If you have deployed v3.1 or later sensors, you can protect the action of uninstalling the sensor at the endpoint by requiring a unique, randomly-generated code. This setting is enabled per policy, and is recommended for security purposes. The uninstall code is case-sensitive.

Procedure

  1. To require a code to uninstall a sensor at an endpoint:
    1. Sign in to the Carbon Black Cloud console, click Enforce, and then click Policies.
    2. Select the policy.
    3. On the Sensor tab, select the Require code to uninstall sensor checkbox and then click Save

    After you have enabled this setting, a user must have an individual device uninstall code or a company deregistration code to uninstall the sensor at the endpoint. No code is required to uninstall sensors from within the Carbon Black Cloud console.

    An individual device uninstall code is automatically generated when a sensor is registered with the Carbon Black Cloud.

  2. To view a sensor uninstall code at an endpoint:
    1. Sign in to the Carbon Black Cloud console.
    2. On the navigation bar, click Inventory and then click Endpoints.
    3. Click the > next to the sensor to view the uninstall code.

    You can also generate a company deregistration code, and use this code to uninstall any sensor in your organization.

    Caution: The company deregistration code can be used to uninstall all sensors in your organization. If you do not want this capability, do not generate the company deregistration code.
  3. To generate a company deregistration code:
    1. Sign in to the Carbon Black Cloud console.
    2. On the navigation bar, click Inventory and then click Endpoints.
    3. Click Sensor Options > View company codes.
    4. Select the Deregistration tab and copy the deregistration code. If the code does not exist, click Regenerate deregistration codes.
    Note: Only macOS and Windows sensors can be uninstalled with a company deregistration code. Uninstall Linux sensors by using the command line.