CrowdStrike Falcon Sensor Maintenance Token Management Instructions

Locate or Disable the Maintenance Token

The CrowdStrike Falcon Sensor maintenance token is a security measure that helps protect the software from unauthorized removal or tampering. It is required to uninstall the sensor or make changes to its configuration.

Instructions for Windows

1. Open the Windows Registry Editor (regedit).
2. Navigate to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\CrowdStrike\FalconSensor\MaintenanceToken
3. The value of the "MaintenanceToken" key is the maintenance token.

Instructions for macOS

1. Open a Terminal window.
2. Run the following command: sudo /usr/local/falconctl maintenance-token
3. The output of the command is the maintenance token.

Disabling the Maintenance Token

To disable the maintenance token, set the "EnableMaintenanceToken" key to 0 in the Windows Registry or run the following command in a Terminal window on macOS:

sudo /usr/local/falconctl maintenance-token disable

Once the maintenance token is disabled, the sensor can be uninstalled without entering a maintenance token.