Uninstall Orbital from Secure Endpoint

Introduction

This document describes how to effectively remove the Orbital completely from your endpoint running Cisco Secure Endpoint.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

• Windows Operating System
• Windows PowerShell
• Cisco Secure Endpoint
• Cisco Secure Endpoint Console

Components Used

The information in this document is based on these software verisons:

• Cisco Secure Endpoint 8.4.0.30201
• Windows Server 2019
• Windows PowerShell 5.1

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Problem

Disabling Orbital for a policy halts and disables the service, yet it remains installed on endpoints. Re-enabling the policy restarts the service and enables updates, but manual uninstallation of Orbital is also feasible when needed.

Solution

Disable the Orbital feature from the policy of those specific endpoints where you no longer want Orbital.

1. In the Secure Endpoint Console, navigate to the Policies page by selecting Management > Policies.

2. Locate and select the policy that is applied to the endpoint(s). Click Edit.

3. Navigate to Advanced Settings > Orbital, Uncheck Enable Orbital. Save the changes.

Once the Orbital feature is disabled from the Secure Endpoint Console, you can choose any of the listed methods to uninstall Orbital completely.

Uninstall via Control Panel

Open Control Panel, navigate to Programs and Features, locate Cisco AMP Orbital in the list, right-click, select Uninstall, proceed through the prompts in the uninstallation wizard, and restart if required.

Uninstall via CMD

• Open Command Prompt (CMD) with administrative privileges.
• Enter the command to uninstall Cisco AMP Orbital.

wmic product where "description='Cisco AMP orbital'" uninstall

Snippet of the Output:

Uninstall via PowerShell

• Open PowerShell with administrative privileges.
• Enter the command to uninstall Cisco AMP Orbital.

Uninstall-Package -Name "Cisco AMP Orbital"

Snippet of the Output:

Verify

• Open services.msc from the Start menu or Run dialog.
• Search for any service related to Cisco AMP Orbital and ensure none exist in the list.

Note: These methods can also be used to automate the uninstallation of Orbital from multiple endpoints. However, re-enabling the Orbital feature via Secure Endpoint Console policy reinstalls the service on the endpoint.