STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← SC-45 (1) — System Time Synchronization

CCI-004926

Definition

Synchronize the internal system clocks to the authoritative time source when the time difference is greater than organization-defined time period.

Parent Control

SC-45 (1)System Time SynchronizationSystem and Communications Protection

Linked STIG Checks (36)

V-274175CAT IIAmazon Linux 2023 must synchronize internal information system clocks to the authoritative time source at least every 24 hours.Amazon Linux 2023 Security Technical Implementation GuideV-268150CAT IINixOS must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Anduril NixOS Security Technical Implementation GuideV-268151CAT IINixOS must have time synchronization enabled.Anduril NixOS Security Technical Implementation GuideV-268427CAT IIThe macOS system must enforce time synchronization.Apple macOS 15 (Sequoia) Security Technical Implementation GuideV-268449CAT IIThe macOS system must be configured to use an authorized time server.Apple macOS 15 (Sequoia) Security Technical Implementation GuideV-268450CAT IIThe macOS system must enable the time synchronization daemon.Apple macOS 15 (Sequoia) Security Technical Implementation GuideV-277035CAT IIThe macOS system must enforce time synchronization.Apple macOS 26 (Tahoe) Security Technical Implementation GuideV-277057CAT IIThe macOS system must be configured to use an authorized time server.Apple macOS 26 (Tahoe) Security Technical Implementation GuideV-277058CAT IIThe macOS system must enable the time synchronization daemon.Apple macOS 26 (Tahoe) Security Technical Implementation GuideV-204793CAT IIThe application server must synchronize internal application server clocks to an authoritative time source when the time difference is greater than the organization-defined time period.Application Server Security Requirements GuideV-276016CAT IIAx-OS must compare the internal system clocks on an organization-defined frequency with an organization-defined authoritative time source.Axonius Federal Systems Ax-OS Security Technical Implementation GuideV-238357CAT IIIThe Ubuntu operating system must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Canonical Ubuntu 20.04 LTS Security Technical Implementation GuideV-260520CAT IIIUbuntu 22.04 LTS must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Canonical Ubuntu 22.04 LTS Security Technical Implementation GuideV-270752CAT IIIUbuntu 24.04 LTS must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Canonical Ubuntu 24.04 LTS Security Technical Implementation GuideV-269535CAT IIAlmaLinux OS 9 must securely compare internal information system clocks at least every 24 hours.Cloud Linux AlmaLinux OS 9 Security Technical Implementation GuideV-203712CAT IIThe operating system must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.General Purpose Operating System Security Requirements GuideV-255244CAT IISSMC must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.HPE 3PAR SSMC Operating System Security Technical Implementation GuideV-215208CAT IIAIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours.IBM AIX 7.x Security Technical Implementation GuideV-223553CAT IIIBM z/OS PARMLIB CLOCKxx must have the Accuracy PARM coded properly.IBM z/OS ACF2 Security Technical Implementation GuideV-223776CAT IIIBM z/OS PARMLIB CLOCKxx must have the Accuracy PARM properly coded.IBM z/OS RACF Security Technical Implementation GuideV-224025CAT IIIBM z/OS PARMLIB CLOCKxx must have the Accuracy PARM coded properly.IBM z/OS TSS Security Technical Implementation GuideV-279573CAT IIINutanix OS must configure redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).Nutanix Acropolis GPOS Security Technical Implementation GuideV-221866CAT IIThe Oracle Linux operating system must, for networked systems, synchronize clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).Oracle Linux 7 Security Technical Implementation GuideV-248820CAT IIOL 8 must compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).Oracle Linux 8 Security Technical Implementation GuideV-271699CAT IIOL 9 must securely compare internal information system clocks at least every 24 hours.Oracle Linux 9 Security Technical Implementation GuideV-228664CAT IIIThe Palo Alto Networks security platform must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Palo Alto Networks NDM Security Technical Implementation GuideV-281336CAT IIRHEL 10 must securely compare internal information system clocks at least every 24 hours.Red Hat Enterprise Linux 10 Security Technical Implementation GuideV-257945CAT IIRHEL 9 must securely compare internal information system clocks at least every 24 hours.Red Hat Enterprise Linux 9 Security Technical Implementation GuideV-275614CAT IIUbuntu OS must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Riverbed NetIM OS Security Technical Implementation GuideV-217281CAT IIThe SUSE operating system clock must, for networked systems, be synchronized to an authoritative DoD time source at least every 24 hours.SUSE Linux Enterprise Server 12 Security Technical Implementation GuideV-219986CAT IIThe operating system must synchronize internal information system clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).Solaris 11 SPARC Security Technical Implementation GuideV-220014CAT IIThe operating system must synchronize internal information system clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).Solaris 11 X86 Security Technical Implementation GuideV-254866CAT IIThe Tanium Operating System (TanOS) must synchronize internal information system clocks to the authoritative time source when the time difference is greater than the organization-defined time period.Tanium 7.x Operating System on TanOS Security Technical Implementation GuideV-252928CAT IITOSS must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation GuideV-282549CAT IITOSS 5 must securely compare internal information system clocks at least every 24 hours.Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation GuideV-207464CAT IIThe VMM must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.Virtual Machine Manager Security Requirements Guide