Wiping Devices

Before you begin

Review the following restrictions:

  • You cannot fully wipe devices where SOTI MobiControl manages only part of the system (for example, Android devices using managed profiles).

  • You cannot wipe supervised iOS devices until you disable or bypass the Activation Lock.

Important: Avoid using the wipe action on devices with OEMConfig apps that restrict factory reset capabilities. Doing so may cause the reset to fail.

About this task

Use the wipe action in SOTI MobiControl to restore devices to factory default settings. Wiped devices remain enrolled in SOTI MobiControl unless otherwise removed.

Procedure

  1. In the Devices view on the SOTI MobiControl web console, select the devices you want to wipe.
  2. In the Device Actions menu bar, select More > Wipe.
  3. In the Wipe dialog box, enable the appropriate options for your use case.
    Attention: Options that are incompatible with the selected devices are automatically disabled. Review any warnings highlighted in the Wipe dialog box before proceeding.
    Wipe dialog options
    Attempt revocation of externally issued client certificates Invalidates externally issued certificates before the wipe.
    Bypass factory reset protection Prevents the need for a username and password entry after a wipe.

    Supported by Android Enterprise.
    Wipe External Storage Includes external storage in the wipe process.

    Supported by Samsung Knox, Android Enterprise, and Android Plus.
    Corporate Personal Device Reset Factory resets a Corporate Owned, Personally Enabled (COPE) device.

    Supported by Android OS 11 or later.
    Wipe Type
    Choose how to wipe the device:
    • Protected Wipe—Remote wipe the device and fully clean the internal drive. Power cycling the device does not circumvent this wipe.

      Supported from Windows 10 Desktop 1703 and later.

    • Wipe—Factory reset that deletes all user data.
    • Wipe and Persist Provisioned Data—Factory reset while preserving provisioning data like PPKGs.

      Supported from Windows 10 Desktop and Mobile devices.

    • Wipe and Persist User Data—Factory reset with user data restoration.

      Supported from Windows 10 Desktop 1709 and later.
    Preserve Data Plan Retains the device’s active data plan.

    Supported by iOS devices.

    Return to Service

    Automatically reconnects the device to Wi-Fi and completes the setup flow after a wipe.

    Supported by iOS 17 and later and Shared iPads.

    Requirements:

    1. Device must be enrolled using Automated Device Enrollment (ADE) (formerly known as Device Enrollment Program (DEP)).
    2. Activation Lock must be disabled (for iOS). See Disabling/Enabling Activation Lock.
    Select to choose an existing Wi-Fi (iOS) profile configuration from the Available Wi-Fi Profiles. After the wipe, the device automatically connects to the selected Wi-Fi profile, returning to the specified Wi-Fi service configuration.
    Warning: Do not delete the device from SOTI MobiControl until both the Return to Service and wipe actions are complete.
    Skip Proximity Setup in Setup Assistant Skips Proximity Setup during iOS setup flow.

    Supported by iOS devices.
    PIN for Find My Enter a six-digit PIN for wiping macOS devices.
    Note: Required for macOS 10.8 or later.
    Restriction: Required for Intel-based macOS devices; not required for Apple Silicon devices.
    You cannot wipe the device when you specify keys on more than one device.
    Requires Network Tether Requires a connection to another device (for example, tablets or laptops) for network access during the wipe.

    Supported by macOS 10.8 or later.
    Erase All Content and Settings

    This option wipes devices using Erase All Content and Settings (EACS). Most options below invoke Obliterate if EACS fails.

    Choose from:
    • Default—Attempts EACS, returns an error if it fails, and does not continue.
    • Always Obliterate—Skips EACS and attempts an obliteration wipe.
    • Obliterate With Warning—Prompts for confirmation before obliteration.
    • Do Not Obliterate—(Default) Prevents the use of obliteration as a fallback.

    Supported by macOS 12.0.1 or later with Apple M1 or T2 security chip.
    Delivery Choose how to send the wipe command:
    Choose from:
    • SOTI MobiControl Device Agent—Sends the command through the device agent.
    • Platform Notification Service—Uses the platform’s native push service.

    Supported by Samsung Knox, Android Enterprise and Android Plus.
  4. If a warning message appears at the bottom of the dialog, expand it to view the list of devices that cannot be wiped and the reason why.
  5. Select Wipe to initiate the command.

Results

SOTI MobiControl sends the wipe command. Once complete, the device is restored to factory default settings and remains enrolled in SOTI MobiControl unless manually deleted.