Use your CA to process the CSR obtained in Generating a timestamping key pair and issue a certificate with the following extension values.

Extension

Value

Key Usage

digitalSignature

Extended Key Usage

timeStamping

See below for how to issue this certificate with Entrust products.