`SC-45(01)` Synchronization with Authoritative Time Source

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version

unchanged SC part of SC-45

Title

Synchronization with Authoritative Time Source

Control

(a) Compare the internal system clocks [Assignment: frequency] with [Assignment: authoritative time source] ; and
(b) Synchronize the internal system clocks to the authoritative time source when the time difference is greater than [Assignment: time period].

Discussion

Synchronization of internal system clocks with an authoritative source provides uniformity of time stamps for systems with multiple system clocks and systems connected over a network.

Parameters

sc-45.01_odp.01: frequency
sc-45.01_odp.02: authoritative time source
sc-45.01_odp.03: time period

STIG rules that implement this control 20

Apple macOS 15 (Sequoia) V1R8

APPL-15-000014 CAT II The macOS system must enforce time synchronization.
APPL-15-000170 CAT II The macOS system must be configured to use an authorized time server.
APPL-15-000180 CAT II The macOS system must enable the time synchronization daemon.

Apple macOS 26 (Tahoe) V1R4

APPL-26-000014 CAT II The macOS system must enforce time synchronization.
APPL-26-000170 CAT II The macOS system must be configured to use an authorized time server.
APPL-26-000180 CAT II The macOS system must enable the time synchronization daemon.

Canonical Ubuntu 22.04 LTS V2R10

UBTU-22-252010 CAT III Ubuntu 22.04 LTS must, for networked systems, compare internal information system clocks at least every 24 hours with a server synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoW network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).
UBTU-22-252015 CAT III Ubuntu 22.04 LTS must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.

Canonical Ubuntu 24.04 LTS V1R7

UBTU-24-600160 CAT III Ubuntu 24.04 LTS must compare internal information system clocks at least every 24 hours with an authoritative time server.
UBTU-24-600180 CAT III Ubuntu 24.04 LTS must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.

Cisco IOS XE Router NDM Y26M04

CISC-ND-001030 CAT II The Cisco router must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.

Microsoft Windows 11 V2R11

WN11-00-000260 CAT III The Windows 11 time service must synchronize with an appropriate DoW time source.

Microsoft Windows Server 2022 V2R11

WN22-00-000440 CAT III The Windows Server 2022 time service must synchronize with an appropriate DoW time source.

Microsoft Windows Server 2025 V1R4

WN25-00-000440 CAT III The Windows Server 2025 time service must synchronize with an appropriate DoW time source.

Red Hat Enterprise Linux 10 V1R3

RHEL-10-200540 CAT II RHEL 10 must have the "chrony" package installed.
RHEL-10-200541 CAT II RHEL 10 must enable the chronyd service.
RHEL-10-800040 CAT II RHEL 10 must securely compare internal information system clocks at least every 24 hours.

Red Hat Enterprise Linux 9 V2R10

RHEL-09-252010 CAT II RHEL 9 must have the chrony package installed.
RHEL-09-252015 CAT II RHEL 9 chronyd service must be enabled.
RHEL-09-252020 CAT II RHEL 9 must securely compare internal information system clocks at least every 24 hours.

SC-45(01) Synchronization with Authoritative Time Source