To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

WithSecure uninstall script for macOS

Options
Ernest_za
Ernest_za W/ Partner Posts: 12 Junior Protector

Hi,

I am looking for a WithSecure uninstall script for macOS that can be used by jamf as a roll back measure.

Any suggestions would be appreciated.

Regards,
Ernest

Tagged:

Best Answer

  • JamesC
    JamesC W/ Partner, W/ Staff, W/ Moderator Posts: 521 Moderator
    Solved
    Options

    Hi @Ernest_za

    Before running any uninstall operation, you need to deactivate the system extension. You can use the following command:

    • "/Applications/F-Secure/F-Secure Mac Protection.app/Contents/MacOS/F-Secure Mac Protection" --deactivate-system-extension

    This will deactivate the system extension. It should be run with a user session, or it can also be run without it if there is an MDM profile configured that allows sysext uninstallation. In any case this command should be executed before uninstall_MacProtection script.

    You can uninstall Elements Agent product using the command line by running the following command:

    • sudo /Library/F-Secure/bin/uninstall_MacProtection

    The script needs to run as ”root” so depending on what kind of logon scripts, It may or may not work.  A script executed by a remote administration tool such as JAMF or Apple Remote Desktop (or just using SSH) can be run as root so it should work.

    Client Security for Mac has a different path:

    • sudo /usr/local/f-secure/bin/uninstall_MacProtection


    Note: If the uninstall_MacProtection uninstallation method fails, it could be that you have in the Elements profile "Allow user to uninstall the product" set as disabled.  If the subscription has expired and client settings cannot be changed anymore, then delete the following file to remove the restriction:

    • /Library/F-Secure/fsmac/sysconfig/.no_uninstall

Answers

  • JamesC
    JamesC W/ Partner, W/ Staff, W/ Moderator Posts: 521 Moderator
    Options

    Hi @Ernest_za

    Thank you for contacting WithSecure Community.

    I am checking with our Mac developers and shall update you.

  • Ernest_za
    Ernest_za W/ Partner Posts: 12 Junior Protector
    Options

    Hi @JamesC

    Thanks for the feedback.