If I am to set up an embedded device for distribution to outside customers, and would like to setup https and/or more secure ssh private keys. What's the best

If I am to set up an embedded device for distribution to outside customers, and would like to setup https and/or more secure ssh private keys. What's the best way to set it up? Is it possible with current CA/https system?