Spectracom SecureSync User Reference Manual page 141

5.
6.
7.
8.
3.4.18.3 Creating a Stratum-1 Group Member Server
To configure an NTP Stratum-1 Server, which is a Group Member, using a Client key:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
3.4.18.4 Creating a Stratum-1 Client Only Server
To create an NTP Stratum-1 'Client Only' Server with a Client key:
CHAPTER •
3 SecureSync User Reference Guide Rev. 18
Select Trusted .
Click Submit .
Observe the IFF Group/Client Key appearing.
This is the common IFF Group/Client Key . This key is shared between all Group
members using this NTP Servers passphrase for ALL group members.
Configure NTP as requiring authentication.
Enable NTP in the NTP Services panel.
Verify that NTP reaches occur, and that NTP eventually reaches Stratum 1.
Define the Hostname, making sure it is not the same as the trusted root server. See "NTP
Servers: Adding, Configuring, Deleting" on page 111.
Disable NTP if enabled.
Manually set the time or use NTP to set the system time.
Under the Autokey tab of the Edit NTP Services window, enable:
Enable Autokey —Check the box.
Autokey Passphrase —Enter your Group members NTP Autokey password.
Select Certificate Type to Generate —Do NOT enable Client
Using the NTP Server containing the IFF Group/Common Key generate a Client Key using
this NTP Server's passphrase.
Cut and paste the Client Key into the Autokey Groupkey text box.
For all NTP Stratum-2 servers and higher stratum numbers, disable the following items
under the Stratum-1 tab in the Edit NTP Services window:
Prefer Stratum 1.
Enable Stratum-1 1PPS.
In the NTP Servers panel of the main window, add an NTP server and enable the Autokey
option box. See "NTP Servers: Adding, Configuring, Deleting" on page 111.
Enable NTP in the NTP Services panel.
Wait for NTP to synchronize to the NTP References provided.
3.4 Network Time Protocol (NTP)
125