Enterprise Recon 2.14.0

ER 2.14.0 Release Notes

The Release Notes provide information about new features, platforms, data types, enhancements, bug fixes and all the changes that have gone into Enterprise Recon 2.14.0.

For a quick view of the changes since the last Enterprise Recon release, see Summary of Changes.

Contents:

  1. Highlights
  2. Important Notes
  3. Enterprise Recon 2.14.0 Changelog
  4. Features That Require Agent Upgrades

New Master Server Installation Support on RHEL 9

Enterprise Recon 2.14.0 introduces official support for Master Server deployments installed (via RPM) on Red Hat Enterprise Linux (RHEL) 9 servers.

Installation of the ER2 Master Server as RPM software package is supported on the latest available Extended Update Support (EUS) release of both RHEL 8 and RHEL 9.

New and Improved Features

Modernized SharePoint Online Integration with Graph API

NEW The new SharePoint Online (Graph API) module in Enterprise Recon 2.14.0 now uses the Microsoft Graph API. By transitioning to the Graph API, this new module ensures continued reliability with a modern architecture backed by long-term Microsoft support.

In ER 2.14.0, both the new SharePoint Online (Graph API) module and the legacy SharePoint Online module are available as separate Targets.

In Q1 2026, the legacy SharePoint Online module will be deprecated and superseded by the SharePoint Online (Graph API), as the underlying SharePoint Add-in model used in the legacy module will no longer be supported by Microsoft from April 2nd, 2026.

The Ground Labs Support Team is available to assist customers in migrating their existing SharePoint Online Targets.

See Microsoft 365 - SharePoint Online (Graph API).

New and Improved Data Types

Detect Sensitive Medical Conditions

NEW Expanding the list of supported data types under the Medical Data category, the new Medical Conditions data type in Enterprise Recon 2.14.0 enables you to detect medical conditions listed in authoritative sources including official Australian, UK, US, and World Health Organization (WHO) lists.

Secure Peruvian Personally Identifiable Information (PII)

NEW Coverage for Peruvian PII is expanded in Enterprise Recon 2.14.0 with two new data types: the Personal Names (Peru) data type that detects Peruvian names, and the Peruvian Telephone Number data type that can recognize mobile and telephone number formats, including those with the international country code prefix.

Expand Existing Detection Capabilities

Existing data types are also enhanced in Enterprise Recon 2.14.0. The Canadian Mailing Address data type supports a more comprehensive list of street types, updated list of postal codes, and civic numbers with 1-5 digits. It can now also detect detect Canadian mailing addresses in French, improving support for regions like Québec.

The updated US Driver License Number data type now supports selecting “Robust Search” and “Relaxed Search” modes, allowing you to apply either stricter or more lenient search to your scan.

Lastly, China Union Pay cardholder data type has been updated to identify 16-digit primary account numbers that begin with the 621483 BIN range.

Early Access

The Early Access stage allows Ground Labs to collect a round of usability and performance feedback before a feature is made generally available.

If you would like to request access to any of the Early Access features, please get in touch with the Ground Labs Support Team for assistance.

Early Access Features

  • Apache Hive - Enables sensitive data discovery on Apache Hive (and Cloudera Hive) database Targets.

Important Notes

CRITICAL: Update Required for Manual Backup Commands

To enhance security and simplify maintenance, Ruby is no longer used for Enterprise Recon 2.14.0 components.

  • Impact: The change affects the commands used for manual backups in Enterprise Recon. Running the old manual backup commands will return an appropriate error message.

  • Action Required: If you use the manual backup commands in any custom automation, you must update your automation to run the updated commands. See Manual Backups.

CRITICAL: One Way Upgrade to Enterprise Recon 2.14.0

Certain data sets, storage formats and components for the Master Server have been updated in Enterprise Recon 2.14.0. Therefore once the Master Server is updated from Enterprise Recon 2.13.0 (and below) to ER 2.14.0, the datastore is not backward compatible and downgrading ER 2.14.0 to an earlier version is not supported.
Please contact the Ground Labs Support Team for assistance with upgrading the Master Server.

CRITICAL: End of Support for CentOS 7 Master Server

Master Server installations with CentOS 7 as the base operating system are no longer supported in Enterprise Recon 2.14.0. Consequently, upgrading a CentOS 7-based Master Server to version 2.14.0 through an online update is no longer possible.

