<!--
{
  "availability" : [
    "macCatalyst: 13.0.0 -",
    "macOS: 10.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "Security",
  "identifier" : "/documentation/Security/kSecTrustSettingsDefaultRootCertSetting",
  "metadataVersion" : "0.1.0",
  "role" : "Macro",
  "symbol" : {
    "kind" : "Macro",
    "modules" : [
      "Security"
    ],
    "preciseIdentifier" : "c:@macro@kSecTrustSettingsDefaultRootCertSetting"
  },
  "title" : "kSecTrustSettingsDefaultRootCertSetting"
}
-->

# kSecTrustSettingsDefaultRootCertSetting

A value indicating the default root certificate trust settings when used as a certificate object in a trust settings API function.

```
#define kSecTrustSettingsDefaultRootCertSetting
```

## Discussion

Use this value with the [`SecTrustSettingsSetTrustSettings(_:_:_:)`](/documentation/Security/SecTrustSettingsSetTrustSettings(_:_:_:)) function to set the default trust settings for root certificates. When evaluating trust settings for a root certificate in a given domain, if no matching explicit trust settings exist for that certificate, then the default value for the effective trust setting is returned (assuming that a default has been set and that the result is not [`SecTrustSettingsResult.unspecified`](/documentation/Security/SecTrustSettingsResult/unspecified)).

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)