How to uninstall Capture Client and Sentinel One?

12/04/2023 383 People found this article helpful 423,322 Views

Description

This article covers how to Uninstall Capture Client and SentinelOne from both Windows and MAC

Resolution

Method 1: Uninstalling Capture Client from the CMC dashboard

Login to captureclient-36.Sonicwall.com
Under Assets>Devices, search for the device that you want to Uninstall. Select the device and click on icon
Click on Uninstall Client and wait until the status turns red
Reboot the device
Decommission the device if it still shows commissioned after reboot to release the license.

NOTE: It is the best practice to export the device details .csv file before uninstalling the Capture Client or Sentinel One.

To download the device details, click the download devices icon as shown below:

Graphical user interface Description automatically generated with medium confidence

The downloaded .csv file will have all the details and passphrases/passwords of both Capture Client and SentinelOne.

Method 2: Uninstalling Capture Client manually from Windows Machine

If method 1 fails to Uninstall CC and S1, try manual uninstallation. This method also works for offline clients.

Uninstall Capture Client from Programs and features.

Graphical user interface Description automatically generated with medium confidence

For uninstallation, it will prompt for authorization key.

Graphical user interface, text, application, email Description automatically generated

Authorization key is unique for every device, it can be found under the device details. Click on Show to view the Authorization code as shown below. Alternatively, you can refer to the downloaded .csv file.

Reboot the device after uninstalling Capture Client [With this both CC and S1 should be removed] If S1 is still present post reboot then follow the “Uninstalling S1 method”.

Method 3: Uninstalling manually from MAC devices via terminal

Run the following commands on the terminal as root/Administrator:

> cd /library/Sonicwall/CaptureClient/

> ./uninstaller password=authorization key [This can be obtained from the csv file as described above]

With this both CC and S1 will get uninstalled

Uninstalling S1:

To Uninstall SentinelOne if it fails to Uninstall along with Capture Client. Then, Uninstall manually from Programs and features.

For S1 uninstallation, it will prompt with two options: Online and Offline
Online will have uninstallation command pushed via CMC whereas Offline will require manual entry of S1 passphrase.

Select offline to manually remove SentinelOne.

Enter SentinelOne passphrase obtained from the “download device” file and click Uninstall.
Reboot the device. If SentinelOne appears on the CMC console under the Unmanaged SentinelOne section:
Search for the device which you want to Uninstall. Select the device and click on icon. Click on “Uninstall”

CAUTION:It is necessary to do clean uninstallation to avoid any Capture Client or SentinelOne files/registry traces left behind which will create issues later during the re-installation of Capture Client or SentinelOne. Please reach out to support if the uninstallation is incomplete It is imperative to do clean uninstallation to avoid any Capture Client or SentinelOne files/registry traces left behind which will create issues later during the re-installation of Capture Client or SentinelOne..

Uninstall CC from Windows Apps programs will not remove S1 agent (MSI).

This limitation is from Microsoft MSI.

The ways that can remove both CC and S1 agents (MSI) are:

from CMC
Use Windows Cleaner Utility

Please reach out to support if the uninstallation is incomplete.

Not Finding Your Answers?

ASK THE COMMUNITY

Was This Article Helpful?

YES NO

How to uninstall Capture Client and Sentinel One?

Description

Resolution

Related Articles

Categories

Not Finding Your Answers?

Was This Article Helpful?

Article Helpful Form

Article Not Helpful Form

Follow Us

Subscribe to newsletter

Stay In Touch