Erasing and Re-enrolling a Computer

Requirements

Before sending the Erase Device command to a Mac, ensure that it is in a good state to be erased. For example, if FileVault is enabled on the Mac or if it is locked via Activation Lock, we recommend that you clear those settings before erasing it. You may also want to check to ensure that the Mac is still actively checking in with Jamf Now.

  1. Log in to Jamf Now.
  2. Send an Erase Device command to the computer, and then enter a six-digit PIN in the Unlock PIN field. For information on sending an Erase Device command, see Erasing a Device in Jamf Now.
    Important:

    Jamf Now does not store the Unlock PIN and will not be able to bypass the lock if the PIN is forgotten. We recommend saving the PIN in a secure place in case it is forgotten.

  3. When macOS is erased, the device will prompt for the PIN. Enter the PIN you set previously to unlock the device.
    Note:

    When the Mac is started up after entering the PIN, a flashing question mark folder may appear. If this happens, reinstall the macOS from recovery mode by completing the steps in How to reinstall macOS from Apple's Support website.

  4. Re-enroll the device in Jamf Now. Automated Device Enrollment is recommended, but either of the following methods can be used:
    Note:

    FileVault-enabled Mac computers cannot receive MDM commands at the login screen. The Mac must be logged in to the local account to receive and execute the Erase Device command from Jamf Now. If you do not know the password for the local account, the Recovery Key can be used to login. For more information, see If you forgot your Mac login password on Apple's Support website.