Grading Checklist: BMC Clock Skew - Certificate Failure

A good response must include:

• Checked the BMC clock via SSH/CLI or ipmitool sel time get
• Identified that the BMC clock drifted/reset during the extended power outage
• Compared the BMC time to the certificate's "Not Before" / "Not After" dates
• Corrected the BMC clock using ipmitool sel time set or iLO CLI
• Configured NTP on the BMC to prevent future drift
• Verified the certificate error resolves after clock correction
• Checked if the certificate itself needs regeneration (if validity window has actually expired)
• Assessed other servers that were offline during the same maintenance window
• Restored monitoring script functionality and verified data collection
• Considered deploying CA-signed certificates instead of self-signed for better management
• Documented the root cause and preventive measures