14.2. Known Limitations of MetaDefender Kiosk

Handling Multiple Devices

MetaDefender Kiosk does not allow multiple devices to be processed at the same time.
Each device must be inserted independently.

Non-Windows Partitions

MetaDefender Kiosk does not support scanning partitions that cannot be mounted to volumes in Windows (e.g. Linux/Mac) by default.
Installing solutions by Paragon Software will allow Kiosk to process some filesystems not typically usable on Windows:
HFS+ for Windows by Paragon Software is necessary for processing HFS Plus and HFSX file systems
Linux File Systems for Windows by Paragon Software is necessary for processing ext2/3/4 file systems
Wiping non-Windows partitions is not currently supported.

USB Hubs

If a USB hub with multiple USB drives is inserted into a MetaDefender Kiosk system for processing, Kiosk will only scan the first device reported to Windows.
This is not guaranteed to be the same device each time the USB hub is inserted.
OPSWAT does not recommend connecting drives to MetaDefender Kiosk through a USB hub.

Self-Extracting Archives

The only self-extracting archives that are fully supported to be scanned as archives are ones created by 7-zip and WinRAR.
Self-extracting archives created using other technologies may be recognized and scanned as archives but OPSWAT does not guarantee that this will be possible.

Private or encrypted partitions

If a device has a private, or encrypted partition, MetaDefender Kiosk may not be able to read it.
Encrypted drives can be scanned as described in 9.3. Unlocking Encrypted Devices.
Non-primary encrypted partitions can be blocked in the MetaDefender Kiosk Management Console.
If a drive does not have any readable partitions, you can use MetaDefender Kiosk’s wipe functionality to clean the drive and ensure that there are no hidden partitions.
Refer to the Advanced Options section of 8.3. Configuring Global Kiosk Settings for additional information.


If UAC is not disabled MetaDefender Kiosk's watchdog functionality may not work as expected.

Other Known Issues

  • All external USB drives, such as SD card readers, floppy disk drives, and CD ROM drives, must be inserted before MetaDefender Kiosk is started.

  • Windows User Accounts (domain or local) can be assigned to multiple workflow profiles and only one of the profiles will be used.

  • For certain encrypted devices (e.g. Kanguru, Ironkey and Kingston), unlocking may fail even with the correct password if a user interacts with the Kiosk UI during the process of unlocking.

  • McAfee & BitLocker encrypted drives are not supported for the wipe functionality.

  • Downgrading from 4.1.x will require to reactivate the license.