topic Re: Uninstall traps without password in General Topics

Uninstall traps without password

Plawny — Wed, 13 Jan 2021 05:04:43 GMT

I need to uninstall traps but I forget the trap uninstall password(that is not default password)
what can I do now?

Re: Uninstall traps without password

JamesChim — Wed, 13 Jan 2021 05:20:07 GMT

Dear Plawny,

For the Traps 4.2.x, you can try the following step(s)

1. Login to ESM Console

2. Click Settings (from Top Menu) -> Agent (from Left Menu) -> Settings (from Left Menu)

3. Select the Existing Policy Setting for Agent, -> Edit

4. On the Agent Settings -> Agent Security

5. you can see the change Uninstall Password, and enable th

6. After you apply the setting, the client need check in again to update the policy/setting.

Thanks, JC

Re: Uninstall traps without password

Plawny — Wed, 13 Jan 2021 08:30:12 GMT

how can I check my version. my application name is "Traps 6.1.2.21704". is 6.1.2.21704 my version numbwr?

Re: Uninstall traps without password

JamesChim — Wed, 13 Jan 2021 08:45:26 GMT

What is the default uninstall password of Traps agent?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClOxCAK

Default Password: Password1

Cortex XDR - Agent Settings Profile

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/endpoint-security/customizable-agent-settings/add-agent-settings-profile

> Reference STEP 7 Set an Uninstall Password

Define and confirm a password the user must enter to uninstall the Cortex XDR agent. The uninstall password is encrypted using encryption algorithm (PBKDF2) when transferred between Cortex XDR and Cortex XDR agents. Additionally, the uninstall password is used to protect tampering attempts when using Cytool commands.

The default uninstall password is Password1

A new password must satisfy the following requirements:

Contain eight or more characters.
Contain English letters, numbers, or any of the following symbols: !()-._`~@#"'.

Re: Uninstall traps without password

Plawny — Wed, 13 Jan 2021 14:45:01 GMT

The problem is I forget the password ;(

Re: Uninstall traps without password

JamesChim — Thu, 14 Jan 2021 01:47:20 GMT

You have 3 way to handle your forget password.

1. set the new uninstall password to overwrite existing one via step7 link from last post. ** All Traps/Cortex client will change to new password**

2. recall your Memory what’s is your password, and keep try....

3. reinstall your computer, no need to password, but need backup all data.....

in above 3 way, I think you not consider the 1, and you tried the 2. Now you only have 3 can do.

if you still have support services, you can contact vendor to advise what’s should you do.

Re: Uninstall traps without password

Plawny — Thu, 14 Jan 2021 06:39:31 GMT

Do i need password in 1?

Re: Uninstall traps without password

JamesChim — Thu, 14 Jan 2021 07:01:00 GMT

Yes, you need to find the existing agent polices/setting on cortex/esm console, you will see the set uninstall password is enabled, so you can disable on exiting setting or enter the new password. Up to your setting

After apply will effective the setting on next check in.

detail reference the kB from 1 website

Re: Uninstall traps without password

JamesChim — Fri, 15 Jan 2021 01:18:14 GMT

Please follow the KB to set uninstall password,

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/endpoint-security/customizable-agent-settings/add-agent-settings-profile

STEP 7. Define and confirm a password the user must enter to uninstall the Cortex XDR agent. The uninstall password is encrypted using encryption algorithm (PBKDF2) when transferred between Cortex XDR and Cortex XDR agents. Additionally, the uninstall password is used to protect tampering attempts when using Cytool commands.

The default uninstall password is Password1

A new password must satisfy the following requirements:

Contain eight or more characters.
Contain English letters, numbers, or any of the following symbols:
!()-._`~@#"'
.