To add a trusted root to a trusted root container, call NPKICreateTrustedRoot. Trusted root objects can only be created in a trusted root container.
IMPORTANT:The trusted root container must already exist.
See the sample implementation of these tasks in the CreateTrustedRoot .