---
title: "SecTrustCreateWithCertificates(_:_:_:)"
framework: security
role: symbol
role_heading: Function
path: "security/sectrustcreatewithcertificates(_:_:_:)"
---

# SecTrustCreateWithCertificates(_:_:_:)

Creates a trust management object based on certificates and policies.

## Declaration

```swift
func SecTrustCreateWithCertificates(_ certificates: CFTypeRef, _ policies: CFTypeRef?, _ trust: UnsafeMutablePointer<SecTrust?>) -> OSStatus
```

## Parameters

- `certificates`: The certificate to be verified, plus any other certificates you think might be useful for verifying the certificate. The certificate to be verified must be the first in the array. If you want to specify only one certificate, you can pass a doc://com.apple.security/documentation/Security/SecCertificate object; otherwise, pass an array of doc://com.apple.security/documentation/Security/SecCertificate objects.
- `policies`: References to one or more policies to be evaluated. You can pass a single doc://com.apple.security/documentation/Security/SecPolicy object, or an array of one or more doc://com.apple.security/documentation/Security/SecPolicy objects. If you pass in multiple policies, all policies must verify for the certificate chain to be considered valid. You typically use one of the standard policies, like the one returned by doc://com.apple.security/documentation/Security/SecPolicyCreateBasicX509().
- `trust`: On return, points to the newly created trust management object. In Objective-C, call the doc://com.apple.documentation/documentation/CoreFoundation/CFRelease function to release this object when you are finished with it.

## Mentioned in

Configuring a Trust Creating a Trust Object

## Return Value

Return Value A result code. See Security Framework Result Codes.

## Discussion

Discussion The trust management object includes a reference to the certificate to be verified, plus pointers to the policies to be evaluated for those certificates. You can optionally include references to other certificates, including anchor certificates, that you think might be in the certificate chain needed to verify the first (leaf) certificate. Any input certificates that turn out to be irrelevant are harmlessly ignored. Call the SecTrustEvaluateWithError(_:_:) function to evaluate the trust management object. If you omit needed intermediate certificates from the certificates parameter, SecTrustEvaluateWithError(_:_:) searches for certificates in the user’s keychain and in the system’s store of anchor certificates (see SecTrustSetAnchorCertificates(_:_:)). You gain a significant performance benefit by passing in the entire certificate chain, in order, in the certificates parameter.