Uninstall the Unified Agent

The Symantec Unified Agent in an application installed on remote systems that frequently connect to the Internet from non-corporate networks. You have the option to require an uninstall token, which employees must enter to remove the Unified Agent.

Available Options

Unified Agent—With Uninstall Token

Employees attempting to uninstall the Unified Agent require an uninstall token that you define in the Web Security Service portal.


  • This feature only functions for clients running Unified Agent v4.4+ (released July 11, 2014).
  • If you have previously deployed Unified Agent to clients and used the CLI options (Windows: SUP=password; OSX: "--args -SUP password"), those passwords are no longer valid. You must log in to the portal and define the uninstall token.
  • Each time that a Unified Agent reconnects to the Web Security Service (for example, a user who takes a laptop off campus and connects through a non-corporate network), the client receives the latest uninstall token.
  • If you did not define an uninstall token, you can use the Control Panel.


  1. In Service mode, select Mobility > Unified Agent.
    1. Select Require token to uninstall agentYes.
    2. Name the Uninstall Token and click Set Token. The service displays that an uninstall token was set on a given date and time.
    3. Distribute the uninstall token and instructions (see below) to those who have permission to uninstall the Unified Agent.

      You can change the uninstall token any time.


If it still exists on the client, running the correct MSI installer allows you to remove the client application. If the MSI does not exist, you can download it again from the Web Security Service portal. If you attempt this method and receive an error string that begins with Another version of this product is already installed..., see MSI Version Mis-Match (Unknown MSI) below.

  • In the Removal...uninstall token field, enter the token and click Validate.

    Note: The equivalent CLI command is UNINSTALL_TOKEN=password, where password is the token obtained from the portal.

Tip: If an employee attempts to remove the Unified Agent from the Windows > Control Panel menu, they receive a pop-message prompting them to contact their Administrator for removal permission.


  1. In the menu bar, click the Unified Agent icon.
  2. Hold down the Option and Alt keys. The Quit menu changes to Uninstall.
  3. Enter the uninstall token and click OK.

  4. Click Uninstall.

No Token Defined/Client Connector

If an uninstall token was not generated in the token, follow the standard process for removing a program.


(Start > Control Panel > Add/Remove Programs). You must have administrative rights to the system.


  1. In the menu bar, click the Unified Agent icon.
  2. Hold down the Option and Alt keys. The Quit menu changes to Uninstall.
  3. Click Uninstall.


Navigate to /Library/Application Support/Blue Coat Systems and double-click the cloud-client-uninstaller.


If you know or recorded the exact MSI that was used to install the application, use the CLI command to remove it.

msiexec /x {MSI_Value} [/quiet UNINSTALL_TOKEN=password]

Reference—MSI Versions

MSI Version Mis-Match (Unknown MSI)

The following scenario creates an MSI-version mis-match.

  • You configured the option in the Web Security Service portal to allow Unified Agent clients to automatically update.
  • You defined an uninstall token.

For example, you downloaded and installed Unified Agent 4.4, then (per configuration) the portal automatically updates the installed client versions to 4.5 when Symantec posts it to datacenters. With the uninstall token option defined, you or employees cannot uninstall the application because no MSI was downloaded and paired with the upgraded product ID.

To remove the application, you must use the CLI command with correct product ID code.

msiexec /x {product_id_code} /quiet UNINSTALL_TOKEN=password

You find this code one of two ways:

The product ID is the same for all installation instances, which means you can create scripts to remove the application from multiple clients.