Ntp Authentication - Safran VersaSync User Manual

2.8.11.9

NTP Authentication

Since NTP information is distributed across entire networks, NTP poses a security
risk: Falsified NTP time stamps or other NTP-related information can be exploited
by an attacker. NTP authentication keys are used to authenticate time syn-
chronization, thus detecting a fake time source before it can do harm.
NTP Autokey
The NTP version installed on VersaSync supports the Autokey Protocol. The
Autokey Protocol uses the OpenSSL library which provides security capabilities
including message digests, digital signatures and encryption schemes. The
Autokey Protocol provides a means for NTP to authenticate and establish a chain
of trusted NTP servers.
NTP Autokey: Support & Limitations
CHAPTER •
2 VersaSync User Manual Rev. 12
Note:
Symmetric Keys
Symmetric Keys (MD5) " on
may check the
Enable Autokey: Click the check box to enable/disable Autokey. See
"NTP Autokey" below
Note:
disable the NTP service in the NTP Services panel, then
re-enable it after Autokey configuration is completed.
Mark as Preferred: Check this box to prefer this NTP Peer over other
NTP Peers ("NTP Peer Preference"). This will result in VersaSync syn-
chronizing more frequently with this Peer. For additional information
on NTP Preferences, see
page 116.
Note:
than one NTP Peer as Preferred, even though VersaSync
will not prevent you from doing so.
5. Click Submit, or press Enter.
Before you can edit the
through the
box below the
Autokey
for more information on Autokey.
When you configure NTP Autokey, you must first
"Configuring "NTP Stratum 1" Operation" on
Please note that it is not advisable to mark more
2.8 Configuring Network Settings
Key field, you must set up
Actions Panel. See
page 131. Conversely, you
Key field.
"NTP:
125