Seeking setup advice on SSL and Certificates for W2k3

Although I have been working with PC networks for a little over ten years, I
am new to the IPSec, SSL, and Certificate configuration and management part
of it. To the point, I have been given the task of configuring my server to
allow users to access e-mail via OWA with SSL and/or a pocket PC using
Windows mobile 5 with IPSec/L2TP.



Forgive me if this is not the place for this question, but I do know that I
will need to use IIS during the setup process.



I have searched Microsoft's site for articles on SSL and Certificates but
there are just too many to sort through and find the one that will best help
me setup my Windows Server 2003 with IIS 6.0 to have SSL/Certificates/IPSec.
I also have Exchange 2003 SP2. I am not looking for a long-winded how-to in
a response but more of a best practices advice and a link or two to some
good step-by-step instructions. Like I said, I have read some instructions
that appear to be what I need but inevitably at some point in the steps
given the instruction no longer match what I see on the screen, and
therefore I get lost.



Maybe a response could also include the must-have items to make SSL work
with OWA, like "you must have this; this, and this to have it work. I
appreciate any and all responses, advice, or just directional signs to a
better place to get the advice I seek.



Thanks, - Eunis