How to get "Network Time Security (NTS)" to work?

Dear all,

I have chronyd with “Network Time Protocol (NTP)” working. I would like to try/use “Network Time Security (NTS)”.

Is it sufficient to modify my /etc/chrony.conf from

pool de.pool.ntp.org iburst

to

pool de.pool.ntp.org iburst nts

?

Or are further steps necessary? Any help appreciated! I once set up my time config during system install, haven’t touched it then. Don’t know about the configs relating very much…

TIA!

1 Like

what do the logs say about details? mine give errors timeouts for example, with NTS activated for non NTS hosts

chronyd[6756]: NTS-KE session with w.x.y.z:4460 (2.opensuse.pool.ntp.org) timed out

also:

chronyc shows NTS details with:

sudo chronyc -N authdata

No pool for NTS! Try:

server ptbtime1.ptb.de iburst xleave maxpoll 7 nts
server ptbtime2.ptb.de iburst xleave maxpoll 7 nts
server ptbtime3.ptb.de iburst xleave maxpoll 7 nts

https://wiki.archlinux.org/title/Chrony#Using_NTS_servers

1 Like