Use the following procedures to uninstall 3.5+ macOS sensors from endpoints.

Procedure

  • Perform one of the following uninstall procedures:
    • To perform a command line uninstall of the sensor:
      1. Run the following command:  sudo /Applications/VMware\ Carbon\ Black\ Cloud/uninstall.bundle/Contents/MacOS/uninstall -y

      2. If the Require code to uninstall sensor option is enabled, run the following command: sudo /Applications/VMware\ Carbon\ Black\ Cloud/uninstall.bundle/Contents/MacOS/uninstall -y -c <Uninstall Code>
      3. If the sensor was installed in KEXT mode, you must reboot the endpoint to fully remove the unloaded KEXT.

    • To perform an attended uninstall of the sensor:
      1. Mount the CBCloud.dmg and double-click CBCloud Uninstall.

      2. Proceed through the uninstallation prompts. You must authenticate as admin.

      3. If the sensor was installed in KEXT mode, you must reboot the endpoint to fully remove the unloaded KEXT.