Configuring an issuing CA for WSTEP

You need a subordinate or certificate issuing certificate authority with profiles of the wstep or multiuse groups. You can either:

• Create an issuing subordinate CA with these profiles, as explained in Creating an issuing subordinate CA.
• Add these profiles to an existing CA, as explained in Selecting CA profiles.