1*2b15cb3dSCy Schubert<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> 2*2b15cb3dSCy Schubert 3*2b15cb3dSCy Schubert<html> 4*2b15cb3dSCy Schubert 5*2b15cb3dSCy Schubert <head> 6*2b15cb3dSCy Schubert <meta http-equiv="content-type" content="text/html;charset=iso-8859-1"> 7*2b15cb3dSCy Schubert <meta name="generator" content="HTML Tidy, see www.w3.org"> 8*2b15cb3dSCy Schubert <title>NTP on Windows NT</title> 9*2b15cb3dSCy Schubert <link href="../scripts/style.css" type="text/css" rel="stylesheet"> 10*2b15cb3dSCy Schubert </head> 11*2b15cb3dSCy Schubert <body> 12*2b15cb3dSCy Schubert <h3>NTP 4.x for Windows</h3> 13*2b15cb3dSCy Schubert 14*2b15cb3dSCy Schubert <h4>Introduction</h4> 15*2b15cb3dSCy Schubert <p>The NTP 4 distribution runs as service on Windows 2000 and later. It will NOT run on Windows 95, 98, ME, etc. Lately it has been run the most on Windows-7 and later. The binaries work on multi-processor systems. This port has not been tested on the Alpha platform. This release now uses OpenSSL for authentication. IPv6 is not implemented yet for Win32 platforms. A ready-to-run install distribution is available from Meinberg at <a href="http://www.meinberg.de/english/sw/ntp.htm">http://www.meinberg.de/english/sw/ntp.htm.</a></p> 16*2b15cb3dSCy Schubert <p>Users should note that the stock Windows client sends requests as mode-1 packets, which can have unintended consequences and create a security risk. The client should send requests as mode-3 (client) packets, which conform to the protocol specification. The issues and resolution are described in Microsoft KB 875424. A less desirable alternative that avoids changing registry keys is to use the <tt>--with-wintime</tt> option when building the executable.</p> 17*2b15cb3dSCy Schubert <h4>Authentication Keys</h4> 18*2b15cb3dSCy Schubert <p>With this release ntp-keygen is supported. See the <a href="../keygen.html"> ntp keygen documentation</a> for details on how to use ntp-keygen.</p> 19*2b15cb3dSCy Schubert <p><tt>ntpd</tt> can now use the generated keys in the same way as on Unix platforms. Please refer to the <a href="../authopt.html">Authentication Options</a> for details on how to use these.</p> 20*2b15cb3dSCy Schubert <p><B>NOTE:</B> ntpd and <tt>ntp-keygen</tt> both use OpenSSL which requires a random 21*2b15cb3dSCy Schubert character file called <tt>.rnd</tt> by default. Both of these programs will automatically generate this file if they are not found. The programs will look for an environmental variable called RANDFILE and use that for the name of the random character file if the variable exists. If it does not exist it will look for an environmental variable called HOME and use that directory to search for a file called <tt>.rnd</tt> in that directory. Finally, if neither RANDFILE nor HOME exists it will look in <tt>C:\</tt> for a .rnd file. In each case it will search for and create the file if the environmental variable exists or in the C:\ directory if it doesn't.</p> 22*2b15cb3dSCy Schubert <p>Note that ntpd normally runs as a service so that the only way that it will have either RANDFILE or HOME defined is if it is a System environmental variable or if the service is run under a specific account name and that account has one of those variables defined. Otherwise it will use the file <tt>c:\.rnd</tt>. This was done so that OpenSSL will work normally on Win32 systems. This obviates the need to ship the OpenSSL.exe file and explain how to generate the .rnd file. A future version may change this behavior.</p> 23*2b15cb3dSCy Schubert <p>Refer to <a href="#Compiling">Compiling Requirements</a> and Instructions for how to compile the program.