Uninstall Deep Security from your NSX environment

Uninstalling Deep Security from your NSX environment removes the Deep Security Virtual Appliance from NSX Data Center for vSphere (NSX-V) or NSX-T. It also uninstalls all the related history from Deep Security Manager.

Topics on this page:

Uninstall Deep Security automatically

  1. In Deep Security Manager, go to Computers.
  2. In the navigation tree on the left, right-click the vCenter and select Remove VMware vCenter.
  3. Select one of these options:
    • Remove VMware vCenter and all subordinate computers/groups from DSM: Removes vCenter and all records of the VMs including the Deep Security policies and rules assigned to them.
    • Remove VMware vCenter but retain computer data and Group hierarchy: Removes vCenter but retains its hierarchical structure and the records of the VMs including the Deep Security Policies and Rules assigned to them.
    • Remove VMware vCenter, retain computer data, but flatten hierarchy: Removes vCenter but retains the records of the VMs including the Deep Security policies and rules assigned to them. The hierarchical structure of the vCenter is flattened to a single group.

  4. After selecting an option, click Next.

  5. Click Next again to proceed with the removal.

    Assuming you selected the first option, Remove VMware vCenter and all subordinate computers/groups from DSM, all Deep Security Virtual Appliances and NSX policies are removed automatically from your NSX environment.

    A success message is displayed indicating VMware vCenter was removed successfully.

    If Deep Security Manager has lost connectivity with the NSX Manager, you may see an error stating Unable to remove Deep Security from VMware. If this error occurs, you must remove Deep Security service from NSX Manager manually. See the next section for details.

Uninstall Deep Security from NSX-T 2.x or 3.x manually

If you're using NSX-T 3.x, make sure POLICY is selected at the top-right of NSX-T Manager so that you're able to see the user interface elements described in the procedures below.

First, delete the Deep Security Virtual Appliance service deployment:

  1. In NSX-T Manager, go to System > Service Deployments > DEPLOYMENT.
  2. From the Partner Service drop-down list, select Trend Micro Deep Security. A service deployment appears, if it is not already visible.

  3. Click the three dots next to the service deployment name and then select Delete.

Next, under Endpoint Protection, delete the Deep Security Virtual Appliance policy and service profile:

  1. Click Security > Endpoint Protection > RULES.

  2. Click the three dots next to the Deep Security Virtual Appliance policy and click Delete Policy.
  3. Click Publish to have the changes take effect. The policy and associated rule are deleted.
  4. click System > Endpoint Protection > SERVICE PROFILES.

  5. Click the three dots next to the service profile and select Delete.

(Only applicable to NSX-T 3.x) Next, under Network Introspection, delete the Deep Security Virtual Appliance artifacts:

  1. In NSX-T Manager 3.x, click Security, toggle to POLICY, and on the left, click Network Introspection (E-W).
  2. Select the Deep Security Virtual Appliance policy and then click Delete.

  3. Click PUBLISH to have the changes take effect.
  4. On the left, under Settings, click Network Introspection Settings.
  5. In the main pane, click SERVICE CHAINS.
  6. Click the three dots next to the Deep Security Virtual Appliance service chain and click Delete.

  7. In the main pane, click SERVICE PROFILES.

  8. Click the three dots next to the Deep Security Virtual Appliance service profile and select Delete.

    You have now deleted the Deep Security Virtual Appliance policy, service chain, and service profile under Network Introspection.

Finally, delete vCenter from Deep Security Manager:

  1. In Deep Security Manager, click Computers.
  2. Right-click your vCenter on the left and click Remove VMware vCenter.

    A wizard appears. For a description of the options in this wizard, see Uninstall Deep Security automatically.

You have now manually removed Deep Security from your NSX-T environment.

Uninstall Deep Security from NSX-V manually

This section applies to NSX-V environments only. For NSX-T instructions, see Uninstall Deep Security from NSX-T 2.x or 3.x manually.

If you tried to remove vCenter from Deep Security Manager using the steps in Uninstall Deep Security automatically, and you saw an error stating Unable to remove Deep Security from VMware, it may be because Deep Security Manager lost connectivity with NSX Manager. If this error occurs, you must remove Deep Security from NSX Manager manually.

First, remove the NSX Manager from Deep Security Manager

  1. In Deep Security Manager, go to Computers.
  2. In the navigation tree on the left, right-click the vCenter and select Properties.
  3. On the NSX Manager tab, click Remove NSX Manager.
  4. Click OK.

Next, remove the Trend Micro service on NSX Manager

  1. In the vSphere Web Client, go to Home > Networking and Security > Service Composer > Security Policies.

    Delete the Deep Security security policies.

  2. Go to Home > Networking and Security > Installation > Service Deployments.

    Delete the Trend Micro Deep Security service deployment.

  3. Go to Home > Networking and Security > Service Definitions > Service Managers.

    Select Deep Security Service Manager and click the pencil icon. Deselect Operational State.

  4. Go to Home > Networking and Security > Service Definitions > Services.

    Click Trend Micro Deep Security and click the pencil icon.

  5. In the left navigation pane, click Service Instances, and then click Trend Micro Deep Security-GlobalInstance, also on the left.

    In the main pane, select Default (EBT) and click Delete to remove the service profile.

  6. In the left navigation pane, click Service Instances.

    In the main pane, click Trend Micro Deep Security-GlobalInstance and click Delete to remove the service instance.

  7. Select the Trend Micro Deep Security service definition and click the delete icon at the very top to remove it.

Finally, delete vCenter from Deep Security Manager:

  1. In Deep Security Manager, click Computers.
  2. Right-click your vCenter on the left and click Remove VMware vCenter.

    A wizard appears. For a description of the options in this wizard, see Uninstall Deep Security automatically.

You have now manually removed Deep Security from your NSX-V environment.