This article covers Dante Domain Manager. For the full notice, see Audinate Response to eMudhra Certificate Authority Compromise.
DDM runs on Rocky Linux 9. Rocky Linux released an updated ca-certificates package on 23 October 2026 that removes the affected certificate authorities.
What is not affected
- Connections between DDM, Dante devices, Dante Controller and other DDM nodes use Audinate’s own certificate authority, not public ones.
- DDM’s connections to Audinate’s licensing and update servers do not use the affected authorities and will keep working.
What to do
If you run DDM 1.7, the appliance menu cannot install this update. Upgrade to the latest DDM 1.9 release.
- Check DDM’s web certificate. If you installed your own certificate for the web interface, confirm that its chain does not end at emSign ECC Root CA - G3 and does not depend only on AAA Certificate Services. If it does, reissue it from another certificate authority.
- Check the servers DDM connects to. Confirm that your LDAPS, email (SMTP) and webhook servers do not use certificates issued by the affected authorities. If they do, replace those certificates before step 5, or DDM will stop connecting to them.
- Check certificates you added. If you added a private CA or an LDAPS CA certificate in DDM’s settings, confirm it is not one of the affected authorities. If it is, replace or remove it there before step 5. The update does not remove certificates you added.
- Check systems that call the DDM API. Keep their operating system and trust stores up to date. This doesn’t depend on updating DDM and can be done at any time.
- Update DDM. In the DDM appliance menu, select Package Management, then Check for Updates, and install the available updates. DDM also shows an alert in the web interface when package updates are available. If DDM can’t reach the Rocky Linux repositories, set a proxy with Configure Web Proxy in the appliance menu.
- Restart DDM. In the appliance menu, select Shutdown/Reboot, tick Restart after shutdown, and confirm. The menu only asks for a restart after kernel updates, but DDM needs one to apply this update.
- Complete the update. The package update doesn’t complete the fix for every part of DDM. To complete it, install the next DDM 1.9 release when it’s available.