- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
04-21-2025 12:20 AM
I am having difficulty to uninstall Palo XDR agent, my Palo XDR console license had expired.
04-21-2025 04:56 AM
1.Try to get the local uninstall password: If you or your team had set a local uninstall password when installing the agent (either manually or through policy), you can uninstall it by providing that password during uninstall.
If you don't have it, check any install scripts, documentation, or reach out to anyone who managed the installation
2. Use the Cortex XDR Agent Cleaner Tool: Palo Alto has a special Cleaner Tool meant for situations like this.
But you must request it through Palo Alto Networks support — which requires an active support contract.
(Since your license expired, it's possible you can't officially request it, but sometimes if you call/chat them and explain, they might help.)
3. Manual, more aggressive removal:
WARNING: Not officially recommended. Could corrupt the machine if you mess it up. Backup first.
Some people have done manual uninstall by:
Killing processes (CyveraService, CyveraConsole, Traps depending on agent version)
Removing the agent’s installation directories manually (e.g., under C:\Program Files\Palo Alto Networks\Traps or Cortex XDR)
Removing services via command line
Cleaning registry keys related to the agent.
BUT again: this method can leave leftovers and potentially cause system instability. Only do it if you are stuck and it's a disposable machine or you are prepared to reinstall Windows afterward.
4. Renew a short-term license
Sometimes Palo Alto sales can grant a temporary reactivation (even like 7 days) if you explain the situation — just enough to uninstall cleanly via console.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!