CA Identity Suite: CA Directory replication might fail warming message in server logs

Document ID : KB000099219
Last Modified Date : 31/05/2018
Show Technical Document Details
Issue:
After rebooting one or more nodes of an Identity Suite virtual appliance cluster, the following error message appears in the server logs: 

[WARN] clock offset of [IP Address] is [xx] seconds - CA Directory replication might fail
Resolution:
whenever a vApp node boots it will sync its time with the host it runs on and won't sync again until next boot (just like any ordinary server). 

There are several ways to implement constant time sync in an environment and it is based on your preferences: 

If you want to implement a node's constant sync against its VMware host, you should Install VMWare tools. 

https://docops.ca.com/ca-identity-suite/14-1/EN/ca-identity-suite-virtual-appliance/configuring-ca-identity-suite-virtual-appliance#ConfiguringCAIdentitySuiteVirtualAppliance-InstallingVMWaretools 

Otherwise, If you wish to sync the nodes directly against an ntp server, you might use this guide to Configure Time and Network Time Protocol. 

https://docops.ca.com/ca-identity-suite/14-1/EN/ca-identity-suite-virtual-appliance/configuring-ca-identity-suite-virtual-appliance#ConfiguringCAIdentitySuiteVirtualAppliance-ConfigureTimeandNetworkTimeProtocol