Uninstall the Cortex® XDR™ Agent for Mac

Learn how to uninstall the Cortex® XDR™ agent from a Mac endpoint.
From the Cortex XDR management console, you can uninstall the Cortex XDR agent on an endpoint (see Uninstall the Cortex XDR Agent in the
Administrator’s Guide
for your Cortex XDR license type). You can also uninstall the agent from the endpoint directly. On Mac endpoints, you can use the uninstaller that comes with the Cortex XDR agent installation package to uninstall the agent software. To uninstall the agent, you must also supply the uninstall password.
After you uninstall the agent, the endpoint is no longer protected by Cortex XDR security policies and the license returns to the pool of available licenses.
Starting with macOS 10.15.4, the operating system requests the user approval to remove the Cortex XDR agent from the endpoint and prompts the user on the endpoint to enter the operating system credentials during the uninstall process. After approval and authentication, the Cortex XDR agent continues the uninstall process.
  1. Run the Cortex XDR agent uninstaller.
    The uninstaller is part of the installation package that you downloaded from the Cortex XDR management console to install the agent (
    Endpoints
    Endpoint Management
    Agent Installations
    ).
  2. When prompted, enter the Cortex XDR agent uninstall password and click
    OK
    .
    The global uninstall password is defined in the
    Agent Configuration
    of the Cortex XDR management console.
  3. When prompted, enter the macOS credentials for a user that has permissions to uninstall apps and click
    OK
    .
    The uninstaller completes the uninstall process and removes the Cortex XDR agent and related files.

Recommended For You