AzStackHci.EnvironmentChecker

10.2609.0.2002

AzStackHCIDNS/AzStackHci.DNS.psm1

                                <#############################################################

 #                                                           #

 # Copyright (C) Microsoft Corporation. All rights reserved. #

 #                                                           #

 #############################################################>

Import-LocalizedData -BindingVariable lDNSTxt -FileName AzStackHci.DNS.Strings.psd1

Import-Module $PSScriptRoot\AzStackHci.DNS.Helpers.psm1 -DisableNameChecking -Global

function Invoke-AzStackHciDNSValidation

{

    <#

    .SYNOPSIS

        Perform DNS Validation for Azure Local

    .DESCRIPTION

        Perform a series of DNS validation tests to ensure the environment is ready for Azure Local.

    .EXAMPLE

        $nodes = @('node1','node2','node3')

        $nodeips = @('192.168.100.1','192.168.100.2','192.168.100.3')

        $PsSession = New-PSSession -ComputerName $nodes -Credential (Get-Credential)

        Invoke-AzStackHciDNSValidation -PsSession $PsSession -ExternalName management.azure.com -PhysicalMachineNames v-host1,v-host2,v-host3 -ClusterName s-cluster -NodeManagementIpAddresses $nodeips -DomainFQDN activedirectory.contoso.local -DomainCredential (Get-Credential) -Exclude Test-LocalIdentityExternalDNS

        # Run validation againt node1, node2 and node3 for a Azure Local in active directory domain.

    .PARAMETER PsSession

        Specify the PsSession(s) used to validation from.

    .PARAMETER ExternalName

        Specify the external domain name to resolve.

    .PARAMETER PhysicalMachineNames

        Only for Local Identity with customer provided DNS scenario, specify the physical machine host names.

    .PARAMETER ClusterName

        Only for Local Identity with customer provided DNS scenario, specify the cluster name.

    .PARAMETER NodeManagementIpAddresses

        Only for Local Identity with customer provided DNS scenario, specify the list of each node's management IP address.

    .PARAMETER PassThru

        Return PSObject result.

    .PARAMETER HardwareClass

        Hardware class: Small, Medium, or Large.

    .PARAMETER ClusterPattern

        Hardware class: Standard, Stretch, or RackAware.

    .PARAMETER OutputPath

        Directory path for log and report output.

    .PARAMETER CleanReport

        Remove all previous progress and create a clean report.

    .INPUTS

        Inputs (if any)

    .OUTPUTS

        Output (if any)

    #>

    [CmdletBinding()]

    param (

        [Parameter(Mandatory = $false, HelpMessage = "Specify the PsSession(s) used to validation from.")]

        [System.Management.Automation.Runspaces.PSSession[]]

        $PsSession,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the external domain name to resolve.")]

        [string]

        $ExternalName = 'microsoft.com',

        [Parameter(Mandatory=$false, HelpMessage = "Specify the physical machine host names.")]

        [string[]]

        $PhysicalMachineNames = $null,

        [Parameter(Mandatory=$false, HelpMessage = "Specify the list of each node's management IP address.")]

        [hashtable]

        $PhysicalMachineIpMap,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the cluster name.")]

        [string]

        $ClusterName = $null,

        [Parameter(Mandatory = $false, HelpMessage = "Specify the IP address that Azure Local reserves for the cluster name (CNO). This is the first IP address of the infrastructure network range allocated for the system, reserved automatically by the platform.")]

        [string]

        $ClusterIP = $null,

        [Parameter(Mandatory = $false, HelpMessage = "Enter the FQDN of the domain to be validated. For local identity scenario, enter the DNS zone name.")]

        [string]

        $DomainFQDN,

        [Parameter(Mandatory = $false, HelpMessage = "Enter the domain credential to be used for validation. For local identity scenario, enter the local admin credential.")]

        [pscredential]

        $DomainCredential,

        [Parameter(Mandatory = $false, HelpMessage = "Specify if the environment deployed with identity provider: Local Identity")]

        [switch]

        $IsLocalIdentityEnvironment = $false,

        [Parameter(Mandatory = $false, HelpMessage = "Only for Local Identity scenario, specify if an external DNS server was configured to maintain host node records.")]

