Configure the following setting in the Issuance requirements tab of the Properties of New Template dialog.

CA certificate manager approval​

Ensure this box is not checked, as PKIaaS WSTEP ignores this setting when enabled.