How To uninstall SentinelOne Mac

If you’re looking to uninstall SentinelOne from your Mac, it’s crucial to follow a step-by-step approach to ensure a clean removal. This guide will walk you through the process, whether you have access to the SentinelOne management portal or need to use the command line.

Uninstalling SentinelOne Using the Management Portal

Step 1: Access the SentinelOne Management Portal

• Log in to your SentinelOne management portal using your credentials.
• Navigate to the Sentinels tab where all devices are listed.
• Select the Mac device you want to uninstall SentinelOne from.

Step 2: Initiate Uninstallation through the Portal

• Choose Actions and select “Uninstall” to remove SentinelOne from your Mac. This method is straightforward if you have administrative access.

Uninstalling SentinelOne Manually via Terminal

Step 1: Obtain the Passphrase

• If you cannot access the management portal, you will need a passphrase from your organization. This is necessary if tamper protection is enabled.
• Log in to the management portal if possible, go to the Sentinels tab, select the device, and choose “Show Passphrase” to obtain it.

Step 2: Open Terminal and Run Commands

• Open Terminal on your Mac. You can find it in Applications > Utilities.
• Type the following commands to uninstall SentinelOne:

  sudo sentinelctl unprotect --passphrase [passphrase]
  

  Replace [passphrase] with the actual passphrase you obtained.

• Press Return and wait for the confirmation message.
• Then, type:

  sudo sentinelctl uninstall --local
  

• Press Return again to complete the uninstallation process.

Alternative Method: Uninstalling via Recovery Mode

If you are unable to obtain a passphrase or the above method fails, you might need to boot into Recovery Mode:

• Restart your Mac and immediately press the Command + R keys (or hold the power button on M1 Macs).
• Select the language and follow the prompts to access Terminal in Recovery Mode.
• Use the following commands to manually remove SentinelOne components:

  rm -rf /Library/Extensions/Sentinel.kext
  launchctl remove com.sentinelone.sentineld-helper
  launchctl remove com.sentinelone.sentineld-updater
  launchctl remove com.sentinelone.sentineld
  launchctl remove com.sentinelone.sentineld-guard
  

  And remove other components as needed.

Step 3: Restart Your Mac

• Once the uninstallation is complete, restart your Mac to ensure all changes take effect.

By following these steps, you can effectively uninstall SentinelOne from your Mac, ensuring a clean removal without residual files.