Skip to main content
AEK
SuperUser
SuperUser
December 11, 2025
Solved

Configure NTP on FortiClient EMS 7.4.4

  • December 11, 2025
  • 5 replies
  • 1401 views

Hi EMS admins

On EMS 7.4.3 I was able to configure NTP via OS config files (chrony).

But on 7.4.4 there is no access to sh/bash and I can't find anywhere some command to set it up with emscli.

In emscli cmd ref I just found this command but nothing said about setting time server.

https://docs.fortinet.com/document/forticlient/7.4.4/ems-cli-reference/239339/execute-time

Any useful info would  e appreciated.

Best answer by davidlaperriere

in 7.4.4 on vmware linux ova, you can configure ntp directly in recovery linux cli

connect to vmware console

hold shift while system boot

select advanced options for ubuntu

seclect recovery mode

select drop to root shell prompt

enter

do following command -> sudo vi /etc/systemd/timesyncd.conf

<insert key>

NTP=X.X.X.X

<escape key>

:wq!

and reboot

 

 

in 7.4.5, only thing allowed is set the timezone in cli with command, sync of NTP is done with vmware host.

execute timezone set 'yourtimezone'"

you can get the timezone by command execute timezone list

5 replies

Jean-Philippe_P
Staff & Editor
Staff & Editor
December 14, 2025

Hello Abdelkrim :) 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Jean-Philippe - Fortinet Community Team
AEK
SuperUser
AEKAuthor
SuperUser
December 14, 2025

Thanks Jean-Philippe.

Appreciate your support.

AEK
Jean-Philippe_P
Staff & Editor
Staff & Editor
December 15, 2025

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
December 16, 2025

Hello again Abdelkrim!

 

I found this answer, can you tell us if it helps you, please? :)

 

FortiClient EMS 7.4.4 has removed direct shell access (sh/bash), which previously allowed configuring NTP through OS-level config files like chrony, making that approach unavailable now. The EMS CLI (emscli) in 7.4.4 provides a command execute time, but it only interacts with the host's current time settings and does not include any option to configure NTP servers or synchronization settings directly through emscli.

 

From the available official documentation and community discussions, there is currently no exposed CLI command or EMS UI option in version 7.4.4 to set or change the NTP server configuration. This change is likely due to increased security and system hardening, restricting direct OS-level access and limiting EMS configuration to predefined CLI commands.

 

The lack of NTP server configuration options in emscli and the absence of shell access mean that administrators cannot directly set NTP through EMS 7.4.4 interfaces as they did in 7.4.3.

 

Given this limitation, a few practical suggestions are:

  • Check if the EMS appliance or VM hosting FortiClient EMS 7.4.4 has an external NTP configuration option at the hypervisor or host OS level (outside EMS).
  • Monitor Fortinet's official release notes and forums for any upcoming feature updates or patches that might restore or add NTP server configuration capabilities.
  • Engage with Fortinet support to confirm if any hidden or undocumented method exists or if a future update will address this gap.

In summary, EMS 7.4.4 currently does not provide a built-in way to configure NTP servers via emscli or UI, differing from 7.4.3 where OS-level config was accessible. This is a known limitation tied to EMS hardening and lack of shell access.

Jean-Philippe - Fortinet Community Team
AEK
SuperUser
AEKAuthor
SuperUser
December 16, 2025

Hi Jean

Thanks for the response.

Yes with the new versions I'm afraid that we can't configure NTP.

Hope this will be fixed soon because we know how bad can be such situation.

AEK
Jean-Philippe_P
Staff & Editor
Staff & Editor
December 16, 2025

I hope so too!

Jean-Philippe - Fortinet Community Team
davidlaperriere
New Member
March 17, 2026

in 7.4.4 on vmware linux ova, you can configure ntp directly in recovery linux cli

connect to vmware console

hold shift while system boot

select advanced options for ubuntu

seclect recovery mode

select drop to root shell prompt

enter

do following command -> sudo vi /etc/systemd/timesyncd.conf

<insert key>

NTP=X.X.X.X

<escape key>

:wq!

and reboot

 

 

in 7.4.5, only thing allowed is set the timezone in cli with command, sync of NTP is done with vmware host.

execute timezone set 'yourtimezone'"

you can get the timezone by command execute timezone list

AEK
SuperUser
AEKAuthor
SuperUser
March 29, 2026

Thanks David

Seems a very good workaround in Linux way. Requires downtime but is better than nothing.

I'll try it when possible.

AEK