On October 20, 2026, the private keys of eight eMudhra intermediate CA certificates were compromised. These certificates chain to root certificates trusted by the Mozilla, Microsoft, Apple, and Chrome root programs, as well as numerous downstream trust stores.
The affected certificates have been removed from the Stormshield SNS trust list. The update was performed the same day as the disclosure. The firewall automatically checks for updates every three hours. However, you can also perform the update manually using the following CLI commands:
- autoupdate -f -t RootCertificates -v
- nrestart asqd
- nrestart tproxyd
You can then check that the following certificates have been removed from the folder /data/RootCertificates/2/Download
- 14bc7599.0
- 406c9bb1.0
- 4b718d9b.0
- 0fb82cd8.0