vApp Provisioning Servers showing Clock Offset warning

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Receiving a warning [WARN] clock offset of (IP Address) is -98 seconds - CA Directory replication might fail.

Environment

Identity Manager v14.4 / v14.5

Resolution

Whenever a vApp node boots, it will sync its time with the host it runs on and won't sync again until the next boot (just like any ordinary server).
There are several ways to implement constant time sync in an environment and it is based on your requirements and preferences:

[IGA v14.4]

You should install VMWare tools to implement a node's constant sync against its VMware host.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-4/virtual-appliance/configuring-virtual-appliance.html
Section: Install VMware Tools

If you wish to sync the nodes directly against an NTP server, you might use the same tech-doc as above
Section: Configure Network Time Protocol.


[IGA v14.5]
To sync the nodes directly against an NTP server, you might use the tech-doc below
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-5/virtual-appliance/configuring-virtual-appliance.html
Section: Configure Network Time Protocol.