The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. To know more about the incident, click here.

An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service.

If any service consumed as a client by SDP application ( mail, custom scripts, integration,etc) SDP will trust it's certificate since the trust store contains the compromised  certificate and it will work. If the consumed service was indeed compromised we would still trust it causing potential security vulnerability that could be exploited.

   1. Download the file for your environment.

    Linux/Mac/other unix containers : https://docs.azul.com/assets/2026-10/emudhra-block-unix.certs

    Windows : https://docs.azul.com/assets/2026-10/emudhra-block-windows.certs

   2. Go to <SDP_HOME>\jre\lib\security directory. You'll find either blocked.certs (newer versions with jre11+) or blacklisted.certs ( jre 8 version).

    3. Backup the <SDP_HOME>\jre\lib\security\blocked.certs file as blocked.bak-emudhra.

    4. Copy-paste and replace the downloaded file as <SDP_HOME>\jre\lib\security\blocked.certs.

 

    5. Restart the application service.

References Links: