New Delhi: The Ministry of Electronics and Information Technology (MeitY) has constituted a special team to investigate a security incident concerning eMudhra’s Public Key Infrastructure (PKI). The Ministry said that it has taken serious note of the reported incident, saying that its impact on Indian websites and applications has been very limited and for a very short duration.
The Ministry further stated that Digital Signature Certificates and eSign services regulated by the Controller of Certifying Authorities (CCA) remain completely unaffected by this incident. The Ministry said that eMudhra operates in two distinct areas, which are related to the issuance of Digital Signature Certificates and eSign services and the issuance of digital certificates trusted by major browsers and operating systems, used to secure websites, software and online communications.
The Ministry also mentioned that another function is international in nature and operates under a global trust framework. It is governed by international standards and subject to independent audits, including WebTrust audits conducted by BDO International Limited. The Ministry said that the reported security incident pertains to this only and it is not involved in its audit.
The Ministry said it is engaged with all the stakeholders to resolve this incident at the earliest and the Indian Computer Emergency Response Team (CERT-In) has also issued an advisory in connection with the incident, including the mitigation measures.
[AIR news]