VAPP server is showing clock offset warning messages: [WARN] clock offset of 10.65.72.131 is -21 seconds - CA Directory replication might fail

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Clock offset warning messages from one or more VAPP servers:

 

There are multiple servers in the cluster and one or more servers report the clock off set warning.

Below are the warning messages seen on the VAPP screen. 

[WARN] clock offset of 10.94.75.136 is -21 seconds - CA Directory replication might fail

[WARN] clock offset of 10.94.75.218 is -26 seconds - CA Directory replication might fail

[WARN] clock offset of 10.94.75.173 is -32 seconds - CA Directory replication might fail

[WARN] clock offset of 10.94.75.201 is -37 seconds - CA Directory replication might fail

Environment

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Cause

The servers need to be time synchronized within 15 seconds for best performance. Any servers not within the 15 second range will throw the above warnings.

Resolution

Use the alias check_cluster_clock_sync to verify the time offset and the setTimeAndDate alias to set the time on each server to within 15 seconds of one another..

The above aliases are explained in the documentation:

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/identity-suite/14-3/virtual-appliance/administering-virtual-appliance/using-the-login-shell.html