Global IT Device Wiping Workflow
A zero-touch data sanitization framework deployed across the IT hubs of a global multinational. A pre-configured Blancco ISO executes a NIST 800-88 Purge, uploads its certificate, and shuts the device down — reducing technician time from 15 minutes to 2 per machine.
Successfully implemented and deployed in production at one of my employers. The framework is the standard procedure for end-of-life device sanitization across their IT hubs.
A manual process that didn't scale.
The IT hubs of a global multinational receive hundreds of end-of-life laptops and desktops each month — devices returning from leavers, lease cycles, and refresh programs. Each one had to be sanitized to NIST 800-88 Purge level before disposal, refurbishment, or redeployment, and each had to produce an audit-trail certificate.
The legacy procedure required a technician to boot Blancco from USB, click through the wizard, pick the correct workflow, wait, then manually upload the resulting certificate to the management console and confirm shutdown. Around 15 minutes of attended time per device — not the wipe itself, just the human-in-the-loop.
The goal: let a technician put a device on a desk, hit power, walk away, and trust that compliance was met.
Removing the human-in-the-loop.
~15 min attended per device
- Find and boot from a Blancco USB stick
- Manually pick the correct workflow profile
- Re-enter device asset tag and operator name
- Wait at the console for completion
- Upload the certificate to the management console
- Manually shut the device down
~2 min attended per device
- Pre-configured ISO with the correct workflow baked in
- Device boots, identifies itself, starts the wipe
- NIST 800-88 Purge runs unattended
- Certificate auto-uploads on completion
- Device auto-shuts-down when verified
- Technician only confirms physical handling
Five steps, four of them unattended.
The pieces behind a one-button workflow.
Pre-configured Blancco ISO
Custom-built ISO with the workflow XML, network config, and console credentials baked in. A technician never sees a setup dialog.
XML workflow profile
Single workflow that runs NIST 800-88 Purge across every detected drive, verifies, signs the report, and triggers post-run actions.
Certificate auto-upload
HTTPS POST to the central Blancco Management Console with the signed PDF + XML report attached and tagged to the device's asset record.
Power-off on success
The workflow only triggers shutdown on a verified-and-uploaded result. Any failure leaves the device on with a red status code on screen.
PXE boot option
The same ISO is served via PXE for IT hubs that batch-process trolleys of devices on a dedicated wipe VLAN — no USB sticks to manage.
Audit pack
Procedure docs, console field mapping, and an asset-handling checklist so the workflow holds up to internal and external audits.
Standards & environment.
| Sanitization standard | NIST SP 800-88 Rev. 1 — Purge |
| Sanitization tool | Blancco Drive Eraser (custom ISO) |
| Workflow definition | XML profile, version-controlled |
| Boot media | USB + PXE on a dedicated wipe VLAN |
| Reporting | Signed PDF + XML to Blancco Management Console |
| Drive coverage | SATA · NVMe · SAS · self-encrypting drives |
| Audit posture | Internal IT audit + external DPA review |