A SERVICE OF

logo

ZENworks® ESM 3.5 Administrator’s Manual 71
Note:
To specify the uninstall password you can also pass this MSI Property: STUIP=\”password goes here\”
It is recommended any wireless card be ejected prior to uninstallation, the Wi-Fi radio be
switched-off, and all software with a network connection be closed (i.e.: VPN or FTP software).
Note:
It is recommended that prior to uninstalling the ZENworks Security Client, that a simple policy be
distributed to those clients. Policies which globally disable Wi-Fi functionality, disable any communication
hardware, and/or storage devices can leave that hardware disabled following uninstallation, requiring that
each device be manually re-enabled.
Client Self Defense
The ZSC is protected from being intentionally or unintentionally uninstalled, shutdown, disabled,
or tampered with in any way that would expose sensitive data to unauthorized users. Each
measure protects the client against a specific vulnerability:
Normal uninstall is not allowed without an installation password (if implemented, see
ESM Installation and Quick-Start Guide), or an uninstall MSI is pushed down by the
administrator
Windows Task Manager requests to terminate STEngine.exe and STUser.exe pro-
cesses are disallowed
Service Pause/Stop and client uninstall is controlled by password, defined in the policy
Critical files and registry entries are protected and monitored. If a change is made to
any of the keys or values that are not valid, the registry its immediately changed back
to valid values
NDIS filter driver binding protection. If the NDIS driver is not bound to each adapter,
STEngine will rebind the NDIS filter driver.
Upgrading the ZSC
The ZENworks Security Client may be upgraded in any of three ways:
By physically running the new install executable (default name is setup.exe) with the
the STUPGRADE=1 switch activated, on each client machine
By running an MSI uninstall of the current ZSC and running a new installation (MSI
CANNOT perform upgrades)
By utilizing the ZSC Update option (RECOMMENDED, see “ZSC Update” on
page 100)