New updates and fix to #210

macOS/Apps/Illumio VEN/readme.md

@@ -1,34 +1,36 @@
-# Illumio VEN Installation & Illumio VEN Registration Installer
+# Illumio VEN
+Here is a collection of scripts for Illumio VEN.
 
+## Installation and Registration Installer
 This script is an example to show how to use [Intune Shell Scripting](https://docs.microsoft.com/en-us/mem/intune/apps/macos-shell-scripts) to install applications. In this case the script will download the Illumio VEN pkg file from your download server e.g. Azure Blob Storage Container and then install application onto the Mac. Also, in order to apply Illumio VEN Registration to devices that already have Illumio VEN installed, we are also providing separate script for that.
 
-## Things you'll need to do (installIllumioVEN.sh)
+### Things you'll need to do (installIllumioVEN.sh)
 
 - From line 36, change correct server address URL where PKG-installer will be downloaded e.g. your Azure Blob Storage Container.
 - From line 43, if you want to install Illumio VEN to devices that are not superviced e.g. BYOD-devices, change value to "false" without quotes.
 
-## Things you'll need to do (illumioVENRegistrationInstaller.sh)
+### Things you'll need to do (illumioVENRegistrationInstaller.sh)
 
 - From line 34, if you want to install Illumio VEN to devices that are not superviced e.g. BYOD-devices, change value to "false" without quotes.
 - From line 35, set Illumio VEN activation code from your pairing script
 - From line 36, set Illumio VEN management server address from your pairing script without https:// -prefix.
 - From line 37, set Illumio VEN profile id from your pairing script.
 
-## Script Settings (installIllumioVEN.sh)
+### Script Settings (installIllumioVEN.sh)
 
 - Run script as signed-in user : No
 - Hide script notifications on devices : Yes
 - Script frequency : Not configured
 - Number of times to retry if script fails : 3
 
-## Script Settings (illumioVENRegistrationInstaller.sh)
+### Script Settings (illumioVENRegistrationInstaller.sh)
 
 - Run script as signed-in user : No
 - Hide script notifications on devices : Yes
 - Script frequency : Every 15 minutes
 - Number of times to retry if script fails : 3
 
-## Log File (installIllumioVEN.sh)
+### Log File (installIllumioVEN.sh)
 
 The log file will output to ***/Library/Logs/Microsoft/IntuneScripts/IllumioVEN.log*** by default. Exit status is either 0 or 1. To gather this log with Intune remotely take a look at  [Troubleshoot macOS shell script policies using log collection](https://docs.microsoft.com/en-us/mem/intune/apps/macos-shell-scripts#troubleshoot-macos-shell-script-policies-using-log-collection)
 
@@ -65,7 +67,7 @@ Fri Nov 17 21:25:41 EET 2023 | Cleaning Up
 Fri Nov 17 21:25:41 EET 2023 | Application [IllumioVEN] succesfully installed
 Fri Nov 17 21:25:41 EET 2023 | Writing last modifieddate [Tue, 17 Oct 2023 11:31:35 GMT] to [/Library/Logs/Microsoft/IntuneScripts/IllumioVEN/IllumioVEN.meta]
 ```
-## Log File (illumioVENRegistrationInstaller.sh)
+### Log File (illumioVENRegistrationInstaller.sh)
 
 The log file will output to ***/Library/Logs/Microsoft/IntuneScripts/IllumioVENRegistrationInstaller.log*** by default. Exit status is either 0 or 1. To gather this log with Intune remotely take a look at  [Troubleshoot macOS shell script policies using log collection](https://docs.microsoft.com/en-us/mem/intune/apps/macos-shell-scripts#troubleshoot-macos-shell-script-policies-using-log-collection)
 
@@ -102,4 +104,52 @@ VEN has been SUCCESSFULLY paired with Illumio
 
 Fri Nov 17 20:58:13 EET 2023 | Illumio VEN Registration applied. Creating Registration detection file...
 Fri Nov 17 20:58:13 EET 2023 | Done. Closing script...
+```
+
+## Uninstallation
+Script `uninstallIllumioVEN.zsh` will uninstall illumio VEN from Intune-managed Mac-device.
+
+### Script Settings (uninstallIllumioVEN.zsh)
+
+- Run script as signed-in user : No
+- Hide script notifications on devices : Yes
+- Script frequency : Every 1 day
+- Number of times to retry if script fails : 3
+
+### Log File (uninstallIllumioVEN.zsh)
+
+The log file will output to ***/Library/Logs/Microsoft/IntuneScripts/IllumioVENUninstaller/IllumioVENUninstaller.log*** by default. Exit status is either 0 or 1. The script logs the `illumio-ven-ctl unpair saved` call and verifies removal of `/opt/illumio_ven`. To gather this log with Intune remotely take a look at [Troubleshoot macOS shell script policies using log collection](https://docs.microsoft.com/en-us/mem/intune/apps/macos-shell-scripts#troubleshoot-macos-shell-script-policies-using-log-collection)
+
+```
+##############################################################
+# Sat Oct 18 11:23:33 EEST 2025 | Starting running of script IllumioVENUninstaller
+############################################################
+
+Sat Oct 18 11:23:33 EEST 2025 | Illumio VEN directory detected at /opt/illumio_ven. Let's proceed...
+Sat Oct 18 11:23:33 EEST 2025 | Running Illumio VEN unpair command...
+touch: /opt/illumio_ven_data/reports/in_progress: No such file or directory
+cp: /etc/pf.anchors/com.illumio: No such file or directory
+grep: /opt/illumio_ven_data/etc/agent_id.cfg: No such file or directory
+No ALTQ support in kernel
+ALTQ related functions disabled
+find: /opt/illumio_ven_data/etc/agentmon/: No such file or directory
+rm: /private/var/ilo-ven: Operation not permitted
+Forgot package 'com.illumio.illumio-ven-service' on '/'.
+
+Illumio VEN is being uninstalled...
+
+
+
+2025-10-18T11:23:36+0300 Generating Support Report at /tmp/illumio-ven-report.tgz ........
+2025-10-18T11:23:49+0300 Uninstalling Illumio ............
+2025-10-18T11:23:51+0300 Stopped all daemons
+2025-10-18T11:23:51+0300 /opt/illumio_ven/system/etc/init.d/illumio-firewall disable
+2025-10-18T11:23:51+0300 Firewall Rules failed restore
+2025-10-18T11:24:05+0300 Illumio package cleaned up com.illumio.illumio-ven-service version 23.2.22.295
+2025-10-18T11:24:05+0300 Uninstall complete
+
+VEN has been SUCCESSFULLY unpaired with Illumio
+
+Sat Oct 18 11:24:05 EEST 2025 | Illumio VEN unpair command returned success. Verifying removal...
+Sat Oct 18 11:24:05 EEST 2025 | Illumio VEN components not detected. Uninstallation verified. Closing script...
 ```

