Help Center
Before uninstalling the ThreatLocker MAC Agent, you must turn off the Tamper Protection Feature in the ThreatLocker Portal.
Disable Tamper Protection | ThreatLocker Help Center (kb.help)
The remaining steps are automated via a script which can be found here, or they can be manually completed with the following steps.
Before the Mac Agent can be uninstalled, the ThreatLocker Process must be stopped.
- For Mac Agent versions less than 3.1:
- Click on the ThreatLocker icon in the tray. Select 'Quit'.
- For Mac Agent versions 3.1 and above:
- Open Activity Monitor and kill the running ThreatLocker Process
Open Terminal by clicking the icon located at the bottom of the screen.
Run the following Terminal command:
open /Applications/ThreatLocker.app --args -uninstall
This will delete the baseline. This is especially important if you are removing the ThreatLocker App to reinstall it.
In order for the machine to be able to be deleted, it must be displayed as "Offline". Which will reflect in the portal after 15 minutes of not checking in.
Lastly, you will go into the portal under the Computers tab, select the machine, and select the delete button.
