3.2 Uninstalling the Full Disk Encryption Agent Locally

The recommended way to uninstall the Full Disk Encryption Agent is through the Agent Features setting in ZENworks Control Center (see Section 3.1, Using ZENworks Control Center to Uninstall the Full Disk Encryption Agent). This method requires the device to have network access to a ZENworks Server.

If a device does not have network access, you can use the following steps to uninstall the Full Disk Encryption Agent locally:

Make sure you know the uninstall password for the ZENworks Adaptive Agent (if one is defined).

If an uninstall password is defined, it is required when locally uninstalling the Full Disk Encryption Agent. The password is defined in ZENworks Control Center under Configuration > Management Zone Settings > Device Management > ZENworks Agent.
Uninstall the Full Disk Encryption Agent:
1. Remove the agent API by running the following Windows Installer command at a command prompt:
  
  For a Windows 32-bit device:
```
msiexec.exe /x {1EEFEB22-7996-4F6F-82DD-89887EC9FE43} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_api_uninstall_log.txt FDESHOWUNINSTALLWARNING=1
```
  For a Windows 64-bit device:
```
msiexec /x {43A83587-0E74-4EB4-AFF6-BC040D6375F5} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_api_uninstall_log.txt FDESHOWUNINSTALLWARNING=1
```
2. (Conditional) If you are prompted for the uninstall password, provide the password.
3. (Conditional) If a Disk Encryption policy is still applied to a device, you are prompted that the disk must be decrypted before the uninstall can be performed. Click OK to start decryption of the disk and removal of the ZENworks PBA.
  
  The process decrypts the disk, removes the ZENworks PBA, and reboots the device (according to the reboot option set for the policy). You can use the Full Disk Encryption Agent’s About box to verify that the policy is no longer being enforced. When the process is complete, run the command in Step 2.a again.
  
  You can view the zfde_api_uninstall_log.txt file to verify that the uninstall is successful. The status is recorded in the last few lines of the log file.
4. Remove the agent drivers by running the following Windows Installer command at a command prompt (for both Windows 32-bit and 64-bit devices):
```
msiexec /x {BC75322F-F526-4E22-8A0F-8CCFA046B65B} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_sec_uninstall_log.txt
```
  You can view the zfde_sec_uninstall_log.txt file to verify that the uninstall is successful. The status is recorded in the last few lines of the log file.
5. Remove the agent policy handler by running the following Windows Installer command at a command prompt (for both Windows 32-bit and 64-bit devices):
```
msiexec /x {14588647-0376-45A8-8F81-59D2AA7B758B} /L*v C:\WINDOWS\novell\zenworks\bin\zfde_pol_uninstall_log.txt
```
  You can view the zfde_pol_uninstall_log.txt file to verify that the uninstall is successful. The status is recorded in the last few lines of the log file.
Restart the device.

You can view the ZENworks Adaptive Agent’s property pages (double-click the icon in the notification area) to verify that Full Disk Encryption is no longer listed. In addition, the Full Disk Encryption Agent is no longer available in the Start menu.
(Conditional) If the device will connect to a ZENworks Server in the future, disable the device’s Full Disk Encryption setting in ZENworks Control Center. If the setting is enabled, the next time the device connects, the Full Disk Encryption Agent is reinstalled.
1. In ZENworks Control Center, click Devices, click the device to display it’s details, click the Settings tab, click Device Management, then click ZENworks Agent.
2. Click Override to enable the settings to be modified.
3. Under Agent Features, deselect the Installed check box for Full Disk Encryption.
4. Click OK to save the change.