As you know: the normal way of installation is via the Appstore.
About App Distribution. There your also find some information about certifictes.
Alternativly you can deploy an IPA on your own webserver or use Testflight.
The primary way is to deploy the app via XCode. The devices must be registered as developer devices.
If you want to crypt data using Apple functions
Keychain Services Reference.