Horizon 2.7.7 release notes

Here are the release notes for EverTrust Horizon v2.7.7, released on 2025-07-08.

For the installation and upgrade procedure, please refer to the Installation and Upgrade guide.

Due to a modification in the analytics database, it is expected that the upgrade to 2.7.7 resets the analytics database state

1. New Features

[None]

2. Enhancements

  • [HRZ-2955] - SCIM metadata endpoints for supported schemas are now available

  • [HRZ-2956] - ACME Enroll connector now supports Nameshield DNS

  • [HRZ-2989] - Registered ID SAN is now supported

  • [HRZ-3053] - Improve error message on Digicert Enrollment

3. Bug Fixes

  • [HRZ-2943] - SANs now correctly retain their order upon renewal

  • [HRZ-2984] - The team members view on the Teams page no longer lists members from teams with the same prefix

  • [HRZ-3008] - Expiration notifications in profiles are now correctly set when updated

  • [HRZ-3015] - Analytics: Fixed a bug where the database was not properly synchronized when flushing a discovery campaign

  • [HRZ-3016] - Analytics: Fixed a bug where analytics synchronization failed due to a constraint violation

  • [HRZ-3018] - DNS datasource now correctly sends multi-valued records

    Previous DS Flows configurations using ds.1.a should be updated to use ds.1.a.1
  • [HRZ-3019] - ACME Enroll connector: Contact email is now correctly taken from the request, with fallback to the connector’s contact email

  • [HRZ-2895] - ACM PCA PKI connector: No longer fails when a large number of connectors are created

4. Known Defects

  • [HRZ-3073] - PKI Connectors cannot be updated using the web UI

  • [HRZ-3095] - CRMP Revocation is not properly sent to the underlying PKI

  • [HRZ-3096] - Automatic certificate metadata updates are failing. The update workflow is not affected. Failures can occur on:

    • Renewed certificate ID metadata

    • Third-party metadata

    • Grading

5. API modifications

  • [HRZ-2956] - A new mandatory parameter dnsChallengeProvider is now required on PKI connectors of type acmeenroll