{"resourceId":"netapp-advisory-ntap-20261027-0001-emudhra-ca-compromise-v9-20261109","versions":[{"version":"external-0a7911c88338ab4adc7d3f9ae7cd09c703e311cbcbeff88050f2399769c40ebf","resource":{"id":"netapp-advisory-ntap-20261027-0001-emudhra-ca-compromise-v9-20261109","title":"NetApp advisory NTAP-20261027-0001 v9.0: eMudhra CA compromise leaves ONTAP 9, StorageGRID and Trident Affected with workarounds; AIDE still Investigating","organization":"NetApp Product Security","sector":"Storage infrastructure (cross-sector)","geography":"Global","publishedAt":"Initial release 2026-10-27; v9.0 last updated 2026-11-09","publicationDate":"2026-11-09","eventDate":"2026-10-18","sourceName":"NetApp Product Security","sourceLabel":"Vendor security advisory (official adv_api JSON cross-checked with rendered page)","sourceUrl":"https://security.netapp.com/advisory/ntap-20261027-0001","evidenceClass":"vendor-claim","outcomeClass":"cautionary","topics":["data-security","infrastructure"],"finding":"NetApp's advisory for CVE-2026-22063 (CVSS 4.0 6.0 Medium, status Interim) states eight eMudhra intermediate CA private keys were compromised and revoked on 18 October 2026, enabling man-in-the-middle attacks. v9.0 (9 Nov) adds fixes for E-Series SANtricity OS (11.90R1, 12.10R1) and the e-series Console Agent container. ONTAP 9 is Affected: the 'AAA Certificate Services' root was preinstalled before 9.18.1, and the workaround is deleting it with 'security certificate delete' at advanced privilege. StorageGRID (KB CSG-28116), Trident, Trident Autosupport, Data Infrastructure Insights agents and others are also Affected. AI Data Engine (AIDE) remains under Investigating; AIDE MCP Server and Langchain Retriever are Not Affected. Why now: first coverage; the 9 Nov revision adds fixes, and ONTAP 9 remains unfixed.","sledRelevance":"Interpretation: SLED NetApp estates commonly run ONTAP releases older than 9.18.1, so the preinstalled trust anchor is likely present on many arrays serving agency, campus and district data, including those feeding AI pipelines. Trident is also Affected, which matters for Kubernetes-based research and AI platforms.","evidence":"Official vendor advisory. Summary, impact, CVSS and version/date confirmed on the headless-rendered page; affected, investigating and fix lists from the official adv_api JSON. NetApp cites eMudhra's statement and a CERT-In note; those references were not opened. No independent evidence of exploitation against NetApp products was found.","architectureImplications":"Trust-store hygiene is a configuration task on ONTAP (certificate deletion) rather than a software upgrade for releases before 9.18.1; Kubernetes (Trident) and monitoring agents need separate review.","governanceImplications":"Certificate-trust changes should go through change control because removing a root can break integrations that relied on it; record which systems retain it and why.","securityPrivacyImplications":"MITM risk on TLS connections that trust the compromised chain; affects confidentiality (CVSS VC:H) of management and data-service connections that validate against it.","caveats":"Vendor-claim advisory, Interim status. Severity is Medium and exploitation requires high attack complexity and user interaction per the CVSS vector. AIDE status unresolved. Prevalence of pre-9.18.1 ONTAP in SLED is interpretation, not measured.","streamIds":["netapp"],"roles":{"sales":"Sales framing: offer a short trust-store hygiene check rather than escalation. The advisory is Medium severity, but ONTAP 9 releases before 9.18.1 shipped with the affected root, StorageGRID and Trident are Affected, and AIDE is still under investigation. Customers evaluating AIDE for AI pipelines should hear plainly that its status is open. Use this to build credibility with security offices, not to accelerate upgrades without a business case.","engineering":"Engineering framing: inventory ONTAP versions and installed certificates, identify the 'AAA Certificate Services' root and any customer-installed eMudhra-chained certificates, and test removal in a non-production SVM first to catch integrations that depend on it. Review StorageGRID per KB CSG-28116 and Trident trust configuration in Kubernetes clusters. Track AIDE's Investigating status before