Manually update NTP servers on VCF Components

Products

• VMware Cloud Foundation

Issue/Introduction

This KB article provides steps to update NTP servers manually on each component in VCF stack.

Environment

VMware Cloud Foundation 5.x

VMware Cloud Foundation 9.0.x

Resolution

Execute the steps in below order:

1. vCenter
2. ESXi/ESX
3. NSX-T
4. VRSLCM
5. SDDC Manager

Configure NTP on vCenter:

1. Login to vCenter Appliance Management Page (https://vcenter_FQDN:5480) as root.
2. Go to Time > Edit > Update new NTP server > Save.

Configure NTP on ESXi Hosts: 

1. Login to the vSphere Client.
2. Select each host > Configure > Time Configuration > Network Time Protocol > Update new NTP servers > Save. 

                            OR 

1. Login to the ESXi Host Client.
2. Go to Manage > System > Time & Date > Edit NTP Settings > Update new NTP servers > Save.

Configure NTP on NSX-T managers

1. SSH into the SDDC Manager and get the current configuration using the following command:
   curl -u 'admin:' https://nsx_vip_fqdn/api/v1/node/services/ntp -k


2. Update the command with the new NTP servers' IP address and run the following: 
   curl -u 'admin:' -X PUT -H 'Content-type: application/json' https://nsx_vip_fqdn/api/v1/node/services/ntp -d '{"service_name":"ntp","service_properties":{"servers":["ntp_ip"]}}' -k


3. Verify the changes: 
   curl -u 'admin:' https://nsx_vip_fqdn/api/v1/node/services/ntp -k

Configure NTP on VRSLCM: 

• Follow the resolution steps in Configuring NTP servers on vRLCM

Configure NTP on SDDC Manager:

1. SSH into the SDDC Manager and get the current configuration with the following command:
   curl localhost/inventory/system-info


2. Update the configuration with the new NTP server:
   curl -X PATCH -H "Content-Type: application/json" localhost/appliancemanager/ntp/configuration -d '{"ntpServers":["ntp_ip","ntp_ip"]}'


3. Verify the change: 
   curl localhost/inventory/system-info

Additional Information

Impact/Risks:
Components will not be able to fetch Time if the below checks are not done before executing these steps :
 

• Verify the new NTP server is reachable from the VMware Cloud Foundation components.
• Verify the time skew between the new NTP servers and the VMware Cloud Foundation components is less than 5 minutes.
• Verify all VMware Cloud Foundation components are reachable from SDDC Manager.
• Verify all VMware Cloud Foundation components are in an Active state.