AzStackHCICloud/AzStackHci.Cloud.Helpers.psm1
<#############################################################
# # # Copyright (C) Microsoft Corporation. All rights reserved. # # # #############################################################> Import-LocalizedData -BindingVariable lanTxt -FileName AzStackHci.Cloud.Strings.psd1 function Test-AzStackHciHDD { try { $severity = 'CRITICAL' $hddDisks = Get-PhysicalDisk | Where-Object { $_.MediaType -eq 'HDD' } if ($hddDisks) { $detail = "Found the following HDD(s):" Log-Info $detail foreach ($disk in $hddDisks) { $detail = " - $($disk.FriendlyName)" Log-Info $detail } $status = 'FAILURE' $detail = $lanTxt.HDDNotSupported Log-Info $detail -Type $severity } else { $status = 'SUCCESS' $detail = "HDD check passed. No HDD disks found." Log-Info $detail } $params = @{ Name = 'AzStackHci_CloudValidation_HDDCheck' Title = 'HDD Check' DisplayName = 'HDD Check' Severity = $severity Description = 'Checking for unsupported HDD' Tags = @{} Remediation = 'Remove any HDD from nodes to ensure compliance' TargetResourceID = "Node_PhysicalDisks" TargetResourceName = "Node_PhysicalDisks" TargetResourceType = "Node_PhysicalDisk" Timestamp = [datetime]::UtcNow Status = $Status AdditionalData = @{ Source = $env:computername Resource = 'Node_PhysicalDisks' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } HealthCheckSource = $ENV:EnvChkrId } New-AzStackHciResultObject @params } catch { throw ("Error in Test-AzStackHciHDD: $_") } } function Test-AzStackHciSwitchNameCompare { try { # Initialize variables $severity = 'CRITICAL' $Status = 'SUCCESS' # Default to success # Retrieve the external VMSwitch name $switchName = Get-VMSwitch | Where-Object { $_.SwitchType -eq 'External' } | Select-Object -ExpandProperty Name # Extract name if parentheses are present if ($switchName -match '\((?<inside>.*?)\)') { $switchName = $matches['inside'] } # Parse unattend file $unattendFile = Join-Path -Path $env:SystemDrive -ChildPath 'CloudDeployment\DeploymentData' | Join-Path -ChildPath 'Unattended.json' $json = Get-Content -Path $unattendFile -Raw | ConvertFrom-Json $unattendHostNetwork = $json.ScaleUnits.DeploymentData.HostNetwork.Intents # Find the Management network and retrieve the switch name $mgmtIntent = $unattendHostNetwork | Where-Object { $_.TrafficType.Contains("Management") } $mgmtIntentName = $mgmtIntent[0].Name # Compare the switch names if ($switchName -ne $mgmtIntentName) { # Names do not match, log and set status to FAILURE $Status = 'FAILURE' $detail = "The switch names do not match. Expected: '$mgmtIntentName', Found: '$switchName'" Log-Info $detail -Type $severity } else { # Names match, log and set status to SUCCESS $detail = "The switch names match. Expected: '$mgmtIntentName', Found: '$switchName'" Log-Info $detail } # Prepare the result parameters $params = @{ Name = 'AzStackHci_CloudValidation_SwitchNameCompare' Title = 'Switch Name Compare' DisplayName = "Switch Name Compare" Severity = $severity Description = 'Checking Switch Names on Seed Node' Tags = @{} Remediation = 'Ensure the Switch name in Unattended.json matches Seed Node' TargetResourceID = "Seed_Node_Management_Switch" TargetResourceName = "Seed_Node_Management_Switch" TargetResourceType = "Seed_Node_Management_Switch" Timestamp = [datetime]::UtcNow Status = $Status AdditionalData = @{ Source = $env:computername Resource = 'Seed_Node_Management_Switch' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } HealthCheckSource = $ENV:EnvChkrId } New-AzStackHciResultObject @params } catch { throw ("Error in