On the Entrust Certificate Services Enterprise portal, add the following services to either a new or an existing issuing CA.
- The Active Directory service to issue WSTEP-enrolled certificates.
- The Multiuse service to issue LDAPS TLS certificates in P12 format.
See Creating an issuing CA under an online root CA for how to create issuing CAs.