To create a trusted root container, call NPKICreateTrustedRootContainer. Trusted root containers can be created within any other container.See the sample implementation of this task in CreateTrustedRootContainer .