Windows Server preventing time sync with Rackspace NTP

by Rackspace Technology Security Team

Rackspace has identified a Network Time Protocol (NTP) setting in the registry of some Windows Server devices preventing time sync with Rackspace NTP Servers.  

If you received a notification because devices on your account are affected, this post will guide you on how to remediate the issue. 

Affected servers are currently synchronizing time locally instead of with the intended Rackspace NTP Server(s). Local time sync is not an industry best practice and may result in unexpected time drift.   

To restore proper time sync operation, an NTP registry key on the affected devices must be updated and a time resync performed.   

The fix can be applied by running the following commands from a PowerShell prompt on the affected server(s):  

Note: Be sure to update the command with the appropriate datacenter time server from the list below: 
---   

w32tm /config /syncfromflags:manual /manualpeerlist:"time.ord1.rackspace.com,0x9 time2.ord1.rackspace.com,0x9" /update  

  

w32tm /resync   

---   

The proposed change has been found not to be production impacting in our testing. However, some customers have time sensitive 3rd party applications; out of an abundance of caution Rackspace has chosen not to proactively apply the change to customer devices and instead recommend the change be applied at a time of your choosing. Rackspace support can assist with executing the change ad-hoc or as a scheduled maintenance.  

Rackspace NTP Server List  and Location:

  • DFW time.dfw3.rackspace.com 
  • DFW time2.dfw3.rackspace.com 
  • ORD time.ord1.rackspace.com 
  • ORD time2.ord1.rackspace.com 
  • IAD time.iad3.rackspace.com 
  • IAD time2.iad3.rackspace.com 
  • LON time.lon3.rackspace.com 
  • LON time2.lon3.rackspace.com 
  • HKG time.hkg5.rackspace.com 
  • HKG time2.hkg5.rackspace.com 
  • SYD time.syd2.rackspace.com 
  • SYD time2.syd2.rackspace.com 
  • NYC time.nyc2.rackspace.com 
  • NYC time2.nyc2.rackspace.com 
  • SJC time.sjc3.rackspace.com 
  • SJC time2.sjc3.rackspace.com 
  • MCI time.mci1.rackspace.com 
  • MCI time2.mci1.rackspace.com 
  • SHA time.sha3.rackspace.com 
  • SHA time2.sha3.rackspace.com 
  • SIN time.sin3.rackspace.com 
  • SIN time2.sin3.rackspace.com 

 

Reach out to Rackspace Support if you have any additional questions or require further assistance with this matter.