In this short video we use a sealed certificate and a sealed private key when starting an nginx Web server. They will be unsealed with the help of an external asset, which access is granted using a mobile application.
The unsealed certificate and key are safely delivered to nginx and then destroyed.