Azure Sphere SDK security update removes affected certificate trust
Microsoft has released an interim Azure Sphere SDK security update following the compromise of six eMudhra intermediate certificate-authority keys.
The announcement identifies a Python component in the SDK that trusted affected certificates and recommends installing the latest SDK as a priority on connected systems.
The update removes affected certificate trust to address the risk that certificates created with compromised keys could impersonate services. Microsoft states that this was not a compromise of its systems.
The article’s title identifies SDK version 26.06.1 and links the official SDK installer.
Partner briefing
- What it is
An Azure Sphere SDK certificate-trust security fix.
- What’s changing
An interim SDK release addresses trust in compromised eMudhra certificate authorities.
- Why it matters
Affected trust can enable service impersonation.
- Who it affects
Azure Sphere developers and operators of connected development systems.