Secure Erasure & Certification: DFU Firmware-Level Wipe | BlankState

DFU firmware-level erasure for Mac and iOS. NIST SP 800-88 Rev.2 and IEEE 2883 compliant. Tamper-evident PDF certificates with SHA-256 verification.

BlankState performs DFU (Device Firmware Update) firmware restore on Apple Silicon Macs, T2 Macs, iPhone and iPad. Unlike cryptographic erasure, DFU restore wipes the storage, reinstalls firmware from Apple's signed image, and resets the Secure Enclave, eliminating data, keys, and recoverable firmware in one operation.

Published by Stabilise Ltd, Apple Premium Technical Partner, ADISA Certified (AAC281). . Written and maintained by Dustin Rhodes, Founder.

Key facts

Frequently asked questions

How does DFU erasure differ from cryptographic erasure?

Cryptographic erasure only destroys the encryption key; the encrypted data and the Secure Enclave remain on the device. BlankState performs a DFU firmware restore that wipes storage, reinstalls firmware from Apple's signed image, and resets the Secure Enclave, exceeding the NIST SP 800-88 Rev. 2 Purge definition.

Does BlankState erase the Secure Enclave?

Yes. The DFU firmware restore rebuilds the entire system from Apple's signed image, removing the biometric data and device encryption keys held in the Secure Enclave.

Is a factory reset enough for business use?

No. A factory reset produces no certificate, no post-wipe verification, and no health context, and it does not de-enrol the device from Apple Business Manager or MDM. For regulated organisations, the gap between wiping a device and proving it was wiped is a compliance risk.

Which devices can BlankState erase?

Apple Silicon Macs (M1 to M4) and Intel Macs with the T2 security chip, plus iPhone and iPad. Mac and iOS devices run in the same workflow.

What happens if an erasure fails?

Credits are only consumed on successful operations. Failed wipes cost nothing.

How many devices can be erased at once?

Up to 16 devices connected via USB-C can be processed concurrently from a single host Mac.

Trust & credentials

About the publisher

BlankState is built and maintained by Stabilise Ltd, an Apple Premium Technical Partner based in the United Kingdom. We work directly with ITAD operators, enterprise IT teams, legal and financial firms, and education institutions on Apple device end-of-life workflows. Our technical guidance is based on first-hand field experience, independent results from the ADISA Product Claims Test methodology, Apple's own Platform Security documentation, and NIST Special Publication 800-88 Rev. 2, the standard US guideline for media sanitisation. Founder and principal author: Dustin Rhodes.

BlankState at a glance

Explore BlankState

BlankState is a product of Stabilise Ltd, registered in England & Wales. Contact sales@blankstate.io.