macOS/Apps/Illumio VEN/uninstallIllumioVEN.zsh

@@ -0,0 +1,85 @@
+#!/bin/zsh
+#set -x
+############################################################################################
+##
+## Script to uninstall Illumio VEN from macOS
+##
+############################################################################################
+
+## Copyright (c) 2025 Microsoft Corp. All rights reserved.
+## Scripts are not supported under any Microsoft standard support program or service. The scripts are provided AS IS without warranty of any kind.
+## Microsoft disclaims all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a
+## particular purpose. The entire risk arising out of the use or performance of the scripts and documentation remains with you. In no event shall
+## Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever
+## (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary
+## loss) arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has been advised of the possibility
+## of such damages.
+## Feedback: neiljohn@microsoft.com
+
+# Define variables
+appname="IllumioVENUninstaller"                                                                         # The name of our uninstall script
+logandmetadir="/Library/Logs/Microsoft/IntuneScripts/$appname"                                          # The location of our logs and last updated data
+log="$logandmetadir/$appname.log"                                                                       # The location of the script log file
+illumiodir="/opt/illumio_ven"                                                                           # Illumio VEN installation directory
+ctlpath="$illumiodir/illumio-ven-ctl"                                                                   # Illumio VEN control binary
+
+# Check if the log directory has been created
+if [ -d "$logandmetadir" ]; then
+    # Already created
+    echo "$(date) | Log directory already exists - $logandmetadir"
+else
+    # Creating Metadirectory
+    echo "$(date) | Creating log directory - $logandmetadir"
+    mkdir -p "$logandmetadir"
+fi
+
+# Check if Illumio VEN is installed
+CheckIfIllumioVENIsInstalled() {
+if [ -d "$illumiodir" ]; then
+    echo "$(date) | Illumio VEN directory detected at $illumiodir. Let's proceed..."
+else
+    echo "$(date) | Illumio VEN directory not found. Nothing to uninstall. Closing the script..."
+    exit 0
+fi
+}
+
+# Run Illumio VEN unpair command
+RunIllumioVENUnpair() {
+if [ -x "$ctlpath" ]; then
+    echo "$(date) | Running Illumio VEN unpair command..."
+    if "$ctlpath" unpair saved; then
+        echo "$(date) | Illumio VEN unpair command returned success. Verifying removal..."
+    else
+        echo "$(date) | ERROR: Illumio VEN unpair command failed. Closing script..."
+        exit 1
+    fi
+else
+    echo "$(date) | ERROR: Illumio VEN control binary not found or not executable at $ctlpath. Closing script..."
+    exit 1
+fi
+}
+
+VerifyIllumioVENRemoval() {
+if [ -d "$illumiodir" ] || [ -x "$ctlpath" ]; then
+    echo "$(date) | ERROR: Illumio VEN components still detected at $illumiodir. Closing script..."
+    exit 1
+else
+    echo "$(date) | Illumio VEN components not detected. Uninstallation verified. Closing script..."
+    exit 0
+fi
+}
+
+# Start logging
+exec &> >(tee -a "$log")
+
+# Begin Script Body
+echo ""
+echo "##############################################################"
+echo "# $(date) | Starting running of script $appname"
+echo "############################################################"
+echo ""
+
+# Run functions
+CheckIfIllumioVENIsInstalled
+RunIllumioVENUnpair
+VerifyIllumioVENRemoval