Uninstalling IPsec for VMware Tanzu

This topic tells you how to uninstall IPsec for VMware Tanzu from your deployment, and how to verify it has uninstalled.

Uninstall IPsec Add-on

To uninstall the IPsec Add-on, complete the following steps:

(Optional) Set Optional Flag to True

When uninstalling IPsec, the optional flag must be set to true in the runtime config of the current deployment before the properties can be removed. If your flag is already set this way, you can continue with the uninstallation with the procedure Remove IPsec Properties below.

To set the optional flag to true, do the following:

Retrieve the latest runtime config by running the following command:
```
bosh -e my-env runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
```
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location that you want to save the runtime configuration.

For example:
```
  $ bosh -e my-env runtime-config > /runtime/config/
```
In the runtime config, set the optional flag to true under IPsec properties.
Update the runtime config by running the following command:
```
bosh -e my-env update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
```
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location of the runtime configuration you are updating.

For example:
```
  $ bosh -e my-env update-runtime-config --name=ipsec /runtime/config/
```
Go to your Installation Dashboard in Tanzu Operations Manager.
If you are using Tanzu Operations Manager v2.3 or later, click Review Pending Changes. For more information about this Tanzu Operations Manager page, see Reviewing your pending product changes in Tanzu Operations Manager.
Click Apply Changes.
Wait for the installation to complete.

Remove IPsec Properties

After your optional flag is set to true in your runtime config, then you can remove the IPsec properties.

To do this, follow the steps below:

Retrieve the latest runtime config by running the following command:
```
bosh -e my-env runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
```
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location that you want to save the runtime configuration.

For example:
```
  $ bosh -e my-env runtime-config > /runtime/config/
```
In the runtime config, remove all IPsec properties under the releases: and addons: sections.
Update the runtime config by running the following command:
```
bosh -e my-env update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
```
Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location of the runtime configuration you are updating.

For example:
```
  $ bosh -e my-env update-runtime-config --name=ipsec /runtime/config/
```
Go to your Installation Dashboard in Tanzu Operations Manager.
If you are using Tanzu Operations Manager v2.3 or later, click Review Pending Changes. For more information about this Tanzu Operations Manager page, see Reviewing your pending product changes in Tanzu Operations Manager
Click Apply Changes.

Verify the Uninstallation

To verify the uninstallation of IPsec is successful, follow the steps below:

Use bosh ssh to SSH into one of the VMs in your deployment. For more information, see BOSH SSH.
Run monit summary. If IPsec has uninstalled successfully, it does not show the ipsec process.