Configuring an issuing CA for WSTEP

You need a subordinate or certificate-issuing certificate authority with profiles in the wstep or multiuse groups. You can either:

• Create a new CA with this group, as explained in Creating an issuing subordinate authority.
• Add this group to an existing CA, as explained in Selecting CA profiles.