Check your USB folder structure. Always run the executable located inside the 64 or x64 folder if the target machine runs a 64-bit version of Windows. 5. Check for Third-Party Antivirus Interference
Reinstall or Repair FTK ImagerThe driver files (often located in the system32/drivers folder) may have been corrupted or improperly registered during installation. Uninstall FTK Imager via the Control Panel. Reboot your machine to clear out cached driver handles.
Now that we understand the "why," let's move to the "how to fix it."
Windows requires all drivers to be digitally signed by a trusted authority. In some forensic builds or older versions of FTK Imager, the driver signature may be unrecognized or expired, prompting the system to block the driver's execution for safety. Troubleshooting and Resolution Strategies
If the driver is outdated or not perfectly signed, Windows will block it. Go to Windows Settings > > Recovery . Under Advanced startup , click Restart now .
Disclaimer: Always ensure you have legal authorization to examine and mount forensic images. The above steps should only be performed on systems you own or have explicit permission to modify.
Download the latest version from the official Exterro website. Install the software using administrative rights. 4. Use the Lite (Portable) Version
To bypass this error and resume the imaging process, examiners typically employ a tiered troubleshooting approach: Administrative Privileges: Always run FTK Imager as an Administrator
If the error persists after all standard fixes, you may need to resort to advanced Windows administration.
Upon reboot, press or F7 to select Disable driver signature enforcement .