Use your CA to process the CSR obtained in Generating a VA key pair and issue a certificate with the following extension values.

Extension

Value

Key Usage

digitalSignature

Extended Key Usage

OCSPSigning

See below for how to issue this certificate with Entrust products.