The BlackBerry Protect Connectivity Node allows you to create a secure connection between Aurora Endpoint Security and an on-premises Microsoft Active Directory or LDAP directory. Aurora Endpoint Security can synchronize devices, users, and groups from Active Directory. Users created through directory synchronization can be enabled for the Aurora Protect Mobile app, Gateway, and CylanceAVERT.

You can install one or more instances of the BlackBerry Protect Connectivity Node to provide redundancy. Each instance must be installed on a dedicated computer. If you have more than one BlackBerry Protect Connectivity Node, you must upgrade them all to the same software release. After you upgrade the first instance, directory services are disabled until all instances are upgraded to the same version.

You can configure one or more directory connections, but if you have multiple instances of the BlackBerry Protect Connectivity Node, all of the directory connections must be configured identically in every instance. If one directory connection is missing or incorrectly configured, that BlackBerry Protect Connectivity Node will appear as disabled in the management console.

You don't need to install the BlackBerry Protect Connectivity Node to synchronize with Microsoft Entra ID Active Directory. For more information, see "Configure Aurora Endpoint Security to synchronize with Entra Active Directory."

To install the BlackBerry Protect Connectivity Node, perform the following actions.