How to uninstall Endpoint VPN on MacOS

[RobinS]

Hi guys,

i installed E88.70 Check Point Endpoint Security Client for macOS unfortunately it was the wrong Version and VPN did not work.

I tried to install another Version which was not possible because I got the Error Message Downgrade not allowed.

So I moved the App into the Bin and cleared it. No VPN Client is visible under the App Folder and also under Library/Application no Checkpoint Folder is visible.

But I still get the Message that a Downgrade is not allowed while Installing.

I've found the sudo command for the uninstalling script but that did not work because there is no Checkpoint Folder.

What can I do to get the VPN Client back on the System?

[PhoneBoy]

The installer DMG should include an uninstallation script that can be run regardless of version installed.
If that doesn't work, you may need to involve the TAC: https://help.checkpoint.com 
Note: if you're an end user (and not the firewall admin), you may need to work with your IT staff to do this.

[the_rock]

Just follow command I posted in below link, works 100%...BUT, make sure you are doing it with admin account that has full right, otherwise, it wont work.

Andy

https://community.checkpoint.com/t5/Endpoint/Uninstall-Check-Point-from-a-MacBook-Pro/m-p/203651#M80...

[RobinS]

I tried the uninstalltion script from two Version without success. Got the Message "Uninstaller can't be opened because the identity of the developer cannot be confirmed."

I also tried the terminal command with the admin account but as I said there is no Checkpoint folder at/Library/Application Support/Checkpoint/

EDIT: So had the chance to try it again on this mac.

This Time I was able to use the Uninstaller from the DMG File but that still didn't worked. See attached Screenshot

[Duane_Toler]

You won't need the DMG just to uninstall the existing client.  The uninstaller is "/Library/Application\ Support/Checkpoint/Endpoint\ Connect/uninstall" on the client (just confirmed on my MacBook).

However, that error seems to indicate you don't have the client installed anymore.  If you're still at the Terminal, then you an run "open /Library/Application\ Support"  to see if you have a Checkpoint folder, then inside that will be the Endpoint Connect folder.

If you have the client, it will be listed there.  If you don't... well, you're good to go.

[RobinS]

Have to check that tomorrow.

What I can say at the moment, I did a search on the whole Harddrive for anything named Checkpoint and got no results.

[the_rock]

Nothing in finder either?

Andy

[RobinS]

No nothing in Finder or Application Folder named Checkpoint or Endpoint VPN

[the_rock]

And this is the exact command you ran from the terminal as the admin?

sudo "/Library/Application Support/Checkpoint/Endpoint Security/uninstall.sh"

If so, and thats error you got, I agree with @Duane_Toler , sounds like it might be already removed.

Andy

[RobinS]

yes, i did ran it as admin.

In my opinion it is removed from the Mac because I can't find anything from Checkpoint on the System.

Also tried CC Cleaner today, it found only one config file named Checkpoint which I then deleted.

But I'm still not able to install the Client again.

[Duane_Toler]

Be sure to reboot after uninstalling.  It may not have stated to do so, but it's still advisable.

[the_rock]

Excellent point!

[RobinS]

Did that multiple Times 😀

[the_rock]

Let us know how it goes when you try the command today.

Andy

[Duane_Toler]

You can see if the launchd service is still installed for it:

sudo launchctl list com.checkpoint.epc.service

You can unload it if is loaded:

sudo launchctl unload /Library/LaunchDaemons/com.checkpoint.epc.service.plist

If you need to remove the service startup script manually, it's there in "/Library/LaunchDaemons/com.checkpoint.epc.service.plist".

This is the Mac's version of the Linux systemd (or SysV init) scripts.  Keep in mind, tho, that by default, a lot of these system folders are hidden by default on macOS, so a lot of the times a cursory scan won't show anything.  You'll have to navigate directly using the Finder's "Go to Folder" option:

 

If none of this helps, then you just might need to open a TAC case to figure out what's still embedded.  

[RobinS]

Good points.

So the two Commands worked and I deleted the Startup script.

After a restart I tried to installed the VPN Client again but I still says that it is already installed.

I ran the first Command again this time with no result.

Also tried "Go to" only Result under Application Support with "Check" was the Crash Reporter. No Checkpoint Folder

[the_rock]

I would still open TAC case to have it verify.

Andy

[RobinS · Accepted solution]

Got a working answer from TAC Support:

"

You want to run (as root, or sudo):

pkgutil --forget com.checkpoint.pkg.epc

This is the part where the installer checks if the software is already installed or not.
Finally, you still want to delete any remaining file before reinstalling:

rm /Library/LaunchAgents/com.checkpoint.*

rm /usr/local/lib/libTrAPI.dylib

rm -rf "/Library/Application Support/Checkpoint"

rm /Library/LaunchDaemons/com.checkpoint.*

"

That was mentioned here:

https://community.checkpoint.com/t5/Remote-Access-VPN/Endpoint-Security-VPN-build-986000724-is-alrea...

[the_rock]

Thanks for letting us know.

Andy

[Duane_Toler]

Awesome!  Good work and thanks for the update!  Adding this to my stash of notes for other customers...