Need trusted NTP Sources

Jimmy Hess mysidia at gmail.com
Thu Feb 6 19:25:47 UTC 2014


On Thu, Feb 6, 2014 at 8:28 AM, jamie rishaw <j at arpa.com> wrote:

> PCI DSS only requires that all clocks be synchronized; It doesn't
> /require/ "how".
>

If you read requirement 10.4  more carefully,  you will find that it Does
require that time
be synchronized from an INDUSTRY ACCEPTED  external  time source.

The GPS reference clock, a radio timecode receiver, receiving NIST or USNO,

Microsoft's time source  (time.windows.com),
Redhat's time source,  various univerisities and other public time servers
listed on NTP.org,

the NIST time servers   listed here:
http://tf.nist.gov/tf-cgi/servers.cgi

Are among the INDUSTRY ACCEPTED external time sources.


This is not an exhaustive enumeration of industry-accepted external time
sources.

--
-JH



More information about the NANOG mailing list