CCI-001891

Ensure Chrony is only configured with the server directive

A remote time server for Chrony is configured

Configure Time Service Maxpoll Interval

Specify a Remote NTP Server

Chrony Configure Pool and Server

The A10 Networks ADC must compare internal information system clocks at least every 24 hours with an authoritative time server.

AAA Services must be configured to use at least two NTP servers to synchronize time.

AAA Services must be configured to authenticate all NTP messages received from NTP servers and peers.

The Windows Time Service on the forest root PDC Emulator must be configured to acquire its time from an external time source.

The application server must compare internal application server clocks at least every 24 hours with an authoritative time source.

The DBN-6300 must compare internal information system clocks at least every 24 hours with an authoritative time server.

CounterACT must compare internal information systems clocks at least every 24 hours with an authoritative time server.

The HP FlexFabric Switch must compare internal information system clocks at least every 24 hours with an authoritative time server.

The storage system must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

The DataPower Gateway must compare internal information system clocks at least every 24 hours with an authoritative time server.

The MQ Appliance messaging server must compare internal MQ Appliance messaging server clocks at least every 24 hours with an authoritative time source.

The MQ Appliance network device must compare internal information system clocks at least every 24 hours with an authoritative time server.

Nutanix AOS must be configured to synchronize internal information system clocks using redundant authoritative time sources.

Nutanix AOS must compare internal information system clocks at least every 24 hours with a server synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

The SEL-2740S must be configured to compare internal information system clocks at least every 24 hours with an authoritative time server.

Symantec ProxySG must compare internal information system clocks at least every 24 hours with an authoritative time server.

The Tanium operating system (TanOS) must, for networked systems, compare internal information system clocks at least every 24 hours with a server synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

The macOS system must, for networked systems, compare internal information system clocks at least every 24 hours with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet) and/or the Global Positioning System (GPS).

The macOS system must compare internal information system clocks at least every 24 hours with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet) and/or the Global Positioning System (GPS).

The macOS system must enforce time synchronization.

The macOS system must be configured to use an authorized time server.

The macOS system must enable time synchronization daemon.

The Ubuntu operating system must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

The operating system must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

SSMC must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.

The HPE 3PAR OS must, for networked systems, compare internal information system clocks at least every 24 hours with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

AIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours.

IBM z/OS SNTP daemon (SNTPD) permission bits must be properly configured.

IBM z/OS SNTP daemon (SNTPD) must be active.

The IBM z/OS SNTP daemon (SNTPD) must be active.

The Windows 11 time service must synchronize with an appropriate DOD time source.

The time service must synchronize with an appropriate DoD time source.

The Windows Server 2019 time service must synchronize with an appropriate DOD time source.

The Windows Server 2022 time service must synchronize with an appropriate DOD time source.

The Oracle Linux operating system must, for networked systems, synchronize clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

OL 8 must compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

The Palo Alto Networks security platform must compare internal information system clocks at least every 24 hours with an authoritative time server.

Automation Controller must compare internal application server clocks at least every 24 hours with an authoritative time source.

The Red Hat Enterprise Linux operating system must, for networked systems, synchronize clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

RHEL 8 must securely compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

RHEL 9 must have the chrony package installed.

RHEL 9 chronyd service must be enabled.

RHEL 9 must securely compare internal information system clocks at least every 24 hours.

The SUSE operating system clock must, for networked systems, be synchronized to an authoritative DoD time source at least every 24 hours.

The VMM must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

The ESXi host must configure NTP time synchronization.

The ESXi host must synchronize internal information system clocks to an authoritative time source.

The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.

Configure Systemd Timesyncd Servers

Configure Systemd Timesyncd Root Distance Servers

Ubuntu 22.04 LTS must, for networked systems, compare internal information system clocks at least every 24 hours with a server synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

OL 8 must compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

SLEM 5 clock must, for networked systems, be synchronized to an authoritative DOD time source at least every 24 hours.

The SUSE operating system clock must, for networked systems, be synchronized to an authoritative DOD time source at least every 24 hours.