Upgrade, repair or uninstall the Mideye endpoint on Windows

This page is for administrators who move a computer to a newer endpoint version, repair an install, or remove the endpoint. It is the one place for these tasks.

Before you begin

The newer MSI of the same mode as the installed one, from the download portal.
A quiet moment. The MideyeBroker service restarts during an upgrade.
For an uninstall of a protected computer: the steps to switch Mideye off first, in the Fleet documentation in the downloads portal (login required).
A copy of your source configuration. A full uninstall deletes it.

Upgrade

Close Mideye Configuration. If it is still open, the wizard offers to close it. Choose to close it.
Run the newer mideye-credential-provider-<version>-x64.msi as administrator and follow the wizard. Your settings and secrets are kept.
Silent: msiexec /i mideye-credential-provider-<version>-x64.msi /qn /norestart.

An upgrade does not ask for a restart unless Windows could not replace a file that was in use. A silent upgrade then returns exit code 3010: restart the computer.

A computer that joined Fleet after the install keeps its mode: pass MODE=standalone on a silent upgrade.

Repair

Run msiexec /fvomus mideye-credential-provider-<version>-x64.msi /qn. A repair restores files, registration and the service. It does not touch the configuration, the override or the protection state.

Uninstall

On a computer where switching Mideye off needs the break-glass code (the default), or where the configuration is damaged, the installer refuses: it stops with error 1603 and writes event 1112. Without a code requirement the installer switches Mideye off by itself and goes on. If it refuses, switch Mideye off first, as described in the Fleet documentation in the downloads portal (login required).

Uninstall from Settings, Apps, and accept the Windows administrator prompt.
Silent: msiexec /x mideye-credential-provider-<version>-x64.msi /qn /l*v uninstall.log.

A full uninstall deletes %ProgramData%\Mideye, including the configuration. It also puts back the Remote Desktop logon timeout that the install raised. Do not use a plain msiexec /x as the uninstall command of a deployment tool without switching Mideye off first.

A Fleet-managed computer: release it in Fleet first.

Verify

After an upgrade: event 4011 in the Application log names the new version. Overview says Connected.
After an uninstall: no MideyeBroker service, and no event 1112 with cleanup incomplete. Treat a decommission as clean only when that event is absent.
After an uninstall the Mideye tile is gone and Windows signs in with the password only.

Troubleshooting

The uninstall stops with error 1603 and event 1112: switching Mideye off needs the break-glass code, or the configuration is damaged. Switch Mideye off first.
A silent upgrade returns 3010: restart the computer.
The installer refuses an upgrade: read event 1112. It names the check that failed.

Install