STIGUI
V-279573CAT III — Low severitySV-279573r1268907_rule

Nutanix OS must configure redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoW network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

Rule version NXAC-OS-000113 · STIG v1 · 2026-09-01

Discussion

Nutanix OS must compare internal information system clocks at least every 24 hours with a server synchronized to one of the redundant USNO time servers, or a time server designated for the appropriate DoW network (NIPRNet/SIPRNet), and/or the GPS to synchronize clocks between NetIM components.

Satisfies: SRG-OS-000359-GPOS-00146, SRG-OS-000785-GPOS-00250, SRG-OS-000355-GPOS-00143, SRG-OS-000356-GPOS-00144

Check

Verify Nutanix OS is using Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

1. Verify the "maxpoll" option is set to 16 or fewer and is not commented out using the following command.

$ sudo grep maxpoll /etc/chrony.conf server 0.us.pool.ntp.mil maxpoll 10 iburst

2. Verify the "chrony.conf" file is configured to an authoritative DoW time source using the following command.

$ sudo grep -i server /etc/chrony.conf server 0.us.pool.ntp.mil

If the parameter "server" is not set to an authoritative DoW time source, this is a finding.

Fix

Run the following command to add a list of DoW-approved NTP servers.

$ ncli cluster add-to-ntp-servers servers=IP_1,IP_2,IP_3

Identifiers

Group ID
V-279573
Group title
SRG-OS-000359-GPOS-00146
Rule ID
SV-279573r1268907_rule
Check ID
C-84126r1268905_chk
Fix ID
F-84031r1268906_fix