For trusted authentication to work, the time must be synchronized between the Identity Server and the Access Gateway and the time difference must be within one minute of each other. For the Identity Server or a Linux Access Gateway Service, use YaST to verify the time settings.
For a Windows Access Gateway Service, use the Date and Time option in the Control Panel. If you have a Network Time Protocol server, configure the Access Manager machines to use it.
For more information, see Verifying Time Synchronization
in the NetIQ Access Manager 3.2 SP3 Setup Guide.