Serial number capture is the step where you record the unique identifier of every device you retire and tie it to a disposition record: where the asset went, what happened to its data, and who signed for it. Done well, it is the thread an auditor pulls to confirm that a laptop on your books is the same laptop that was sanitized or destroyed. Done badly, it leaves you with a certificate that lists quantities but cannot prove anything about a specific drive.
This guide is for IT managers, facility teams and asset owners who are about to retire hardware. It covers how to collect serials accurately, when barcodes or RFID make sense, how to label and hand over assets, and what a defensible record looks like.
TL;DR
- Capture the serial number, manufacturer, model and your own asset tag for every device, then map each one to a sanitization status: cleared, purged or destroyed.
- Automate capture with barcode scanning where you can. Manual typing is the biggest source of errors.
- Barcodes suit most disposal projects. RFID pays off only for large, high-value, repeated volumes.
- Label assets before they leave your control and keep a signed transfer record that lists every serial.
- Reconcile the list at pickup, at receipt and against the final certificate. Any mismatch should be resolved in writing.
Table of Contents
- What serial number capture means in practice
- Why the serial number is the anchor of your audit trail
- Tie each serial to a sanitization status
- Hard drive serial number tracking
- How to pull serial numbers without typing them
- Barcode vs. RFID for retirement projects
- Retired asset labeling and chain of custody
- Using serial records for inventory control
- A reconciliation routine that catches problems
- Chromebooks and other devices that hide their storage
- Perspective: what we see from the processing side
- Get a serial-level record with your next retirement project
- FAQ
- Sources
What serial number capture means in practice
In warehouse and ERP software, capture is a defined step. Microsoft’s documentation for Dynamics 365 explains that serial numbers can be captured at specific process stages such as receiving, picking or packing, so each unit has a traceable history. That is the same idea we apply at the other end of the lifecycle: the asset has a record when it arrives, and it should have a record when it leaves.
For retirement projects, capture means four things:
- Identify the device: manufacturer, model, serial number and your internal asset tag.
- Record its condition and the date it left your custody.
- Link each serial to what happened to its storage: wiped, purged or physically destroyed.
- Prove it with a document that someone outside your team can check.
The EPA’s guidance on preparing federal electronics for recycling points the same way. It asks for the manufacturer, model and serial number, along with the equipment’s condition and the date of transfer. Federal agencies are the audience, but the checklist works for any organization.
Why the serial number is the anchor of your audit trail
Quantity counts do not survive scrutiny. “Forty laptops and twelve servers” tells an auditor nothing about which forty or which twelve. A serial number is the one identifier that is printed on the device by the manufacturer, stays with it, and can be matched to purchase records, warranty data and your configuration database.
Three situations show why this matters:
- A data incident. A drive turns up somewhere it should not be. With serials mapped to destruction records, you can show within minutes whether it came from you and whether it was already destroyed.
- An audit. Reviewers sample a handful of assets and ask for evidence. If each sample traces from asset register to pickup to certificate, the review ends quickly. If not, it widens.
- A lost-asset question. Finance wants to know why 15 assets disappeared from the books. Serial-level records separate disposed assets from missing ones.
The same logic governs evidence handling. Forensic guidance on chain of custody documentation calls for a unique identifier, names and signatures of those involved, and dates and times for each handover. The subject is different, but the principle carries over: an unbroken, signed sequence is what makes a record believable.
Tie each serial to a sanitization status
A list of serial numbers is only half a record. The other half is what happened to the data. The EPA’s guidance treats tracking and media sanitization as connected work, and NIST says the same in its sanitization standard.
NIST SP 800-88 Rev. 1 recommends involving property management officials in documenting the sanitization process so that equipment accountability and inventory control are maintained. It also includes a sample validation form in its appendices. The newer initial public draft of Revision 2 (a draft, not yet final guidance, so check its status before relying on it) describes a certificate that records at least the manufacturer, model, serial number and any organization-assigned property number. It also notes that media often carry barcodes for model and serial number, so the person performing sanitization can scan each one into a tracking application as it is processed.
