Detaching on-premises HXD appliances

To detach an on-premises HXD appliance using the CLI:

Log in to the on-premise Endpoint Security (HX) appliance using the SSH protocol and the IP address or host name of the appliance's management interface.

Enable CLI configuration mode.

hostname > enable
hostname # configure terminal

Detach an HXD appliance from the Endpoint Security (HX) appliance:
```
hostname # no hx ecosystem dmz <dmz-hostname-or-IP>
```
where <dmz-hostname-or IP> is the hostname or IP address of an HXD appliance.
Repeat this step for each on premises HXD appliance in your environment.
Verify that no HXD appliances are attached to the Endpoint Security (HX) appliance:
- View the ecosystem roles:
```
hostname (config) # show hx ecosystem
```
  The list of current HX ecosystem configuration roles should not contain any HXD appliances.
- View the PKI settings:
```
hostname (config) # show hx pki
```
  The response should not include information about any HXD appliances.
If any HXD appliances are listed in the output of these commands, repeat Steps 3 and 4 until no HXD appliances appear.
Save your changes.
```
hostname (config) # write memory
```

When the on-premises HXD appliances are detached from the Endpoint Security (HX) appliance, the agents will revert to using the on-premises Endpoint Security (HX) appliance.