        [switch]

        $LocalIdentityConfiguredExternalDNSServer = $false,

        [Parameter(Mandatory = $false, HelpMessage = "Tests to include.")]

        [ArgumentCompleter({ Get-TestListByFunction -ModuleName AzStackHci.DNS.Helpers })]

        [ValidateScript({ $_ -in (Get-TestListByFunction -ModuleName AzStackHci.DNS.Helpers) })]

        [string[]]

        $Include,

        [Parameter(Mandatory = $false, HelpMessage = "Tests to exclude.")]

        [ArgumentCompleter({ Get-TestListByFunction -ModuleName AzStackHci.DNS.Helpers })]

        [ValidateScript({ $_ -in (Get-TestListByFunction -ModuleName AzStackHci.DNS.Helpers) })]

        [string[]]

        $Exclude = @(),

        [Parameter(Mandatory = $false, HelpMessage = "Return PSObject result.")]

        [switch]

        $PassThru,

        [Parameter(Mandatory = $false, HelpMessage = "Hardware class: Small, Medium, or Large")]

        [ValidateSet('Small','Medium','Large')]

        [String]

        $HardwareClass = "Medium",

        [Parameter(Mandatory = $false, HelpMessage = "Cluster Pattern: Standard, Stretch, or RackAware")]

        [ValidateSet('Standard','Stretch','RackAware')]

        [String]

        $ClusterPattern = "Standard",

        [Parameter(Mandatory = $false, HelpMessage = "Directory path for log and report output")]

        [string]$OutputPath,

        [Parameter(Mandatory = $false, HelpMessage = "Remove all previous progress and create a clean report")]

        [switch]$CleanReport = $false,

        [Parameter(Mandatory = $false, HelpMessage = "Indicating Operation Type")]

        [ValidateSet('AddNode','Deployment','Upgrade', 'PreUpdate', 'SiteAssessment')]

        [String]$OperationType = "Deployment"

    )

    try

    {

        $script:ErrorActionPreference = 'Stop'

        Set-AzStackHciOutputPath -Path $OutputPath

        Write-AzStackHciHeader -invocation $MyInvocation -params $PSBoundParameters -PassThru:$PassThru

        # Call/Initialise reporting

        $envcheckerReport = Get-AzStackHciEnvProgress -clean:$CleanReport

        $envcheckerReport = Add-AzStackHciEnvJob -report $envcheckerReport

        Write-Progress -Id 1 -Activity "Checking AzStackHci Dependancies" -Status "Environment Configuration" -PercentComplete 0 -ErrorAction SilentlyContinue

        # Accumulate exclusions in a local list. Appending directly to the $Exclude parameter would

        # re-trigger its [ValidateScript] attribute on every assignment, which throws when a resolved

        # test list does not (yet) contain the appended name.

        $excludeList = @()

        if ($Exclude) { $excludeList += $Exclude }

        # if add node or update, skip local cluster and ad integrated dns test

        if (($OperationType -eq 'AddNode' -or $OperationType -eq 'PreUpdate'))

        {

            $excludeList += 'Test-LocalClusterDNSResolution','Test-IPMapForClusterNodes','Test-IPMapForCNO'

        }

        Log-Info "IsLocalIdentityEnvironment: $IsLocalIdentityEnvironment LocalIdentityConfiguredExternalDNSServer: $LocalIdentityConfiguredExternalDNSServer"

        # do not test AD for local identity scenario

        if ($IsLocalIdentityEnvironment)

        {

            $excludeList += 'Test-ActiveDirectoryDomainName'

            # do not test DNS for internal dns local identity configuration

            if (-not $LocalIdentityConfiguredExternalDNSServer)

            {

                $excludeList += 'Test-LocalClusterDNSResolution','Test-IPMapForClusterNodes','Test-IPMapForCNO'

            }

        }

        # Test-IPMapForCNO validates the REQUIRED pre-registration of the cluster name (CNO) DNS

        # record. That requirement only exists for local identity (ADLess) deployments that use an

        # external DNS server: there the operator must pre-create the record because the cluster

        # cannot register it against a DNS server it does not own. With AD-integrated DNS the cluster

        # registers its own CNO record at bring-online, and with local identity + internal DNS the DNS

        # server does not yet exist during validation - so in every other case the check does not

        # apply and is excluded (not run) rather than reported.

        if (-not ($IsLocalIdentityEnvironment -and $LocalIdentityConfiguredExternalDNSServer))

