Operations and maintenance

This page covers ongoing operational tasks for Orion Authenticator: viewing logs, performing in-place upgrades, resetting the agent, and uninstalling

Viewing logs

Orion writes logs to the /logs/ directory within the installation path of the agent. Use logs for troubleshooting failed onboarding, authentication errors, or health agent issues.

Log locations

macOS

/Users/{macUser}/Library/Containers/com.onekosmos.orion.mac/Data/Library/Logs/

Replace {macUser} with the actual macOS username.

Windows

C:\Program Files\1Kosmos\Orion\Logs

Log rotation policy

Setting	Value
Maximum size per log file	30 MB
Maximum retained log files	10

When a file reaches 30 MB, Orion rotates to a new file. The oldest file is deleted when the retention cap is exceeded. To view recent activity, open the most recent file.

In-place upgrades

To upgrade Orion, run the installer for the new version on the target workstation. The installer replaces the older binaries with the updated agent while preserving:

• Existing user account enrollments

• Stored configuration

• Log files

[Windows] During upgrade, if prompted to close applications, choose Automatically close the applications. Selecting Do not close the applications will stop the upgrade and prompt you to roll back or cancel.

A workstation restart is required after Windows upgrades.

Resetting the agent

Resetting Orion restores it to its default state and removes all enrolled accounts. After reset, accounts must be re-onboarded with a new DID and public key.

When to reset

• Reassigning the workstation to a different user

• Recovering from a corrupted local state

• Compliance requirements that mandate periodic re-enrollment

Steps

1. Open the Orion agent.

2. Click the i icon in the top right corner.

3. In the device details section, click Reset Agent.

4. Confirm the reset.

Orion clears all stored data and generates a new identifier on next onboarding.

Uninstalling

Windows — Silent uninstall

Run the following command to uninstall Orion silently

"C:\Program Files\1Kosmos\Orion\unins000.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART

Windows — Manual uninstall

1. Open Settings → Apps → Installed apps.

2. Find 1Kosmos Orion Authenticator in the list.

3. Click Uninstall and follow the prompts.

macOS — Manual uninstall

1. Open Applications.

2. Drag 1Kosmos Orion Authenticator to the Trash.

3. Empty the Trash.

Uninstalling removes all enrolled accounts. Before uninstalling, ensure users have an alternative MFA method enrolled — otherwise they may lose access to their applications.