Uninstall the module

To stop using SCE, you can uninstall the sce_linux module. Alternatively, to stop using SCE on one or more nodes, declassify the nodes to remove their association with the sce_linux class.

If you uninstall SCE or declassify one or more nodes, Puppet Enterprise (PE) or Puppet Core no longer runs on the affected nodes to enforce secure configuration compliance. When you uninstall SCE or declassify a node, the node does not revert to its pre-SCE state.

Take one of the following actions:

  • To uninstall the SCE module, follow the instructions in Uninstalling modules.
  • On PE, to declassify nodes, you can remove the nodes from the node group that is associated with the sce_linux class. For instructions, see Remove nodes from a node group. Alternatively, to stop using SCE on an entire node group, you can remove the sce_linux class from the node group. For instructions, see Remove classes from a node group.
  • On Puppet Core, ensure that sce_linux is no longer included in the manifest that applies the sce_linux class.