Uninstall MSI

Uninstalling 1Kosmos Windows Workstation MFA Agent via MSI package. Supports both silent (command-line) and UI-guided removal.

---

Prerequisites

Requirement	Detail
Privileges	Local Administrator or Domain Administrator rights on the target machine
MSI product code	Required for silent uninstall via msiexec; see Locate the Product Code below
Active sessions	Ensure no users are actively logged in to the workstation before uninstalling
Reboot window	Plan for a reboot immediately after uninstall, the 1Kosmos tile will remain on the login screen until the machine is restarted

Uninstalling the Credential Provider removes all 1Kosmos MFA enforcement from the workstation. Users will revert to standard Windows authentication immediately after reboot. Ensure this is intentional and that any compliance or access control requirements are addressed before proceeding.

Locate the Product Code

The MSI product code is required for silent uninstall. It is unique to each version of the installer.

Option 1 — Windows Registry:

1. Open the registry editor and navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

1. Search for a subkey with DisplayName matching 1Kosmos BlockID Credential Provider (or BlockID Credential Provider on versions prior to v2.4.0.0).

2. Note the ProductCode value — it will be in the format {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}.

Option 2 — PowerShell:

Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -like "*BlockID*" -or $_.Name -like "*1Kosmos*" } | Select-Object Name, IdentifyingNumber

The IdentifyingNumber field is the product code.

The product code changes with each installer version. Always retrieve the code from the target machine rather than reusing a code from a previous installation.

Silent Uninstall

Silent uninstall is the recommended method for managed environments and GPO-based deployments. It runs without any user interaction and suppresses the reboot prompt - schedule the reboot separately.

Basic Silent Uninstall

Run the following command from an elevated command prompt or deployment tool:

msiexec /x {PRODUCT-CODE-HERE} /qn /norestart

Flag	Description
/x	Uninstall mode
{PRODUCT-CODE-HERE}	Replace with the actual product code retrieved above
/qn	No UI - fully silent
/norestart	Suppresses automatic reboot; schedule separately

Silent Uninstall with Log Output

To capture uninstall activity for troubleshooting or audit purposes:

msiexec /x {PRODUCT-CODE-HERE} /qn /norestart /l*v "C:\Logs\1kosmos_uninstall.log"

Flag	Description
/l*v	Verbose logging
"C:\Logs\1kosmos_uninstall.log"	Path to the output log file - ensure the directory exists before running

Reboot After Silent Uninstall

After the uninstall command completes, restart the workstation:

shutdown /r /t 0

Or, if scheduling via a deployment tool, trigger a managed reboot at an appropriate time within your maintenance window.

Do not leave the workstation in a post-uninstall, pre-reboot state for longer than necessary. The 1Kosmos tile will still appear on the login screen in this state, and attempting to authenticate through it may produce errors.

UI Uninstall

Via Windows Settings

1. Open Settings > Apps > Installed Apps (Windows 11) or Settings > Apps & Features (Windows 10).

2. Search for 1Kosmos BlockID Credential Provider (or BlockID Credential Provider on versions prior to v2.4.0.0).

3. Click the entry and select Uninstall.

4. Confirm the uninstall prompt.

5. The uninstall wizard runs and completes.

6. When prompted, click Restart Now to reboot the workstation, or restart manually at the next available opportunity.

Via Control Panel

1. Open Control Panel > Programs > Programs and Features.

2. Locate 1Kosmos BlockID Credential Provider in the list.

3. Right-click the entry and select Uninstall.

4. Follow the uninstall wizard to completion.

5. Reboot the workstation when prompted.

After reboot, verify the 1Kosmos tile no longer appears on the Windows login screen. If it persists, see Troubleshooting.

Post-Uninstall Verification

After rebooting, confirm the uninstall is complete:

1. At the Windows login screen, verify the 1Kosmos tile is no longer present.

2. Confirm standard Windows authentication (password or PIN) is available.

3. Verify the installation directory has been removed:

Test-Path "C:\Program Files\1Kosmos\BlockIDCredentialProvider"

This command should return False. If it returns True, residual files remain - see Troubleshooting.

1. Optionally, review the uninstall log (if generated) at the path specified during silent uninstall.

Troubleshooting

Issue	Likely Cause	Resolution
msiexec /x returns error 1605	Product code not found, the package is not installed, or the code is incorrect	Verify the product code using the PowerShell command above; confirm the agent is installed on the target machine
msiexec /x returns error 1603	Uninstall failed, insufficient privileges or a file is locked	Run the command from an elevated prompt; close any applications that may have files open in the installation directory
1Kosmos tile still visible after reboot	Residual registry entries or files not removed during uninstall	Check for leftover files in C:\Program Files\1Kosmos\BlockIDCredentialProvider; check for residual registry entries under HKEY_LOCAL_MACHINE\SOFTWARE\1Kosmos; contact 1Kosmos support for a cleanup script if necessary
Uninstall entry not visible in Apps / Control Panel	Agent was installed via a different mechanism or the installer record is corrupted	Use the msiexec /x silent method with the product code retrieved from the registry or PowerShell
Windows login screen shows no credential providers after reboot	Credential provider registration not restored correctly	Reboot the workstation a second time; if the issue persists, run a Windows repair using sfc /scannow from an elevated prompt