Configuring an issuing CA for WSTEP

You need a subordinate or certificate issuing certificate authority with profiles of the wstep or multiuse groups. You can either:

• Create a new CA with this group, as explained in Creating an issuing subordinate authority.
• Add this group to an existing CA, as explained in Selecting CA profiles.