Validation Error - Time Invalid missing input for Field Primary Time Server

Question

Validation Error - Time Invalid missing input for Field Primary Time Server

Rasitha Mudugama Hewage 20

Screenshot 2025-08-21 125536.png

image (1).png

I am receiving this message while connecting nodes using configurator app for Azure Local

"Validation Error - Time Invalid missing input for Field Primary Time Server"

Please advice

Anusree Nashetty 6,225 Reputation points Microsoft External Staff Moderator

2025-08-21T11:33:08.9533333+00:00

Hi Rasitha Mudugama Hewage,

Could you please let me know, if you are trying to connect nodes in Azure local or trying to setup Azure Arc agent.
Jose Benjamin Solis Nolasco 5,406 Reputation points

2025-08-21T13:03:25.9766667+00:00
Go back one step in the wizard (click Back) until you see the Time settings or NTP settings page.

In the field PrimaryTimeServer, enter a valid NTP server. You can use either:

A public NTP server:

time.windows.com

pool.ntp.org

Or your own internal NTP server if your company uses one (example: 10.1.10.20).

Save and move forward again to Review and apply.

The validation error should disappear once the PrimaryTimeServer field is filled correctly.

Azure Arc requires the local server’s clock to be synced. If time drifts, certificates and authentication will fail. That’s why the wizard won’t let you continue without a valid time source.

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!
Rasitha Mudugama Hewage 20 Reputation points

2025-08-21T14:27:36.1866667+00:00

Hi ,it gives same error with time zone and I am trying to connect nodes to azure local.
Jose Benjamin Solis Nolasco 5,406 Reputation points

2025-08-21T14:33:47.04+00:00
In alternate NTP server try using one of those;

pool.ntp.org

time.cloudflare.com

time.aws.com

time.apple.com

time-a-g.nist.gov
Jose Benjamin Solis Nolasco 5,406 Reputation points

2025-08-22T12:38:59.3966667+00:00

@Rasitha Mudugama Hewage Just following up, do you need more guidance or assistance?

Accepted answer

1 additional answer

Your answer

Anusree Nashetty 6,225 Reputation points Microsoft External Staff Moderator

2025-08-21T11:33:08.9533333+00:00

Hi Rasitha Mudugama Hewage,

Could you please let me know, if you are trying to connect nodes in Azure local or trying to setup Azure Arc agent.
Jose Benjamin Solis Nolasco 5,406 Reputation points

2025-08-21T13:03:25.9766667+00:00

Go back one step in the wizard (click Back) until you see the Time settings or NTP settings page.

In the field PrimaryTimeServer, enter a valid NTP server. You can use either:

A public NTP server:

time.windows.com

pool.ntp.org

Or your own internal NTP server if your company uses one (example: 10.1.10.20).

Save and move forward again to Review and apply.

The validation error should disappear once the PrimaryTimeServer field is filled correctly.

Azure Arc requires the local server’s clock to be synced. If time drifts, certificates and authentication will fail. That’s why the wizard won’t let you continue without a valid time source.

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!
Rasitha Mudugama Hewage 20 Reputation points

2025-08-21T14:27:36.1866667+00:00

Hi ,it gives same error with time zone and I am trying to connect nodes to azure local.
Jose Benjamin Solis Nolasco 5,406 Reputation points

2025-08-21T14:33:47.04+00:00

In alternate NTP server try using one of those;

pool.ntp.org

time.cloudflare.com

time.aws.com

time.apple.com

time-a-g.nist.gov
Jose Benjamin Solis Nolasco 5,406 Reputation points

2025-08-22T12:38:59.3966667+00:00

@Rasitha Mudugama Hewage Just following up, do you need more guidance or assistance?

Answer 1

Hi Rasitha Mudugama Hewage

Just checking in to see if you had a chance to review the response provided to your question.

Use an internal NTP source (recommended in enterprise). Example:

Primary Time Server: ntp.corp.local

On the node itself, test:

w32tm /stripchart /computer:time.windows.com /dataonly /samples:3

If it fails -> UDP/123 is blocked, or DNS is wrong.

Or try setting:

pool.ntp.org

Or even the IP address of the NTP server (instead of FQDN).

Example:

Primary NTP server: 216.239.35.0 (one of Google’s NTP IPs)

Feel free to reach out if you have any further queries.

Answer 2

Rasitha Mudugama Hewage 20

Hi Everyone,

Thanks for your support and connected node to azure arc but when i try to create azure local and see this message. " not validated"

Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T10:03:02.0266667+00:00

Screenshot 2025-08-25 113608.png
Durga Reshma Malthi 11,400 Reputation points Microsoft External Staff Moderator

2025-08-25T10:26:07.34+00:00
Hi Rasitha Mudugama Hewage

When adding machines to an Azure Local instance, the deployment wizard runs a set of pre-deployment validations against each node. These include:

Azure Arc agent is installed and healthy

OS version is supported (Windows Server / Azure Stack HCI)

Networking configured (static IP, DNS, gateway)

Time sync working

Domain join readiness (must be joined to the same AD domain)

Local requirements (TPM, Secure Boot, BIOS config, cluster readiness)

If any of these checks fail or haven’t been run yet, the node shows Not validated.

