And yes, independent intermediate CA is only supported for configuration during installation. There is no documented procedure for converting an existing installation to use that config.