Entrust provides some Windows PowerShell scripts for configuring WSTEP enrollment with Certificate Enrollment Gateway. You can use these PowerShell scripts to install and configure the Certificate Enrollment Policy Web Service (CEP Service), and an enrollment service for each CA that will issue certificates to the WSTEP endpoints.

To run the PowerShell scripts provided by Entrust, the user account must have the Active Directory roles "Domain Admin" and “Enterprise Admin”.