer that you want to edit (or select the computer and click Details). > Settings > General. In Agent Self Protection, and then either deselect Prevent local end-users from uninstalling, stopping, or otherwise modifying the Agent or enter a password for local override.

From the Windows Control Panel, select Add/Remove Programs. Double-click Trend Micro Deep Security Agent, and click Remove.

Alternatively, you can uninstall from the command line:

msiexec /x <package name including extension>

For a silent uninstall, add /quiet.

Uninstall an agent (Linux)

To completely remove the agent and any configuration files it created on a platform that uses the Red Hat package manager (rpm), such as CentOS, Amazon Linux, Oracle Linux, SUSE, or CloudLinux, enter the command:

# sudo rpm -ev ds_agent
Stopping ds_agent: [ OK ]
Unloading dsa_filter module [ OK ]

If iptables was enabled prior to installing Deep Security Agent, it will be re-enabled when the agent is uninstalled.

If the platform uses Debian package manager (dpkg), such as Debian and Ubuntu, enter the command:

$ sudo dpkg -r ds-agent
Removing ds-agent...
Stopping ds_agent: .[OK]

Uninstall an agent (Solaris 9 or 10)

Enter the command:

pkgrm ds-agent

(Note that uninstall may require a reboot.)

Uninstall an agent (Solaris 11)

Enter the command:

pkg uninstall ds-agent

Uninstall may require a reboot.

Uninstall an agent (AIX)

Enter the command:

installp -u ds_agent

Uninstall an agent (HP-UX)

Enter the command:

swremove ds_agent

Uninstall Deep Security Notifier

From the Windows Control Panel, select Add/Remove Programs. Double-click Trend Micro Deep Security Notifier, and click Remove.

To uninstall from the command line:

msiexec /x <package name including extension>

For a silent uninstall, add /quiet.

Uninstall Deep Security Manager

Uninstall the manager (Windows)

From the Windows Start Menu, go to Trend Micro > Trend Micro Deep Security Manager Uninstaller, and follow the wizard steps to complete the uninstallation.

To initiate the same Windows GUI uninstall procedure from the command line, go to the installation folder and enter:

<installation folder>\Uninstall.exe

For a silent uninstall from the command line (without the Windows GUI prompts), add -q.

<installation folder>\Uninstall.exe -q

During a silent uninstall via command line, the configuration files are kept so that if you re-install in future, the installer repairs or upgrades using existing settings, without asking you to input them again.

Uninstall the manager (Linux)

To uninstall via command line, go to the installation folder and enter:

sudo ./uninstall

For a silent uninstall, add -q .

During a silent uninstall via command line, by default, the configuration files are kept so that if you re-install in future, the installer repairs upgrades using existing settings, without asking you to input them again.

If you selected not to keep the configuration files during the uninstallation, and you later want to reinstall Deep Security Manager, you should perform a manual clean-up before reinstalling. To remove the Deep Security Manager installation directory enter the command:

sudo rm -rf <installation location>

The default installation location is /opt/dsm.