How Do I Uninstall the Agent?

If you no longer need to use HSS, uninstall its agent from your servers. After the agent is uninstalled, HSS will not protect your servers or detect risks.

Uninstallation Methods

You can uninstall the agent in either of the following ways:

One-click uninstallation: Uninstall the agent on the HSS console. For details, see Uninstalling the Agent on the HSS Console.
Manual uninstallation: Uninstall the agent on the server. For details, see Manually Uninstalling the Agent from a Server.

You are advised to uninstall the agent in one-click mode, simple and efficient. If the agent is in Offline state and cannot be uninstalled on the HSS console, you can manually uninstall it.

Prerequisites

When you uninstall the agent on the management console, the Agent Status of the server is Online.

Uninstalling the Agent on the HSS Console

Log in to the management console.
In the upper left corner of the page, select a region, click , and choose Security & Compliance > Host Security Service.
In the navigation pane, choose Installation & Configuration > Server Install & Config. Click the Agents tab.
Click the Servers with Agents tab and filter the servers with online agents.

Figure 1 Filtering servers with online agents
Click Uninstall Agent in the Operation column of a server. In the dialog box that is displayed, confirm the uninstallation information and click OK.

If you need to uninstall the agent in batches, you can select servers and click Uninstall Agent above the list.
Wait for about 5 to 10 minutes. Click the Servers Without Agents tab and find the target server. If the agent status of the target server is Uninstalled, the agent has been uninstalled.

Manually Uninstalling the Agent from a Server

You can manually uninstall an agent on a server when you no longer use HSS or need to reinstall the agent.

After the agent is uninstalled from the target server, HSS will not provide any protection for the server.

Uninstalling the Linux agent
1. Log in to the server from which you want to uninstall the agent and run the following command to switch to user root:
  su - root
2. Perform the following operations to stop HSS:
  1. Run the following command to stop the service:
    /etc/init.d/hostguard stop
  2. (Optional) Enter the verification code displayed in the command output. See Figure 2.
    This operation is required only for servers where HSS self-protection is enabled.
    Figure 2 Verification code
3. In any directory, run the following command to uninstall the agent:
  Do not run the uninstallation command in the /usr/local/hostguard/ directory. You can run the uninstallation command in any other directory.
  - For EulerOS, CentOS and Red Hat, or other OSs that support RPM installation, run the rpm -e hostguard command.
  - For Ubuntu and Debian OSs, or other OSs that support DEB installation, run the dpkg -P hostguard command.
  If the information similar to the following is displayed, the agent has been uninstalled. No further action is required. Wait for about 15 minutes. The agent status of the server on the HSS console will change to Uninstalled or Offline. If the uninstallation fails, go to the 4.
```
Stopping Hostguard...
Hostguard stopped
Hostguard uninstalled.
```
4. (Optional) If the agent fails to be uninstalled in 3, perform the following operations to uninstall the agent:
  - For OSs that support RPM installation, such as EulerOS, CentOS, and Red Hat:
    1. Run the following command to delete the installation record:
      rpm -e --justdb hostguard
    2. Run the following command to check whether there are hostguard processes:
      ps -ef | grep hostguard
      
      If there are residual processes, run the kill -9 PID command to stop all residual processes.
    3. Run the following command to check whether the /usr/local/hostguard directory exists:
      ll /usr/local/hostguard
      
      If the directory exists, run the rm -rf /usr/local/hostguard command to delete it.
    4. Run the following command to check whether the /etc/init.d/hostguard file exists:
      ll /etc/init.d/hostguard
      
      If the file exists, run the rm -f /etc/init.d/hostguard command to delete the file.
  - For OSs that support DEB installation, such as Ubuntu and Debian:
    1. Run the following command to check whether there are hostguard processes:
      ps -ef | grep hostguard
      
      If there are residual processes, run the kill -9 PID command to stop all residual processes.
    2. Run the following command to check whether the /usr/local/hostguard directory exists:
      ll /usr/local/hostguard
      
      If the directory exists, run the rm -rf /usr/local/hostguard command to delete it.
    3. Run the following command to check whether the /etc/init.d/hostguard file exists:
      ll /etc/init.d/hostguard
      
      If the file exists, run the rm -f /etc/init.d/hostguard command to delete the file.
Uninstalling the Windows agent
1. (Optional) Disable HSS self-protection.
  If HSS self-protection is enabled, disable it and then uninstall the agent. Otherwise, the agent cannot be uninstalled locally on the server. For details about how to disable the function, see How Do I Disable the Agent Self-protection Policy?
2. Log in to the server that you want to uninstall the agent.
3. Click Start and choose Control Panel > Programs. Then select HostGuard and click Uninstall.
  - Alternatively, go to the C:\Program File\HostGuard directory and double-click unins000.exe to uninstall the program.
  - If you have created a folder for storing the agent shortcut under the Start menu when installing the agent, you can also choose Start > HostGuard > Uninstall HostGuard to uninstall HostGuard.
4. In the Uninstall HostGuard dialog box, click Yes.
5. (Optional) Restart the server.
  - If you have enabled WTP, you need to restart the server after uninstalling the agent. In the Uninstall HostGuard dialog box, click Yes to restart the server.
  - If you have not enabled WTP, you do not need to restart the server. In the Uninstall HostGuard dialog box, click No to skip server restart.