In the Add machines screen, select your node (NODE-01), there should be an option like Validate or Run validation.

Machine must be Azure Stack HCI 22H2/23H2 and must be domain-joined to the same AD you’ll use for the cluster.

And re-run until the status changes from Not validated to Ready.

Hope this helps!

Please Let me know if you have any queries.
Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T10:50:34.4433333+00:00

Hi,

I haven’t connected to the domain yet. Should I use the Domain Administrator account for this connection, or should i create a new new user with admin access?

Is it ok the node connect to domain after connect to azure arc?

Thanks
Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T11:06:03.6966667+00:00

not showing a option to validate
Durga Reshma Malthi 11,400 Reputation points Microsoft External Staff Moderator

2025-08-25T11:21:12.57+00:00
Hi Rasitha Mudugama Hewage

You do not need to use the Domain Administrator account for daily operations. But to join the node to the domain, the account you use must have permissions to add computers to the domain.

Yes, you can connect a standalone node to Azure Arc first (which you did). But for Azure Local deployment, Arc + domain join are both required before validation passes.

Join the node to your AD domain:

Add-Computer -DomainName "yourdomain.local" -Credential (Get-Credential) Restart-Computer

Ensure the node uses a domain DNS server (not just a public one).

As soon as you join the node to the domain and refresh, the status should change to Validated.

Hope this helps!

Please Let me know if you have any queries.
Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T11:31:37.2733333+00:00

Hi ,

I connected to the local domain and restarted but it did not change to ready status
Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T11:32:35.5533333+00:00

How do i find the source of the issue
Durga Reshma Malthi 11,400 Reputation points Microsoft External Staff Moderator

2025-08-25T12:14:16.25+00:00
Hi Rasitha Mudugama Hewage

Check the domain status, it should expect to True.

# Check domain membership (Get-WmiObject Win32_ComputerSystem).PartOfDomain # Get domain and site nltest /dsgetdc:uds.local nltest /sc_verify:uds.local

Check the DNS as well

nslookup uds.local nslookup <your-domain-controller>

Since you already had time sync issues, confirm again:

w32tm /query /status w32tm /query /configuration

Arc must be healthy before Local deployment; it should be in running state.

Get-Service himds | Select Status, StartType Get-Service gcservice | Select Status, StartType

Hope this helps!

Please Let me know if you have any queries.
Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T13:01:14.1166667+00:00

Hi I receive these ersults.
Rasitha Mudugama Hewage 20 Reputation points

2025-08-25T13:07:12.83+00:00
Durga Reshma Malthi 11,400 Reputation points Microsoft External Staff Moderator

2025-08-25T16:28:38.1066667+00:00
Hi Rasitha Mudugama Hewage

Get-Service gcservice -> Not found but that’s fine; likely a typo/mis reference, not required.

w32tm /query /status -> The system is synchronizing from time.windows.com instead of the domain controller. Reference ID = 0x4C4F434C -> LOCL (local clock), which is wrong for a domain-joined DC.

Other DCs and domain members should sync with the domain hierarchy (not time.windows.com).

So,

Run these on the Domain Controller:

# Configure DC (PDC Emulator) to use external NTP w32tm /config /manualpeerlist:"0.pool.ntp.org,1.pool.ntp.org" /syncfromflags:manual /reliable:yes /update net stop w32time && net start w32time w32tm /resync /force

Run these on the Member Server / AVD Host:

# Sync time from domain hierarchy (not internet) w32tm /config /syncfromflags:domhier /update net stop w32time && net start w32time w32tm /resync /force

Then verify with:

w32tm /query /status w32tm /query /peers

Hope this helps!

Please Let me know if you have any queries.
Durga Reshma Malthi 11,400 Reputation points Microsoft External Staff Moderator

2025-08-26T05:30:33.2033333+00:00

Hi Rasitha Mudugama Hewage

Just checking in to see if you had a chance to review the response provided to your question.

Feel free to reach out if you have any further queries.
Rasitha Mudugama Hewage 20 Reputation points

2025-08-26T07:13:09.6333333+00:00

Hi , Still shows not validated and is this result ok
Rasitha Mudugama Hewage 20 Reputation points

2025-08-26T14:08:07.5766667+00:00

time shows correctly now but still shows not validated warning
Rasitha Mudugama Hewage 20 Reputation points

2025-08-26T14:45:17.5433333+00:00

Hi ,

How do i validate cluster readiness ?
Durga Reshma Malthi 11,400 Reputation points Microsoft External Staff Moderator

2025-08-27T06:13:22.0566667+00:00

Hi Rasitha Mudugama Hewage

Could you please check the private messages

Share via

Validation Error - Time Invalid missing input for Field Primary Time Server

1 additional answer

Your answer