Select the Clock server tab of the Configuration page to configure the clock service settings.

Mandatory: Yes.

Maximum allowed error

The maximum allowed time difference between the Timestamping Authority clock and the chrony client.

When this difference exceeds the configured threshold, the Timestamping Authority considers the system clock invalid (bad clock condition). In this state, all timestamp requests fail, and the service returns a timeNotAvailable response.

An error is also logged with the following fields.

Error log field

Value

​level

info​

msg

ProcessTimeStampRequest.Failed

tsa-log.tsa-pkistatus-string 

TimeNotAvailableTSError

cause.cause.cause.msg

BadClock

Mandatory: Yes.

Poll interval

The period between successive connections to the crony client for checking the clock health.

Mandatory: Yes.

Connection timeout

The maximum period allowed for establishing a connection with the chrony client.

Mandatory: No. This optional value defaults to 1 second.