The Secure Data Wipe feature allows you to securely erase files from the file system of Cisco APs by using the clear ap config command. This new command triggers a secure data wipe in an AP. Additionally, this feature also stores basic information about the wipeout along with the wipeout status. The data stored in the AP flash helps to verify the files erased from the AP file system, and troubleshoot issues. Use the clear ap config to view the wipeout history details.

The following files are securely erased, without scope of recovery:

• Configuration and backup configuration files

• Crash files

• Log files

• Boot variables

• Package logs

To check the output of the data wipe, run the following AP command:

Cisco-AP# show flash wipeout-log 
DATA SANITATION LOGS
Filesystem Name    :    Flash
Filesystem size    :    519 M (bytes) 
Total Files        :    95
Data Wipe Time     :    Fri Mar  8 09:50:49 UTC 2024 
Data Wipe method   :    CLEAR
Files cleared      :    92
Bytes cleared      :    5484544 (bytes)
Total Free byte    :    458846208 (bytes)
Device PID         :    C9130AXI-E           
Serial number      :    KWC233202MN  
Data Wipe Status   :    SUCCESS

Note

Data wipe for APs in Work Group Bridge mode can be done only through the mode button, which needs to be pressed for a duration of 20 to 60 seconds to remove storage content. Cisco Wave 1 APs are supported in Cisco IOS XE Amsterdam 17.3 and Cisco IOS XE Cupertino 17.9.3 and its later versions. Cisco Wave 1 APs are not supported in 17.4, 17.5, 17.6, 17.7, 17.8, 17.10 and later releases. Cisco Wave 2 APs are supported in Cisco IOS XE Dublin 17.11 and Cisco IOS XE 17.13. Cisco Wave 1 APs and Cisco Wave 2 APs are supported in Cisco IOS XE Dublin 17.12.