Hikit uses "certmgr.exe -add GlobalSign.cer -c -s -r localMachine Root" and "certmgr.exe -add GlobalSign.cer -c -s -r localMachineTrustedPublisher" to install a self-generated certificate to the local trust store as a root CA and Trusted Publisher.