Under this field, add the following settings for each profile with the <profile> identifier.

For example:

profiles:
CA-1003-PROF-1001:
name: default profile
subject-variable-requirements:
- required: true
name: CN
description: common name
subject-builder-config:
subject-builder-name: >-
com.entrust.adminservices.cagw.common.subjects.TemplateSubjectBuilder
properties:
template: cn=<First Name> <Last Name>,ou=CA01,o=pki,dc=hooli,dc=com
properties:
cert-type: ent-twokeypair
cert-definition: Verification
user-type: Person