yep, you need a time source that's genuine, i.e. online or from a radio time source in your own environment. If this really is not possible then you should have a look at orphan more in the ntp.conf configs to better handle using an isolated time source, but it's a pretty horrible place to be.
|