Bash script to remove VMWare Airwatch Agent for macOS

awagentuninstaller.sh

#!/bin/sh

[[ $EUID == 0 ]] || { echo "Must be run as root."; exit; }

PKGNAME=AgentUninstaller
LOG=/tmp/$PKGNAME.log
touch $LOG
chmod a+rw $LOG

DAEMON_PLIST="/Library/LaunchDaemons/com.airwatch.airwatchd.plist"
AGENT_PLIST="/Library/LaunchAgents/com.airwatch.mac.agent.plist"
AWCM_PLIST="/Library/LaunchDaemons/com.airwatch.awcmd.plist"
SCHEDULER_PLIST="/Library/LaunchDaemons/com.airwatch.AWSoftwareUpdateScheduler.plist"
REMOTE_PLIST="/Library/LaunchDaemons/com.airwatch.AWRemoteManagementDaemon.plist"
REMOTETUNNEL_PLIST="/Library/LaunchDaemons/com.airwatch.AWRemoteTunnelAgent.plist"

WriteLog ()
{
	# /bin/echo `date`" "$1 >> $LOG
	/bin/echo `date`" "$1
}

val=$(/usr/libexec/PlistBuddy -c "Print ProgramArguments:0" "${AGENT_PLIST}")
if [[ $val == *"VMware AirWatch Agent"* ]]; then
    WriteLog "VMware Agent needs to be Unloaded"
    LOCAL_USER=`ps -ajx | grep "/Applications/VMware AirWatch Agent.app/Contents/MacOS/VMware AirWatch Agent" | grep -v grep | awk '{ print $1 }'`
else
    WriteLog "AirWatch Agent needs to be Unloaded"
    LOCAL_USER=`ps -ajx | grep "/Applications/AirWatch Agent.app/Contents/MacOS/AirWatch Agent" | grep -v grep | awk '{ print $1 }'`
fi

WriteLog "Local user is $LOCAL_USER"

WriteLog "Modifying launchd plists"
/usr/libexec/PlistBuddy -c "Delete :KeepAlive" $DAEMON_PLIST
/usr/libexec/PlistBuddy -c "Delete :KeepAlive" $AGENT_PLIST
/usr/libexec/PlistBuddy -c "Delete :KeepAlive" $AWCM_PLIST
/usr/libexec/PlistBuddy -c "Delete :KeepAlive" $SCHEDULER_PLIST
/usr/libexec/PlistBuddy -c "Delete :KeepAlive" $REMOTE_PLIST
/usr/libexec/PlistBuddy -c "Delete :KeepAlive" $REMOTETUNNEL_PLIST

WriteLog "Unloading the plists"

/bin/launchctl unload $DAEMON_PLIST
/bin/launchctl unload $AWCM_PLIST
/bin/launchctl unload $SCHEDULER_PLIST
/bin/launchctl unload $REMOTE_PLIST
/bin/launchctl unload $REMOTETUNNEL_PLIST

su - ${LOCAL_USER} "/bin/launchctl unload $AGENT_PLIST"

WriteLog "Removing plists"
/bin/rm $DAEMON_PLIST
/bin/rm $AGENT_PLIST
/bin/rm $AWCM_PLIST
/bin/rm $SCHEDULER_PLIST
/bin/rm $REMOTE_PLIST
/bin/rm $REMOTETUNNEL_PLIST

WriteLog "Removing AirWatch folder except recovery key file"
cd "/Library/Application Support/AirWatch"
rm -f airwatchd awcmd AWSoftwareUpdateScheduler AWRemoteManagementDaemon AWRemoteTunnelAgent

rm -rf "/Library/Application Support/AirWatch/FrameWorks"

rm -rf "/Library/Application Support/AirWatch/Installation"

shopt -s extglob
if [ -d "/Library/Application Support/AirWatch/Data" ]; then
    cd "/Library/Application Support/AirWatch/Data"
    rm -rf !(FDE.plist|settings|encKeys)
fi

WriteLog "Removing agent and helper binaries"
rm -rf "/Users/$LOCAL_USER/Applications/AirWatch Agent.app/"
rm -rf "/Applications/AirWatch Agent.app/"
rm -rf "/Applications/VMware AirWatch Agent.app/"

pidAWAgent=`pgrep -x "AirWatch Agent"`
pidVMAgent=`pgrep -x "VMware AirWatch Agent"`
WriteLog "AirWatch Agent PID is $pidAWAgent"
WriteLog "VMWare Agent PID is $pidVMAgent"

kill -9 $pidAWAgent
kill -9 $pidVMAgent

if [ -d "/Users" ]; then
    cd "/Users"
    for USERNAME in `ls`; do
        rm -rf "/Users/$USERNAME/Library/Preferences/com.airwatch.mac.agent.plist" || true
        rm -rf "/Users/$USERNAME/Library/Preferences/com.airwatch.mac.enroller.plist" || true
        rm -rf "/Users/$USERNAME/Library/Preferences/com.aiwatch.mac.enroller.plist" || true
    done
fi

Thanks for this! Was driving me crazy.

Is it possible to run this script without being root?

Nope, most of the files it attempts to modify/delete are owned by root, if I remember correctly.

Newbie here... How do you run it?

@KinqOslo I'll be extra prescriptive, since I'm not sure how newbie we're talkin' here...

1. Download the script to your Downloads folder.
2. Open Terminal
3. Change the working directory to Downloads folder: cd ~/Downloads
4. Make the script executable: chmod +x awagentuninstaller.sh
5. Run the script as root: sudo ./awagentuninstaller.sh
6. It will prompt for your computer's password. The cursor won't move, but just type the full thing and hit enter.

... that should do it.

How does this compare to the uninstall script that VMware installs on your machine as /Library/Scripts/hubuninstaller.sh ?

... I'm not sure, to be honest, I would need to look at that script to compare it, and my company is no longer using AirWatch / Workspace ONE / whatever they're calling it these days. 😅

If you wanna upload that one as a gist and link it here, I can do a quick check n' see. Maybe they can be combined into a "best of both" version.