Auto-Upgrade Kiosk Hardened Image
What is Kiosk Hardened Image Upgrade
The Kiosk Hardened Image is a customized Windows OS bundled with pre-installed MetaDefender Kiosk and Core. It includes built-in security hardening and is regularly updated with the latest Windows patches and software versions. Upgrading to the latest image is recommended for optimal security, stability, and features.
Starting with Kiosk Hardened Image version 25.01.0 (bundled with Kiosk 4.7.3), administrators can now automatically upgrade the Hardened Image directly from the Kiosk Web Management Console (WebMC).
Before performing the upgrade, it is highly recommended to:
- Upgrade in-place the Kiosk application in place to the latest version to take advantage of the new features included
- Review the limitations of the current Kiosk Hardened Image upgrade process
- Release notes of the latest Kiosk Hardened Image
- Consider to backup the existing Kiosk and Core configurations
The Kiosk Hardened Image is released monthly and includes the latest Windows patches, BIOS updates, drivers, as well as updated versions of Kiosk and Core. Please refer to the release notes for details on new features and improvements
Upgrade Settings
To perform the upgrade, from Kiosk WebMC, navigate to Configuration, select System Upgrade.
- Upgrade Options:
- Auto upgrade: If this option is disabled, the system will not perform any upgrades.
- Internet: The Kiosk system verifies and downloads the version of Kiosk Hardened Image from My OPWAT.
- Folder: Administrators can specify a folder path containing the Kiosk Hardened Image files. The system will automatically download and use these files for the upgrade.
- Please refer to Manual Upgrade of Kiosk Hardened Image
- The Kiosk Hardened Image can also be downloaded directly from My OPSWAT. The size of the image files would be about 10 GBs, please ensure the internet speed and storage space are adequate.
- If a network source is used as Upgrade option, please ensure the Windows account used to log in to the Kiosk system has the necessary permissions to access the network resource. For example, If Kiosk uses a domain account for Windows logon, this account must have access to the assigned network folder.
Upgrade schedule: Specify the local system time when the Kiosk system should download and install the upgrade image.
- Additionally, administrators can initiate the upgrade immediately by clicking on Upgrade Now
Post action: If a post-upgrade batch script is provided, the Kiosk system will automatically execute this script after the upgrade is successfully completed.
Windows account password:
- To restore existing Windows accounts and their associated passwords on the Kiosk system, administrators must provide the account password in this field. The account will automatically be enabled with autologon.
- If this field left empty, Kiosk will not restore existing accounts and will instead apply default Kiosk credential
Configuration backup and restore
During the upgrade, the Kiosk system automatically backups and restores essential system and product settings (for more information, please refer to this link)
System settings:
- Computer host name
- Windows local accounts (if the password is provided)
- System hosts file (C:\Windows\System32\drivers\etc\hosts)
- Trusted Windows certificates in Certificate Microsoft Management Console (MMC)
- Network settings (DHCP/Static, Wi-Fi network, IP Address)
Product configurations
- Kiosk and Core licenses
- Kiosk and Core configurations
- Kiosk session history
- Quarantine files from MD Core
- Kiosk User Management settings
- Secure connection (HTTPS) certificate and setting
- Kiosk branding and logo customization
- Instance management on My OPSWAT (if applicable)
To check the limitations of the Kiosk Hardened Image, please refer to
- Known limitations
- Limitations of previous versions - Archive release notes
Upgrade process overview
- Initiation: The upgrade begins either when the scheduled time is reached or when the "Upgrade Now" button is clicked. The Kiosk system automatically downloads the latest version of the Kiosk Hardened Image. The download time may vary depending on the Internet speed.
- Backup and preparation: The Kiosk system backs up the required configurations and settings before proceeding. Administrators will see a warning message indicating that the system will restart several times to perform the upgrade.
- Upgrade execution: The system prepares the environment and a separate partition will be created to store a snapshot of the current state. Ensure that the system has at least 40% free storage space available to accommodate the snapshot creation and upgrade process.
The cancellation of upgrading process is not yet supported in Kiosk Hardened Image 25.02.0
Error Handling and rollback
If an issue occurs during the upgrade process, Kiosk will automatically restore the system using the created snapshot to ensure continuity
From Upgrade History section, administrators can click on the rollback icon to revert to a previous version of success upgrade if desired
Troubleshooting
Please refer to Known limitations page for known issue and the workaround
