How to create an intermediate certificate for ISE?

Question

Hello,

I am in the process of setting up EAP authentication for wifi through ISE. In my environment we use Meraki for the wireless infrastructure, ISE for radius and windows server 2019 as a certificate authority.

The following has been done:

1. Downloaded the Base 64 CA certificate from internal CA web enrollment
2. Import the CA certificate into ISE Trusted Certificates
3. Created a CSR in ISE
4. Copied the cert from the CSR pem file to request a certificate in the CA web enrollment. Used the Subordinate Certification Authority template.
5. Downloaded the certificate
6. Bind the certificate to the CSR in ISE for EAP authentication.

In the chain there is the CA root and the ISE server cert. I believe I am missing an intermediate certificate since it doesn't appear to be working.

How can I create an intermediate certificate on windows server 2019 CA? Also should I have used the Subordinate Certification Authority to create this certificate? If not which template should be used in this circumstance?

Thank you