V-285758

Discussion

Understanding when the sequence of events for an incident occurred is crucial to understand what may have taken place. Without a common clock, the components generating audit events could be out of synchronization and would then present an incorrect account of the event. To give a clear picture, it is important that Harvester Government platform and its components use a common internal clock. Satisfies: SRG-APP-000116-CTR-000235, SRG-APP-000920-CTR-000320

Check Content

Verify the Harvester Government cluster is configured to use approved and reachable Network Time Protocol (NTP) servers.

1. Access the Harvester management console with appropriate administrative privileges by navigating to Advanced >> Settings.

2. Locate the ntp-servers configuration parameter.

3. Review the configured NTP server entries.

4. Validate connectivity from a Harvester node using a command like "cat /etc/systemd/timesyncd.conf".

If one or more of the following conditions exist, this is a finding:
- No NTP servers are configured.
- Configured NTP servers are not organization approved.
- Configured NTP servers are invalid, unreachable, or nonroutable from cluster nodes.
- The system is not synchronizing time with the configured NTP sources.