Microsoft releases out‑of‑band update removing seven eMudhra root certificates (Oct 26, 2026)
Event summary
On Oct 26, 2026 Microsoft released an out‑of‑band Windows update that removes seven eMudhra-related root certificates — described as "six eMudhra G3 roots and an AAA Certificate Services cross-sign" — from the Windows trust list. Systems that apply the update will no longer trust certificates chaining to those roots by default.
CHRONOS Wire · October 27 · Alert 12
Publication details
- Published
- Updated
- Revision
- r1
- Source
- Microsoft MSRC (blog)
Cliff Notes
- Microsoft removed seven eMudhra roots via an out‑of‑band Windows update on Oct 26, 2026; inventory and replace any certificates that chain to those roots for systems that will receive the update.
U.S. Impact
U.S. Impact assessment pending.
ELI5: Plain-English Explanation
On Oct 26, 2026 Microsoft published an out‑of‑band Windows update that removes seven eMudhra root certificates from the Windows trust list so Windows will stop treating certificates chaining to those roots as trusted by default.
Why Urgent Level 4
Default trust changes take effect as systems apply the update; services still using the affected chains may become untrusted for users on updated Windows systems unless reissued.
What Changed
Microsoft released an out‑of‑band Windows update (Oct 26, 2026) that removes seven eMudhra-related root certificates — described as "six eMudhra G3 roots and an AAA Certificate Services cross-sign" — from the Windows trust list.
What Is Genuinely New
Microsoft issued an out‑of‑band Windows update on 2026-10-26 that removes seven specific eMudhra root certificates from the Windows trust list.
CHRONOS Bottom Line
Microsoft removed seven eMudhra root certificates from the Windows trust list via an out‑of‑band update on Oct 26, 2026; systems that receive the update will no longer trust certificates chaining to those roots by default.
Uncertainties / Known Unknowns
Extent and timing of deployment across managed, unmanaged, and air‑gapped systems; whether Microsoft will take further trust‑list actions affecting additional eMudhra roots or related cross‑signs.
Detailed Analysis
This is a platform trust‑list removal by Microsoft for Windows. The action removes default trust for certificates chaining to the specified eMudhra roots in Windows trust decisions once the update is applied. Organizations should inventory any services or certificates relying on those roots and plan replacements or re‑anchoring to trusted roots for systems that will receive the update.
Sources / Evidence
- 01Microsoft’s response to compromised eMudhra certificate authority keysMicrosoft MSRC (blog)2026-10-26
Follow CHRONOS ALERTS
Published alerts also appear on Instagram and Threads as @chronosalerts.