Uninstall the module

To stop using CEM, you can uninstall the cem_windows module. Alternatively, to stop using CEM on one or more nodes, you can declassify the nodes to remove their association with the cem_windows class.

CAUTION: If you uninstall CEM or declassify one or more nodes, Puppet Enterprise (PE) or open source Puppet no longer runs on the affected nodes to enforce Center for Internet Security (CIS) compliance. When you uninstall CEM or declassify a node, the node does not revert to its pre-CEM state.
Take one of the following actions:
  • To uninstall the CEM module, follow the instructions in Uninstalling modules.
  • On PE, to declassify nodes, can remove the nodes from the node group that is associated with the cem_windows class. For instructions, see Remove nodes from a node group. Alternatively, to stop using CEM on an entire node group, you can remove the cem_windows class from the node group. For instructions, see Remove classes from a node group.
  • On open source Puppet, ensure that cem_windows is no longer included in the manifest that applies the cem_windows class.