> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/windows-workstation-mfa/uninstall.md).

# Uninstall

1Kosmos Windows Workstation MFA Agent can be uninstalled using either the MSI or EXE method, depending on how it was originally installed. A reboot is required after uninstall to remove the machine.

***

#### Choosing the Right Uninstall Method

Use the method that matches how the agent was installed on the target machine.

| If the agent was installed using                  | Use           |
| ------------------------------------------------- | ------------- |
| The MSI package (`1KosmosCredentialProvider.msi`) | Uninstall MSI |
| The EXE installer (`1KosmosInstaller.exe`)        | Uninstall EXE |

{% hint style="info" %}
**Note:** If you are unsure which installer was used, check **Settings > Apps** or **Control Panel > Programs and Features** for the entry name. Both methods produce the same uninstall result — the difference is only in the removal mechanism.
{% endhint %}

***

#### What Uninstall Removes

| Item                                                                          | Removed on Uninstall                                                         |
| ----------------------------------------------------------------------------- | ---------------------------------------------------------------------------- |
| Credential Provider binaries                                                  | Yes                                                                          |
| Installation directory (`C:\Program Files\1Kosmos\BlockIDCredentialProvider`) | Yes                                                                          |
| Registry entries for the Credential Provider                                  | Yes                                                                          |
| Log files (`C:\Program Files\1Kosmos\1KosmosCredentialProvider\Logs`)         | Yes — directory is removed with the installation folder                      |
| Configuration applied via `REGCONFIG.ini` at install time                     | Yes — registry values written during install are removed                     |
| User enrollment data                                                          | No — enrollment data is stored in the 1Kosmos tenant, not on the workstation |
| AdminX journey configuration                                                  | No — journey and policy configuration in AdminX is unaffected                |

{% hint style="info" %}
**Note:** Because enrollment and journey configuration are tenant-side, uninstalling the agent from a workstation does not affect other workstations or the user's enrolled MFA methods. Re-installing the agent on the same machine will restore MFA enforcement without requiring re-enrollment.
{% endhint %}

***

#### Before You Uninstall

* Confirm you have **Local Administrator or Domain Administrator** rights on the target machine.
* Ensure no users are actively logged in to the workstation.
* Plan for a **reboot immediately after uninstall** — the 1Kosmos tile will remain visible on the login screen until the machine is restarted.
* If uninstalling as part of a rollback or incident response, notify affected users that standard Windows authentication will be active after reboot.

{% hint style="warning" %}
**Warning:** Uninstalling the Credential Provider removes all 1Kosmos MFA enforcement from the workstation. Users will revert to standard Windows password authentication immediately after reboot. Ensure this is intentional and that any compliance or access control requirements are addressed before proceeding.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.1kosmos.com/authentication/windows-workstation-mfa/uninstall.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.