That gives you a simple model for your own records. For each device, store:
| Field | Example | Why it matters |
|---|---|---|
| Asset tag | IT-004217 | Links to your asset register |
| Manufacturer and model | Vendor, model name | Identifies the device type |
| Device serial | From label or BIOS | Primary identifier |
| Drive serial(s) | One per storage device | Data lives on the drive, not the chassis |
| Sanitization status | Cleared, purged or destroyed | The compliance answer |
| Method and date | Shredded, on-site, date | Defensible timeline |
| Handler and witness | Names, signatures | Accountability |
| Custody transfer | Date, receiver | Chain of custody |
Notice the drive serial row. A laptop serial does not tell you which drive was inside when it was destroyed. If you swap drives during a refresh, capture both.
Hard drive serial number tracking
Drives deserve their own line in the record, because the drive is what holds the data and often travels separately from the machine.
- Pulled drives. If drives are removed before the chassis is recycled, record the drive serial and the host asset tag it came from.
- Servers and arrays. One server can hold a dozen drives. Capture each one, and note the slot or bay if you track it.
- Self-encrypting and SSD media. Record the type. The sanitization method differs and so does the evidence you will want.
- Printers and copiers. Multifunction devices often carry internal drives that nobody thinks to list. Our guide on printer hard drive disposal covers why they belong in the inventory.
If you are destroying drives, witnessed or on-site destruction lets your own staff compare the serials on the drives in front of them with the list before anything is shredded.
How to pull serial numbers without typing them
Manual transcription is where records go wrong: one transposed character and the serial no longer matches any real device. Automate wherever you can.
From the operating system
For Windows fleets, many admins still reach for the old WMIC utility, which is deprecated. Microsoft’s PowerShell documentation explains that the CIM cmdlets are the way to query WMI data now. A query such as Get-CimInstance -ClassName Win32_BIOS -Property SerialNumber returns the device serial, and you can run it across many machines and write the results to a spreadsheet. Run it before devices are collected, while they still boot.
From your management tools
Your endpoint management console, MDM or asset database already stores serials for enrolled devices. Export the list of devices flagged for retirement. This is your starting inventory, and the physical check at pickup confirms it.
From the label
For devices that do not boot, or for loose drives, read the printed label. Scan a barcode where one exists. A phone camera app or a handheld scanner is faster and more accurate than typing. Keep a photo of the label for any serial that is faded or hard to read.
What to do when a serial is unreadable
Do not guess. Mark the line “serial not legible,” attach your own unique tag, photograph the device, and record the tag. The record stays honest and the item stays traceable.
Barcode vs. RFID for retirement projects
Both technologies are used to capture identifiers, and they suit different jobs. A comparison from Nordic ID notes that barcodes need a line of sight to each item, while RFID readers can read many tags at once from a distance, with trouble around metal and liquids. GS1 US describes RFID as using radio waves to transmit data automatically to a reader, which suits tracking at scale.
| Factor | Barcode | RFID |
|---|---|---|
| Cost per label | Very low | Higher (tag plus readers) |
| Reading | One at a time, line of sight | Many at once, no line of sight |
| Metal and liquid | Not affected | Can cause interference |
| Existing coverage | Most IT gear already has barcode labels | Only if you tagged it earlier |
| Best for | Most one-off and periodic disposal projects | Large, continuously moving, high-value inventories |
For most organizations retiring equipment, barcodes are the practical answer. The serial number is usually already printed as a barcode on the device, so you scan rather than tag. RFID makes sense when you already run it for your asset program, or when you move thousands of items through a facility and need counts in real time. Many operations use both, as the Nordic ID comparison also points out.
One caution: an RFID tag attached to a device is itself an identifier you have to retire. If the tag is on a chassis that leaves your custody, make sure the tag ID is mapped to the serial in your records.
Retired asset labeling and chain of custody
Labeling is the bridge between your register and the physical pile of equipment on a pallet.
- Tag before staging. Apply your own asset tag or a project label to each device while it is still in your building. A tag you applied is something you can verify.
- Use a project ID. Give the retirement batch a reference number and put it on the label, the manifest and the final certificate.
- Seal containers. Number the seals on bins, cages or boxes and list the seal numbers on the manifest.
- Keep the list outside the box. A manifest listing serials, tags and counts travels with the shipment, and you keep a copy.
- Sign at each handover. Pickup, receipt and completion each get a name, date and time.
