ESXi/ESX与Windows AD时间同步

▲Configure Windows NTP Client

1, Enable NTP mode:

a, Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters
b, Set the Type value to NTP.

2, Enable the NTP Client:

a, Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config
b, Set the AnnounceFlags value to 5.

3, Specify the upstream NTP servers to sync from:

a, Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders
b, Set the NtpServer value to a list of at least 3 NTP servers.

Example: You might set the value to:

1.pool.ntp.org,0x1 2.pool.ntp.org,0x1 3.pool.ntp.org,0x1

Note: On a Windows 2008 Domain Controller, NtpServer is located in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters.

4, Specify a 15-minute update interval:

a, Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient
b,Set the SpecialPollInterval value to 900.

5, Restart the W32time service for the changes to take effect.

▲Configure ESXi/ESX NTP and Likewise Clients

vSphere Web Client
1，Log in to the vSphere Web Client with administrator credentials.
2，Click on Hosts and Clusters.
3，Select the ESXi host from the list
4，Click Manage > Settings.
5，Expand System and select Time Configurations.
6，Click Edit.
7，Enter the Windows server Domain Controller(s) information.

★ESX/ESXi 4.x and 5.x配置方法如下：
1，Open a console to the ESXi/ESX host. For more information, see Connecting to an ESX host using a SSH client (1019852) or Using Tech Support Mode in ESXi 4.1 and ESXi 5.0 (1017910).

2，Open the /etc/ntp.conf file in a text editor. For more information, see Editing configuration files in VMware ESXi and ESX (1017022).

3，Add the tos maxdist command on its own line:

tos maxdist 30

4，Save and close the configuration file.

5，Make the /etc/likewise/lsassd.conf file writable by running the command:

chmod +w /etc/likewise/lsassd.conf

6，Open the /etc/likewise/lsassd.conf file in a text editor. For more information, see Editing configuration files in VMware ESXi and ESX (1017022).

7，Locate the sync-system-time option, uncomment it, and set the value to no:

sync-system-time = no

8，Save and close the configuration file.

9，On ESXi, save the configuration changes to the boot bank so they persist across reboots by running the command:

/sbin/auto-backup.sh

10，Restart the ntpd and lsassd services for the configuration changes to take effect by running the commands:

service lsassd restart
service ntpd restart

Note: To restart the ntpd and lsassd services on an ESXi host, run these commands:

/etc/init.d/lsassd restart
/etc/init.d/ntpd restart

 

★ESXi 6.0配置方法如下：
1，在/etc/ntp.conf的最后一行添加一行tos maxdist 30.
2，启动 likewise service:
查询服务状态：/etc/init.d/lwsmd status
没启动时启动：/etc/init.d/lwsmd start

3. 运行likewise shell。
/usr/lib/vmware/likewise/bin/lwregshell

4，用下面的命令访问 HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory 目录。
cd HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory

5，运行下面的命令修改 synchronization time:

set_value SyncSystemTime 0

6. 退出 shell， 输入quit，回车退出.
7. Refresh the lsass service with this command:
/usr/lib/vmware/likewise/bin/lwsm refresh lsass

8. 用下面的命令验证registry key修改成功。

/usr/lib/vmware/likewise/bin/lwregshell list_values "[HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory]"

9，重启服务。
/etc/init.d/lwsmd restart
/etc/init.d/ntpd restart
参考网址：https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1035833

●调整 ESX 主机时区 (2020930)

※ESXi 使用 UTC 时间，不支持更改时区。
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2020930