Site Recovery UI error: Server rejected the provided time range. Cause:nsO:InvalidTimeRange: The token authority rejected an issue request for TimePeriod :: The requested token start time differs from the issue instant more than the acceptable deviation

Products

• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• Below error appears on the SRM UI,
  
  
  
  Error - Server rejected the provided time range. Cause:nsO:InvalidTimeRange: The token authority rejected an issue request for Time Period [start Time=Tue Jul 15 05:34:34 GMT 2025, end Time=Tue Jul 15 13:34:34GMT 2025] :: The requested token start time differs from the issue instant more than the acceptable deviation (clock tolerance) of 600000 ms. Requested token start time=Tue Jul 15 05:34:34 GMT 2025, issue instant time=Tue Jul 15 05:46:24 GMT 2025. This might be due to a clock skew problem.

Environment

VMware vSphere Replication 8.x

Cause

Time is not in sync between the appliances (VR, SRM & vCenter/PSC)

• /var/log/vmware/dr-client/dr.log :

2025-07-15 12:15:16,834 [srm-reactive-thread-125] WARN com.vmware.srm.client.infrastructure.http.BaseAsyncController 6b122e2d-121e-4148-8c85-e99004c0e13a - Request for path 'webssologin' failed.

com.vmware.srm.client.topology.impl.vmomi.TokenProvider$AcquireTokenFailed: Unable to acquire token from SSO Server at 'https:/xxxxxxxxxxxx/sso-adminserver/sdk/vsphere.local'.

Caused by: com.vmware.vim.sso.client.exception.InternalError: Failed trying to retrieve token: ns0:RequestFailed: EndTime: Mon Nov 06 18:10:50 GMT 2023 is not after startTime: Mon Nov 06 18:15:16 GMT 2023

Resolution

Please refer the below article,

Ensure timestamp on all SRM/VC/VR nodes are in sync