Platform compatibility
| macOS | Windows | Linux | iOS / iPadOS | Android |
|---|---|---|---|---|
| ✅ | ✅ | ✅ | ✅ | ❌ |
How to wipe a device
- Go to Devices and open the device details page.
- Click Actions > Wipe.
- Select the wipe mode (where applicable).
- Confirm the action.
macOS
On macOS, a remote wipe erases all user data and reinstalls macOS from recovery. The device is returned to factory defaults.- If the device has Activation Lock enabled, disable it first or make sure it has procedure.
- For Zero Touch-enabled devices, the Mac will automatically re-enroll on first boot.
- Otherwise, the employee must re-enroll manually.
Windows
Primo offers two wipe modes for Windows: Standard wipe and Hard wipe. Each maps to a different Microsoft MDM command and has different behavior.| Standard wipe | Hard wipe | |
|---|---|---|
| Microsoft command | doWipe | doWipeProtected |
| What it does | Factory reset equivalent to Reset this PC > Remove everything | Fully cleans the internal drive and keeps retrying until complete |
| Can be interrupted | Yes — power-cycling can stop the process | No — resumes automatically after any interruption |
| If interrupted | Attempts roll-back; if roll-back fails, device may be unusable | Retries on next boot until complete |
| Risk of unbootable device | Low | Higher |
| Best for | Device reassignment, routine refresh | Lost or stolen devices, confirmed security incidents |
When to use each mode
| Scenario | Recommended mode |
|---|---|
| Device lost or stolen | Hard wipe — ensures data is erased even if the process is interrupted |
| Employee offboarding with device reassignment | Standard wipe — sufficient when you have physical access |
| Device compromised by malware | Hard wipe — guarantees a full clean even if malware interferes |
| Routine device refresh | Standard wipe — lower risk, easier recovery if something goes wrong |
Limitations
- Windows Home is not supported — remote wipe requires Windows Pro, Enterprise, or Education. See platform support.
- Wipe is irreversible — once initiated and acknowledged, it cannot be cancelled.
- BitLocker recovery key — the previous key is no longer valid after a wipe. Ensure it is backed up beforehand.