FortiDLP
FortiDLP is a cloud-native endpoint DLP and Insider Risk Solution which is aimed at monitoring and Preventing Data Theft on the endpoint, across Windows, macOS and Linux.
Anthony_E
Staff
Staff
Article Id 353332
Description This article describes how to uninstall the Reveal Agent from the Windows CLI.
Scope FortiDLP.
Solution

The Reveal Agent can be removed via msiexec using the /x flag and the corresponding ProductCode for the specific version installed. A list of recently published ProductCodes can be found in the following article: MSI ProductCodes

 

For example, to remove the 11.3.3 x64 Reveal agent you should execute:

msiexec /x "{75C6C17E-48B7-4063-BC4A-0DED6705A780}" /qn


If the version installed is missing from the list, contact Next DLP Support.

 

Other flags such as /qn for silent execution can be applied as required. Further documentation can be found in the Microsoft Documentation

 

An alternate method for obtaining the ProductCode:

The ProductCode for the currently installed version can also be obtained from Powershell with the following script, as the IdentifyingNumber is shown:

$applications = @()
$applications += Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*"
$applications += Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*"      
$applications | Where-Object DisplayName -Match Reveal | Select-Object DisplayName, PSChildName

DisplayName            PSChildName-----------            -----------Reveal Agent           {82D47A13-22D0-4CC3-BB49-5E56F246564D}

Generic

 

Agent Uninstallation Password configured. If the Agent configuration in place requires an agent uninstallation password to be provided, an additional CLI attribute of X should be provided with the command containing the uninstallation password. e.g.:

msiexec /x "{75C6C17E-48B7-4063-BC4A-0DED6705A780}" /qn UNINSTALL_PASSWORD=password

Contributors