From 17d2291a84b56904e473ae7ae0ff29831059abfb Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Tue, 18 Oct 2022 10:22:23 +0200 Subject: [PATCH] doc: improve ntsrotate description --- doc/chrony.conf.adoc | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/doc/chrony.conf.adoc b/doc/chrony.conf.adoc index 2cf5326..761d042 100644 --- a/doc/chrony.conf.adoc +++ b/doc/chrony.conf.adoc @@ -1735,7 +1735,10 @@ save the keys to the _ntskeys_ file and will reload the keys from the file when the <> command is issued in *chronyc*. The file can be periodically copied from another server running *chronyd* (which does not have *ntsrotate* set to 0) in order to have one or more servers dedicated -to NTS-KE. The NTS-KE servers need to be configured with the +to NTS-KE. The file includes the subsequent key to which the NTS-KE server will +switch on the next rotation, i.e. the process copying and reloading the file +does not need to be timed precisely (it can be delayed by up to one rotation +interval). The NTS-KE servers need to be configured with the <> directive to point the clients to the right NTP server. +