eMudhra Certificate Update
Originally published:
Last updated:
Following the reported eMudhra certificate authority compromise, NinjaOne has deployed agent updates removing trust in the affected certificate roots across all customer-facing environments, including Commercial and FedRAMP Moderate.
NinjaOne’s security team has not detected exploitation of this issue against NinjaOne. This update is an industry-aligned precaution in response to a third-party certificate authority compromise, not a NinjaOne security incident.
Most customers will not experience any changes. Customers using certificates that chain to the affected eMudhra roots, including emSign ECC Root CA – G3, are strongly encouraged to replace them. Agent downloads or automations connecting to sites using these certificates may fail certificate validation.
If you experience related download or installation failures, contact NinjaOne Support for assistance.
View update history
October 29, 2026 — Remediation update
Updated the notice to confirm that agent updates removing trust in the affected certificate roots have been deployed across all customer-facing environments, including Commercial and FedRAMP Moderate. Added the security team’s finding that no exploitation against NinjaOne has been detected and clarified potential certificate validation failures.
October 21, 2026 — Initial notice
NinjaOne published a notice about the eMudhra certificate authority compromise reported on October 17, 2026. The notice explained that NinjaOne was removing trust in the affected certificates within the NinjaOne agent as an industry-aligned precaution and encouraged customers using affected certificates to replace them.