Configuring an Entrust PKIaaS issuing CA for MDM
On the Entrust Certificate Services Enterprise portal, add the MDMWS service profile to either a new or an existing issuing CA.
See Creating an issuing CA under an online root CA for how to create issuing CAs.