Are you using the Security Management Appliance (SMA) with your ESA deployment? That's a prerequisite for ESA integration with CTR as it provides the API capability. You also need to be running ESA 12.0 (or later).
If you have those, then refer to the following for details: