Why is there a time difference between system clock and SnapLock Compliance Clock?
Applies to
- ONTAP 9
- SnapLock Compliance
- Tamperproof Snapshot
Answer
- System clock and Compliance Clock are managed separately by design and are not expected to be perfectly synchronized.
- Compliance Clock prioritizes rollback prevention and tamper resistance over time accuracy.
- Once initialized, Compliance Clock cannot be modified on FAS/AFF platforms to prevent tampering with retention dates.
- Outage or reboot behavior:
- Compliance Clock does not run during power outages;
- It resumes from its last stored state, causing it to lag behind real time.
- SnapLock expiry delayed accordingly.
- Virtual environments only (Cloud Volumes ONTAP, ONTAP Select): Compliance Clock can be corrected within 24 hours when NTP is configured.
- Time differences do not affect ONTAP operations, Tamperproof Snapshot, or SnapLock retention calculations.
