[KB7150] Remove ESET Endpoint Encryption from a workstation

Issue

ESET Endpoint Encryption (EEE) Client and EEE Server are separate products from ESET Full Disk Encryption (EFDE)

The article below applies only to the EEE Client or EEE Server and not EFDE.

Visit What's new in ESET Full Disk Encryption to view EFDE content.

Solution

Decrypt data on the system

If the system is not managed by an ESET Endpoint Encryption Server (EEE Server), make a backup of the key-file.

Encrypted folders

  1. Right-click the encrypted folder.

  2. Select ESET Endpoint Encryption → Decrypt Folder with ESET Endpoint Encryption.

    Figure 1-1
  3. Select the check box next to I have backed up my data and wish to continue. Click Next.

    Figure 1-2
  4. Click Next.

    Figure 1-3
  5. Click FinishOn the wizard's final page, deselect the check box next to Leave encrypted backup? to automatically remove the encrypted copy of the folder.

    Figure 1-4

Encrypted files

  1. Right-click the encrypted file.

  2. Select ESET Endpoint Encryption → Decrypt file with ESET Endpoint Encryption.

    Figure 2-1
  3. Click Yes to automatically delete the original file. Click No and delete the encrypted version after verifying the data has been successfully decrypted.

    Figure 2-2

Encrypted archives

  1. Right-click the encrypted archive.

  2. Click ESET Endpoint Encryption  Extract here... or Extract to.

    Figure 3-1
  3. Select a destination path and click OK to extract the archive contents.

  4. Verify the extracted folder contains the files required and delete the archive.


Encrypted Virtual Disks

  1. Mount the virtual disk and copy any data required from it.

  2. Right-click the ESET Endpoint Encryption icon in the system tray.

  3. Click Virtual DisksVirtual Disk Manager.

    Figure 4-1
  4. Select the virtual disk in the drop-down menu. Click Unmount if it is currently mounted.

    Figure 4-2
  5. Click Delete → Delete.

    Figure 4-3

Encrypted Removable Media

Encrypted optical media

Create plain copies of encrypted optical media before removing ESET Endpoint Encryption from the workstation.

Encrypted removable media

The encrypted removable media in the file mod will be deleted during decryption. Copy any required data from the encrypted folder before continuing. 

  1. Right-click the EEE icon in the system tray.

  2. Click Removable Media → Removable Media Encryption.

    Figure 5-1
  3. Select the encrypted disk in the drive list.

  4. Click Decrypt or Remove.

    Figure 5-2
  5. If the device was encrypted with file mode you will be notified that all encrypted files will be deleted. Decryption will begin if the device was encrypted with full disk encryption mode. Decryption must complete before the device can be used.


Full Disk Encryption—Standalone

  1. Log in to ESET Endpoint Encryption (EEE).

  2. Right-click the EEE icon in the system tray.

  3. Click Full Disk Encryption → Full Disk Encryption.

  4. Click Manage Disks.

  5. Select the disk or partition to decrypt and then click Decrypt.

  6. Type the FDE admin password and click OK to start decryption.

    Connect device to power source

    The system can be used while it is being decrypted. Ensure that the device is connected to a power source during decryption

    If the device is left unattended, we recommend temporarily disabling power-saving settings to ensure decryption finishes.


Full Disk Encryption—ESET Endpoint Encryption Client (managed)

  1. Log in to ESET Endpoint Encryption Server (EEE Server).

  2. Select the Workstation from the list of workstations.

  3. Click Details.

  4. Verify that the WorkstationID value displayed matches the Workstation ID on the client.

  5. Click Full Disk Encryption.

  6. Click Decrypt next to the disks you want to decrypt.

  7. Click Decrypt. The command will be received automatically in the next connection interval. To send the command immediately, manually synchronize EEE Server and EEE Client.

    Connect device to power source

    The system can be used while it is being decrypted. Ensure that the device is connected to a power source during decryption

    If the device is left unattended, we recommend temporarily disabling power-saving settings to ensure decryption finishes.

  8. Wait for the decryption process to finish completely and the status of the Workstation to return to Not Encrypted in the ESET Endpoint Encryption Server.

  9. Login to ESET Endpoint Encryption Server.

  10. Click Users.

  11. Select the user that needs deactivation.

  12. Click Details and click Workstations.

  13. Select Workstation.

  14. Click Deactivate.

  15. Select the check box next to Are you sure you want to deactivate this user?.

  16. Click Deactivate.

  17. Log in to the Windows profile of each user you are deactivating and click Enterprise Sync.

  18. Repeat this process for all users of the machine.

License usage

If the user has been deactivated from all the machines they use, they will still have a license. Deactivating a user does not revoke the associated license. If the user no longer requires a license, revoke the license in the EEE Server. 


Revoke a user license

  1. Log in to the ESET Endpoint Encryption Server.

  2. Click Users.

  3. Select the user from the list of users.

  4. Click Details.

  5. Click Revoke license.

  6. If you receive a notification that the user only has a single license, click OK  Close → the correct user → Delete, then type the ESET Endpoint Encryption Server password to delete the user.


Uninstall encryption software

After all necessary data has been decrypted, uninstall ESET Endpoint Encryption.