> Source: [sk109293](https://support.checkpoint.com/results/sk/sk109293)

# sk109293 - Unable to format USB drives with Rufus

| Property | Value |
|----------|-------|
| Solution ID | sk109293 |
| Date Created | 2015-12-26 |
| Last Modified | 2024-05-14 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Windows |

## Symptoms

- "Undetermined error while formatting" error when formatting a USB drive with Rufus, a freeware utility that helps format and create bootable USB flash drives, such as USB keys/pendrives, memory sticks, etc.

## Solution

This is an expected behavior.

Endpoint Security blocks a volume right after it is added to the system to check it for the signature and unauthorized files. This is the Media Scan (Authorization) feature.

*Rufus* utility remounts the media several times and fails to continue because the newly mounted volume is blocked.

There are different options to resolve the problem:

1. Exempt process from Media encryption protection (Available in E87.30 and up).
2. Disabling the Media Scan feature. This option reduces security and therefore is not recommended.
3. Use the *Windows Default Formatting Tool* that does not remount the media so frequently.

#### Exempt process from Media encryption protection

In E87.30 we have redesign Authorization scanning feature, after this change you have the capability to configure exception from the authorization. Meaning that you can exempt certain processes from Media Encryption protection allowing it to read/write any data to removeable media. In order to only allow this specific process we also verify that it has a trusted signature (signed binary) and if you configure full path to binary it's also validated.  

Registry key:  
Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\WOW6432Node\\CheckPoint\\Endpoint Security\\Data Loss Prevention  
Multi String value (REG_MULTI_SZ):  
ExemptSignedProcess= rufus-3.22.exe  

Registry keys in Media Encryption is protected so in order to add/modify value you need to disable Self Protection with Uninstall password or use Compliance blade to add registry values. You also need to restart system in order to activate exception.  
**Note:** By configuring this exception you allow this process to write any data, also data otherwise considered as business data, but written files will still be audited.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content