Wiping devices - Primo Documentation

Platform compatibility

macOS	Windows	Linux	iOS / iPadOS	Android
✅	✅	✅	✅	❌

How to wipe a device

Go to Devices and open the device details page.
Click Actions > Wipe.
Select the wipe mode (where applicable).
Confirm the action.

The device receives a Wipe pending status. Once acknowledged, it updates to Wiped.

macOS
Windows
Linux

On macOS, a remote wipe erases all user data and reinstalls macOS from recovery. The device is returned to factory defaults.

If the device has Activation Lock enabled, disable it first or make sure it has procedure.
For Zero Touch-enabled devices, the Mac will automatically re-enroll on first boot.
Otherwise, the employee must re-enroll manually.

Primo offers two wipe modes for Windows: Standard wipe and Hard wipe. Each maps to a different Microsoft MDM command and has different behavior.

	Standard wipe	Hard wipe
Microsoft command	`doWipe`	`doWipeProtected`
What it does	Factory reset equivalent to Reset this PC > Remove everything	Fully cleans the internal drive and keeps retrying until complete
Can be interrupted	Yes — power-cycling can stop the process	No — resumes automatically after any interruption
If interrupted	Attempts roll-back; if roll-back fails, device may be unusable	Retries on next boot until complete
Risk of unbootable device	Low	Higher
Best for	Device reassignment, routine refresh	Lost or stolen devices, confirmed security incidents

When to use each mode

Scenario	Recommended mode
Device lost or stolen	Hard wipe — ensures data is erased even if the process is interrupted
Employee offboarding with device reassignment	Standard wipe — sufficient when you have physical access
Device compromised by malware	Hard wipe — guarantees a full clean even if malware interferes
Routine device refresh	Standard wipe — lower risk, easier recovery if something goes wrong

Limitations

Windows Home is not supported — remote wipe requires Windows Pro, Enterprise, or Education. See platform support.
Wipe is irreversible — once initiated and acknowledged, it cannot be cancelled.
BitLocker recovery key — the previous key is no longer valid after a wipe. Ensure it is backed up beforehand.

​Platform compatibility

​How to wipe a device

​Related articles

Platform compatibility

How to wipe a device

Related articles