WithSecure uninstall script for macOS

Ernest_za

Hi,

I am looking for a WithSecure uninstall script for macOS that can be used by jamf as a roll back measure.

Any suggestions would be appreciated.

Regards,
Ernest

JamesC

Hi @Ernest_za

Before running any uninstall operation, you need to deactivate the system extension. You can use the following command:

• "/Applications/F-Secure/F-Secure Mac Protection.app/Contents/MacOS/F-Secure Mac Protection" --deactivate-system-extension

This will deactivate the system extension. It should be run with a user session, or it can also be run without it if there is an MDM profile configured that allows sysext uninstallation. In any case this command should be executed before uninstall_MacProtection script.

You can uninstall Elements Agent product using the command line by running the following command:

• sudo /Library/F-Secure/bin/uninstall_MacProtection

The script needs to run as ”root” so depending on what kind of logon scripts, It may or may not work.  A script executed by a remote administration tool such as JAMF or Apple Remote Desktop (or just using SSH) can be run as root so it should work.

Client Security for Mac has a different path:

• sudo /usr/local/f-secure/bin/uninstall_MacProtection

Note: If the uninstall_MacProtection uninstallation method fails, it could be that you have in the Elements profile "Allow user to uninstall the product" set as disabled.  If the subscription has expired and client settings cannot be changed anymore, then delete the following file to remove the restriction:

• /Library/F-Secure/fsmac/sysconfig/.no_uninstall

JamesC

Hi @Ernest_za

Thank you for contacting WithSecure Community.

I am checking with our Mac developers and shall update you.

Ernest_za

Hi @JamesC

Thanks for the feedback.