Cannot uninstall Symantec Enterprise Agent on macOS
search cancel

Cannot uninstall Symantec Enterprise Agent on macOS

book

Article ID: 390314

calendar_today

Updated On:

Products

Cloud Secure Web Gateway Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Users accessing internet via Cloud SWG using the Symantec Enterprise Agent.

Symantec Enterprise Agent installed and running on both Windows and macOS platforms.

The documentation includes sections on installing/uninstalling the Agent, but the uninstall does not seem to handle macOS platforms.

How does one uninstall the agent on macOS?

 

Environment

Symantec Enterprise Agent.

macOS.

Cloud SWG.

Resolution

To uninstall the Cloud SWG Symantec Enterprise Agent, run the following command:

/Applications/Endpoint Security Agent.app/Contents/Resources/uninstall --product wss

OR

to remove all Symantec Enterprise components, one must remove all products first using the following steps. 

  • To uninstall the Web Gateway feature, you place an uninstall "inbox file" into the inbox location /Library/Application Support/Broadcom/Endpoint Security Agent/inbox

    The file is a plain-text file which is named wss-uninstall.dat  and contains the following contents:

    Tenants WITHOUT an uninstall token

    {
      "eap_file": "wss.dat",
      "enabled": false
    }

    Tenants WITH an uninstall token
    {
      "eap_file": "wss.dat",
      "enabled": false,
      "distribution": {
        "uninstall_token": "<BASE64-URL-encoded-token>"
      }
    }

    NOTE: for tenants with an uninstall token, you must specify the token as a base64-url encoded string.  You can use https://www.base64url.com or another process to encode your token properly.  For example, if the uninstall token were "UnInStAlL", then the value in the wss-uninstall.dat  file would be:

    "uninstall_token": "VW5JblN0QWxM"

    After placing the file wss-uninstall.dat file in the inbox path, it will be consumed, and the feature will be removed from Enterprise Agent (as can be seen by "Web Gateway" being removed from the UI).  

  • At this point, you can uninstall the Enterprise Agent application by running

    /Applications/Endpoint Security Agent.app/Contents/Resources/uninstall