Remove McAfee / Trellix ENSL from Linux system

[Atulhonz1]

Dear Community members

I have few test Linux systems where I am running ENS for Linux with Threat Prevention and Platform Module.

I want to remove the ENSL from these systems however, I am not able to find the removal package for Endpoint Security for Linux Platform Package to create uninstall client task.  So, I will be able to remove the Threat Prevention first and then Platform package from Linux machine. I have checked in Software Repository \ Product Downloads. Please advise how I can remove the ENS TPL and Platform 

#ENSL #EndpointsecurityforLinux #Linux

[Atulhonz1 · Accepted solution]

@BSharma - Thanks for your help, I was able to remove the Trellix ENS TPL 

Please also let us know how we can perform wake up call on Linux Server Locally similarly we do in Windows System using agent monitor ?

[AlwinSudarsan · Accepted solution]

Hi @Atulhonz1 ,

Glad to hear that you were able to remove ENSL from Linux System.

Please use the following command to wake up agent locally:

/opt/McAfee/agent/bin/cmdagent -p

The above command will collect and send properties to the ePO server.

https://kcm.trellix.com/corporate/index?page=content&id=KB52707

[Atulhonz1]

@AlwinSudarsan Thanks Alwin, This is helpful 🙂 this answers my query.

I am trying to remove the agent from Linux servers via ePO, selecting systems and directory options --> Delete system with remove agent on next agent to server communication.
However, I don't it is getting removed after waiting for an hour. I would like to know if this removal way is supported on Linux systems too, similar to Windows.
Else, please suggest a manual way for removal.

[AlwinSudarsan]

Hi @Atulhonz1 ,

While the procedure to remove Agent from ePO are same for both Windows and Linux, we may need to check if the Agent actually received the uninstall task from ePO. 

To uninstall Agent locally, following would be the command:

sudo /opt/McAfee/agent/scripts/uninstall.sh

That said, if there are multiple systems affected, I would suggest you to please open up a Service Request to find the cause to why Agent is not getting removed using ePO task. 

Hope this helps.