Release Notes

MetaDefender Kiosk 4.8.1
19 March2026 (Kiosk 4.8.1)
New Features
Encrypt USB with BitLocker when retrieving files	When files are retrieved to external USB media, Administrator can configure Kiosk to automatically encrypt the target USB device with BitLocker. This helps ensure that exported data remains protected when removed from the Kiosk environment.
Support local Kiosk user accounts for media scanning	Kiosk now supports local Kiosk user accounts. Administrators can create or import users directly in the Kiosk management console, and those accounts can then be used to sign in on the Kiosk UI for media scanning. This allows environments without Active Directory integration to control which individual users are allowed to operate the Kiosk while still keeping a clear audit trail of who performed each scan.
Kiosk supports cloning existing workflows	Administrators can now quickly clone an existing workflow instead of creating a new one from scratch. This makes it easier to roll out variations of a proven configuration (for different sites or user groups) while keeping settings consistent and reducing configuration errors.
Disable Kiosk scanning when AV definition is outdated	When configured, Kiosk can now prevent new scans from starting when the underlying AV definitions are too old, helping ensure that scans are performed only with up-to-date protection. Administrators can use this behavior to enforce security best practices.
Support change Loading Logo via Customize Theme	Kiosk now allows customization of the loading logo through the theme configuration. This enhancement enables organizations to better align Kiosk visuals with corporate branding.
Pre-defined suggestion for email input when sending to specific recipients	The email dialog has been improved to make sending reports faster and less error‑prone. Kiosk now supports predefined email addresses and domains, so users receive automatic suggestions and can simply click to complete the address. In addition, reports can now be sent to multiple recipients in a single action, improving usability for teams and shared distribution lists.
Retrieve Kiosk support package via My OPSWAT (CM10)	Administrators can now remotely collect and download Kiosk support packages directly from OPSWAT Central Management 10. This simplifies troubleshooting and reduces the need for on-site manual log collection.
Enhancement
Show extracted archive details while scanning	When Kiosk scans archive files, the result view now provides clearer details about extracted content, including the number of files and their status. This gives administrators and users better visibility into what was actually scanned inside each archive.
Display toolbar icons when Welcome screen is disabled	When the Welcome screen is disabled, toolbar icons are now still displayed as expected. This ensures consistent access to key functions regardless of the chosen startup configuration.
Configure custom screensaver remotely via MyOPSWAT	Administrators can now configure and deploy a custom Kiosk screen saver remotely from My OPSWAT. This enables consistent branding across distributed Kiosks without requiring manual on-site updates.
Back button to re-select the workflow	Kiosk now provides a Back option that allows users to reselect the desired workflow without restarting the entire process. This improves usability for environments with multiple workflows and reduces user error when an incorrect workflow is chosen.
Support DataLocker H350 encrypted USB drive	Kiosk now supports the DataLocker H350 encrypted USB drive, including device recognition and secure access during scanning and file transfer workflows. This expands coverage for customers standardizing on DataLocker hardware.
Enhance Auto Upgrade of Kiosk application	The automatic upgrade capability for the Kiosk application has been enhanced. Including bug fixes and adds support for upgrading from a folder source, providing more flexibility for controlled or offline environments.
Improved "Invalid Core Setup" messages for troubleshooting	When Kiosk detects an invalid MetaDefender Core configuration, it now displays more detailed troubleshooting information to help administrators quickly identify and correct misconfiguration issues.
Exclude default language setting in My OPSWAT group policy settings	The default language configuration is now excluded from My OPSWAT group policy settings, reducing the risk of unintentionally overriding language preferences when applying or updating the group policy
Improved media detection stability	Kiosk now includes multiple enhancements to ensure reliable media detection: Improved detection reliability for removable media with multiple partitions, including standard FAT12/16/32 volumes. Improved handling of Windows auto‑mount to reduce cases where media is not detected on first insertion. Adjusted device mounting and retry logic to better handle slow or delayed volume initialization. Improved stability of media event handling to avoid long‑running operations blocking new device detection. Improved integration with MDDrive to prevent sessions from hanging and requiring a full kiosk reboot. Enhanced iPhone scan handling to improve behavior when a device disconnects during scanning. Improved robustness of media detection to reduce cases where users must restart the Kiosk application or reboot the OS.
Fixed Bugs
Resolved MD Drive integration issue when Welcome screen is disabled	Fixed an issue where MetaDefender Drive integration could stop working if the Kiosk Welcome screen was disabled. With this fix, MD Drive workflows operate correctly regardless of whether the Welcome screen is enabled or disabled.
Fixed failback to primary MetaDefender Core when it becomes available	Addressed a problem where Kiosk continued sending scans to the secondary MetaDefender Core even after the primary Core became available again. The Kiosk now automatically fails back to the primary Core once it is online, without requiring a manual settings update.
Corrected “Full Media Scanned/Processed” indicators for USB full scans	Fixed an issue where scan reports incorrectly showed Full Media Scanned: NO and Full Media Processed: NO even when users performed a full scan of USB media. The full‑media status flags now accurately reflect when USB devices have been fully scanned and processed.
Known issues
Incorrect scan status for Virtual Disk contents	When a USB with a virtual disk is processed using “Process All,” the report still shows that files inside the virtual disk were not fully scanned.
Kiosk fails to copy files from DataLocker DL4 to DataLocker H350	Kiosk will fail to copy files from DataLocker DL4 device to DataLocker H350 device.