Use your CA to process the CSR obtained in Generating a VA key pair and issue a certificate with the following extension values.
| Extension | Value | 
|---|---|
| Key Usage | digitalSignature | 
| Extended Key Usage | OCSPSigning | 
See below for how to issue this certificate with Entrust products.