Kiosk System Requirements
Hardware requirements
MetaDefender Kiosk System Requirements
When MetaDefender Kiosk is installed on a separate system from MetaDefender Core, the following specifications are required:
- Processor: Quad-core or higher
- Memory: Minimum 4 GB RAM
- Storage: At least 10 GB available hard drive space
- Operating System: 64-bit architecture version
If MetaDefender Kiosk and Core are installed on the same system, please refer to the MetaDefender Core user guide for detailed system requirements.
Software requirements
Supported File Systems
- Windows
- FAT16/ FAT32/ exFAT
- Ext2/3/4
- HFS Plus
- HFSX
- APFS
Operating System
64-bit architecture required
Windows:
- Windows 7 (with Service Pack 1, KB2533623, and KB3033929) (deprecated)
- Windows 8 (deprecated)
- Windows 8.1 (deprecated)
- Windows 10 (recommended version 21H2 or higher)
- Windows 11 (recommended version 24H2 or higher)
Windows Installer 4.5 or higher
Dependencies
- OPSWAT MetaDefender Core: Required for multi-scanning capabilities. Can be installed on the same or a separate system. Refer to the MetaDefender Core user guide for specific requirements.
Note: Maintaining the operating system with the latest updates is strongly recommended.
Security requirements
The system administrators are required to make a Kiosk machine more secure by following these actions:
- Set a BIOS password
- Enable TPM and Secure Boot in the Windows system
- Turn on BitLocker encryption
Kiosk is expected to be operated on a local, physical system. Operating a Kiosk in a remote desktop session is not supported. It is recommended to disable RDP access to the kiosk system if it is not required for your deployment environment.
Installed third party components
The following third party components are installed as part of the MetaDefender Kiosk installation process. These components may be shared with other applications.
All of these are required by MetaDefender Kiosk. Uninstalling them may result in unexpected behavior of other applications.
| Component | Details |
|---|---|
| Microsoft Visual C++ redistributable |
|
| Paragon Software (optional) |
|
Installed services
The following list are services that MetaDefender Kiosk depends on for operating.
| Product Services | Additional Information |
|---|---|
| MetadefenderSVC | |
| ometascan, ometascan-node, ometascan-postgresql (Core v4.19+) | If Core is installed locally to Kiosk |
| Third Party Services | |
| ParagonAPFSMounter | If APFS for Windows by Paragon Software is installed |
| apmwinsrv | If HFS+ for Windows by Paragon Software is installed |
| ParagonLinuxFSMounter | If Linux File Systems for Windows by Paragon Software is installed |
| Windows Services | |
| Winmgmt | This service has dependencies on other Windows services |
Required available ports
The following ports need to be available for the machine MetaDefender Kiosk is installed on.
| Component/service | Port |
|---|---|
| MetaDefender Kiosk Web Console | 8009 |
| MongoDB | 27019 |
Application directories and registry key
Installation location
Installation directory can be configured.
Default location is C:\Program Files (x86)\OPSWAT\Metadefender Kiosk\Client.
Application directory
The %ProgramData%\OPSWAT directory is used for storing MetaDefender Kiosk application data.
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\OPSWAT is the registry key for all OPSWAT products.
Real Time Protection \ Antivirus exclusion requirements
Real Time Protection (RTP) from any 3rd party software may adversely affect Kiosk operation as it will likely interfere with Kiosk's handling of media. It is recommended to either fully disable RTP or create exclusions to allow Kiosk to function and scan media without any interruptions.
Disabling Real Time Protection (RTP)
If setting up hardware not provided by OPSWAT, or your license key is not including Windows Defender as a part or MultiScan engine, ensure that Windows Defender Real Time Protection is disabled:
- Under
Virus & threat protection settingsdisableTamper Protection - Under
Local Group Policy Editor: Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Real-time Protection → Turn off real-time protection toEnabled - Apply and reboot the system
Directories exclusion settings if RTP must be on
If your policy does not allow for RTP to be disabled, it is necessary to exclude these directories:
Kiosk installation folder
C:\Program Files (x86)\OPSWAT\Metadefender Kiosk\Client
Kiosk application data folders
C:\ProgramData\OPSWAT- C:\Users<username>\AppData\Local\OPSWAT\Metadefender Kiosk
- C:\Users<username>\AppData\Roaming\metadefender-kiosk
- C:\Users<username>\AppData\Roaming\metadefender-kiosk-electron
Paragon software folder
- C:\Program Files (x86)\Paragon Software
any known drive letters media will be mounted to when inserted
For Core, please refer to this knowledge base article on RTP exclusions.
These steps may need to be redone after a Windows update since it may cause the Windows Defender settings to be reset.
Programs not removed during uninstall
The Microsoft redistributables are not removed when MetaDefender Kiosk is uninstalled.