rootCA ejbca-ce, subCA ejbca-ee collaboration

[ach2017]

Hi,

I'm trying to set up environment with rootCA running community edition 8.2.0.1, and subordinateCA running enterprise edition EJBCA 8.2.0.3. The root's only function is to sign key for the subCA.
subCA contains organizationIdentifier in it's DN (OID 2.5.4.97). I know it is a enterprise feature, and technically, it's not needed on the rootCA (except to issue subCA cert)
I cannot generate certificate for the subCA since rootCA doesn't recognize PKCS#10 which contains organizationIdentifier attribute. I have also tried to use rest api and submit certificate request through /ejbca/ejbca-rest-api/v1/certificate/certificaterequest but I also get error "error_code":400,"error_message":"Failed to generate certificate due to malformed CSR.

Is there any way to sign subCA key/ issue certificate while my rootCA is on CE? Thank you!