When WPP run locally on the Wsus server, if the user ask for generate a self-signed certificate, then the generated certificate is automatically imported in the "Trusted Publisher" store and the "Trusted Root Authorities" store of the server.
/!\ This doesn't exempt the user to import the certificate in these stores on client computers !
/!\ This doesn't exempt the user to import the certificate in these stores on client computers !