Confirming Uninstallation of LimaCharlie Sensor for macOS

After performing an uninstallation of the LimaCharlie Sensor for macOS, you can verify that the process was successful by manually checking several items on the endpoint, as described below.

Verify the LimaCharlie processes are not running

1. Open Activity Monitor (/Applications/Utilities/Activity Monitor.app).

2. From the View menu, ensure "All Processes" is selected.

3. In the Search box, type: rphcp

4. Ensure that neither of the following processes appear:

rphcpcom.refractionpoint.rphcp.extension

If either appear, the uninstallation likely did not complete successfully and it should be re-attempted.

Verify all files on disk were removed

The following LimaCharlie sensor-related files should no longer exist on disk:

/Applications/RPHCP.app

/usr/local/bin/rphcp

/usr/local/hcp

/usr/local/hcp_conf

/usr/local/hcp_hbs

You may optionally remove the log file located at:  /usr/local/hcp.log

Verify LimaCharlie Network Extension was removed

1. Open System Settings

2. Navigate to Network

3. Select VPN & Filters

4. Check if. “RPHCP” appears in the list.

✅ If it does not appear, the Network Extension was successfully removed.

❌ If you see RPHCP in the list, the Network Extension was not properly removed and you should perform uninstallation again.

Verify LimaCharlie Security Extension was removed

Open the Terminal and run the following commands

Run Command #1

sudo systemextensionsctl list | grep rphcp

✅ No result would indicate that the uninstall was successful.

❌ The following result would indicate that the uninstall was not successful:

*	*	N7N82884NH	com.refractionpoint.rphcp.extension (1.0.241204/1.0.241204)	RPHCP	[activated enabled]

Run Command #2

sudo cat /Library/SystemExtensions/db.plist | grep rphcp

✅ If no result is returned, the security extension was successfully removed.

❌ If instead you see something similar to the below, the extension was not properly removed and you may need to take some additional measures to do so (i.e. manual removal after booting into Recovery mode).