We believe the Sonoma Time Server is the most secure time server available. This is partly due to a philosophy of simplicity. We use a streamlined operating system and no unnecessary protocols. All convenience protocols, like httpd, snmpd, telnetd and even sshd can be disabled. System settings are not modifiable via snmp or http. This paper lists steps that we recommend to further secure Sonoma.