For Entrust PKI as a Service deployments, CA Gateway is installed and managed by Entrust.

When deploying Certificate Enrollment Gateway with an on-premises CA, you must also deploy Entrust CA Gateway on-premises.

Entrust CA Gateway enables full certificate lifecycle management and operational management across all your Entrust-supported Certification Authorities (CAs). Each Entrust CA Gateway client can access one or several CAs. Certificate Enrollment Gateway will send certificate requests to Entrust CA Gateway. Entrust CA Gateway will forward the request to the appropriate Managed CA, and send the generated certificate back to Certificate Enrollment Gateway.

For detailed information about installing and configuring Entrust CA Gateway, see the Entrust CA Gateway documentation.