What and how security options are available to implement P6 EPPM services, P6 Web TM,on internet???

We have a request to publish on internet the url from Primavera P6 EPPM to P6 and TeamMember with EPPM 8R3 SP1 but with some security protocols that must be applied.

 

Customer details about what's needed??

A CA for internal used created by us ( CA not recognized outside the company) and to will create a set of certificates to install on the Primavera server and to the authorized clients by the company . The service would be issued to access a public IP address and only clients with the certificate ( self-signed ) installed can make use of the application.

 

What other options are available to offer security to our customer about publishing a Primavera url to internet??? and How to make it possible???