-
Notifications
You must be signed in to change notification settings - Fork 20
Time Sync
AU-8.a, AU-8.b, AU-8 (1).a, AU-8 (1).b
Time sync is done by leveraging Azure's Custom Script Extension for Windows. The time sync script is run on every machine within the domain.
The time zone utility tzutil.exe is used to set the time zone for all the machines to UTC. This will also ensure that the time synchronization is maintained.
You can view the script here.
Once the running of the custom script extension is complete, to verify do the below
1)Log into each virtual machine where the extension is installed.
2)Once logged in, from the bottom right of the virtual machine screen- check if time zone is "UTC"
AU-8.a: The information system uses internal system clocks to generate time stamps for audit records.
Resources deployed by this Azure Blueprint Solution use internal system clocks to generate time stamps for audit records.
AU-8.b: The information system records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) and meets organization-defined granularity of time measurement (one second).
Resources deployed by this Azure Blueprint Solution use internal system clocks to generate time stamps for audit records. Time stamps are recorded in UTC.
AU-8 (1).a: The information system compares the internal information system clocks at least hourly with http://tf.nist.gov/tf-cgi/servers.cgi.
Resources deployed by this Azure Blueprint Solution use internal system clocks to generate time stamps for audit records. Internal system clocks are configured to sync with an authoritative time source each hour.
AU-8 (1).b: The information system synchronizes the internal system clocks to the authoritative time source when the time difference is greater than an organization-defined time period
Resources deployed by this Azure Blueprint Solution use internal system clocks to generate time stamps for audit records. Internal system clocks are configured to sync with an authoritative time source each hour.