See below for how to allow Entrust CA to issue PKCS #12 files containing a server‑generated key pair and a certificate.

To enable PKCS#12 issuance

1. Edit the entmgr.ini file
2. Enable the allowServerGenVerCert setting under policy. 
   [policy]

   allowServerGenVerCert=true
3. Save the changes.