How to completely Wipe a Device?

The Wipe Device remote action is a critical security measure that performs a factory reset on managed devices, permanently deleting all data to prevent corporate leaks if an asset is lost or stolen.

Why perform a Complete Device Wipe?

Wiping a device is the final line of defense for data protection. While locking a device prevents immediate access, a complete wipe ensures that even if encryption is bypassed, sensitive corporate and personal information remains inaccessible.

• Data Protection: Erases files, contacts, calendars, apps, and certificates.
• Asset Disposal: Prepares a corporate-owned device for retirement or reassignment.
• Security Compliance: Safeguards against unauthorized access on compromised endpoints.

Platform Support and Compatibility

The Wipe Device action is supported across multiple operating systems, with specific behavior variations based on version and management state.

Critical Warnings

• Irreversibility: The wipe process cannot be stopped or paused once initiated.
• Total Data Loss: All data, corporate and personal, is permanently deleted.
• Management Loss: Standard Android, unsupervised iOS, Windows, and Mac devices are removed from Hexnode management and require manual re-enrollment.
• Linux Impact: The device is rendered unusable and requires a complete OS re-installation.

Step-by-Step Guide: Executing a Remote Wipe

Follow these steps to initiate a factory reset from the Hexnode UEM console:

1. Log in to the Hexnode UEM portal.
2. Navigate to the Manage tab.
3. Select the target device(s) you wish to wipe.
4. Click Actions > Security > Wipe Device.
5. Configure platform-specific options in the prompt:
   • macOS 10.8+: Enter the Find My Mac PIN.
   • Clear Factory Reset Protection/Activation Lock: Enable Clear Factory Reset Protection/Activation Lock to remove lock screens on supervised iOS/macOS or Android Enterprise devices.
   • macOS 12.0+ Fallback: Choose between Complete Wipe for manual OS install or Do not wipe if EACS fails.
   • ChromeOS Methods: Select Remove User Profiles to retain policies or Factory Reset to erase everything.
   • iOS and visionOS:
     • Re-enroll device to MDM automatically: Enable this option to automatically re-enroll devices into Hexnode UEM after wiping.
       Pre-requisites:

       • This feature is supported only on iOS 17.0+ and visionOS 26.0+ devices.
       • For devices that are not enrolled through ADE, Profile-driven enrollment is required to support automatic re-enrollment.
       • The Activation Lock must be disabled on all devices before wiping to re-enroll devices back to MDM automatically.
       • The Enable Return to Service option in ADE enrollment profiles must be enabled for the profile-based configurations to be applied automatically on the device after wiping.

     • Preserve managed applications: Enable this option to retain managed applications assigned through the ADE enrollment profile when wiping the device.
       Note:

       
       This feature only works on iOS 17.0+ and visionOS 26.0+ devices enrolled using ADE.
       

       • Deploy additional apps: Use this dropdown to select additional apps to be deployed on the device after wiping it.
         Note:

         
         You must configure a valid VPP token to view, select, and deploy additional apps.
         

       • Installation timeout: Enable this option to limit how long Setup Assistant pauses in the foreground to install preserved or additional apps when a device restarts after a wipe. The installation phase times out if it exceeds the specified duration, and the Setup Assistant proceeds with the device setup.
       Disclaimer:

       
       Enabling the Preserve managed applications option does not retain app configurations or app data.
       

     • Enable Retain eSIM Configuration to preserve mobile data plans.
       Note:

       
       This option is available only for iOS 11.0+ devices.
       

6. Click Wipe.
7. Enter your Hexnode UEM portal password and click Confirm to authorize the action.

Post-Wipe Re-enrollment Behavior

Automatic device wipe using Hexnode UEM

A device can be set up to get completely wiped automatically if the user enters an incorrect password for a specific number of times. This feature is available only on iOS, Android, and Windows devices.

Troubleshooting Guide