eMudhra Certificate Security Alert: What Businesses Should Know

The recent eMudhra security incident involved weak cryptographic keys associated with eight intermediate certificate authorities in its global website security infrastructure. Such weaknesses could enable fraudulent website certificates, creating risks of impersonation and interception of sensitive information. The affected certificates were revoked.

Does this affect your DSC?

eMudhra has clarified that its Indian Digital Signature Certificate (DSC) and eSign services remain unaffected. Users should therefore not assume that the signing tokens used for tax, GST or company filings have been compromised by this incident.

Practical precautions

• Keep browsers, operating systems and security software updated.
• Never bypass website certificate or browser security warnings.
• Ask your IT team or website service provider to review certificate validity and any replacement requirements.
• Keep DSC tokens under authorised custody and never share PINs or OTPs.

The incident reinforces the importance of regular technology reviews, controlled access to digital signatures and basic cybersecurity awareness within every organisation.

Krishnan Retna & Associates | Chartered Accountants