1.3 Uninstalling the Full Disk Encryption Agent

There are several methods you can use to uninstall the Full Disk Encryption Agent from a device: uninstalling it from the ZENworks Control Center, uninstalling it locally on the device, or uninstalling the ZENworks Agent.

1.3.1 Using ZENworks Control Center to Uninstall the Full Disk Encryption Agent

The recommended way to uninstall the Full Disk Encryption Agent is through the ZENworks Control Center:

  1. If the device has a Disk Encryption policy assigned to it, remove the policy assignment in ZENworks Control Center, then refresh the device so that the policy is removed from the device.

    See “Removing Policy Assignments From Devices” in the ZENworks Full Disk Encryption Policy Reference.

    Removing the policy assignment causes the Full Disk Encryption Agent to decrypt the drives and remove the ZENworks PBA. Always remove the policy assignment before uninstalling the agent.

  2. Uninstall the Full Disk Encryption Agent:

    1. Log in to ZENworks Control Center.

    2. To uninstall the module from a single device, click Devices, click the device to display it’s details, click the Settings tab, click Device Management, then click ZENworks Agent.

      or

      To uninstall the module from all device’s in a device folder, click Devices, select the check box next to the device folder and click Details to display the folder details, click the Settings tab, click Device Management, then click ZENworks Agent.

      or

      To uninstall the module from all device’s in the zone, click Configuration, click Device Management (under Management Zone Settings), then click ZENworks Agent.

    3. (Conditional) If you are uninstalling from a single device or a device folder, click Override to enable the settings to be modified.

    4. Under Agent Features, deselect the Installed check box for Full Disk Encryption.

    5. Click OK to save the change.

    6. Perform an agent refresh on the target device (or devices).

      The refresh takes longer than normal as the Full Disk Encryption Agent is removed. When the refresh completes, you can view the ZENworks Agent’s property pages (select Technician Application in the ZENworks icon menu) to verify that Full Disk Encryption is no longer listed. In addition, the Full Disk Encryption Agent is no longer available in the Windows Start menu.

1.3.2 Uninstalling the Full Disk Encryption Agent Locally

The recommended way to uninstall the Full Disk Encryption Agent is through the Agent Features setting in ZENworks Control Center (see Using ZENworks Control Center to Uninstall the Full Disk Encryption Agent). This method requires the device to have network access to a ZENworks Server.

If a device does not have network access, you can use the following steps to uninstall the Full Disk Encryption Agent locally:

  1. Make sure you know the uninstall password for the ZENworks Agent (if one is defined).

    If an uninstall password is defined, it is required when locally uninstalling the Full Disk Encryption Agent. The password is defined in ZENworks Control Center under Configuration > Management Zone Settings > Device Management > ZENworks Agent.

  2. Uninstall the Full Disk Encryption Agent:

    1. Remove the agent API by running the following Windows Installer command at a command prompt:

      For a Windows 32-bit device:

      msiexec.exe /x {1EEFEB22-7996-4F6F-82DD-89887EC9FE43} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_api_uninstall_log.txt FDESHOWUNINSTALLWARNING=1

      For a Windows 64-bit device:

      msiexec /x {43A83587-0E74-4EB4-AFF6-BC040D6375F5} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_api_uninstall_log.txt FDESHOWUNINSTALLWARNING=1
    2. (Conditional) If you are prompted for the uninstall password, provide the password.

    3. (Conditional) If a Disk Encryption policy is still applied to a device, you are prompted that the disk must be decrypted before the uninstall can be performed. Click OK to start decryption of the disk and removal of the ZENworks PBA.

      The process decrypts the disk, removes the ZENworks PBA, and reboots the device (according to the reboot option set for the policy). You can use the Full Disk Encryption Agent’s About box to verify that the policy is no longer being enforced. When the process is complete, run the command in Step 2.a again.

      You can view the zfde_api_uninstall_log.txt file to verify that the uninstall is successful. The status is recorded in the last few lines of the log file.

    4. Remove the agent drivers by running the following Windows Installer command at a command prompt (for both Windows 32-bit and 64-bit devices):

      msiexec /x {BC75322F-F526-4E22-8A0F-8CCFA046B65B} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_sec_uninstall_log.txt

      You can view the zfde_sec_uninstall_log.txt file to verify that the uninstall is successful. The status is recorded in the last few lines of the log file.

    5. Remove the agent policy handler by running the following Windows Installer command at a command prompt (for both Windows 32-bit and 64-bit devices):

      msiexec /x {14588647-0376-45A8-8F81-59D2AA7B758B} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_pol_uninstall_log.txt

      You can view the zfde_pol_uninstall_log.txt file to verify that the uninstall is successful. The status is recorded in the last few lines of the log file.

  3. Restart the device.

    To view the ZENworks Agent, select Technician Application in the ZENworks icon menu, and verify that Full Disk Encryption is no longer listed. In addition, the Full Disk Encryption Agent is no longer available in the Windows Start menu.

  4. (Conditional) If the device will connect to a ZENworks Server in the future, disable the device’s Full Disk Encryption setting in ZENworks Control Center. If the setting is enabled, the next time the device connects, the Full Disk Encryption Agent is reinstalled.

    1. In ZENworks Control Center, click Devices, click the device to display it’s details, click the Settings tab, click Device Management, then click ZENworks Agent.

    2. Click Override to enable the settings to be modified.

    3. Under Agent Features, deselect the Installed check box for Full Disk Encryption.

    4. Click OK to save the change.

1.3.3 Uninstalling the ZENworks Agent

You can uninstall the ZENworks Agent to remove the Full Disk Encryption Agent. This, of course, removes all other ZENworks functionality from the device.

  1. If the device has a Disk Encryption policy assigned to it, remove the policy assignment in ZENworks Control Center, then refresh the device so that the policy is removed. See “Removing Policy Assignments From Devices” in the ZENworks Full Disk Encryption Policy Reference.

    Removing the policy assignment causes the Full Disk Encryption Agent to decrypt the drives and remove the ZENworks PBA. Always remove the Disk Encryption policy assignment before uninstalling the agent.

  2. Make sure you know the uninstall password for the ZENworks Agent (if one is defined).

    If an uninstall password is defined, it is required when locally uninstalling the ZENworks Agent or any modules such as the Full Disk Encryption Agent. The password is defined in ZENworks Control Center under Configuration > Management Zone Settings > Device Management > ZENworks Agent.

  3. Uninstall the ZENworks Agent:

    1. Start the uninstall through the Windows Control Panel (for example, Add or Remove Programs in Windows XP or Uninstall a program in Windows Vista/7/8).

    2. At the Welcome screen, click Next.

    3. To uninstall the agent and unregister the device from the ZENworks Management Zone, provide the user name and password of a ZENworks administrator, click Next, select Uninstall the ZENworks Agent and unregister the device from the zone, then click Next.

      or

      To uninstall the agent only, select Local uninstallation only (Retain the device in the zone), then click Next.

    4. (Conditional) If you are prompted for the uninstall password, provide the password.

    5. (Conditional) If a Disk Encryption policy is still applied to a device, you are prompted that the disk must be decrypted before the uninstall can be performed. Click OK to start decryption of the disk and removal of the ZENworks PBA. When the process is finished, start the uninstall again (Step 3.a).

  4. Restart the device.