From the Cortex XDR management console, you
can uninstall the Cortex XDR agent on an endpoint (see Uninstall the
Cortex XDR Agent in the
for your Cortex
XDR license type). You can also uninstall the agent from the endpoint
directly. On Mac endpoints, you can use the uninstaller that comes
with the Cortex XDR agent installation package to uninstall the
agent software. To uninstall the agent, you must also supply the
After you uninstall the agent, the endpoint
is no longer protected by Cortex XDR security policies and the license
returns to the pool of available licenses.
with macOS 10.15.4, the operating system requests the user approval
to remove the Cortex XDR agent from the endpoint and prompts the
user on the endpoint to enter the operating system credentials during
the uninstall process. After approval and authentication, the Cortex
XDR agent continues the uninstall process.
Run the Cortex XDR agent uninstaller.
The uninstaller is part of the installation package that
you downloaded from the Cortex XDR management console to install
the agent (
When prompted, enter the Cortex XDR agent uninstall password
The global uninstall password is defined in the
Cortex XDR management console.
When prompted, enter the macOS credentials for a user
that has permissions to uninstall apps and click
The uninstaller completes the uninstall process and removes
the Cortex XDR agent and related files.