No installation. No vendor hardware. Just boot, wipe, and keep the proof.
Boot the ready-to-go tScrub appliance image from USB or PXE, place your licence alongside the script, and run it. No installation — the whole tool is one self-contained script you can inspect line by line.
Every drive is detected across NVMe, SATA, and SCSI. Each one is mapped to its strongest supported capability — crypto/block/overwrite purge, enhanced erase, or nwipe clear.
All drives are wiped in parallel with live progress. Frozen, locked, or BIOS-blocked drives are flagged immediately rather than silently reported as clean.
tScrub writes a chain-of-custody report — one row per drive with method, certification, final status, and pre/post-wipe SMART — tied to a single Chain of Custody ID. Upload it on the dashboard Reports page, then generate a Certificate of Destruction from the Certificates page.
| Field | Example |
|---|---|
| Chain of Custody ID | 48213 |
| Drive model / serial | SAMSUNG MZQL23T8HCLS-00A07 |
| Size | 3.8 TB |
| Bus / type | NVMe / SSD |
| Method | NVMe Crypto Purge |
| Certification | DESTRUCTION |
| Final status | COMPLETED |
| SMART (pre / post) | health, temp, power-on hours, wear |
nvme-cli for NVMe sanitisehdparm for ATA/SATA secure erasenwipe for SCSI/non-ATA drivessmartctl for SMART captureopenssl for report signingsedutil-cli for SED/OPAL handling (embedded)| Drive type | Method | Outcome |
|---|---|---|
| NVMe | Crypto / block / overwrite sanitise | Purge |
| SATA/ATA | Enhanced or standard security erase | Purge / Clear |
| SCSI/SAS | nwipe quick | Clear |
| Frozen / locked | — | Flagged for destruction |
If a drive is frozen, locked, or unsupported, tScrub records it with a FROZEN or BLOCKED status and a PHYS_DESTR certification instead of marking it clean. Route those drives to physical destruction and the report still shows the full chain of custody.