​The subject's distinguished name of the certificate the enrollment server will use to sign the issued certificates.

The certificate must be included in the trust-store selected with the trust-store parameter

Mandatory: Yes.