Skip to content

Deleting VSatellites

When you need to retire an existing VSatellite, you can delete it from the VSatellites page.

To delete a VSatellite, you'll delete it within TLS Protect Cloud™ and then delete the binaries from the file system where it's installed.


Deleting the very last VSatellite results in also permanently deleting any associated services, as well as the VSatellite's data encryption key (DEK), which contains all related keys and credentials. Learn more about deleting your last available TLS Protect Cloud.


Deleting VSatellites with existing services running on them could cause an outage of those services. Before deleting any VSatellite, assign any associated services to a different VSatellite.

If you don't need the services any longer, you can delete the VSatellite without reassigning the services.

Reassign existing services to a different VSatellite

  1. Sign in to Venafi Control Plane.
  2. Click Settings > Services.
  3. In the left pane, click the service you want to reassign.
  4. Click the Administration tab.
  5. In the VSatellite section, click in the box and select a different VSatellite.
  6. Click Save.

Repeat these steps for every service running on the VSatellite you want to delete.

Delete a VSatellite from TLS Protect Cloud

  1. Click Settings > Services.
  2. Select the VSatellite you want to delete, and then click Delete.
  3. When prompted, click Delete to confirm that you want to delete it.
  4. Log in to TLS Protect Cloud.
  5. Click Settings > VSatellites.
  6. Select the VSatellite you want to delete, and then click Delete.
  7. When prompted, select I understand the risks of deleting the VSatellite, and then click Delete VSatellite to confirm.

Remove VSatellite binaries

After deleting any VSatellite in TLS Protect Cloud, remember to remove the VSatellite binaries from the server where it's installed.

You can remove the binaries from a command line using a vsatctl command:

./vsatctl uninstall


See what else you can do using vsatctl.