What you want is a sequence in which nobody can say “it wasn’t us” or “we never got that.” Our article on the role of asset tracking in recycling operations and our guide on why to audit IT asset disposal go deeper on how auditors read these records.
Using serial records for inventory control
Serial capture is not only a compliance tool. The same records help you control consumables and stock: which units were received, which are in use, which have been retired. Cartridges, drums and other supplies can be tracked by lot or batch the same way, and a clear process for stock management and lot tracking shows how checklists and templates keep counts honest. Whatever you track, the habit is the same: one identifier per item or lot, one record, one owner.
A reconciliation routine that catches problems
Most serial problems are found, not prevented, so build checks in.
- Before pickup: compare your register export with what is physically staged. Resolve differences now.
- At pickup: count and scan against the manifest. Note anything extra or missing, with a signature.
- At receipt: the processor reconciles the manifest against what arrived.
- After processing: the certificate lists serials and methods. Compare it line by line with your original list.
- Close the loop: update your asset register so each serial shows a disposition status and certificate reference.
Keep the records for as long as your retention policy and any applicable regulation require. The right period depends on your industry and state, so confirm it with your compliance or legal team.
Chromebooks and other devices that hide their storage
Chromebooks, tablets and many thin laptops use soldered or small-form-factor storage that is hard to pull. The capture principle does not change: record the device serial, your asset tag and the sanitization or destruction method. Because the storage cannot be separated from the board, the device serial usually stands in for the drive serial, so note that in your record. Pick the sanitization method according to the sensitivity of the data, following the categories in NIST’s guidance, and ask for evidence that names each device, not just a total.
Perspective: what we see from the processing side
We see the same pattern again and again: organizations spend effort on the destruction itself and very little on the list that proves it. The strongest customers treat the serial list as the primary deliverable. They export it from their asset system, they check it at the dock, and they expect it back on the certificate with a status next to every line.
Our view is simple. A certificate that gives only a weight or a unit count is a receipt. A certificate that names each serial and each outcome is evidence. When we handle on-site destruction, including projects with 50 or more hard drives, we think the most useful thing we can leave behind is a record you can hand to an auditor without explaining it. We provide receipts and certificates for compliance needs, and we encourage customers to send their serial list ahead of time so reconciliation is quick and mismatches surface early rather than at year-end.
If you take one habit from this guide, make it this: never let a device leave without a serial on a list, and never accept a certificate that does not match that list.
— Keith
Get a serial-level record with your next retirement project
If you are retiring computers, servers, drives or other equipment, we can handle pickup, on-site data destruction, hard drive destruction and recycling, with receipts and certificates for your compliance file. We also offer IT asset recovery with upfront payment for equipment that still has value. Send us your serial list and request a free quote and we will plan the project around it.
FAQ
Is a serial number enough to prove a drive was destroyed?
No. The serial identifies the device, but you also need the method, the date, who performed it and who witnessed it. Pair each serial with a status of cleared, purged or destroyed, and keep the signed certificate with your records.
Should we use barcode or RFID to track retired assets?
For most disposal projects, barcode scanning is enough, because serials are usually already printed in barcode form on the device. RFID is worth it if you already use it across your asset program or move very large volumes. Using both is common.
What should a chain of custody record include?
At minimum, a unique identifier for each item, the names and signatures of everyone who handled it, and the date and time of each transfer. For IT assets, add the manufacturer, model, condition and sanitization status, in line with EPA guidance on preparing electronics for recycling.
How do I get a computer’s serial number without WMIC?
Use PowerShell’s CIM cmdlets. The command Get-CimInstance -ClassName Win32_BIOS -Property SerialNumber returns the BIOS serial number, and it can be run against many computers at once. For machines that will not boot, read the printed label instead.
Sources
- Serial number capturing, Dynamics 365 Supply Chain Management (Microsoft Learn)
- Preparing to Recycle Used Federal Electronic Equipment (EPA)
- Chain of Custody, StatPearls (NCBI Bookshelf)
- NIST SP 800-88 Rev. 1, Guidelines for Media Sanitization
- NIST SP 800-88 Rev. 2 initial public draft
- Working with WMI and CIM cmdlets (Microsoft Learn)
- RFID vs. barcode (Nordic ID)
- Tracking Assets and Products Using RFID (GS1 US)