</p> 24*2b15cb3dSCy Schubert <h4>Reference Clocks</h4> 25*2b15cb3dSCy Schubert <p>Reference clock support under Windows NT is tricky because the IO functions are so much different. Some of the clock types have been built into the ntpd executable and should work but have not been tested by the ntp project. If you have a clock that runs on Win32 and the driver is there but not implemented on Win32 you will have make the required configuration changes in config.h and then build ntpd from source and test it. The following reference clock is known to work and is supported by Windows NT: <a href="../drivers/driver1.html">Type 1</a> Undisciplined Local Clock (LOCAL)</p> 26*2b15cb3dSCy Schubert <h4>Functions Supported</h4> 27*2b15cb3dSCy Schubert <p>All NTP functions are supported with some constraints. See the <a href="#ToDo">TODO list</a> below. Note that the ntptrace executable is not supported and you should use the PERL script version instead.</p> 28*2b15cb3dSCy Schubert <h4>Accuracy</h4> 29*2b15cb3dSCy Schubert <p>Greg Brackley has implemented a fantastic interpolation scheme that improves the precision of the NTP clock using a realtime thread (is that poetic or what!) which captures a tick count from the 8253 counter after each OS tick. The count is used to interpolate the time between operating system ticks.</p> 30*2b15cb3dSCy Schubert <p>On a typical 200+ MHz system NTP achieves a precision of about 5 microseconds and synchronizes the clock to +/-500 microseconds using the <a href="http://www.trimble.com/products/ntp">Trimble Palisade</a> as UTC reference. This allows distributed applications to use the 10 milliseconds ticks available to them with high confidence.</p> 31*2b15cb3dSCy Schubert <h4>Binaries</h4> 32*2b15cb3dSCy Schubert <p>Recent InstallShield based executable versions of NTP for Windows NT (intel) are available from:</p> 33*2b15cb3dSCy Schubert <ul> 34*2b15cb3dSCy Schubert <li><a href="http://www.five-ten-sg.com/">http://www.five-ten-sg.com/</a> 35*2b15cb3dSCy Schubert </ul> 36*2b15cb3dSCy Schubert <h4 id="ToDo">ToDo</h4> 37*2b15cb3dSCy Schubert <p>These tasks are in no particular order of priority.</p> 38*2b15cb3dSCy Schubert <ul> 39*2b15cb3dSCy Schubert <li>Add IPv6 support 40*2b15cb3dSCy Schubert <li>See if precision can be improved by using CPU cycle counter for tick interpolation. 41*2b15cb3dSCy Schubert <li>Make precision time available to applications using NTP_GETTIME API 42*2b15cb3dSCy Schubert </ul> 43*2b15cb3dSCy Schubert <h4>Compiling Requirements</h4> 44*2b15cb3dSCy Schubert <ul> 45*2b15cb3dSCy Schubert <li>Windows 7 or Windows.NET Server 2003, or later. 46*2b15cb3dSCy Schubert <li>Windows NT 4.0 Windows 2000, Windows XP or Windows Vista <i>may</i> still work. 47*2b15cb3dSCy Schubert <li>Microsoft Visual C++ 2008, 2010, or 2013 EE 48*2b15cb3dSCy Schubert <li>Some way of uncompressing and untarring the gzipped tar file. 49*2b15cb3dSCy Schubert <li>OpenSSL must be built on the box before building NTP. Additional steps would 50*2b15cb3dSCy Schubert be required to not use OpenSSL. 51*2b15cb3dSCy Schubert <li>Microsoft Visual C++ redistributables</ul> 52*2b15cb3dSCy Schubert <a name="Compiling"><B>Compiling Instructions</B></a> 53*2b15cb3dSCy Schubert <ol> 54*2b15cb3dSCy Schubert <li>Install Micosoft Visual C++ <a href="http://www.microsoft.com/downloads/details.aspx?familyid=9B2DA534-3E03-4391-8A4D-074B9F2BC1BF">redistributables</a> 55*2b15cb3dSCy Schubert <li>Install <a href="http://www.slproweb.com/products/Win32OpenSSL.html">OpenSSL full installer for Windows</a>. Add the following to your system environment variables in the control panel (adjusting paths as appropriate to point to the directory containing only an openssl subdirectory, for OPENSSL_INC, and to the directory containing openssl .lib files for OPENSSL_LIB: 56*2b15cb3dSCy Schubert<ul><li> OPENSSL_INC=C:\OpenSSL\include 57*2b15cb3dSCy Schubert<li> OPENSSL_LIB=C:\OpenSSL\lib</ul> 58*2b15cb3dSCy Schubert <li>Unpack the NTP-4.x.tar.gz using utilities such as WinZip or WinRar. 