Removing the Server

Using the Yum utility, you can uninstall a Carbon Black EDR server in one of two ways.

You can remove or erase the packages that constitute the Carbon Black EDR server, or remove Carbon Black EDR packages plus all other third-party packages upon which it depends. Instructions for both methods are provided here.

To uninstall a server (Carbon Black EDR RPMs only):

1. Stop the Carbon Black EDR services by using one of the following commands:

   sudo /usr/share/cb/cbcluster stop

   or

   sudo service cb-enterprise stop

2. Use the following Yum utility command to remove Carbon Black EDR packages listed above.

   sudo yum remove <package1> <package2> <packageN>

3. Manually remove the following cb directories:
   • /var/www/cb/
   • /var/run/cb/
   • /var/log/cb/
   • /var/lib/cb/
   • /var/cb/
   • /usr/share/cb/
   • /etc/cb/
   You can also use the Yum utility to remove Carbon Black EDR packages and all other third-party packages upon which it relies.

Caution: This procedure might remove packages that are also required by other software applications. Use caution when performing this procedure.

To uninstall a server (Carbon Black EDR and related RPMs):

1. Stop the Carbon Black EDR services by using one of the following commands:

   sudo /usr/share/cb/cbcluster stop

   or

   sudo service cb-enterprise stop

2. Access the yum.conf file with the following command:

   vi /etc/yum.conf

3. Add this line to yum.conf:

   clean_requirements_on_remove=1

4. Enter the following:

   yum erase cb-enterprise

5. Enter the following:

   yum remove carbon-black-release

6. Manually remove the following cb directories:
   • /var/www/cb/
   • /var/run/cb/
   • /var/log/cb/
   • /var/lib/cb/
   • /var/cb/
   • /usr/share/cb/
   • /etc/cb/