A Bazaar Server Only?.....

I’m about to create a VM as a Bazaar Server just for Version Control only. Going to use SSH for authentication both for LAN and WAN.

So, my question is, do I need to add a LDAP for this?

…and I want to use certificate authentication and would like to setup a CA on my main server. Would you point me to a tutorial that will show me how to do this?