000036363 - Post-uninstall steps for the RSA Archer Suite

Document created by RSA Customer Support Employee on May 18, 2018Last modified by RSA Customer Support Employee on Apr 11, 2019
Version 8Show Document
  • View in full screen mode

Article Content

Article Number000036363
Applies ToRSA Product Set: Archer
RSA Version/Condition: All versions
Platform: Windows
IssueAfter uninstalling the RSA Archer Suite there are residual files and folders left behind that are added post installation.
The Uninstall only removes the directories or files added by the Installation process. It does not remove files added during configuration such as repository files, keyword index files, and log files.
ResolutionPost-completion of performing the uninstallation, via programs and features or Add/Remove Programs, we will need to verify the remaining folder structures and remove them.
  • Check for the inetpub folder under the C Drive to remove the site directory found within the wwwroot folder.
    User-added image
    User-added image
  • In this case, the site directory is RSAarcher (It may be named differently depending on the name given during installation)
  • Note*: This example shows the site structure as it was installed under the “Default Web Site” IIS Folder *If installed under the “Sites” Folder, the site directory files will appear under the “wwwroot” folder and NOT within a subfolder labeled as your site name
  • Next location to check for is the Program Files location for the RSA Archer Folder and remove.
    User-added image

    There are also times when the Services may not be completely removed from the system. When this occurs, it will require registry editing to remove the services that may have been left behind. Even if it did, double check the registry for any residual entries.
  • Click start and within the search bar type regedit.
    User-added image
  • Next, Click regedit.exe to open the registry editor.
    User-added image
  • Depending on the service that was left behind, you will find all of them in the location
    • HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services
    • Right-click and delete the remaining services folders
    • User-added image
  • If you had the Instrumentation service/feature installed it will be found at the following location in the registry:
    • HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services > eventlog > Application
    • Right-Click and delete User-added image
    • For Windows 10 and Windows Server 2016 you may have to locate a 2nd entry to remove the Instrumentation Service.
      • Right-click on the Services level within Regedit and click Find
      • Type in the Find dialog box “Semantic” without the quotes and hit enter.
      • Verify that the keys within the Result reference the RSA Archer Instrumentation service and if it does, it is safe to delete.
  • NOTE: FOR Windows 10 and Windows Server 2016 OS’s you will have to perform a Reboot to have the Services entries removed in the User Interface.
  • Remember, these are things that should have been removed during uninstallation as they were entries created by the Archer GRC Platform installation.