Horizon 2.7.0 release notes

Here are the release notes for EverTrust Horizon v2.7.0, released on 2025-01-10.

For the installation and upgrade procedure, please refer to the Installation and Upgrade guide.

1. New Features

  • [HRZ-958] - Added support for MLDSA and hybrid certificates

  • [HRZ-2328] - Added analytics database support for large datasets

  • [HRZ-1997] - Third party: added F5 AS3 support for renewal

2. Enhancements

  • [HRZ-2452] - Mail: custom headers can now be specified

  • [HRZ-2252] - Mail: CC and BCC can now be specified

  • [HRZ-2253] - CSV: team display name is now added when selecting the team field

  • [HRZ-2488] - Third party: revocation now occurs when a certificate has been removed from all connectors (previous behavior revoked it when it was removed from one connector)

  • [HRZ-2250] - Max certificate per holder: Reject behavior now allows one request during the certificate’s renewal period

  • [HRZ-2505] - Technical configuration parameters were reorganized. Learn more …​

  • [HRZ-2276] - Changed database driver. Horizon Mongo URI can now be used with mongosh.

Some connection options in Mongo URI are no longer available: keyStore, keyStorePassword, keyStoreType. If these are used, please contact the EVERTRUST support for migration steps.

3. Bug Fixes

  • [HRZ-2487] - Triggers on error are now properly available on triggers

  • [HRZ-2498] - The principal.certificate dictionary is now properly available in computation and validation rules

4. Known Defects

  • [HRZ-2637] - Certificate expiration notifications are sent regardless of the notifications run period. If notification are sent, they will not be sent at the correct date

  • [HRZ-2802] - Certificates are considered as non-compliant during automate routine if authorized keyTypes are defined on the profile

  • [HRZ-2807] - When using Intune PKCS with non-lowercase UPNs, certificate will be revoked when the schedule task executes. It is recommended to disable revocation from the schedule task

5. API modifications

  • [HRZ-2485] - Integrated PKI connector now has a mandatory cryptoType parameter