Uninstall traps without password

[Plawny]

I need to uninstall traps but I forget the trap uninstall password(that is not default password)
what can I do now?

[JamesChim]

You have 3 way to handle your forget password.

1. set the new uninstall password to overwrite existing one via step7 link from last post. ** All Traps/Cortex client will change to new password**

2. recall your Memory what’s is your password, and keep try....

3. reinstall your computer, no need to password, but need backup all data.....

in above 3 way, I think you not consider the 1, and you tried the 2. Now you only have 3 can do.

if you still have support services, you can contact vendor to advise what’s should you do.

[Plawny]

Do i need password in 1?

[JamesChim]

Yes, you need to find the existing agent polices/setting on cortex/esm console, you will see the set uninstall password is enabled, so you can disable on exiting setting or enter the new password. Up to your setting

After apply will effective the setting on next check in.

detail reference the kB from 1 website

[JamesChim]

Please follow the KB to set uninstall password,

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/endpoint-security/custo...

STEP 7. Define and confirm a password the user must enter to uninstall the Cortex XDR agent. The uninstall password is encrypted using encryption algorithm (PBKDF2) when transferred between Cortex XDR and Cortex XDR agents. Additionally, the uninstall password is used to protect tampering attempts when using Cytool commands.

The default uninstall password is Password1

 A new password must satisfy the following requirements:

• Contain eight or more characters.
• Contain English letters, numbers, or any of the following symbols: 

  !()-._`~@#"'

  .