Under profiles.<profile>, add the following Entrust Certificate Authority-specific settings.