If you have existing installations of CentOS 7-based Master Server, create a backup of your Master Server datastore and datastore configuration file, and migrate to Enterprise Recon on the new operating systems to continue receiving support for new features and product updates.

See How To Install the Master Server Appliance (from ISO) or How To Install the Master Server on RHEL 8 and 9 (from RPM).

End-of-Support Platforms and Features in Enterprise Recon 2.14.0

The platform below has reached end of support in Enterprise Recon:

Upcoming End-of-Support Platforms and Features

The following platforms and/or features will reach end of support and be removed in the next Enterprise Recon release:

The following platforms and/or features will reach end of support and be removed in a future Enterprise Recon release, later than 2.15.0:

  • Microsoft Windows Desktop Targets
    • Windows 10
      • Microsoft’s mainstream support for the Windows 10 operating system has ended on October 14, 2025. To align with this, support for Windows 10 will end in a future release of Enterprise Recon. No final end-of-support date set at this time. We will make another announcement before our support is officially discontinued.
  • Microsoft Windows 32-bit Node Agents

Changelog

The Changelog is a complete list of all the changes in Enterprise Recon 2.14.0.

What’s New?

  • New Data Types
    • NEW Medical Conditions
    • NEW Personal Names (Peru)
    • NEW Peruvian Telephone Number
  • Added:

    • Enterprise Recon 2.14.0 officially supports Master Server deployments installed (via RPM) on Red Hat Enterprise Linux (RHEL) 9 servers.
    • Support for Linux 5 Agents (with and without database runtime components) is now available and compatible with hosts running Linux 5 RPM-based distributions.

Enhancements

  • Improved Features:

    • Enhanced the low-disk-space error message with clearer guidance and actionable steps when the Master Server’s disk space falls below the critical threshold.
    • Enterprise Recon Node Agents now support HTTP and HTTPS proxy configuration via the agent configuration file for enhanced compatibility with managed network environments. When configured, Agents route Agent traffic through a specified proxy server. For more information, see Enable HTTP and HTTPS Proxy Settings for ER2 Node Agents.
    • Expanded PDF metadata support to include document title and document subject when available.
    • To enhance security and simplify maintenance, Ruby is no longer used for Enterprise Recon 2.14.0 components. This change affects the commands used for manual backups in Enterprise Recon. Running the old manual backup commands will return an error message. If you use the manual backup commands in any custom automation, you must update your automation to use the updated commands. See Manual Backups.
    • Updated data compression library for increased application security
    • Enforced character limits on several fields across the Enterprise Recon Web UI and API to improve input validation and increase application security.

    • Minor UI enhancements.

Bug Fixes

  • Encrypting or deleting match locations with non-ASCII characters in the filename would result in errors where (i) a corrupted copy would be created for the original file in the original location after encryption, or (ii) an incorrect "Deleted" status instead of "Unable to delete" would be displayed in the Investigate page for the match location if deletion remedial action was applied to the file while it was open or in use. This only impacted match locations in Windows workstation and Windows Share Targets.

Features That Require Agent Upgrades

Agents do not need to be upgraded along with the Master Server, unless you require the following features in Enterprise Recon 2.14.0:

  • Enterprise Recon Node Agents now support HTTP and HTTPS proxy configuration via the agent configuration file for enhanced compatibility with managed network environments. When configured, Agents route Agent traffic through a specified proxy server. For more information, see Enable HTTP and HTTPS Proxy Settings for ER2 Node Agents.
  • Encrypting or deleting match locations with non-ASCII characters in the filename would result in errors where (i) a corrupted copy would be created for the original file in the original location after encryption, or (ii) an incorrect "Deleted" status instead of "Unable to delete" would be displayed in the Investigate page for the match location if deletion remedial action was applied to the file while it was open or in use. This only impacted match locations in Windows workstation and Windows Share Targets.

For a table of all features that require an Agent upgrade, see Agent Upgrade.


Ensuring we are delivering the best technology for our customers is a core value at Ground Labs. If you are interested in future early builds of Enterprise Recon with forthcoming features, please email your interest to product@groundlabs.com.