Before you run the vicfg-authconfig command on an ESXi host, you must prepare the host.


Configure ESXi and Active Directory to use same NTP server.


All hosts that join Active Directory must also be managed by an NTP server to avoid issues with clock skews and Kerberos tickets. You must make sure the ESXi system and the Active Directory server are using the same time zone.

The ESXi system’s time zone is always set to UTC.


Configure the ESXi system’s DNS to be in the Active Directory domain.