STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must configure redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).

DISA Rule

SV-279573r1192434_rule

Vulnerability Number

V-279573

Group Title

SRG-OS-000359-GPOS-00146

Rule Version

NXAC-OS-000113

Severity

CAT III

CCI(s)

• CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.
• CCI-004922 - Synchronize system clocks within and between systems or system components.
• CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.
• CCI-004926 - Synchronize the internal system clocks to the authoritative time source when the time difference is greater than organization-defined time period.

Weight

10

Fix Recommendation

Run the following command to add a list of DOD-approved NTP servers.

$ ncli cluster add-to-ntp-servers servers=IP_1,IP_2,IP_3

Check Contents

Verify Nutanix OS is using Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

1. Verify the "maxpoll" option is set to 16 or fewer and is not commented out using the following command.

$ sudo grep maxpoll /etc/chrony.conf
server 0.us.pool.ntp.mil maxpoll 10 iburst

2. Verify the "chrony.conf" file is configured to an authoritative DOD time source using the following command.

$ sudo grep -i server /etc/chrony.conf
server 0.us.pool.ntp.mil

If the parameter "server" is not set to an authoritative DOD time source, this is a finding.

Vulnerability Number

V-279573

Documentable

False

Rule Version

NXAC-OS-000113

Severity Override Guidance

Verify Nutanix OS is using Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

1. Verify the "maxpoll" option is set to 16 or fewer and is not commented out using the following command.

$ sudo grep maxpoll /etc/chrony.conf
server 0.us.pool.ntp.mil maxpoll 10 iburst

2. Verify the "chrony.conf" file is configured to an authoritative DOD time source using the following command.

$ sudo grep -i server /etc/chrony.conf
server 0.us.pool.ntp.mil

If the parameter "server" is not set to an authoritative DOD time source, this is a finding.

Check Content Reference

M

Target Key

5730