For trusted authentication to work, the time must be synchronized between Identity Server and Access Gateway and the time difference must be within one minute of each other. For Identity Server or a Linux Access Gateway Service, use YaST to verify the time settings.
For a Windows Access Gateway Service, use the Date and Time option in the Control Panel. If you have a Network Time Protocol server, configure the Access Manager machines to use it.
For more information, see Verifying Time Synchronization
in the NetIQ Access Manager 4.3 Administration Guide.