> ## Documentation Index
> Fetch the complete documentation index at: https://iru-kbee-63-enhance-rts-documentation.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Erase an Apple Device

> Remotely erase a managed Apple device from Iru Endpoint. Wipe all data and settings on Mac, iPhone, iPad, Apple TV, and visionOS devices.

<Callout icon="apple" color="#B84A7A" iconType="regular">This guide applies to Mac computers, iOS devices, iPadOS devices, tvOS devices, and visionOS devices</Callout>

### About Device Erase

You can use the **Erase Device** command on macOS, iOS, iPadOS, tvOS, and visionOS devices. This command doesn't require supervision.

For Windows devices, see [Erase a Windows Device](/en/endpoint/devices/device-actions/erase-a-windows-device). For Android devices, see [Erase an Android Device](/en/endpoint/devices/device-actions/erase-an-android-device).

### How It Works

The Erase Device command permanently removes all data and settings from a device, returning it to factory defaults. The command is delivered through the MDM framework and executes when the device is online or queued for offline devices.

<Warning>
  A locked Apple device cannot receive an Erase Device MDM command. For more information on locking a device, see our [Lock a Device](/en/endpoint/devices/device-actions/lock-a-device) support article.
</Warning>

### Erase Apple Devices

<Steps>
  <Step title="Navigate to Device Record">
    Navigate to the **Device Record** in the Iru Web App.
  </Step>

  <Step title="Open Device Action Menu">
    Open the **Device Action Menu** (ellipsis).
  </Step>

  <Step title="Select Erase Device">
    Select **Erase Device**.
  </Step>
</Steps>

After you select **Erase Device**, the confirmation dialog and erase behavior depend on the device.

<Tabs>
  <Tab title="macOS" icon="apple" iconType="brands">
    <Steps>
      <Step title="Confirm Erase">
        Type `ERASE` in the confirmation field and click **Erase Device** to send the command.
      </Step>
    </Steps>

    #### macOS Erase Behavior

    Erase behavior depends on the Mac's hardware and macOS version. The command either performs Erase All Content and Settings (EACS) or obliteration. If EACS fails, the Mac falls back to obliteration.

    | Hardware                          | macOS version         | Behavior                        |
    | --------------------------------- | --------------------- | ------------------------------- |
    | Apple silicon                     | macOS 12 or later     | EACS                            |
    | Intel with T2 Security Chip       | macOS 12 or later     | EACS                            |
    | Apple silicon                     | macOS 11 and earlier  | Obliteration without a PIN      |
    | Intel with T1 or no security chip | Any supported version | Obliteration with a 6-digit PIN |

    When obliteration uses a PIN, Iru generates a 6-digit PIN and shows it on the device record after the Mac receives the command. Erase device PINs are not supported on Mac computers with Apple silicon.

    #### EACS Requirements

    * **Bootstrap token**: EACS fails if no bootstrap token is escrowed.
    * **Iru Web App**: Use the Iru Web App rather than the local Erase Assistant.
    * **Auto Advance**: Using the Iru Web App prepares the Mac for re-enrollment with Auto Advance.

    #### Legacy Firmware Passwords

    On Intel-based Mac computers with the T2 Security Chip running macOS Monterey, Iru sends Erase All Content and Settings. If a legacy firmware password is still on the Mac, the device completely erases and requires a macOS reinstall instead of EACS.

    To keep EACS, move the Mac to a Blueprint that does not include a Recovery Password Library Item, then send the Erase Device command.
  </Tab>

  <Tab title="iOS/iPadOS" icon="mobile">
    <Steps>
      <Step title="Enable Return to Service">
        In the confirmation dialog, optionally select the **Use Return to Service** checkbox. This option is available on iPhone and iPad devices running iOS 17 or iPadOS 17 or later.
      </Step>

      <Step title="Choose a Wi-Fi profile">
        If you selected **Use Return to Service**, optionally choose a Wi-Fi profile from the dropdown. Select a profile from your Library unless the device is connected to Ethernet.
      </Step>

      <Step title="Configure Retry enrollment">
        The **Retry enrollment** checkbox is visible only on iPhone and iPad devices running iOS 27 or iPadOS 27 or later, after you select **Use Return to Service**. It is selected by default. If enrollment fails after erase, the device retries automatically, with an increasing delay of up to 5 minutes between attempts.
      </Step>

      <Step title="Confirm Erase">
        Type `ERASE` in the confirmation field and click **Erase Device** to send the command.
      </Step>
    </Steps>

    #### iOS and iPadOS Erase Behavior

    * **Erase All Content and Settings**: The device restarts and presents Setup Assistant.
    * **Not a full system restore**: The device is not updated to the latest version.
    * **eSIM preservation**: Cellular plans are automatically preserved when you erase from the Iru Web App.

