Public disclosure of compromised intermediate certificate authority keys (eMudhra) affecting certificate trust across the internet — Jamf Incident Timeline & Status

Public disclosure of compromised intermediate certificate authority keys (eMudhra) affecting certificate trust across the internet

Started

Oct 21, 2:05 PM UTC

Resolved

Oct 21, 8:14 PM UTC

Duration

6 hrs 8 min

Resolvedminor impactVendor link

Update timeline

ResolvedOct 21, 8:14 PM

This incident has been resolved.

InvestigatingOct 21, 4:20 PM

All Jamf products and services remain operational. Actions: Jamf engineering and security teams continue deploying mitigations to certificate trust configurations where applicable. Customer Actions: No customer action required at this time

InvestigatingOct 21, 2:05 PM

We are currently investigating the impact of the eMudhra CA keys vulnerability with regard to all Jamf Products Jamf engineering and security teams are prioritizing the services customers depend on most and applying mitigations, including updates to certificate trust configurations where applicable. At this time there is no loss of functionality or degradation across any Jamf products