Under profiles.<profile>, add a properties section with the following  Entrust Certificate Authority-specific settings.