Unable to Configure NTP in vCenter Server Appliance 6.7 VAMI

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• In the vCenter Server Appliance Virtual Appliance Management Interface (VAMI), you cannot configure an NTP server unless the NTP server replies to ICMP traffic (ping).
• The "Edit Time Synchronization Settings" wizard displays, "<SERVER>, and <SERVER> are unreachable"
• If trying to configure public NTP server, the applmgmt.log reports messages similar to:

/var/log/vmware/applmgmt/applmgmt.log

YYYY-MM-DDTHH:MM:SS.XXXX [3001]DEBUG:vmware.appliance.timesync.impl:com.vmware.appliance.ntp.test(['ntp1.example', 'ntp2.example'])
YYYY-MM-DDTHH:MM:SS.XXXX [3001]DEBUG:vmware.appliance.networking.testUtils:Testing connection to: ['ntp1.example', 'ntp2.example']
YYYY-MM-DDTHH:MM:SS.XXXX [3001]DEBUG:vmware.appliance.networking.testUtils:ping out: b'PING ntp2.example (X.X.X.X) 56(84) bytes of data.\n\n--- ntp2.example ping statistics ---\n10 packets transmitted, 0 received, 100% packet loss, time 1871ms\n\n', err: b'', returncode: 1
YYYY-MM-DDTHH:MM:SS.XXXX [3001]DEBUG:vmware.appliance.networking.testUtils:ping out: b'PING ntp1.example (X.X.X.X) 56(84) bytes of data.\n\n--- ntp1.exapmle ping statistics ---\n10 packets transmitted, 0 received, 100% packet loss, time 1872ms\n\n', err: b'', returncode: 1
YYYY-MM-DDTHH:MM:SS.XXXX [3001]DEBUG:root:TestRunStatuses: servers=['ntp1.example', 'ntp2.example']
 statuses=['SERVER_UNREACHABLE', 'SERVER_UNREACHABLE']
 messages=[Structure('LocalizableMessage', dict(defaultMessage='Failed to reach server.', id='com.vmware.appliance.ping.failure', args=[])), Structure('LocalizableMessage', dict(defaultMessage='Failed to reach server.', id='com.vmware.appliance.ping.failure', args=[]))]

Environment

VMware vCenter Server 6.7 

Cause

The vCenter Server Appliance 6.7 GA and 6.7 U1 use ICMP to validate the NTP servers that have been configured.

Resolution

This issue is resolved in VMware vCenter Server 6.7 Update 2.

Workaround:
If your desired NTP servers do not respond to ICMP / ping, you can configure this using the command line.

1. Log into the Appliance Shell as root
2. Run the following command to set the desired NTP servers

com.vmware.appliance.ntp.set --servers SERVER1,SERVER2

3. Run the following command to validate these NTP servers

com.vmware.appliance.ntp.get

4. To validate NTP is running and view the offset/jitter, start by switching to the bash shell

shell

5. Start NTP

service ntpd start

6. Query NTP

ntpq -p

7. Optionally, configure NTP to start automatically upon boot

systemctl enable ntpd.service