        {

            $excludeList += 'Test-IPMapForCNO'

        }

        $testList = Get-TestListByFunction -ModuleName AzStackHci.DNS.Helpers

        $script:envchktestList = Select-TestList -Include $Include -Exclude $excludeList -TestList $TestList

        $totalTestCount = ($script:envchktestList).Count

        # Run validation

        $i = 0

        $Result = @()

        $ProgressActivity = "Checking AzStackHci DNS Compatibility"

        if ($PsSession)

        {

            $ProgressStatus = "Testing $($PsSession.ComputerName -join ',')"

            $progressParams = @{

                Id          = 1

                Activity    = $ProgressActivity

                Status      = $ProgressStatus

                ErrorAction = 'SilentlyContinue'

            }

            :noTestsBreak foreach ($test in $script:envchktestList)

            {

                $OpMsg = "Checking {0} on {1}" -f $test, ($PsSession.ComputerName -join ',')

                Log-Info -Message $OpMsg

                Write-Progress @progressParams -CurrentOperation $OpMsg -PercentComplete (($i++ / $TotalTestCount) * 100)

                $invokeParameters = @{}

                Get-Command $test | Select-Object -ExpandProperty Parameters | Select-Object -ExpandProperty Keys | ForEach-Object {

                    if ($PSBoundParameters[$PSITEM]) {

                        $invokeParameters += @{

                            $PSITEM = $PSBoundParameters[$PSITEM]

                        }

                    }

                }

                $Result += Start-ValidatorTest -TestName $test -Parameters $invokeParameters -ValidatorName 'DNS' -EnableTelemetry

            }

        }

        else

        {

            $i = 0

            $ProgressStatus = "Testing $ENV:ComputerName"

            $progressParams = @{

                Id          = 1

                Activity    = $ProgressActivity

                Status      = $ProgressStatus

                ErrorAction = 'SilentlyContinue'

            }

            Write-Progress @progressParams

            :noTestsBreak foreach ($test in $script:envchktestList)

            {

                $OpMsg = "Checking {0} on {1}" -f $test, $ENV:ComputerName

                Log-Info -Message $OpMsg

                Write-Progress @progressParams -CurrentOperation $OpMsg -PercentComplete (($i++ / $TotalTestCount) * 100)

                $invokeParameters = @{}

                Get-Command $test | Select-Object -ExpandProperty Parameters | Select-Object -ExpandProperty Keys | ForEach-Object {

                    if ($PSBoundParameters[$PSITEM]) {

                        $invokeParameters += @{

                            $PSITEM = $PSBoundParameters[$PSITEM]

                        }

                    }

                }

                $Result += Start-ValidatorTest -TestName $test -Parameters $invokeParameters -ValidatorName 'DNS' -EnableTelemetry

            }

        }

        # Feedback results - user scenario

        if (-not $PassThru)

        {

            Write-Host 'DNS Results'

            Write-AzStackHciResult -Title 'DNS' -Result $Result

            Write-Summary -Result $Result -Property1 Detail

        }

        else

        {

            return $Result

        }

    }

    catch

    {

        Log-Info -Message "" -ConsoleOut

        Log-Info -Message "$($_.Exception.Message)" -ConsoleOut -Type Error

        Log-Info -Message "$($_.ScriptStackTrace)" -ConsoleOut -Type Error

        $cmdletException = $_

        throw $_

    }

    finally

    {

        $Script:ErrorActionPreference = 'SilentlyContinue'

        # Write result to telemetry channel

        foreach ($r in $result)

        {

            Write-ETWResult -Result $r

        }

        # Write validation result to report object and close out report

        $envcheckerReport | Add-Member -MemberType NoteProperty -Name 'DNS' -Value $Result -Force

        $envcheckerReport = Close-AzStackHciEnvJob -report $envcheckerReport

        Write-AzStackHciEnvReport -report $envcheckerReport

        Write-AzStackHciFooter -invocation $MyInvocation -Exception $cmdletException -PassThru:$PassThru

