Horizon 2.7.0 release notes

Here are the release notes for EverTrust Horizon v2.7.0, released on 2025-01-10.

For the installation and upgrade procedure, please refer to the Installation and Upgrade guide.

Due to PQC introduction, RSA key types now need to be explicitly allowed. Previous behavior where RSA-2048 and RSA-4096 allowed RSA-3072 is no longer available

1. New Features

  • [HRZ-958] - Added support for MLDSA and hybrid certificates

  • [HRZ-2328] - Added analytics database support for large datasets

  • [HRZ-1997] - Third party: added F5 AS3 support for renewal

2. Enhancements

  • [HRZ-2452] - Mail: custom headers can now be specified

  • [HRZ-2252] - Mail: CC and BCC can now be specified

  • [HRZ-2253] - CSV: team display name is now added when selecting the team field

  • [HRZ-2488] - Third party: revocation now occurs when a certificate has been removed from all connectors (previous behavior revoked it when it was removed from one connector)

  • [HRZ-2250] - Max certificate per holder: Reject behavior now allows one request during the certificate’s renewal period

  • [HRZ-2505] - Technical configuration parameters were reorganized. Learn more …​

  • [HRZ-2276] - Changed database driver. Horizon Mongo URI can now be used with mongosh.

Some connection options in Mongo URI are no longer available: keyStore, keyStorePassword, keyStoreType. If these are used, please contact the EVERTRUST support for migration steps.

3. Bug Fixes

  • [HRZ-2487] - Triggers on error are now properly available on triggers

  • [HRZ-2498] - The principal.certificate dictionary is now properly available in computation and validation rules

4. Known Defects

  • [HRZ-2637] - Certificate expiration notifications are sent regardless of the notifications run period. If notification are sent, they will not be sent at the correct date

  • [HRZ-2802] - Certificates are considered as non-compliant during automate routine if authorized keyTypes are defined on the profile

  • [HRZ-2807] - When using Intune PKCS with non-lowercase UPNs, certificate will be revoked when the schedule task executes. It is recommended to disable revocation from the schedule task

5. API modifications

  • [HRZ-2485] - Integrated PKI connector now has a mandatory cryptoType parameter