Force resetting Deep Security Agent (DSA) and uninstalling DSA with enabled Agent Self-Protection

Deep Security20.0 , Deep Security11.0 , Deep Security10.0 , Deep Security12.0 , Deep SecurityAll

Last updated: 2024/09/17

Solution ID: KA-0016999

Category: Configure

This article provides the steps on how to resolve the following Deep Security Agent (DSA) issues:

In rare circumstances, DSA fails to reset using either of the following methods:
- Deactivate the DSA on the Deep Security Manager (DSM) console.
- Run "dsa_control -r, /r, --reset" on the command line.
For DSA with agent self-protection feature enabled, if the agent self-protection cannot be disabled for some reason, such as lost password, and you are unable to uninstall DSA manually or using the Control Panel.
HTTP Status: 403 - Forbidden - untrusted peer appears
- If self-protection is enabled, and you run dsa utility like dsa_control and failed to add -p <self-protect passord>, you will get this error.

To force reset the DSA:

Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.

Boot the machine into Safe Mode.
Set the following services to start manually:
- Trend Micro Deep Security Agent
- Trend Micro Solution Platform
Disable the Self-Protection of DSA by setting the value of the following registry key hive to "0"
Hkey_Local_Machine\Software\TrendMicro\Deep Security Agent\Self Protect=0
Search for the following files within the %programdata%\Trend Micro\Deep Security Agent folder and its subfolders. Rename all occurrences of these files or move them from their current location:
- config.bin
- ds_agent.config
Boot the machine in Normal Mode.
Start the Trend Micro Deep Security Agent service.
Run the following command to reset the agent:
dsa_control.exe -r

Optionally, you can uninstall the DSA using the Control Panel's Add/Remove Programs option. If the process fails please uninstall using the steps detailed on this KB article:Manually uninstalling Deep Security Agent, Relay, and Notifier from Windows.

Was this article helpful?