Uninstalling Tanium Clients

Uninstall the Tanium Client on Windows

For additional Windows information, see the following sections:

You can use various tools to uninstall the Tanium Client.

Use a Tanium package to deploy an uninstallation program

You can use the Tanium Core Platform to remove the Tanium Client from targeted endpoints. The uninst.exe program is in the Tanium Client installation directory.

  1. Access the Tanium Console.
  2. From the Main menu, go to Administration > Configuration > Settings > Advanced Settings.
  3. In the Name column, click allow_process_group_flag_edit, set the Value to 1, and click Save.

  4. From the Main menu, go to Administration > Content > Packages, click New Package, and configure a package that issues the uninstall command. The following is an example of the command to perform a silent uninstallation:

    cmd.exe /C ..\..\uninst.exe /S

    You must clear the selection for Launch this package command in a process group.

  5. Create a scheduled action to distribute the package to targeted computers: see Tanium Console User Guide: Deploying actions.

The uninstallation program stops the Tanium Client service and removes the application files, so the Tanium Client will no longer be present to write Completed to the respective action log. Consequently, do not rely on the final action status reported in the Tanium Console to determine success or failure of the uninstallation action.

Use Add/Remove Programs

A user with Local Administrator rights on the endpoint can remove the Tanium Client through either the Windows Control Panel Add/Remove Programs or Programs and Features applet.

Uninstallation program

Double-click the uninst.exe program icon or execute the program from a command prompt.

The uninstall executable supports the /S command line parameter to perform a silent uninstall from a command prompt, script, package, or BAT file: uninst.exe /S

Uninstall the Tanium Client on macOS

For additional macOS information, see the following sections:

Uninstall without using a script

  1. On the macOS endpoint, open Terminal.

  2. Run the following command to stop the Tanium Client and remove it from the launch list:

    sudo launchctl remove com.tanium.taniumclient

  3. Remove the following files and directories if they exist:

    • /Library/LaunchDaemons/com.tanium.taniumclient.plist
    • /Library/LaunchDaemons/com.tanium.trace.recorder.plist
    • /Library/LaunchDaemons/com.Tanium.tanium-client-upgrade.plist
    • /Library/LaunchDaemons/com.Tanium.taniumclientupgrade.plist
    • /Library/LaunchDaemons/com.Tanium.taniumecfreset.plist
    • /Library/Tanium/TaniumClient/ (directory)
    • /var/db/receipts/com.tanium.client.bom
    • /var/db/receipts/com.tanium.client.plist
    • /var/db/receipts/com.tanium.taniumclient.TaniumClient.pkg.bom1
    • /var/db/receipts/com.tanium.taniumclient.TaniumClient.pkg.plist1

    1 These files appear only if a version of the Tanium Client earlier than 7.2.314.3608 was installed on the endpoint.

    The files present in the installation depend on your Tanium environment and the solutions used with an endpoint. Some of the listed files might not be included in your installation, and additional files might be present.

Uninstall using a script

To uninstall the Tanium Client silently from a command line, you can use a shell script such as the following:

#!/bin/bash

if [[ $(/usr/bin/id -u) -ne 0 ]]; then
     echo "Not running as root or using sudo"
     exit
fi

launchctl unload /Library/LaunchDaemons/com.tanium.taniumclient.plist
launchctl remove com.tanium.taniumclient > /dev/null 2>&1
rm /Library/LaunchDaemons/com.tanium.taniumclient.plist
rm /Library/LaunchDaemons/com.tanium.trace.recorder.plist
rm /Library/LaunchDaemons/com.Tanium.tanium-client-upgrade.plist
rm /Library/LaunchDaemons/com.Tanium.taniumclientupgrade.plist
rm /Library/LaunchDaemons/com.Tanium.taniumecfreset.plist
rm -rf /Library/Tanium/
rm /var/db/receipts/com.tanium.taniumclient.TaniumClient.pkg.bom
rm /var/db/receipts/com.tanium.taniumclient.TaniumClient.pkg.plist
rm /var/db/receipts/com.tanium.client.bom
rm /var/db/receipts/com.tanium.client.plist

This script is an example and might require changes, depending on your Tanium environment and the solutions used with endpoints. Some of the removed files might not be included in your installation, and additional files might be present.

Uninstall the Tanium Client on Linux

For additional Linux information, see the following sections:

To uninstall the Tanium Client, run one of the following CLI commands, depending on the distribution type:

  • RPM-based Linux distributions such as Red Hat or SUSE:

    rpm -e $(rpm -qa --queryformat "%{NAME}\n"| grep -e '[Tt]anium[Cc]lient')

    This command might require sudo, depending on the environment.

  • Debian-based Linux distributions:

    dpkg -P taniumclient

Uninstall the Tanium Client on Solaris

For additional Solaris information, see the following sections:

To uninstall the Tanium Client on Solaris, run the following command, where the -A flag directs pkgrm to uninstall in the current zone only: pkgrm -A TaniumClient

Uninstall the Tanium Client on AIX

For additional AIX information, see the following sections:

To uninstall the Tanium Client on AIX, run the following command: installp -u TaniumClient