How To: Completely Remove an Agent and All of Its Components

Version 24



    This article provides steps to completely remove all components of the Protect/Patch for Windows Servers (PWS) agent from a client system and then perform a clean re-installation of the agent.

    Do not perform these steps on your Protect / PWS console machine.




    To uninstall and then reinstall the agent:


    1. Uninstall the Shavlik Protect/Ivanti PWS Agent and its components from Add/Remove Programs or Programs & Features in the Windows Control Panel.
    2. Delete the ProgramData folder: C:\ProgramData\LANDesk\Shavlik Protect
    3. Delete the C:\Program Files (x86)\LANDesk\Shavlik Protect Agent folder (C:\Program Files\LANDesk\Shavlik Protect Agent for 32-bit machines)
    4. Delete the relevant certificates.
      To delete certificates:
      1. Click Start > Run, type mmc, and click OK. The MMC Snap In window opens.
      2. Click File > Add/Remove Snap-In.
      3. Under Available Snap Ins, select Certificates.
      4. Click Add.
      5. Select the Computer Account option and click Next.
      6. Ensure that the Local Computer option is selected and then click Finish.
      7. Close the Add or Remove Snap Ins window.   
        You should now see Certificates listed under Console Root.
      8. Expand Certificates.
      9. Delete these certificates that are listed as being issued by ST Root Authority:
        • Personal\Certificates
        • Trusted Root Certification Authorities\Certificates
        • Intermediate Certification Authorities\Certificates
      10. Close the window.
    5. Verify that the agent machine keys are removed.

    The machine keys are located at C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

    You can open these files using a text editor, such as notepad, and then use CTRL+F to search for the words console and agent in each of these files.

    If any of the files have the word console or agent in plain text, delete the file. Do not delete any files that do not contain these words in plain text.

    Do not delete any certificates or files in the Crypto\RSA\MachineKeys folder that you are not sure about. If you have any questions, contact Shavlik Support.

    It is highly recommended to perform a backup of the registry before performing any modifications.

    How to back up Windows Registry:

    1. Open regedit and navigate to HKEY_CLASSES_ROOT\Installer\UpgradeCodes\

            Delete or rename the key that contains any of the GUIDS below:

            Make sure to use the corresponding GUID for the version of Protect you are attempting to uninstall.

    • Protect 9.2.x:                                    {FD2F9A1228457E545BD699619B461852}
    • Patch for Windows Servers 9.3.x     {FD2F9A1228457E545BD699619B461852}
    1. Delete the following registry key, if it exists: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LANDESK\Shavlik Protect\Agent
    2. Reboot the machine.
    3. (Optional) Install the agent either from the Protect console or using the manual installer package.


    Affected Products


    Shavlik Protect 9.x

    Ivanti Patch for Windows Server 9.3+