including it in production AI designs, and document which systems legitimately need any eMudhra-chained certificate so removal does not silently break LDAP, KMIP or S3 client connections.","delivery":"Delivery framing: execute a certificate-hygiene change with clear scope. Collect certificate inventories, schedule deletion of the affected root through change control, verify dependent integrations (KMIP, LDAP, S3, monitoring) still connect, and record exceptions. Recheck the advisory for AIDE and ONTAP fix updates and close the change only when all in-scope systems are documented. Hand the runbook to operations so the same steps can be repeated after future CA distrust events."},"roleDetails":{"sales":{"customerProblem":"Customers may unknowingly trust a compromised certificate chain on storage and container platforms that serve sensitive and AI data.","stakeholders":["Storage administrators","Security/PKI team","Kubernetes platform team","Change advisory board"],"discoveryQuestions":["Which ONTAP versions below 9.18.1 are in service?","Do any integrations rely on certificates chained to eMudhra?","Is Trident used for research or AI Kubernetes clusters?","Is AIDE in evaluation or production?"],"valueHypothesis":"A short trust-store review can remove an unnecessary trust anchor with limited disruption, reducing MITM exposure.","potentialEngagement":"A bounded certificate inventory and remediation-support engagement across ONTAP, StorageGRID and Trident.","unsupportedClaims":["That AIDE is unaffected (still Investigating)","Any known exploitation against NetApp customers","That an ONTAP upgrade is required (workaround is certificate deletion)","High severity (rated Medium 6.0)"]},"engineering":{"fit":"Relevant to customers on ONTAP before 9.18.1, StorageGRID, Trident or listed monitoring agents.","architectureIntegration":"ONTAP trust store managed via 'security certificate' commands at advanced privilege; StorageGRID via KB guidance; Trident within Kubernetes trust configuration.","prerequisites":["ONTAP version and certificate inventory","Admin access at advanced privilege","List of TLS-dependent integrations","Non-production test environment"],"constraints":["No ONTAP fix listed; workaround only","AIDE status unresolved","Removing roots may break legacy integrations"],"security":"Removes a compromised trust path enabling MITM; CVSS 4.0 vector indicates high attack complexity and user interaction required.","proofOfValue":["Confirm the root is absent after deletion","Verify all dependent TLS integrations reconnect","Confirm no eMudhra-chained customer certificates remain"]},"delivery":{"work":"Inventory and remove the affected root/certificates under change control, validate integrations, document exceptions and re-check the advisory.","dependencies":["Change approval","PKI/security team input","Kubernetes platform owners for Trident"],"ownership":"Storage operations owns ONTAP/StorageGRID changes; platform team owns Trident; security accepts exceptions.","skillsAdoption":"Requires PKI and ONTAP advanced-privilege command familiarity; brief runbook recommended.","governanceCheckpoints":["Pre-change integration dependency review","Change approval","Post-change verification sign-off","AIDE status re-check before production use"],"acceptanceCriteria":["Affected root removed on 100% of in-scope ONTAP systems or exception recorded","Zero integration outages attributable to the change","Trident trust configuration reviewed in every in-scope cluster"],"risks":["Breaking an integration that depended on the root","Advisory scope changes","Overlooked customer-installed certificates"]}},"retrievedAt":"2026-11-10T04:11:51Z","enrichedAt":"2026-11-10T04:15:19Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Small operational task; requires PKI awareness among storage staff.","procurementImplications":"None directly; AIDE evaluations should note open advisory status.","operatingModelImplications":"Trust-store review should become routine after CA distrust events.","sourceVerification":{"openedUrl":"https://security.netapp.com/advisory/ntap-20261027-0001","referenceExcerpt":"The “AAA Certificate Services” root certificate was preinstalled in versions prior to 9.18.1.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}