This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.
: FTK Imager drivers may fail on ARM-based Windows (e.g., Apple M-series chips running Parallels/VMware). The application is often designed for x86/x64 architectures and may not have compatible drivers for ARM virtualization engines.
[FTK Imager Execution] │ ├──► Failure 1: Windows Kernel Block (Driver Signature Enforcement / HVCI) ├──► Failure 2: Lacking Local Administrator Rights ├──► Failure 3: Missing Visual C++ & MFC DLL Files (Portable USB setups) └──► Failure 4: Corrupt EldoS Virtual Storage Driver Registry Keys ftk imager could not start driver new
If all else fails and your forensic workflow doesn't require the full installation features, consider using FTK Imager Lite. This is a portable version that, depending on the version and environment, may not require the same kernel-level driver installation, bypassing the issue entirely. While it offers slightly reduced functionality compared to the full installed version, it is a viable alternative when administrative obstacles make the full version unusable.
If a previous FTK driver failed to unload, Windows may refuse to start a new one. This public link is valid for 7 days
Below are the most effective methods to resolve this issue and get your forensic imaging back on track. 1. Disable Windows Memory Integrity (Core Isolation)
If you are running a portable version or an older deployment (such as FTK Imager Lite 3.1.x) and the certificate is blocked, running it strictly through an administrative shell forces the execution: Can’t copy the link right now
The error message "FTK Imager could not start driver new" typically occurs when a user attempts to launch FTK Imager or create a new forensic image. The error message indicates that the tool is unable to start a required driver, which is necessary for the imaging process.