Uninstalling the Windows Agent

Last updated: December 17, 2025

When a Windows machine is decommissioned, repurposed, or no longer requires scanning, the Cyrisma Agent must be removed both from the device and from the Cyrisma Web Platform. This ensures that the Cyrisma environment remains clean, accurate, and free of stale agent or target entries.

This article explains how to:

  • Uninstall the Cyrisma Agent from a Windows machine

  • Remove the agent configuration from the Cyrisma Platform

  • Remove target configurations when machines no longer exist

  • Understand how scan data is handled after deletion


1. Important Considerations

Before removing an agent, note the following:

  • Uninstalling the agent locally does not remove its configuration from the Cyrisma Web Platform.

  • Removing a target or agent from the platform does not delete scan data.

  • If the agent host is still online and checking in:

    • Deleting the agent from the platform will trigger the agent to self-uninstall during its next check-in (typically within 5 minutes unless a scan is running).

  • If the machine is offline, repurposed, or decommissioned:

    • You must remove the agent/target configuration manually from the platform.


2. Uninstalling the Cyrisma Agent from Windows

You may uninstall the Windows agent using any of the following methods.


Method 1: Manual Uninstallation (File Explorer)

  1. Open File Explorer and navigate to:

    C:\CYRISMA_Agent\
    
  2. Locate:

    unins000.exe
    
  3. Double-click to launch the uninstaller and follow on-screen prompts.


Method 2: Silent Uninstallation (Script or RMM)

To silently uninstall the agent:

C:\CYRISMA_Agent\unins000.exe /verysilent

This method is ideal for:

  • RMM tool deployments

  • Automated uninstall workflows

  • Mass removal across many endpoints


Method 3: Uninstalling via Cyrisma Web Interface

If the Windows machine is still online and able to check in, Cyrisma can instruct the agent to uninstall itself.

Steps:

  1. Log in to Cyrisma.

  2. Go to Admin > Scan Agents.

  3. Under Update Existing Agent, search for the Windows agent by hostname.

  4. Click Submit to open the agent configuration.

  5. At the bottom of the page, click Delete.

Once deleted:

  • The agent will automatically uninstall itself on its next check-in.

  • The agent entry will be removed from the platform interface.


3. Removing Target & Agent Configurations From the Cyrisma Platform

Depending on your situation, you may need to delete:

  • Only the agent, or

  • Both target and agent configurations


Option A: Remove Both Target and Agent Configurations

Use this method when a machine is:

  • Decommissioned

  • Repurposed

  • Permanently offline

  • No longer part of your environment

Steps:

  1. Log in to Cyrisma.

  2. Navigate to Admin > Targets.

  3. Search for the machine's target entry.

  4. Click Edit.

  5. Click Delete and submit.

This removes:

  • The target configuration

  • The agent configuration

Scan data remains in the system for historical accuracy. Deleted targets will appear as:

example_d_YYYYMMDDHHMM

Option B: Remove Only the Agent Configuration

Use when:

  • You want to keep the target configuration

  • Only the agent needs replacement or cleanup

  • The machine will continue to exist as a managed asset

Steps:

  1. Go to Admin > Scan Agents.

  2. Click Update Existing Agent.

  3. Search for the agent by name.

  4. Click Submit to open the agent settings.

  5. Click Delete and submit.

If the agent is still checking in, it will self-uninstall from the Windows machine.


4. Removing Configurations for Decommissioned or Repurposed Machines

If the system has already been wiped, retired, or re-imaged:

  1. Go to Admin > Targets.

  2. Search for the old machine entry.

  3. Click Delete.

This removes the stale target and agent configuration from Cyrisma.

Since the machine is no longer online, no uninstall action will occur on the device.


5. Scan Data Retention (Important)

Cyrims does not automatically delete scan data when you delete a target or agent configuration.

  • Historical scan data remains available.

  • Deleted systems appear with _d_YYYYMMDDHHMM identifiers.

  • This preserves audit trails and reporting accuracy.


6. Summary

The table below clarifies the correct removal method depending on your scenario:

Scenario

Local Uninstall?

Delete Agent?

Delete Target?

Result

Machine still online

Optional

Yes

Optional

Agent self-uninstalls; platform entry removed

Machine repurposed

Yes

Optional

Yes

Old entries removed; scan data retained

Machine decommissioned

Not possible

Optional

Yes

Platform cleaned up; no device action

Replacing agent

Yes or via delete

Yes

No

Target preserved; agent replaced


Conclusion

Removing a Windows CYRISMA Agent involves both uninstalling the software (if the device is still active) and cleaning up its configuration in the CYRISMA Web Platform. Using the correct removal method ensures your agent inventory, target lists, and scan data remain accurate and free of clutter.