Description
This article describes how to re-install a FortiSASE-managed FortiClient.
Scope
FortiClient 7.0.11 and all FortiSASE Recommended versions:
Product integration and support
Solution
FortiSASE Managed endpoints cannot be uninstalled if the telemetry is connected. The Zero Trust Telemetry must be 'disconnected' so the uninstall option is available.
There are 3 options available to remove and uninstall a managed client:
- Disconnect from the client itself. Under the FortiSASE management portal -> Configuration -> Profiles, edit profile.
If the Option 'Endpoints can disconnect from FortiSASE' is enabled and there is no password required to disconnect, the user would have the option to 'Disconnect'.
If a password is set, the user will be prompted for the password before disconnecting from the Telemetry.
Once disconnected, it is possible to Uninstall the client using regular ways from the 'Program and Features' control panel option.
More information about allowing endpoints to be disconnected from the FortiSASE option can be found in the FortiSASE Administration Guide below:
Connection
Note:
Endpoints disconnected using this method are permanently deleted from the FortiSASE cloud 'Managed Endpoints' list. Once re-installed, they will appear in the 'Managed Endpoints' list again.
- Disconnect the telemetry from the FortiSASE management portal. Under the FortiSASE management portal -> Network -> Managed Endpoints. This page has 2x views toggled using the buttons on the top right corner called 'Managed Endpoints' and 'Unmanaged Endpoints'. The Telemetry can be disconnected remotely by selecting the desired client and under 'Management connection' selecting 'Disable'.
This will send a message to the client to disconnect itself and it will cache and remember the invitation code.
This will allow the client to be uninstalled using regular ways from the 'Program and Features' control panel option.
Note:
Endpoints disconnected using this method will be moved to the 'Unmanaged Endpoints' list where they will be prevented from re-joining.
Before re-installing or re-adding the invitation code, move the endpoint back to the 'Managed Endpoints' list.
After that, the client can be re-installed.
- Use the FC Removal Tool from the Windows safe mode:
Technical Tip: How to uninstall a managed FortiClient in Windows Machines
Note:
This option will not notify the FortiSASE telemetry about the removal of the client and the client will remain in the 'Managed Endpoints' list and 'Offline'.
