Skip to main content
This guide applies to Mac computers, iOS devices, iPadOS devices, visionOS devices, and Android devices

​
About Device Lock

The Lock Device command is available on macOS, iOS, iPadOS, visionOS, and Android. It doesn’t require supervision.
A locked device can’t receive an Erase Device MDM command. For more information on erasing a device, see Erase an Apple Device or Erase an Android Device.

​
How It Works

When you lock a device, Iru Endpoint sends an MDM command to the device to immediately secure it. The device will require a passcode to unlock, and you can optionally display a custom message on the lock screen.

​
How to Lock a Mac

1

Navigate to Device Record

Navigate to the Device Record.
2

Open Device Action Menu

Open the Device Action Menu (ellipsis) in the upper right of the device record.
3

Select Lock Device

Select Lock Device.
4

Configure Lock Message

Optionally, configure a Lock message.
5

Lock Device

Select Lock device.

​
Command Behavior

​
Command Behavior for macOS

For macOS devices, the device will be locked with an EFI/Find My PIN code. Once the device receives the command, a 6-digit PIN will automatically be generated and available on the device record.On Mac computers with Apple silicon and on Intel-based Mac computers, the device restarts and locks with the randomly generated PIN once it receives the command.

Erase an Apple Device

Send the Erase Device command from Iru Endpoint to macOS, iOS, iPadOS, tvOS, and visionOS devices, and use Return to Service to re-enroll eligible devices.

Erase an Android Device

Remotely factory reset a managed Android device from Iru Endpoint. Optionally erase external storage and eSIMs.