The Entrust WSTEP Service is the Certificate Enrollment Gateway’s implementation of the WSTEP protocol. The Entrust WSTEP Service will use Windows certificate templates when enrolling users, computers, or domain controllers with your Windows-native endpoints.

If you already have a Microsoft CA installed in Active Directory, the Certificate Templates feature is already enabled, and you can skip this section. Otherwise, you must add the Certificate Templates feature using either Windows PowerShell or the Windows graphical interface.

• Adding the certificate templates feature using PowerShell
• Adding the certificate templates feature using the Windows graphical interface