Test-AzStackHciSwitchNameCompare: $_") } } function Test-AzStackHciSeedNode { try { $severity = 'CRITICAL' $Status = 'SUCCESS' # Default to success $unattendFile = Join-Path -Path $env:SystemDrive -ChildPath 'CloudDeployment\DeploymentData' | Join-Path -ChildPath 'Unattended.json' $json = Get-Content -Path $unattendFile -Raw | ConvertFrom-Json $unattendNodes = $json.ScaleUnits.DeploymentData.PhysicalNodes.Name | Sort-Object $seedNode = $unattendNodes[0] # Check if the Seed Node is hosting a virtual machine if ((Get-ComputerInfo).CsName -ne $seedNode) { $Status = 'FAILURE' $detail = $lanTxt.SeedNode Log-Info $detail -Type $severity } else { $detail = "The Environment Checker is running on the Seed Node: $seedNode" Log-Info $detail # Check if IRVM01 is running on the Seed Node $vmName = "IRVM01" # Get list of running virtual machines on the Seed Node $vms = Get-VM -ComputerName $seedNode # Check if VM01 is in the list of VMs on the Seed Node $vmPresent = $vms | Where-Object { $_.Name -eq $vmName } if ($vmPresent) { $detail = "Cloud Appliance is running on the Seed Node." Log-Info $detail } else { $Status = 'FAILURE' $detail = $lanTxt.CloudAppliance Log-Info $detail } } # Prepare the result parameters $params = @{ Name = 'AzStackHci_CloudValidation_SeedNode' Title = 'Seed Node Check' DisplayName = 'Seed Node Check' Severity = $severity Description = 'Checking if Seed Node is running validation' Tags = @{} Remediation = 'Ensure Seed Node is running validation' TargetResourceID = "Seed_Node" TargetResourceName = "Seed_Node" TargetResourceType = "Seed_Node" Timestamp = [datetime]::UtcNow Status = $Status AdditionalData = @{ Source = $env:computername Resource = 'Seed_Node' Detail = $detail Status = $status TimeStamp = [datetime]::UtcNow } HealthCheckSource = $ENV:EnvChkrId } New-AzStackHciResultObject @params } catch { throw ("Error in Test-AzStackHciSeedNode: $_") } } function Test-AzStackHciRootCert { [CmdletBinding()] param ( [Parameter(Mandatory = $true)] [System.Management.Automation.Runspaces.PSSession[]] $PsSession, [Parameter(Mandatory = $false)] [string] $DomainFQDN ) try { $url = "https://portal." + $DomainFQDN $rootCertSb = { param($url) $AdditionalData = @() $testResult = $true $status = "SUCCESS" $resource = $null $detail = $null try { $webRequest = [Net.WebRequest]::Create($url) $webRequest.GetResponse() | Out-Null $chain = [System.Security.Cryptography.X509Certificates.X509Chain]::Create() $chain.Build($webRequest.ServicePoint.Certificate) # Collect the certs and file paths in an array $certs = $chain.ChainElements | ForEach-Object { $cert = $_.Certificate $tempPath = Join-Path -Path $env:SystemDrive -ChildPath 'Temp' if (-not (Test-Path -Path $tempPath)) { New-Item -Path $tempPath -ItemType Directory } $path = Join-Path $tempPath -ChildPath "$($cert.Thumbprint).cer" # Export the cert to a .cer file $cert.Export([System.Security.Cryptography.X509Certificates.X509ContentType]::Cert) | Set-Content -Path $path -Encoding Byte [PSCustomObject]@{ Certificate = $cert Path = $path } } $myCerts = foreach ($item in $certs) { $item.Certificate } $certStore = Get-ChildItem -Path 'Cert:\LocalMachine\Root' foreach ($cert in $myCerts) { # Compare the thumbprint in the store $installedCert = $certstore | Where-Object { $_.Thumbprint -eq $cert.Thumbprint } if ($installedCert) { $foundRootCert = $true $testResult = $true $detail = "Root Certificate found" break } } if (-not $foundRootCert) { $testResult = $false $status = 'FAILURE' $detail = $detail = "Root Certificate ending in ***$($cert.Thumbprint[-7..