...

CA.generateNewIntermediateCA

During the interactive creation, use a CN like "eduroam Managed IdP Central Issuing CA G1" (you have to do this twice, once for RSA and once for ECDSA).

Specific Instructions to make CAT instance a Managed IdP one

...