TABLE OF CONTENTS

• Client Management Console URL:
• NFR Management Console URL:
• Current Sentinel One Software
• Site Tokens
• Uninstall SentinelOne from Windows 10 / 11
• Uninstall SentinelOne from Apple MacOS

General Information

Client Management Console URL:

[https://usea1-pax8.sentinelone.net/login](https://usea1-pax8.sentinelone.net/login)

NFR Management Console URL:

[https://usea1-300-nfr.sentinelone.net/login](https://usea1-300-nfr.sentinelone.net/login)

Current Software Links:

Windows:

https://s3.us-east-2.wasabisys.com/rxt-workstation/RXT/Vendors/SentinelOne-NFR/SentinelOneInstaller_windows_64bit_v23_3_3_264.exe

MacOS:

https://s3.us-east-2.wasabisys.com/rxt-workstation/RXT/Vendors/SentinelOne-NFR/Sentinel-Release-23-3-2-7123_macos_v23_3_2_7123.pkg

NFR Software Token:

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS0zMDAtbmZyLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICJjMzFmMjg0NjM1ODRlN2UxIn0=`

Site Tokens

Alabama Dermatology Associates, P.C.

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICI0NWNmYjQ5ZjgxZDBlNmU4In0=

Alabama Heart and Vascular Medicine

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICI1ODljZTVlNDlkZTRkNzdmIn0=

Dry Fast, Inc

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIyMGU1YjYyNDhjOWI4MzYwIn0=

GI Associates of West Alabama, P.C.

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIyY2QzZDI3ZjI4YTFkMmNhIn0=

North River Surgical Center, LLC

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICJlZTg3MmQ2MGYwMzc5OTAzIn0=

Harless and Company, Inc

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICJkMzBiM2M5YzgwNjFmYmMzIn0=

Tuskaloosa Forestry Services

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICJmNDI1NTZiZWEyZGYwNTE3In0=

North River Timber

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICI0YTFkODUwMjZhNjA5OTA3In0=

Pearson Construction Company

eyJ1cmwiOiAiaHR0cHM6Ly91c2VhMS1wYXg4LnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICJjMTEzYjMwZDZlMWM0YmVjIn0=

Uninstall SentinelOne from Windows 10

Cleaner Tool FAQ

Cleaner tool is required for specific version of S1 installed

For this issue, please use the uninstall tool to completely remove any trace of SentinelOne from the endpoint

Download Link 

https://s3.us-east-2.wasabisys.com/rxt-workstation/Vendors/SentinelOne/Sentinel%20One%20Removal%20Tool/Cleaners_22_1.zip

WARNING - As this tool can remove the SentinelOne agent, please make sure to delete it from the endpoint once used and make sure that it doesn't reach unwanted hands. These steps explain how to run the SentinelCleaner from safe mode only. This tool should not be used without explicit instructions from the support team.

1. Download the SentinelCleaner and save it to the C drive.

2. Reboot the endpoint into Safe Mode (MANDATORY).

3. Run the cleaner in Safe Mode (MANDATORY) from C drive (Same folder you have extracted the file).

4. Verify cleaned correctly.

**To verify:**

1. Run regedit.

2. Verify that all the 'sentinel' registry keys are removed. Search for the string 'sentinel'. If there, remove the outstanding keys manually. Note: If the deletion is not possible, change the ownership of those registry keys to the current admin. Read more about how to do it here.

3. Verify that the "Sentinel" Program folder, its sub-directories, and the hidden Sentinel ProgramData folder are removed. Reminder: To see the hidden ProgramData folders, change the folder view options to show hidden items. When the system reboots twice, it is ready for a fresh agent installation.

4. Delete the tool.

Uninstall SentinelOne from Apple MacOS

[Uninstalling the macOS Agent in macOS Recovery Mode.pdf](General%20Information.assets/Uninstalling%20the%20macOS%20Agent%20in%20macOS%20Recovery%20Mode.pdf)

## Authorizing Full Disk Access on Apple MacOS

The macOS (10.15 Catalina and later releases) makes sure that applications are installed in a secure way. It limits installation only to applications that are approved by Apple and the user. This change does not let applications access specified paths (such as Documents, Downloads, and Desktop) without user consent.

If the SentinelOne icon shows "Needs user attention" or these messages "Authorize Full-Disk-Access to SentinelOne in System Preferences", "Authorize SentinelOne components in System Preferences". Approve Full Disk Access for SentinelOne Apps in the System Preferences.

Important: This is done only once on an endpoint. If already done on the endpoint, do not repeat it when the Agent is updated. If you do not complete this prerequisite step, the macOS Agent will not have full visibility to all files from all users.

Authorize Full Disk Access to these processes:

- sentineld

- sentineld_helper

- sentineld_shell

To Authorize Full Disk Access with MDM:

- To grant full disk access in Jamf, see [SentinelOne - Installing and Upgrading macOS Kextless Agents with Jamf](https://success.alienvault.com/s/article/SentinelOne-Installing-and-Upgrading-macOS-Kextless-Agents-with-Jamf)

To Authorize Full Disk Access on a local computer:

1. On the local computer, open System Preferences.

2. Click Security & Privacy, and select the Privacy tab.

3. Click the lock to make changes.

4. In the left pane, click Full Disk Access.

5. Click the + icon.

6. Press and hold Command+Shift+G at the same time to open the Go to the folder menu.

7. Enter the path:

   /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/

8. Click Go.

9. Select the sentineld, sentineld_helper , and sentinel_shell applications.

10. Close System Preferences.

Authorizing the Network Extension

If the SentinelOne icon shows "Needs user attention" or these messages "Authorize SentinelOne Network Extension in System Preferences", "Authorize SentinelOne components in System Preferences" you must approve the network Extension for SentinelOne in the System Preferences.

![]()

![]()

Do this only one time on every macOS endpoint. If you already approved it, there is no need to repeat it when the SentinelOne App is updated. If you do not complete this prerequisite step, your mac will not be fully protected.

If you use Mobile Device Management (MDM) solution to manage your Endpoints, see:

- [SentinelOne - Installing and Upgrading macOS Kextless Agents with Jamf](https://success.alienvault.com/s/article/SentinelOne-Installing-and-Upgrading-macOS-Kextless-Agents-with-Jamf)

- [SentinelOne - Installing and Upgrading macOS Kextless Agents with MDM tools](https://success.alienvault.com/s/article/SentinelOne-Installing-and-Upgrading-macOS-Kextless-Agents-with-MDM-tools)

To approve Network Extension:

1. If you see the System Extension Blocked message, click Open Security Preferences.

   Note: If you click OK, the window closes. To approve the SentinelOne Network Extension later, open System Preferences > Security & privacy > General.

2. At System software from application "SentinelOne Extensions" was blocked from loading, click Allow.

3. In the window that opens, click Allow.

Upgrading macOS Agents with a Local Upgrade

To upgrade macOS Agents locally:

1. Download the new macOS Agent version PKG

2. Open the Terminal application

3. Run:

   sudo sentinelctl upgrade-pkg PKG_pathname

Note: Upgrading the macOS Agent does not work with double-clicking the installer PKG.