Uninstall EXE

Uninstalling 1Kosmos Windows Workstation MFA Agent when it was installed using EXE installer package. Supports both silent (command-line) and UI-guided removal.

---

Prerequisites

Requirement	Detail
Privileges	Local Administrator or Domain Administrator rights on the target machine
Original installer or uninstaller	The EXE-based uninstall can be triggered via the original installer (run in uninstall mode), via Windows Apps / Control Panel, or via the uninstaller registered at C:\Program Files\1Kosmos\1KosmosCredentialProvider\uninstall.exe
Active sessions	Ensure no users are actively logged in to the workstation before uninstalling
Reboot window	Plan for a reboot immediately after uninstall, the 1Kosmos tile will remain on the login screen until the machine is restarted

Uninstalling the Credential Provider removes all 1Kosmos MFA enforcement from the workstation. Users will revert to standard Windows authentication immediately after reboot. Ensure this is intentional and that any compliance or access control requirements are addressed before proceeding.

---

Silent Uninstall

Silent uninstall is the recommended method for managed environments. It runs without user interaction and suppresses the reboot prompt, schedule the reboot separately.

Using the Registered Uninstaller

The EXE installer registers a dedicated uninstaller in the installation directory. Run the following from an elevated command prompt or deployment tool:

"C:\Program Files\1Kosmos\1KosmosCredentialProvider\uninstall.exe" /S

Flag	Description
/S	Silent mode , no UI, no prompts

The /S flag is case-sensitive. Using /s (lowercase) may not produce silent behaviour on all installer versions.

Using the Original EXE Installer in Uninstall Mode

If the registered uninstaller is not available, the original EXE installer can be run in uninstall mode:

"C:\Path\To\1KosmosInstaller.exe" /S /uninstall

Replace C:\Path\To\1KosmosInstaller.exe with the full path to the installer file. The installer version must match the installed version - using a different version may produce unpredictable results.

Silent Uninstall with Log Output

To capture uninstall activity for troubleshooting or audit purposes, redirect output to a log file:

"C:\Program Files\1Kosmos\1KosmosCredentialProvider\uninstall.exe" /S > "C:\Logs\1kosmos_uninstall.log" 2>&1

Ensure the log directory exists before running the command.

Reboot After Silent Uninstall

After the uninstall command completes, restart the workstation:

shutdown /r /t 0

Or trigger a managed reboot via your deployment tool at an appropriate time within your maintenance window.

Do not leave the workstation in a post-uninstall, pre-reboot state for longer than necessary. The 1Kosmos tile will still appear on the login screen in this state, and attempting to authenticate through it may produce errors.

---

UI Uninstall

1

Via Windows Settings

1. Open Settings > Apps > Installed Apps (Windows 11) or Settings > Apps & Features (Windows 10).
2. Search for 1Kosmos Credential Provider (or BlockID Credential Provider on versions prior to v2.4.0.0).
3. Click the entry and select Uninstall.
4. Confirm the uninstall prompt.
5. The uninstall wizard runs and completes.
6. When prompted, click Restart Now to reboot the workstation, or restart manually at the next available opportunity.

2

Via Control Panel

1. Open Control Panel > Programs > Programs and Features.
2. Locate 1Kosmos Credential Provider in the list.
3. Right-click the entry and select Uninstall.
4. Follow the uninstall wizard to completion.
5. Reboot the workstation when prompted.

After reboot, verify the 1Kosmos tile no longer appears on the Windows login screen. If it persists, see Troubleshooting.

---

Post-Uninstall Verification

After rebooting, confirm the uninstall is complete:

1. At the Windows login screen, verify the 1Kosmos tile is no longer present.
2. Confirm standard Windows authentication (password or PIN) is available.
3. Verify the installation directory has been removed:

Test-Path "C:\Program Files\1Kosmos\1KosmosCredentialProvider"

This command should return False. If it returns True, residual files remain — see Troubleshooting.

---

Troubleshooting

Issue	Likely Cause	Resolution
uninstall.exe /S produces no output and no action	Incorrect path; uninstaller not present	Verify the file exists at C:\Program Files\1Kosmos\1KosmosCredentialProvider\uninstall.exe; if absent, use the Windows Settings or Control Panel method instead
Uninstall appears to complete but 1Kosmos tile persists after reboot	Residual registry entries or files not removed	Check for leftover files in C:\Program Files\1Kosmos\1KosmosCredentialProvider; check for residual entries under HKEY_LOCAL_MACHINE\SOFTWARE\1Kosmos; contact 1Kosmos support for a cleanup script if necessary
Uninstall entry not visible in Apps / Control Panel	Agent installer record corrupted or the entry was removed manually	Use the silent uninstall method via uninstall.exe /S or the original installer in uninstall mode
Version mismatch warning when using original EXE in uninstall mode	Installer version does not match the installed agent version	Use the registered uninstaller at the installation directory instead; retrieve the correct installer version from your software distribution system if the registered uninstaller is unavailable
Windows login screen shows no credential providers after reboot	Credential provider registration not restored correctly	Reboot the workstation a second time; if the issue persists, run sfc /scannow from an elevated command prompt