On the Entrust Certificate Services Enterprise portal, add the following services to either a new or an existing issuing CA.

  • The Active Directory service to issue WSTEP-enrolled certificates.
  • The Multiuse service to issue LDAPS TLS certificates in P12 format. 

See Creating an issuing CA under an online root CA for how to create issuing CAs.