<div>
There are very good links. &nbsp;I will listen to them again and try to type up my understanding of the material.
</div>


There are very good links.  I will listen to them again and try to type up my understanding of the material.

<div>
<div class="content wysiwyg-content">
Hello:<br />
<br />
At my work we use several Digital Certificates for different reasons:<br />
<br />

<div class="bullet">
Microsoft Exchange Email
</div>
<div class="bullet">
Web Portal (Remote Access)
</div>
<br />
I understand that We need to know the:<br />
<br />
- Internal Server IP address<br />
- External Public IP address (Provided by our ISP)<br />
<br />
But when I am asked to apply a digital cert for remote access to an application, I am lost. &nbsp;Can someone explain to me the fundamentals of how and why a Digital Certificate is used?
</div>
</div>


Hello:

At my work we use several Digital Certificates for different reasons:

Microsoft Exchange Email
Web Portal (Remote Access)

I understand that We need to know the:

- Internal Server IP address
- External Public IP address (Provided by our ISP)

But when I am asked to apply a digital cert for remote access to an application, I am lost.  Can someone explain to me the fundamentals of how and why a Digital Certificate is used?

Can someone explain to me how digital Certificates work?

HTTPS is a protocol for secure communication over a computer network which is widely used on the Internet. HTTPS consists of communication over Hypertext Transfer Protocol (HTTP) within a connection encrypted by Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL). The main motivation for HTTPS is authentication of the visited website and to protect the privacy and integrity of the exchanged data. HTTPS is widely used for protecting page authenticity on all types of websites, securing accounts and keeping user communications, identity and web browsing private.

SSL / HTTPS

IIS is Internet Information Services, the web server included with Windows Server operating systems. All current versions are built on a modular architecture; modules can be added or removed individually so that those required for specific functionality are installed. The full installation of IIS includes HTTP, security, content, compression, caching, logging and diagnostics.

Microsoft IIS Web Server

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.