Configuring an Entrust PKIaaS issuing CA for WSTEP
On the Entrust Certificate Services Enterprise portal, add the following services to either a new or an existing issuing CA.
The Active Directory service to issue WSTEP-enrolled certificates.
The Multiuse service to issue LDAPS TLS certificates in P12 format.
See Creating an issuing CA under an online root CA for how to create issuing CAs.