800-53|AU-8(1)

Title

SYNCHRONIZATION WITH AUTHORITATIVE TIME SOURCE

Description

The information system:

Supplemental

This control enhancement provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.

Reference Item Details

Category: AUDIT AND ACCOUNTABILITY

Parent Title: TIME STAMPS

Family: AUDIT AND ACCOUNTABILITY

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall v8.x L1 v4.2.0
1.44 WN16-00-000450WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT III
1.44 WN16-00-000450WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT III
1.44 WN19-00-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT III
1.44 WN19-00-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT III
1.44 WN22-00-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT III
1.44 WN22-00-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT III
1.51 UBTU-22-252010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.52 UBTU-22-252015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT III
1.108 UBTU-24-600160UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.109 UBTU-24-600180UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT III
1.151 WN16-DC-000060WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.152 WN19-DC-000060WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.152 WN22-DC-000060WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.169 RHEL-09-252010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.170 RHEL-09-252015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.171 RHEL-09-252020UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.284 OL08-00-030740UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
2.2 NTP Security Protection - c) NTP Auth-key encryptedZTE_ROSNGTenable ZTE ROSNG
2.2.1 Enable 'Set time and date automatically'UnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.2.1 Enable 'Set time and date automatically'UnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.2.1 Enable 'Set time and date automatically' - Set time and date automaticallyUnixCIS Apple macOS 10.13 L1 v1.1.0
2.2.1 Enable 'Set time and date automatically' - Set time and date automaticallyUnixCIS Apple macOS 10.12 L1 v1.2.0
2.2.1 Enable "Set time and date automatically"UnixCIS Apple OSX 10.9 L2 v1.3.0
2.2.1.3 Ensure chrony is configured - remote serverUnixCIS Amazon Linux v2.1.0 L1
2.2.1.4 Ensure internal information system clocks are synchronizing - GPS.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.3.1 Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server - ntp server primaryCheckPointCIS Check Point Firewall L1 v1.1.0
2.3.1.4 Set 'key' for each 'ntp server'CiscoCIS Cisco IOS 12 L2 v4.0.0
2.3.2 Set 'ip address' for 'ntp server'CiscoCIS Cisco IOS 12 L1 v4.0.0
3.084 - The system is configured to use an unauthorized time server. - 'NTPServer'WindowsDISA Windows Vista STIG v6r41
3.084 - The system is configured to use an unauthorized time server. - 'Type' - DomainWindowsDISA Windows Vista STIG v6r41
3.084 - The system is configured to use an unauthorized time server. - 'Type' - Non-domainWindowsDISA Windows Vista STIG v6r41
5.4 CIFS - 'timed.enable = on'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.proto = ntp'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.servers has been configured'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.window = 5m'NetAppTNS NetApp Data ONTAP 7G
13 - Network Time ProtocolNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
AIX7-00-001053 - AIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours.UnixDISA STIG AIX 7.x v3r1
APPL-14-000014 The macOS system must enforce time synchronization.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-14-000170 The macOS system must be configured to use an authorized time server.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-14-000180 The macOS system must enable time synchronization daemon.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-15-000014 - The macOS system must enforce time synchronization.UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
APPL-15-000170 - The macOS system must be configured to use an authorized time server.UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
APPL-15-000180 - The macOS system must enable the time synchronization daemon.UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253