Deep Security 12 FR has reached end of support. Use the version selector (above) to see more recent versions of the Help Center.

Uninstall Deep Security

When you manually uninstall an activated agent or relay from a computer, the computer doesn't notify Deep Security Manager that the software has been uninstalled. On the Computers page in Deep Security Manager, the computer's status will be "Managed (Offline)" or similar, depending on the context. To avoid this, on Deep Security Manager, either:

Deactivate the agent or relay before you uninstall it, or
Delete the computer from the list after you uninstall

Uninstall Deep Security Relay

A Deep Security Relay is an agent where you have enabled the relay feature, so in order to remove the relay, you must uninstall the agent software.

Uninstall a relay (Windows)

Before updating or uninstalling a Deep Security agent or relay on Windows, you must disable agent self-protection. To do this, on the Deep Security Manager, go to Computer editor To open the Computer editor, go to the Computers page and double-click the computer that you want to edit (or select the computer and click Details). > Settings > General. In Agent Self Protection, and then either deselect Prevent local end-users from uninstalling, stopping, or otherwise modifying the Agent or enter a password for local override.

From the Windows Control Panel, select Add/Remove Programs. Double-click Trend Micro Deep Security Agent, and click Remove.

Alternatively, you can uninstall from the command line:

msiexec /x <package name including extension>

For a silent uninstall, add /quiet.

Uninstall a relay (Linux)

To completely remove the relay and any configuration files it created on a platform that uses the Red Hat package manager (rpm), such as CentOS, Amazon Linux, Oracle Linux, SUSE, or Cloud Linux, enter the command:

# sudo rpm -ev ds_agent
Stopping ds_agent: [ OK ]
Unloading dsa_filter module [ OK ]

If iptables was enabled prior to the installation of the relay-enabled agent, it will be re-enabled when the relay-enabled agent is uninstalled.

Remember to remove the relay-enabled agent from Deep Security Manager's list of managed computers, and to remove it from the relay group.

Uninstall Deep Security Agent

Uninstall an agent (Windows)

Before updating or uninstalling a Deep Security Agent or Relay on Windows, you must disable agent self-protection. To do this, on the Deep Security Manager, go to Computer editor To open the Computer editor, go to the Computers page and double-click the computer that you want to edit (or select the computer and click Details). > Settings > General. In Agent Self Protection, and then either deselect Prevent local end-users from uninstalling, stopping, or otherwise modifying the Agent or enter a password for local override.

Deactivate the agent using the Deep Security Manager by going to the Computers page, right-clicking the computer and selecting Actions > Deactivate.
If you are unable to deactivate the agent because the Deep Security Manager is unable to communicate with the agent, you will need to do the following before continuing to the next step:
C:\Program Files\Trend Micro\Deep Security Agent>dsa_control --selfprotect 0
Go to the Control Panel and select Uninstall a program. Look for the Trend Micro Deep Security Agent and then select Uninstall.

Alternatively, you can uninstall from the command line:

msiexec /x <package name including extension>

For a silent uninstall, add /quiet.

Uninstall an agent (Linux)

If your version of Linux provides a graphical package management tool, you can search for the ds_agent package and use the tool remove the package. Otherwise, use the command line instructions below.

To completely remove the agent and any configuration files it created on a platform that uses the Red Hat package manager (rpm), such as CentOS, Amazon Linux, Oracle Linux, SUSE, or Cloud Linux, enter the command:

# sudo rpm -ev ds_agent
Stopping ds_agent: [ OK ]
Unloading dsa_filter module [ OK ]

If iptables was enabled prior to installing Deep Security Agent, it will be re-enabled when the agent is uninstalled.

If the platform uses Debian package manager (dpkg), such as Debian and Ubuntu, enter the command:

$ sudo dpkg -r ds-agent

Removing ds-agent...

Stopping ds_agent: .[OK]

Uninstall an agent (Solaris 10)

Enter the command:

pkgrm ds-agent

(Note that uninstall may require a reboot.)

Uninstall an agent (Solaris 11)

Enter the command:

pkg uninstall ds-agent

Uninstall may require a reboot.

Uninstall an agent (AIX)

Enter the command:

installp -u ds_agent

Uninstall Deep Security Notifier

From the Windows Control Panel, select Add/Remove Programs. Double-click Trend Micro Deep Security Notifier, and click Remove.

To uninstall from the command line:

msiexec /x <package name including extension>

For a silent uninstall, add /quiet.

Uninstall Deep Security Manager

Uninstall the manager (Windows)

From the Windows Start Menu, go to Trend Micro > Trend Micro Deep Security Manager Uninstaller, and follow the wizard steps to complete the uninstallation.

To initiate the same Windows GUI uninstall procedure from the command line, go to the installation folder and enter:

<installation folder>\Uninstall.exe

For a silent uninstall from the command line (without the Windows GUI prompts), add -q.

<installation folder>\Uninstall.exe -q

During a silent uninstall via command line, the configuration files are kept so that if you re-install in future, the installer repairs or upgrades using existing settings, without asking you to input them again.

Uninstall the manager (Linux)

To uninstall via command line, go to the installation folder and enter:

sudo ./uninstall

For a silent uninstall, add -q .

During a silent uninstall via command line, by default, the configuration files are kept so that if you re-install in future, the installer repairs upgrades using existing settings, without asking you to input them again.

If you selected not to keep the configuration files during the uninstallation, and you later want to reinstall Deep Security Manager, you should perform a manual clean-up before reinstalling. To remove the Deep Security Manager installation directory enter the command:

sudo rm -rf <installation location>

The default installation location is /opt/dsm.