CSA 4.5(1) and CUCM 4.2(3): unable to stop CSA

[raziel78kain]

Hello,

we have a Cisco Unified CallManager 4.2(3) on which we have installed Cisco Security Agent 4.5(1) (Build 655).

When we try to stop the Cisco Security Agent service, we receive the following error message:

Microsoft Management Console
Could not stop the Cisco Security Agent service on Local Computer.
The Service did not return an error. This could be an internal Windows error or an internal service error.
If the problem persist, contact your system administrator.

What's wrong?

How can we stop the service?

Thanks in advance for your help.

Best regards.

[phooghen]

Did you try :

Start > Program > Adminstrative  tools > services

Then you select the CSA service and stop it.

Pierre.

[raziel78kain]

Hello,

I have tried to use both the "Services" tool and the CLI command "net stop csagent"; in the second case, it gives the error:

The Cisco Security Agent service could not be stopped.

Regards.

[phooghen]

Try to uninstall CSA from Go to Control Panel > Add/Remove Programs > CiscoSecure
ACS Agent.

If it doesn't work, try the following:

I Suggest to reboot the server and get into safe mode and do a manual un-install.

- delete the program files\cisco (systems)\csagent folder

- Delete the following directory :
   Program Files\InstallShield Installation Information\
   {DE49974667B9-11D4-97CE-0050DA10E5AE} 

- Delete these driver files :
  Windows (or WINNT)\system32\drivers 
   - csacentr.sys, csafile.sys, csanet.sys, csareg.sys, csatdi.sys.

- All references to csagent in the Start Menu\programs\ directory. 

- Delete WINNT or WINDOWS\system32\csauser.dll 
   First modify the registry key that loads this registry value :
HKLM > software > microsoft > windows NT > currentversion > windows -
appInit_dlls
   (should NOT reference to csauser.dll), edit this value to "xyz" (to change the
   reference to csauser.dll). You may have to reboot after changing this registry
   value before windows allows you to delete this csauser.dll file.

- Windows (or winnt)\system32\csafilter.dll, csa_uninstall.bat (if they exist)

Also delete these registry keys: 

-  HKLM > system > controlset001 > control > session manager > knowndlls
> csauser.dll 
HKLM > system > controlset002 > control > session manager > knowndlls >
csauser.dll

-  HKLM > System > Currentcontrolset > Services > csacenter, csafile, csanet,
csareg,   csaTDI, csagent, csafilter, csahook. 

-  HKEY_Local_Machine > Software > Cisco > CSAgent

-  HKEY_Local_Machine > Software > Cisco > CSAgentinstalled

-  HKEY_Local_Machine > Software > Microsoft > windows > currentversion >
uninstall >   {DE499746-67B9-11D4-97CE-0050DA10E5AE}
 
-  DELETE the reference to the CSA in start - programs - startup


Remove all references to any CSA* resource in the Windows Device Manager.  Make sure you
select "show hidden devices" and expand the non-plug and play devices section.  
Right click on each csa* resource and uninstall them.  Do not reboot until all the csa
resources are uninstalled.

-  Reboot 

[raziel78kain]

Hello,

I have tried to uninstall the CSA, but I have received the following error:

Cisco Security Agent - Setup was unable to stop the CSAgent service. Installation will be aborted.

Is there an official guide for the "safe mode" uninstallation steps that you have posted?

Regards.