setup with Varkek-Core certs