SSO Drift – The Authentication Server Returned Error

Problem

In a Vsphere 6.5 environment running an external PSC we had an issue where the time occasionally drifted leaving users unable to login. The VCSA and PSC both synced with the same NTP servers but seems to occur now and again.

 

SSO_Drift 

 

Resolution

To fix the issue, SSH to both VCSA and PSC and run the following commands on both,

rm /etc/localtime
ln -s /usr/share/zoneinfo/UTC /etc/localtime

service ntpd stop
ntpdate {your-NTP-Server}
service ntpd start