wipedevice

gsuitemdm Cloud Function wipedevice

A cloud Function component of the gsuitemdm package that wipes a mobile device using the Admin SDK.

Please note that there are 2 different kinds of "device wipe" actions available within the G Suite Admin SDK

1. admin_account_wipe
2. admin_remote_wipe

and the type of Admin SDK wipe used by wipedevice is configurable within the gsuitemdm shared configuration as per:

"remotewipetype": "admin_account_wipe"

The wipedevice API is used by the mdmtool command line utility.

HOW-TO Configure wipedevice

wipedevice uses a .yaml file containing several environment variables the cloud function reads during app startup. These environment variables point the app to the shared master cloud function configuration and API key that are stored as Secret Manager secrets. An example .yaml file for wipedevice:

APPNAME: wipedevice
SM_APIKEY_ID: projects/12334567890/secrets/gsuitemdm_apikey
SM_CONFIG_ID: projects/12334567890/secrets/gsuitemdm_conf

HOW-TO Deploy wipedevice

$ gcloud functions deploy WipeDevice \
  --runtime go111 \
  --trigger-http \
  --env-vars-file env_wipedevice.yaml

HOW-TO Use wipedevice

API

Example expected JSON to wipe a device in the domain foo.com with IMEI 111111111111111:

{
	"action": "wipe",
	"confirm": true,
	"domain": "foo.com",
	"imei": "111111111111111",
	"key": "0123456789"
}

Note that if "confirm": true is not specified, the device will not be wiped.

Example command line using curl and the above JSON to wipe the abovementioned device:

$ curl -X POST -d \
  '{"key": "0123456789", "action": "wipe", "imei": "111111111111111", "domain": "foo.com", "confirm": true}' \
  https://us-central1-<YOURGCPPROJECTNAME>.cloudfunctions.net/WipeDevice

mdmtool

Example command line using mdmtool to wipe a device in the domain foo.com with IMEI 111111111111111:

$ mdmtool wipe -i 111111111111111 -d foo.com
WARNING: Are you sure you want to WIPE device IMEI=111111111111111 in domain foo.com? [y/n]: