To establish a secure TLS connection to a Platform Services Controller or vCenter Server (the server), the system where you are running the CLI installer (the client) must not have its system clock slower or faster than the server's system clock by an acceptable limit (tolerance).

See Client Clock Tolerance for specific values for each deployment scenario.

Note: The client clock values are applicable only for vCenter Server 6.7.
Table 1. Client Clock Tolerance
Deployment Scenario Clock Tolerance Connection Notes
Linking one Platform Services Controller with another Platform Services Controller Clock tolerance for the client and the external Platform Services Controller must not exceed 10 minutes The CLI installer must make a secure connection to a Platform Services Controller.
Linking a vCenter Server with an external Platform Services Controller Clock tolerance for the client and external Platform Services Controller must not exceed 10 minutes. The CLI installer must make a secure connection to a Platform Services Controller.
Linking one vCenter Server with an embedded Platform Services Controller with another vCenter Server with an embedded Platform Services Controller When deploying the second vCenter Server with embedded Platform Services Controller, the clock tolerance for the client and the first vCenter Server with embedded Platform Services Controller must not exceed 10 minutes.
Installing a vCenter Server Appliance using a container vCenter Server vCenter Server with a *._on_vc.json template. The maximum clock tolerance between the client and the container vCenter Server is 8 hours 20 minutes.