If you are using Certificate Enrollment Gateway with Entrust PKI as a Service, you can use native Linux tools to create a CSR (certificate signing request) for the Certificate Enrollment Gateway certificate, then process the CSR using Entrust PKI as a Service to create a certificate. 

• Processing the CSR with Entrust PKI as a Service
• Downloading the CA certificate chain from Entrust PKI as a Service