-1] -join '') not found" } } catch { $detail = $_.Exception.Message $resource = "Error occurred in Environment Validator Root Cert test." $testResult = $false $status = 'FAILURE' } finally { $AdditionalData += @{ Pass = [bool]$testResult Status = $status Source = $ENV:COMPUTERNAME Resource = $resource Detail = $detail TimeStamp = [datetime]::UtcNow } } return $AdditionalData } $rootCertResult = @() foreach ($session in $PsSession) { Log-Info "Checking Root Cert on node $($session.ComputerName)" $rootCertificateOnNode = Invoke-Command -Session $session -ScriptBlock $rootCertSb -ArgumentList $url Log-Info "Got Root Cert validation results from $($session.ComputerName)" $rootCertValidationStatus = if($rootCertificateOnNode.Pass -eq $true) { 'SUCCESS' } else { 'FAILURE' } Log-Info "Root Cert validation status is $rootCertValidationStatus" $rootCertValidationDetailMessage = $rootCertificateOnNode.Detail $params = @{ Name = 'AzStackHci_CloudValidation_RootCert' Title = 'Root Certificate Check' DisplayName = 'Root Certificate Check' Severity = 'CRITICAL' Description = 'Checking for Root Certificate' Tags = @{} Remediation = 'Ensure Root Certificate is present' TargetResourceID = "Root_Certificate" TargetResourceName = "Root_Certificate" TargetResourceType = "Root_Certificate" Timestamp = [datetime]::UtcNow Status = $rootCertValidationStatus AdditionalData = @{ Source = $session.ComputerName Resource = 'RootCertificateValidation' Detail = $rootCertValidationDetailMessage Status = $rootCertValidationStatus TimeStamp = [datetime]::UtcNow } HealthCheckSource = $ENV:EnvChkrId } $rootCertResult += New-AzStackHciResultObject @params } return $rootCertResult } catch { throw ("Error in Test-AzStackHciRootCert: $_") } } Export-ModuleMember -Function Test-* # SIG # Begin signature block # MIIoQwYJKoZIhvcNAQcCoIIoNDCCKDACAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCSrv9cR5o5/D2q # 8YjQux6N0fcIPDrK2c8WSYOldmqQD6CCDXYwggX0MIID3KADAgECAhMzAAAEBGx0 # Bv9XKydyAAAAAAQEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p # bmcgUENBIDIwMTEwHhcNMjQwOTEyMjAxMTE0WhcNMjUwOTExMjAxMTE0WjB0MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB # AQC0KDfaY50MDqsEGdlIzDHBd6CqIMRQWW9Af1LHDDTuFjfDsvna0nEuDSYJmNyz # NB10jpbg0lhvkT1AzfX2TLITSXwS8D+mBzGCWMM/wTpciWBV/pbjSazbzoKvRrNo # DV/u9omOM2Eawyo5JJJdNkM2d8qzkQ0bRuRd4HarmGunSouyb9NY7egWN5E5lUc3 # a2AROzAdHdYpObpCOdeAY2P5XqtJkk79aROpzw16wCjdSn8qMzCBzR7rvH2WVkvF # HLIxZQET1yhPb6lRmpgBQNnzidHV2Ocxjc8wNiIDzgbDkmlx54QPfw7RwQi8p1fy # 4byhBrTjv568x8NGv3gwb0RbAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE # AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQU8huhNbETDU+ZWllL4DNMPCijEU4w # RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW # MBQGA1UEBRMNMjMwMDEyKzUwMjkyMzAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci # tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG # CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu # Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0 # MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAIjmD9IpQVvfB1QehvpC # Ge7QeTQkKQ7j3bmDMjwSqFL4ri6ae9IFTdpywn5smmtSIyKYDn3/nHtaEn0X1NBj # L5oP0BjAy1sqxD+uy35B+V8wv5GrxhMDJP8l2QjLtH/UglSTIhLqyt8bUAqVfyfp # h4COMRvwwjTvChtCnUXXACuCXYHWalOoc0OU2oGN+mPJIJJxaNQc1sjBsMbGIWv3 # cmgSHkCEmrMv7yaidpePt6V+yPMik+eXw3IfZ5eNOiNgL1rZzgSJfTnvUqiaEQ0X # dG1HbkDv9fv6CTq6m4Ty3IzLiwGSXYxRIXTxT4TYs5VxHy2uFjFXWVSL0J2ARTYL # E4Oyl1wXDF1PX4bxg1yDMfKPHcE1Ijic5lx1KdK1SkaEJdto4hd++05J9Bf9TAmi # u6EK6C9Oe5vRadroJCK26uCUI4zIjL/qG7mswW+qT0CW0gnR9JHkXCWNbo8ccMk1 # sJatmRoSAifbgzaYbUz8+lv+IXy5GFuAmLnNbGjacB3IMGpa+lbFgih57/fIhamq # 5VhxgaEmn/UjWyr+cPiAFWuTVIpfsOjbEAww75wURNM1Imp9NJKye1O24EspEHmb # DmqCUcq7NqkOKIG4PVm3hDDED/WQpzJDkvu4FrIbvyTGVU01vKsg4UfcdiZ0fQ+/ # V0hf8yrtq9CkB8iIuk5bBxuPMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq # hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x # EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv # bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 # IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG # EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG # A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg # Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC # CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03 # a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr # rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg # OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy # 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9 # sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh # dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k # A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB # w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn # Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90 # lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w # ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o # ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD # VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa # BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny # bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG # AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV # HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG # AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl # AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb # C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l # hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6 # I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0 # wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560 # STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam # ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa # J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah # XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA # 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt # Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr # /Xmfwb1tbWrJUnMTDXpQzTGCGiMwghofAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp # Z25pbmcgUENBIDIwMTECEzMAAAQEbHQG/1crJ3IAAAAABAQwDQYJYIZIAWUDBAIB # BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO # MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIMGy4HyjqVYeg6DdAnp1X0q1 # viGIGzgPWr04Lpqiowc1MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A # cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB # BQAEggEAZiQPO2aw9TJvJlx8U0/87HYSQQMpcfsnBv97uohDEzlgZkgxRn1O4hpZ # a8yaNMPEKPkGYUqoVKkfSWQ5qd/CiqEmCCLM/wg1i5xsOZMjR//NBnJe9++1CryY # mGid7uk0o1HhcfGxb1X5HqXPcsKB6OG/03hOeKwizRBQKIb3W/isSR9ChOBWL1aa # fkqePwC2ns+iVw/L12JN/jJrXPy8qrVUcWK01ZvwoaS78X3jQhLGYWykGap8LqqR # hf1lS4O6uNXvL9IL2ZUFs+uDr74R4vgdyCwGEAYKUA7HUy5l4HNk3j5E54Ow1YVA # j29it5fMTjjYEorREkFpcNjtOD83/6GCF60wghepBgorBgEEAYI3AwMBMYIXmTCC # F5UGCSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsq # hkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl # AwQCAQUABCB+3d3meIa9AXSfYdHP4raAOkJprgd7Yby8/tE3pp7KDwIGaC4KsIKb # GBMyMDI1MDYxMDE1NDgzNS45MzdaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl # bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT # Tjo0QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg # U2VydmljZaCCEfswggcoMIIFEKADAgECAhMzAAAB/xI4fPfBZdahAAEAAAH/MA0G # CSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u # MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp # b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0 # MDcyNTE4MzExOVoXDTI1MTAyMjE4MzExOVowgdMxCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9w # ZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjRDMUEt # MDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl # MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyeiV0pB7bg8/qc/mkiDd # JXnzJWPYgk9mTGeI3pzQpsyrRJREWcKYHd/9db+g3z4dU4VCkAZEXqvkxP5QNTtB # G5Ipexpph4PhbiJKwvX+US4KkSFhf1wflDAY1tu9CQqhhxfHFV7vhtmqHLCCmDxh # ZPmCBh9/XfFJQIUwVZR8RtUkgzmN9bmWiYgfX0R+bDAnncUdtp1xjGmCpdBMygk/ # K0h3bUTUzQHb4kPf2ylkKPoWFYn2GNYgWw8PGBUO0vTMKjYD6pLeBP0hZDh5P3f4 # xhGLm6x98xuIQp/RFnzBbgthySXGl+NT1cZAqGyEhT7L0SdR7qQlv5pwDNerbK3Y # SEDKk3sDh9S60hLJNqP71iHKkG175HAyg6zmE5p3fONr9/fIEpPAlC8YisxXaGX4 # RpDBYVKpGj0FCZwisiZsxm0X9w6ZSk8OOXf8JxTYWIqfRuWzdUir0Z3jiOOtaDq7 # XdypB4gZrhr90KcPTDRwvy60zrQca/1D1J7PQJAJObbiaboi12usV8axtlT/dCeP # C4ndcFcar1v+fnClhs9u3Fn6LkHDRZfNzhXgLDEwb6dA4y3s6G+gQ35o90j2i6am # aa8JsV/cCF+iDSGzAxZY1sQ1mrdMmzxfWzXN6sPJMy49tdsWTIgZWVOSS9uUHhSY # kbgMxnLeiKXeB5MB9QMcOScCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTD+pXk/rT/ # d7E/0QE7hH0wz+6UYTAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBf # BgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz # L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmww # bAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29m # dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUF # BwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAOSNN5MpLiyun # m866frWIi0hdazKNLgRp3WZPfhYgPC3K/DNMzLliYQUAp6WtgolIrativXjOG1lI # jayG9r6ew4H1n5XZdDfJ12DLjopap5e1iU/Yk0eutPyfOievfbsIzTk/G51+uiUJ # k772nVzau6hI2KGyGBJOvAbAVFR0g8ppZwLghT4z3mkGZjq/O4Z/PcmVGtjGps2T # CtI4rZjPNW8O4c/4aJRmYQ/NdW91JRrOXRpyXrTKUPe3kN8N56jpl9kotLhdvd89 # RbOsJNf2XzqbAV7XjV4caCglA2btzDxcyffwXhLu9HMU3dLYTAI91gTNUF7BA9q1 # EvSlCKKlN8N10Y4iU0nyIkfpRxYyAbRyq5QPYPJHGA0Ty0PD83aCt79Ra0IdDIMS # uwXlpUnyIyxwrDylgfOGyysWBwQ/js249bqQOYPdpyOdgRe8tXdGrgDoBeuVOK+c # RClXpimNYwr61oZ2/kPMzVrzRUYMkBXe9WqdSezh8tytuulYYcRK95qihF0irQs6 # /WOQJltQX79lzFXE9FFln9Mix0as+C4HPzd+S0bBN3A3XRROwAv016ICuT8hY1In # yW7jwVmN+OkQ1zei66LrU5RtAz0nTxx5OePyjnTaItTSY4OGuGU1SXaH49JSP3t8 # yGYA/vorbW4VneeD721FgwaJToHFkOIwggdxMIIFWaADAgECAhMzAAAAFcXna54C # m0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE # CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z # b2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZp # Y2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMy # MjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH # EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV # BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0B # AQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51 # yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY # 6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9 # cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN # 7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDua # Rr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74 # kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2 # K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5 # TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZk # i1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q # BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3Pmri # Lq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUC # BBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJl # pxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIB # FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y # eS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUA # YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw # MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov # L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w # Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/yp # b+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulm # ZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM # 9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECW # OKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4 # FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3Uw # xTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPX # fx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVX # VAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGC # onsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU # 5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG # ahC0HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl # bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT # Tjo0QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg # U2VydmljZaIjCgEBMAcGBSsOAwIaAxUAqROMbMS8JcUlcnPkwRLFRPXFspmggYMw # gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD # VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsF # AAIFAOvyPJIwIhgPMjAyNTA2MTAwNTA5MzhaGA8yMDI1MDYxMTA1MDkzOFowdDA6 # BgorBgEEAYRZCgQBMSwwKjAKAgUA6/I8kgIBADAHAgEAAgIItzAHAgEAAgITQTAK # AgUA6/OOEgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIB # AAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQCNyD4zuV+0RUo9 # 43V+LxYWVUuSQn6Mz4Wj7+liuwrfPydv+uyCITQ/COzrqteNiTaLe8rJ5fSNeTXD # XAoVIM2sNNEPEnHRUCJAuLJ/ggrewhNwbqNllRBz9KStw7+15Jp0ei6AWUSax1vr # /N3Uw/tM+gj98M4DfSQ95qJ1aDpdqTNtupHM8etcyPAFFZ5p+2q/LOQiak4Ao5r3 # X3mq37dvwo9oNKTnXksw/JKfbMJNmpnpPuMx5Mis2csHMDrk/s4xtFYT+rToSrHX # wnsjNhxy/HnqS4OW3Wo6BbhppecIh9pe1ziAlBFMIhp21ypbRp43HMMlLmZ2W35p # zhRFCv+WMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh # c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD # b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw # MTACEzMAAAH/Ejh898Fl1qEAAQAAAf8wDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqG # SIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgdEF3CuwAX192 # sOWgVrVkVjcgb5KtJbAxstKsaclaivgwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHk # MIG9BCDkMu++yQJ3aaycIuMT6vA7JNuMaVOI3qDjSEV8upyn/TCBmDCBgKR+MHwx # CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt # b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p # Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB/xI4fPfBZdahAAEAAAH/ # MCIEIG6FcWVClPi8jic5b7Ny8uf9wRXvXb4MXNfUNVWcizH8MA0GCSqGSIb3DQEB # CwUABIICAEvD1Oi3eTIg8Po1s8BqBKFi3lRTu5C8hkMby6Wbqkfom+zSLxlo+6f0 # bfSM1+Gz7CUnYnrHko6+ezkDYkaBE+AKJGMgcHNG1ZD+AmE9TnTgvpMQed6lEb71 # 4sEuaNfSZCEr8AUt0XnkO8gl8FBf4Mq4J+D1KXaMNlKgl6P0k4oxMm7dzuO6miPp # LPfNIzGt9c5Ef6aOkuhJvg2XrwBfRiTT0+EumAdU6fhI/nMQIh73+HkMUFAQqdcN # fnc3EiQs9FtCFvPpNOXitd2lWZMKj3eXRWSeBnjh2v58mNTmHYymGAECl92zlPCQ # Ruh+7l3kaqgMg1HH2HpUme5x+stiub8BgfhMf1kXpJ4BzEgVCsHoDv5S3Cu84hvQ # MMJsSyzoWcXOIQRRJqgf6p/kOKs2SOKMCxL1bNiU8PJN/KgPj4hqk1hAmNetjMja # NFwmweXhvE48yoj+OjkujffcdCQNWZjKY9gm16I08FPLg3xXZJTVhJAhccP19xg8 # S1GAjXZV5tUHbrtsx2xo4VvCjEy5+tx729nGeVqLi+G9WE5uwC+xX+2yKZcO+0dB # HKeVSaUP7GHnIdd0jP6y+N2fiq+fmSdIrajBz+pm1ny3dRSmppwzwiyLtfr/pbGs # B9k+zUlD9ByQG5M4tS/Hk22vVXt+QQSPJ1jaKzmfFEAIbYtcry82 # SIG # End signature block |