<div class="content" name="RRPC_FWAddAuthenticationSet2_20" uuid="b098dcdb-7058-470d-ba9d-f042dec221c0"><p>The RRPC_FWAddAuthenticationSet2_20 method requests the
server to add the authentication set in the policy contained in the policy
store referenced by the handle specified in the <b>hPolicy</b> parameter. The
method is only supported for binary version 0x0214.</p><dl>
<dd>
<div><pre> unsigned long RRPC_FWAddAuthenticationSet2_20(
   [in] FW_CONN_HANDLE rpcConnHandle,
   [in] FW_POLICY_STORE_HANDLE hPolicy,
   [in] PFW_AUTH_SET pAuth,
   [out] FW_RULE_STATUS* pStatus
 );
</pre></div>
</dd></dl><p><b>rpcConnHandle: </b>This parameter is an <span><a href="d891304d-92d8-4f9f-9e60-a1f02b28ae30#gt_8a7f6700-8311-45bc-af10-82e10accd331" data-linktype="relative-path">RPC</a></span>
binding handle that connects to the RPC interface of the Firewall and Advanced
Security Protocol.</p><p><b>hPolicy: </b>This input parameter is an <span><a href="88f6ea4a-a946-4747-bb93-f142f1760752" data-linktype="relative-path">FW_POLICY_STORE_HANDLE</a></span>
data type. The data type MUST contain an opened policy store handle,
successfully opened with the RRPC_FWOpenPolicyStore (Opnum 0) method. The
handle MUST have read/write access rights.</p><p><b>pAuth: </b>This parameter represents the
authentication set the client wants to add to the store. The set MUST be valid,
as specified in the definition of the <span><a href="bbec7ab7-0a1d-49a4-9c8e-a4784bbe6f16" data-linktype="relative-path">FW_AUTH_SET</a></span> data
type.</p><p><b>pStatus: </b>This output parameter is the status
code of the rule as specified by the <span><a href="c4fd81e6-38dd-47c5-8a0f-a98a11cf190e" data-linktype="relative-path">FW_RULE_STATUS</a></span>
enumeration. This field is filled out on return.</p><p><b>Return Values: </b>The method returns 0 if
successful; if failed, it returns a nonzero error code. The field can take any
specific error code value, as specified in <span><a href="../ms-erref/1bc92ddf-b79e-413c-bbaa-99a5281a6c90" data-linktype="relative-path">[MS-ERREF]</a></span>.
The following return values are common.</p><dl>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Return value/code</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>0x000000B7 ERROR_ALREADY_EXISTS</td>
  <td>The specified set has a set ID that already exists in the specified store.</td>
 </tr><tr>
  <td>0x00000032 ERROR_NOT_SUPPORTED</td>
  <td>The specified store does not support this method; the store might be read-only.</td>
 </tr><tr>
  <td>0x00000005 ERROR_ACCESS_DENIED</td>
  <td>The hPolicy handle was not opened with read/write access rights. The error is also returned if the client does not have the required credentials to call the method.</td>
 </tr><tr>
  <td>0x00000057 ERROR_INVALID_PARAMETER</td>
  <td>One of the parameters of this method is incorrect, or is required and not specified. This error can be returned because:  The pAuth object did not pass the firewall rule validations specified in the definition of the FW_AUTH_SET data type.  One of the required values is not specified.</td>
 </tr></tbody></table>
</dd></dl><p><b>Exceptions Thrown:</b> No exceptions are thrown
beyond those thrown by the underlying RPC protocol, as specified in <span><a href="../ms-rpce/290c38b1-92fe-4229-91e6-4fc376610c15" data-linktype="relative-path">[MS-RPCE]</a></span>.
</p><p>This method adds a firewall rule in the firewall linked list
of the memory representation of the store being modified. It also writes
through and saves the rule in disk. If the method is called on an online store,
the firewall rule is also enforced.</p><p>The server MUST validate the client credentials to the
administrator or network operator before executing this method.</p></div>