On the Entrust Certificate Services Enterprise portal, add the MDMWS service profile to either a new or an existing issuing CA.