Entrust PKI Hub 1.0 requires the full TLS certificate chain for the Certificate Enrollment Gateway certificate, from the TLS certificate up to the root CA. Download all CA certificates in the CA certificate chain from Entrust PKI as a Service, from the Issuing CA to the root CA.

To download CA certificates from Entrust PKI as a Service

1. Log in the Entrust Certificate Services interface.
2. Select Administration > PKIaaS Management.
   A list of private CAs appear.
3. For each CA in the TLS certificate chain, from the Issuing CA to the Root CA:
   1. Select the CA.
   2. Click Download certificate.

After downloading the CA certificate chain, proceed to Building a TLS certificate chain for the Certificate Enrollment Gateway certificate.