Download tScrub

The bootable tScrub appliance image — with a checksum and write instructions so you can confirm your download.

Bootable appliance image

A ready-to-boot USB image (BIOS + UEFI) that launches tScrub as the boot program. It bundles curl with HTTPS and CA certificates, so reports upload straight to your dashboard.

Download ISO Loading… Checksum (.sha256)

Write the image to a USB stick with dd (Rufus in ISO mode also works). Place your .lic on the USB stick — where the licence goes, your reports follow. tScrub starts automatically on the console.

Create a bootable USB stick

Write the downloaded ISO to a 4 GB+ USB stick (its contents will be erased). Pick your operating system:

Insert a USB stick (4 GB or larger — its contents will be erased).
Open Rufus and select your device.
Boot selection: the downloaded ISO; Partition scheme: MBR for BIOS/CSM machines, GPT for pure UEFI; File system: FAT32.
Click Start. When Rufus asks, choose Write in DD Image mode — this writes the ISO byte-for-byte (equivalent to dd) so it boots correctly.

Either use the balenaEtcher GUI (flash the ISO to the stick in three clicks), or the command line:

diskutil list                          # identify your stick, e.g. /dev/disk2
diskutil unmountDisk /dev/disk2
sudo dd if=<downloaded-iso> of=/dev/rdisk2 bs=4m && sync

Use the raw device (/dev/rdisk2, not /dev/disk2) — it writes much faster.

lsblk                                   # identify the stick, e.g. /dev/sdX
sudo dd if=<downloaded-iso> of=/dev/sdX bs=4M status=progress && sync
# equivalent: sudo cp <downloaded-iso> /dev/sdX && sync

Write to the whole device (/dev/sdX), never a partition (/dev/sdX1).

Verify your download

After downloading, verify its SHA-256 checksum:

sha256sum <downloaded-file>
# → compare against the value in the .sha256 file

Every appliance needs a licence

tScrub requires a licence to run — even the free one. The free licence is self-serve and takes a minute.

Create account & get a free licence Sign in

Licences are issued from your dashboard Licences page.

System requirements

• x86-64 machine with USB or PXE boot
• 1 GB RAM (erasure runs in parallel)
• Drives must not be in use by the host OS

What's included

• The self-contained tScrub appliance
• Embedded sedutil-cli for SED/OPAL handling
• Pre/post-wipe SMART capture for every drive
• Chain-of-custody report + Certificate of Destruction generation
• SHA-256 checksum for verification