Host integrated hardware management controller must enable time synchronization

MediumLevel 1Manual reviewvmware

Description

Cryptography, audit logging, cluster operations, and incident response/forensics depend deeply on synchronized time. This recommendation extends to all devices in infrastructure. The recommendation for NTP is to have at least four sources. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

1. Verify that NTP or another approved time synchronization mechanism is enabled 2. Verify that the ESXi host uses reliable time synchronization esxcli system ntp get

How it is fixed

Fix method: Guidance or infrastructure patch

1. Enable NTP or the vendor-supported automatic time synchronization service. 2. Enter the organization's approved NTP servers. 3. Configure multiple authoritative NTP sources where supported. 4. Configure the appropriate time zone. 5. Save/apply the configuration.

Properties

Operating systems: Any
Tags: vmwareesxihardware
Reference: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 1.6 Host integrated hardware management controller must enable time synchronization