The VMM must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-207464 | SRG-OS-000356-VMM-001340 | SV-207464r984238_rule | CCI-004926 | medium |
| Description | ||||
| Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronizing internal VMM clocks provides uniformity of time stamps for VMMs with multiple system clocks and systems connected over a network. | ||||
| STIG | Date | |||
| Virtual Machine Manager Security Requirements Guide | 2024-12-06 | |||
Details
Check Text (C-207464r984238_chk)
Verify the VMM synchronizes internal information system clocks to the authoritative time source when the time difference is greater than one second.
If it does not, this is a finding.
Fix Text (F-7721r365797_fix)
Configure the VMM to synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.