    <span id="return-to-service-ios-ipados-17" />

    #### Return to Service (iOS/iPadOS 17+)

    When erasing iOS or iPadOS 17+ devices, you can select **Use Return to Service** which:

    * **Automatic setup**: Device proceeds through Setup Assistant to home screen without user intervention
    * **Auto re-enrollment**: Device automatically re-enrolls into Iru after erasure
    * **Wi-Fi configuration**: Automatically joins Wi-Fi network from selected Library Item
    * **Ethernet support**: Works with tethered Ethernet connections (kiosks) without Wi-Fi profile

    On iPhone and iPad devices running iOS 27 or iPadOS 27 or later, selecting **Use Return to Service** shows **Retry enrollment**. The option is selected by default. Deselect it if you do not want the device to retry.

    If enrollment fails after the device is erased, the device retries automatically, with an increasing delay of up to 5 minutes between attempts. **Retry enrollment** does not appear on other devices or on iOS or iPadOS versions earlier than 27.

    ##### Considerations

    <CardGroup cols={2}>
      <Card title="Activation Lock" icon="lock">
        Activation Lock must be removed before issuing a Return to Service command.
      </Card>

      <Card title="SCEP Wi-Fi profiles" icon="wifi">
        Do not select Library Items with EAP-TLS 802.1X networks with SCEP client identity.
      </Card>

      <Card title="Automated Device Enrollment" icon="mobile-screen">
        Return to Service will not work with Automated Device Enrollment that requires authentication.
      </Card>

      <Card title="Self Service apps" icon="mobile">
        Self Service apps will not automatically reinstall when erased from Iru (unlike user-initiated erases).
      </Card>

      <Card title="Retry enrollment" icon="arrows-rotate">
        **Retry enrollment** requires iOS 27 or iPadOS 27 or later on iPhone and iPad.
      </Card>
    </CardGroup>
  </Tab>

  <Tab title="tvOS/visionOS" icon="tv">
    <Steps>
      <Step title="Confirm Erase">
        Type `ERASE` in the confirmation field and click **Erase Device** to send the command.
      </Step>
    </Steps>

    #### tvOS and visionOS Erase Behavior

    * **tvOS**: Initiates a Reset. The device reboots and presents Setup Assistant.
    * **visionOS**: Initiates Erase All Contents and Settings.
  </Tab>
</Tabs>

### Apple Device Considerations

<CardGroup cols={2}>
  <Card title="Supervision not required" icon="unlock">
    Erase commands work on both supervised and unsupervised devices.
  </Card>

  <Card title="Immediate execution" icon="bolt">
    Commands are sent through MDM and execute when the device is online.
  </Card>

  <Card title="Data recovery" icon="triangle-exclamation">
    All data is permanently deleted and cannot be recovered.
  </Card>

  <Card title="eSIM preservation" icon="sim-card">
    eSIM-based cellular plans are automatically preserved when you erase from the Iru Web App.
  </Card>
</CardGroup>

### Erase Command Execution

Erase commands are delivered through the MDM framework.

* **Online devices**: The command runs within minutes of being sent.
* **Offline devices**: The command is queued until the device next connects to the internet.

<Warning>
  Erasing a device permanently deletes all data and cannot be undone. Back up anything you need to keep before you proceed.
</Warning>

### Related Articles

<CardGroup cols={2}>
  <Card title="Erase a Windows Device" icon="microsoft" iconType="brands" href="/en/endpoint/devices/device-actions/erase-a-windows-device">
    Remotely wipe a Windows device with Local, Cloud, or Protected erase
  </Card>

  <Card title="Erase an Android Device" icon="android" iconType="brands" href="/en/endpoint/devices/device-actions/erase-an-android-device">
    Factory reset a managed Android device, including optional external storage and eSIM erase
  </Card>

  <Card title="Lock a Device" icon="lock" href="/en/endpoint/devices/device-actions/lock-a-device">
    Remotely lock a managed device and optionally display a message on the lock screen
  </Card>

  <Card title="Enable Lost Mode" icon="location-dot" href="/en/endpoint/devices/device-actions/enable-lost-mode">
    Activate Lost Mode on managed iOS and iPadOS devices to lock the device and track its location
  </Card>

  <Card title="Deleting a Device Record and Uninstalling Iru Endpoint" icon="trash" href="/en/endpoint/devices/device-record-management/deleting-a-device-record-and-uninstalling-iru-endpoint">
    Delete device records and uninstall Iru Endpoint when preparing devices for reassignment or removal
  </Card>

  <Card title="Self Service for iOS, iPadOS, and visionOS" icon="mobile" href="/en/endpoint/settings/self-service/self-service-for-ios-ipados-and-visionos">
    Configure Return to Service and other Self Service options for iOS, iPadOS, and visionOS
  </Card>
</CardGroup>