STIGViewer Support

Nutanix OS must configure redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-279573NXAC-OS-000113SV-279573r1192434_ruleCCI-001890low
Description
Nutanix OS must compare internal information system clocks at least every 24 hours with a server synchronized to one of the redundant USNO time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the GPS to synchronize clocks between NetIM components. Satisfies: SRG-OS-000359-GPOS-00146, SRG-OS-000785-GPOS-00250, SRG-OS-000355-GPOS-00143, SRG-OS-000356-GPOS-00144
STIGDate
Nutanix Acropolis GPOS Security Technical Implementation Guide2026-02-24

Related Frameworks

1 mapping across 4 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-07Time Stamps
0.50
SEA-20Clock Synchronization
0.50
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (26) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-17(1)Monitoring and Control
1.00
AC-17(9)Disconnect or Disable Access
1.00
AC-2(4)Automated Audit Actions
1.00
AC-3Access Enforcement
1.00
AC-6(9)Log Use of Privileged Functions
1.00
AU-12Audit Record Generation
1.00
AU-12(3)Changes by Authorized Individuals
1.00
AU-14(1)System Start-up
1.00
AU-14(2)Capture and Record Content
1.00
AU-3Content of Audit Records
1.00

+16 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.3.7
1.00
CCI1 mapping

Details

Check Text (C-279573r1192434_chk)

Verify Nutanix OS is using Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT). 1. Verify the "maxpoll" option is set to 16 or fewer and is not commented out using the following command. $ sudo grep maxpoll /etc/chrony.conf server 0.us.pool.ntp.mil maxpoll 10 iburst 2. Verify the "chrony.conf" file is configured to an authoritative DOD time source using the following command. $ sudo grep -i server /etc/chrony.conf server 0.us.pool.ntp.mil If the parameter "server" is not set to an authoritative DOD time source, this is a finding.

Fix Text (F-84031r1192433_fix)

Run the following command to add a list of DOD-approved NTP servers. $ ncli cluster add-to-ntp-servers servers=IP_1,IP_2,IP_3