Detections
Analytics

2.1.1 Ensure time synchronization is in use

Information

Synchronize system time between all systems in an environment using a service such as the Network Time Protocol (NTP) daemon, ntpd or chrony which are designed to synchronize system clocks across a variety of systems using a source that is accurate. NTP can be configured to be a client and/or a server.

Note: If another method for time synchronization is being used, this section may be skipped.

Time synchronization enables support of time sensitive security mechanisms, such as Kerberos. Time synchronization also ensures log files have consistent time records across the enterprise, which aids in forensic investigations.

Solution

Run the following command to enable and start ntpd service:

# service ntpd enable
# sysrc ntpd_sync_on_start="YES"
# service ntpd start

See Also

https://workbench.cisecurity.org/benchmarks/19044

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-7, 800-53|AU-8, 800-53|AU-12, CSCv7|6.1

Plugin: Unix

Control ID: 20b6f409f22be039cee5c8d3098f8db8a9140a39d81b1d9e925886e203e2c9ee