The system must use time sources local to the enclave.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN000244-ESXI5-000163	GEN000244-ESXI5-000163	GEN000244-ESXI5-000163_rule		Low

Description
A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. The network architecture should provide multiple time servers within an enclave providing local service to the enclave and synchronize with time sources outside of the enclave.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN000244-ESXI5-000163_chk )
From the vSphere Client: Select the host and click Configuration >> Time Configuration". Select the properties link and chose 'Options'. Select NTP Settings to view configured NTP servers. If NTP is not configured to use NTP server(s) local to the enclave, this is a finding.

Fix Text (F-GEN000244-ESXI5-000163_fix)
From the vSphere Client: Select the host and click Configuration >> Time Configuration". Select the properties link and chose 'Options'. From the General tab start the NTP service and select "Start and stop with host". From the NTP Settings tab click the 'Add' button to add NTP server(s) local to the enclave.