Endpoint Protection Certificate and Encryption Best Practices