> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/windows-workstation-mfa/uninstall/uninstall-msi.md).

# Uninstall MSI

***

### Prerequisites

| Requirement      | Detail                                                                                                                         |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| Privileges       | Local Administrator or Domain Administrator rights on the target machine                                                       |
| MSI product code | Required for silent uninstall via `msiexec`; see [Locate the Product Code](#locate-the-product-code) below                     |
| Active sessions  | Ensure no users are actively logged in to the workstation before uninstalling                                                  |
| Reboot window    | Plan for a reboot immediately after uninstall, the 1Kosmos tile will remain on the login screen until the machine is restarted |

{% hint style="warning" %}
Uninstalling the Credential Provider removes all 1Kosmos MFA enforcement from the workstation. Users will revert to standard Windows authentication immediately after reboot. Ensure this is intentional and that any compliance or access control requirements are addressed before proceeding.
{% endhint %}

### Locate the Product Code

The MSI product code is required for silent uninstall. It is unique to each version of the installer.

**Option 1 — Windows Registry:**

1. Open the registry editor and navigate to:

```bash
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
```

2. Search for a subkey with `DisplayName` matching **1Kosmos BlockID Credential Provider** (or **BlockID Credential Provider** on versions prior to v2.4.0.0).
3. Note the `ProductCode` value — it will be in the format `{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}`.

**Option 2 — PowerShell:**

```bash
Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -like "*BlockID*" -or $_.Name -like "*1Kosmos*" } | Select-Object Name, IdentifyingNumber
```

The `IdentifyingNumber` field is the product code.

{% hint style="info" %}
The product code changes with each installer version. Always retrieve the code from the target machine rather than reusing a code from a previous installation.
{% endhint %}

### Silent Uninstall

Silent uninstall is the recommended method for managed environments and GPO-based deployments. It runs without any user interaction and suppresses the reboot prompt - schedule the reboot separately.

### Basic Silent Uninstall

Run the following command from an elevated command prompt or deployment tool:

```bash
msiexec /x {PRODUCT-CODE-HERE} /qn /norestart
```

| Flag                  | Description                                          |
| --------------------- | ---------------------------------------------------- |
| `/x`                  | Uninstall mode                                       |
| `{PRODUCT-CODE-HERE}` | Replace with the actual product code retrieved above |
| `/qn`                 | No UI - fully silent                                 |
| `/norestart`          | Suppresses automatic reboot; schedule separately     |

### Silent Uninstall with Log Output

To capture uninstall activity for troubleshooting or audit purposes:

```bash
msiexec /x {PRODUCT-CODE-HERE} /qn /norestart /l*v "C:\Logs\1kosmos_uninstall.log"
```

| Flag                              | Description                                                              |
| --------------------------------- | ------------------------------------------------------------------------ |
| `/l*v`                            | Verbose logging                                                          |
| `"C:\Logs\1kosmos_uninstall.log"` | Path to the output log file - ensure the directory exists before running |

### Reboot After Silent Uninstall

After the uninstall command completes, restart the workstation:

```bash
shutdown /r /t 0
```

Or, if scheduling via a deployment tool, trigger a managed reboot at an appropriate time within your maintenance window.

{% hint style="warning" %}
Do not leave the workstation in a post-uninstall, pre-reboot state for longer than necessary. The 1Kosmos tile will still appear on the login screen in this state, and attempting to authenticate through it may produce errors.
{% endhint %}

### UI Uninstall

#### Via Windows Settings

1. Open **Settings > Apps > Installed Apps** (Windows 11) or **Settings > Apps & Features** (Windows 10).
2. Search for **1Kosmos BlockID Credential Provider** (or **BlockID Credential Provider** on versions prior to v2.4.0.0).
3. Click the entry and select **Uninstall**.
4. Confirm the uninstall prompt.
5. The uninstall wizard runs and completes.
6. When prompted, click **Restart Now** to reboot the workstation, or restart manually at the next available opportunity.

#### Via Control Panel

1. Open **Control Panel > Programs > Programs and Features**.
2. Locate **1Kosmos BlockID Credential Provider** in the list.
3. Right-click the entry and select **Uninstall**.
4. Follow the uninstall wizard to completion.
5. Reboot the workstation when prompted.

{% hint style="info" %}
After reboot, verify the 1Kosmos tile no longer appears on the Windows login screen. If it persists, see [Troubleshooting](#troubleshooting).
{% endhint %}

#### Post-Uninstall Verification

After rebooting, confirm the uninstall is complete:

1. At the Windows login screen, verify the **1Kosmos** tile is no longer present.
2. Confirm standard Windows authentication (password or PIN) is available.
3. Verify the installation directory has been removed:

```bash
Test-Path "C:\Program Files\1Kosmos\BlockIDCredentialProvider"
```

This command should return `False`. If it returns `True`, residual files remain - see [Troubleshooting](#troubleshooting).

4. Optionally, review the uninstall log (if generated) at the path specified during silent uninstall.

### Troubleshooting

| Issue                                                           | Likely Cause                                                                       | Resolution                                                                                                                                                                                                                   |
| --------------------------------------------------------------- | ---------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `msiexec /x` returns error 1605                                 | Product code not found, the package is not installed, or the code is incorrect     | Verify the product code using the PowerShell command above; confirm the agent is installed on the target machine                                                                                                             |
| `msiexec /x` returns error 1603                                 | Uninstall failed, insufficient privileges or a file is locked                      | Run the command from an elevated prompt; close any applications that may have files open in the installation directory                                                                                                       |
| 1Kosmos tile still visible after reboot                         | Residual registry entries or files not removed during uninstall                    | Check for leftover files in `C:\Program Files\1Kosmos\BlockIDCredentialProvider`; check for residual registry entries under `HKEY_LOCAL_MACHINE\SOFTWARE\1Kosmos`; contact 1Kosmos support for a cleanup script if necessary |
| Uninstall entry not visible in Apps / Control Panel             | Agent was installed via a different mechanism or the installer record is corrupted | Use the `msiexec /x` silent method with the product code retrieved from the registry or PowerShell                                                                                                                           |
| Windows login screen shows no credential providers after reboot | Credential provider registration not restored correctly                            | Reboot the workstation a second time; if the issue persists, run a Windows repair using `sfc /scannow` from an elevated prompt                                                                                               |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/authentication/windows-workstation-mfa/uninstall/uninstall-msi.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.