59*2b15cb3dSCy Schubert <li>Run Microsoft Visual C++ 2008 EE. 60*2b15cb3dSCy Schubert <li>Open the ports\winnt\vs2008\ntp.sln solution file 61*2b15cb3dSCy Schubert <li>Batch build all projects (Build menu, Batch Build..., select all, build). 62*2b15cb3dSCy Schubert <li>The built binaries can be found in the <tt>ports\winnt\v2008\Win32-bin\Release</tt> directory. 63*2b15cb3dSCy Schubert <li>If you are shipping binaries in a kit it is strongly recommended that you ship this file (winnt.html) along with the binaries. 64*2b15cb3dSCy Schubert </ol> 65*2b15cb3dSCy Schubert <h4>Configuration File</h4> 66*2b15cb3dSCy Schubert <p>The default NTP configuration file path is %SystemRoot%<tt>\system32\drivers\etc\. </tt>(%SystemRoot% is an environmental variable that can be determined by typing "set" at the "Command Prompt" or from the "System" icon in the "Control Panel").</p> 67*2b15cb3dSCy Schubert <p>Refer to your system environment and create your<tt> ntp.conf</tt> file in the directory corresponding to your system installation. The older <tt><WINDIR>\ntp.conf</tt> is still supported but you will get a log entry reporting that the first file wasn't found. 68*2b15cb3dSCy Schubert <h4>Installation Instructions</h4> 69*2b15cb3dSCy Schubert <p>The <tt>instsrv</tt> program in the instsrv subdirectory of the distribution can be used to install 'ntpd' as a service and start automatically at boot time. Instsrv is automatically compiled with the rest of the distribution if you followed the steps above.</p> 70*2b15cb3dSCy Schubert <ol> 71*2b15cb3dSCy Schubert <li>Start a command prompt and enter "instsrv.exe <pathname_for_ntpd.exe>" 72*2b15cb3dSCy Schubert <li>Clicking on the "Services" icon in the "Control Panel" will display the list of currently installed services in a dialog box. The NetworkTimeProtocol service should show up in this list. Select it in the list and hit the "Start" button in the dialog box. The NTP service should start. 73*2b15cb3dSCy Schubert <li>You can also stop and start the service by typing net start|stop NetworkTimeProtocol at the DOS prompt. 74*2b15cb3dSCy Schubert <li>View the event log by clicking on the "Event Viewer" icon in the "Administrative Tools" group, there should be several successful startup messages from NTP. NTP will keep running and restart automatically when the machine is rebooted. 75*2b15cb3dSCy Schubert </ol> 76*2b15cb3dSCy Schubert <p>You can change the start mode (automatic/manual) and other startup parameters corresponding to the NTP service in the "Services" dialog box if you wish.</p> 77*2b15cb3dSCy Schubert <h4>Removing NTP</h4> 78*2b15cb3dSCy Schubert <p>You can also use <tt>instsrv</tt> to delete the NTP service by entering: <tt>>"instsrv.exe remove"</tt> 79*2b15cb3dSCy Schubert <h4>Command Line Parameters and Registry Entries</h4> 80*2b15cb3dSCy Schubert <p>Unlike the Unix environment, there is no clean way to run 'ntpdate' and reset the clock before starting 'ntpd' at boot time. NTP will step the clock up to 1000 seconds by default. While there is no reason that the system clock should be that much off during bootup if <tt>ntpd</tt> was running before, you may wish to override this default and/or pass other command line directives. 81*2b15cb3dSCy Schubert <p>Use the registry editor to edit the value for the ntpd executable under LocalMachine\System\CurrentControlSet\Services\NTP.</p> 82*2b15cb3dSCy Schubert <p>Add the -g option to the ImagePath key, behind "%INSTALLDIR>\ntpd.exe". This will force NTP to accept large time errors (including 1.1.1980 00:00)</p> 83*2b15cb3dSCy Schubert <h4>Bug Reports</h4> 84*2b15cb3dSCy Schubert <p>Please follow the <a href="../bugs.html">NTP Bug Reporting Procedures</a> to report bugs or request enhancements.</p> 85*2b15cb3dSCy Schubert <p>Last update: 86*2b15cb3dSCy Schubert <!-- #BeginDate format:En2m -->6-Apr-2014 23:27<!-- #EndDate --> 87*2b15cb3dSCy Schubert </p> 88*2b15cb3dSCy Schubert 89*2b15cb3dSCy Schubert </body> 90*2b15cb3dSCy Schubert</html> 91