Create profiles
If you already have a profile that can issue certificates, skip this step.
We recommend using the REST API, although you can also manually enroll/issue with the CSR web-based flow.
Go to Manage profiles > Templates and select the External Private CA template.
For primary certificate options:
Select the appropriate business unit and the issuing CA that has been enabled to issue unmanaged CA certificates.
Select REST API as the enrollment method.
For the certificate fields, select a source of either REST Request or Fixed Value for all fields.
For the REST API binding, select the service user you previously created. Complete the rest of the profile wizard as desired.