You can use an enterprise root certificate to sign server identity files.
For server authentication, you generate identity files for each server. Since these certificates are signed by an enterprise root certificate, you use the createcert -s option.
For information about generating signed identity files, see Certificate creation utility [createcert].