Download tScrub

The bootable tScrub appliance image — with a checksum and write instructions so you can confirm your download.

Bootable appliance image

A ready-to-boot USB image (BIOS + UEFI) that launches tScrub as the boot program. It bundles curl with HTTPS and CA certificates, so reports upload straight to your dashboard.

Download ISO Loading… Checksum (.sha256)

Write the image to a USB stick with dd (or Rufus in DD image mode — ISO mode can't partition the combined image). Place your .lic on the writable partition of the stick — where the licence goes, your reports follow. tScrub starts automatically on the console.

Create a bootable USB stick

Write the downloaded ISO to a 4 GB+ USB stick (its contents will be erased). Pick your operating system:

Insert a USB stick (4 GB or larger — its contents will be erased).
Open Rufus and select your device.
Boot selection: the downloaded ISO; Partition scheme: MBR for BIOS/CSM machines, GPT for pure UEFI; File system: FAT32.
Click Start. When Rufus asks, choose Write in DD Image mode — this writes the ISO byte-for-byte (equivalent to dd) so it boots correctly.

Either use the balenaEtcher GUI (flash the ISO to the stick in three clicks), or the command line:

diskutil list                          # identify your stick, e.g. /dev/disk2
diskutil unmountDisk /dev/disk2
sudo dd if=<downloaded-iso> of=/dev/rdisk2 bs=4m && sync

Use the raw device (/dev/rdisk2, not /dev/disk2) — it writes much faster.

lsblk                                   # identify the stick, e.g. /dev/sdX
sudo dd if=<downloaded-iso> of=/dev/sdX bs=4M status=progress && sync
# equivalent: sudo cp <downloaded-iso> /dev/sdX && sync

Write to the whole device (/dev/sdX), never a partition (/dev/sdX1).

Verify your download

After downloading, verify its SHA-256 checksum:

sha256sum <downloaded-file>
# → compare against the value in the .sha256 file

Every appliance needs a licence

tScrub requires a licence to run — even the free one. The free licence is self-serve and takes a minute.

Create account & get a free licence Sign in

Free licences are self-serve from your dashboard Licences page; paid tiers are issued by tScrub.

System requirements

• x86-64 machine with USB or PXE boot
• 1 GB RAM (erasure runs in parallel)
• Directly attached NVMe, SATA, or SCSI drives, plus USB-attached drives erased by software overwrite (Bus=USB in the report; no firmware-erase claim over a USB bridge)

What's included

• The self-contained tScrub appliance
• Boot-time hardware triage & grading (display, battery, CPU, RAM, firmware)
• Windows Autopilot MDM & BIOS lock detection
• Printable ITAD diagnostics report per machine
• Embedded sedutil-cli for SED/OPAL handling
• Pre/post-wipe SMART capture for every drive
• Post-erasure verification — the wipe is confirmed by reading back sample sectors
• HPA/DCO hidden-area removal — the full native capacity is sanitised, not just the visible capacity
• Chain-of-custody report + Certificate of Destruction generation
• SHA-256 checksum for verification