    }

}

# SIG # Begin signature block

# MIInQQYJKoZIhvcNAQcCoIInMjCCJy4CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA9TrBeOEB87rGk

# a3GzBhtxith6DzZiBGKagtLXBqI8faCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ

# KoZIhvcNAQkEMSIEIGXD0flqm7d84Xg3grqnzG1vmwUhQF5dWpCd2t0v64fQMEIG

# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAMMB0dxTSLE/fXkiG

# WyWmfp70c9Zn9RmeI6wDYFVaG0MVJaJGjwQSwRVvdfS1TR05vqf6xYOnEjI8a8zB

# /mjsB6SdHnDIFeegSio5oKNQH5Kqdd5FAQncCZoVuKCVrE9svvL9wB6p7PzZ6EwV

# zLbUvyrLd13XlcuZ/bWqSpvP0gpKlG+iWCEHi++D2PpQdNpx4baZ/EiOu5sIfWHe

# ujTp0leYVGKQqLdeCqvz8b8T5jY9548AkLWjHy3W5pb+1cGf5S0V+LF5jbYKskYk

# lgliQXmo3Yn2d4ShmbcpHqWcXm3C6t1x8hHPv8MeFDNlifu5GiiUepK/5QZ7GwUj

# u1mOCqGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4Yw

# gheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF

# MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCABQKQhEO5fBKoq

# Z5UtSOEk7F3roifiNCyeV3wCuP6aKQIGaokHds/lGBMyMDI2MDgyNzE2Mzg0OC4w

# ODdaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0MzFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIF

# EKADAgECAhMzAAACHUvAkoc4hX45AAEAAAIdMA0GCSqGSIb3DQEBCwUAMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgzM1oXDTI2MTEx

# MzE4NDgzM1owgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn

# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjQzMUEtMDVFMC1EOTQ3MSUwIwYDVQQD

# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEAorSgaAA8oOl4ph574zw29egUN8DDepRHLX8FM1zHNJmX

# G6KrSqUKwzcKafopuYdPTETTCvb9aJfESuAU0iGNUFI/D6R0kvdfpe2oPX+E3sbT

# QvGi4JPH5qdIYUaJ45V/4bqe8eNvbWzpC+ZKjH193DeiI1XAI918JoQmBhlEXo/T

# on1721luZJgincsf5LjMY3jX84WyXUSX3dsS7h/7xVI+w1yjg7pa+0y3o/me2Tsv

# 6UJUdSTQap5ORGSfCnclnP1z3IiiWIWr3Vo7aIPWsgJzq3m5GxpxUHCQk8qzUhk5

# 0y/uB+LGE3WIK2C77iy9iFsSfSLUnyMEzGRDW9mXHT4PH7Ozz6CHqQEiNvwcHqlv

# lCh1pHQh1NXQSAqOoVBs5mi6easf6yxWTfe5DrR79503r8pU6VqC2Y9XMRU4wH9Q

# bYXYsIUZ33Jmndy22W1LBDAbxBPQHCBlncGDU3BgdhVUVLe80mggFO98FdkWho67

# w4kPdCTRkvdvkY8PrQYE/nQjHXCa0g7LcMttZb6ejMHfQ+tUWXv6+nZ4Ynkr2Oka

# xclFCw4RIYNMWD26AWbQj/WEdzga18fKtw66L5gzXPza6jFBfPJeKE3H8QAuwpir

# mH4ms+5nUjNNQOmNgqJn0U1+3Yn7ClswD79YN0r3fdbYBMDApBZJpNlK7q7HXRsC

# AwEAAaOCAUkwggFFMB0GA1UdDgQWBBSEWfBxNEamZtXm8gl92Yq80jfxXTAfBgNV

# HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU

# aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG

# CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV

# HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH

# gDANBgkqhkiG9w0BAQsFAAOCAgEAkdweB4yxvLspLKq0D+miyD4Q0EcxVFpNZuJx

# iR54gWRkeTDDuymNeB03JhlsBpbwSYJ5uZSgDBCvwHED2VL8lJpFlOprJzxsXWC2

# NTfA+O+PO5Fk5jw6LHh6jeBADDEdQAx3Hqi7Zm0JwvQ93z5f6dtxkm29WqOcHYXR

# XfAQwy1hSrLXyfeblqR66jpP/9n0fCkWU4ggsUjQpQ2Ngj1DV09J4Y3y7p9Nd81+

# Xs6qYo++7RKm8qiB/5NDeigOLjlAeFgiEXIRUJW+mJyqpQw+OORlaqcFjR8Hu0G+

# /7bMdek68YX+kPpDBk7Ue+I/xgiYJ1xcDRBn/vczLtN72+RIlD4UgXYLuBSCk//p

# DEPX5z39Cr+rkc6E4Y28FPk4BhloAyvp628P4xfElQY8TcxraUbZShypocE6ny95

# D1K1BkltZmrHVKCxmglnuOlM15NKIrXFlXCzdqpCtIwQ417wNAVF/QDPvzzbumPd

# Ti6fb0tLbScYobV6zvbBsMsKEME4Tj1b9oIXC8dybJq4nbboEXYpRwi1QAbpSNrn

# +PxGW9uf1q63FnMJu4gm3Oh63njW/iVf723quzyHrSijWMgY0HiRiHQi0Jyu0h8M

# dhRUp7mxbmLQckPiOFwAlIaUN/k725y/aLWpkRU6fqmLlEOyH5WpyLd23AYy9r8v

# +Qoba6swggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3

# DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw

# MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx

# MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/

# XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1

# hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7

# M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K

# Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy

# 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80

# 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc

# NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha

# YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL

# iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV

# 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG

# CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp

# zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT

# MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI

# KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG

# MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a

# GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br

# aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG

# AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN

# AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1

# OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA

# A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz

# aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L

# GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m

# Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0

# SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko

# JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm

# PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482

# 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7

# vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCC

# Aj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0MzFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO

# AwIaAxUAuoO+BKbfXzqyfi9GLEdWHkCLeT+ggYMwgYCkfjB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO46xaUwIhgPMjAyNjA4

# MjcxNDE4MTNaGA8yMDI2MDgyODE0MTgxM1owdDA6BgorBgEEAYRZCgQBMSwwKjAK

# AgUA7jrFpQIBADAHAgEAAgJSNjAHAgEAAgIS5zAKAgUA7jwXJQIBADA2BgorBgEE

# AYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYag

# MA0GCSqGSIb3DQEBCwUAA4IBAQBO5oUGZO355cbftkZ26fusggGwT7nQwUEJuQ0w

# tRc0vBZb6TJy/kN+9Jb/F85Fvh0zHcoWWKBWRCtwVTEIsuNZhjuGWnPFHJ5HN6VI

# m9xrdJkpu0ytu7ZbYyvdj+durzmdmNhXE9IcoEWdUPcaLHLxKAVLQEDaZK48j3uz

# zoO8rAYgi4kkD2QTHctnuFc5W6St0sA1Jih9dm1XCC99Ti3Wi2OL+QNW63BhpUP+

# cJOUBwacCXWs3MRZivnGWSOjm2DOnrTLUGABxWgdsQmiXu/nsRDcy90V2jGJ9iNl

# QTyXcZIMiRayLpta7YfbiHkOMF/EBx91b4f+dEOTTZPLLX5hMYIEDTCCBAkCAQEw

# gZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE

# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIdS8CShziFfjkA

# AQAAAh0wDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0B

# CRABBDAvBgkqhkiG9w0BCQQxIgQgfOSGt4tNRdnpHrXCh/0zT+9CGy6XUJqWyFoB

# OEoXrJowgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCxtpXMXEiLJzrqM77e

# p4rTNwrMOj6gpWN9hZvpj5QFUTCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwAhMzAAACHUvAkoc4hX45AAEAAAIdMCIEICaTFUsZJtalnhoo2R3y

# 5jmvPhYWya1E4mifn6uVpxpwMA0GCSqGSIb3DQEBCwUABIICAGVg94M5uYfU4G2a

# j9nSA7M0m7fIAur6qo5iONgZiCic5ig+HnodII9nnQubdvcPt0ZKxybU/VLrK8bN

# NL/T7AUsSZE+/JhCQhOapGLpWf8znPaIfnMHU52p040nwlLcom8bJP+SneajY3Cd

# aVrLyxnHj95/MjFX7OlV6QdgDH1IscdlaR5cb2teJ85fTJdMyUeibggU8BJbrAFp

# RErmk0b/j4n+i9Bm8eMrt0mjZ0Xt695aKMG8/uMKtXY8Ol4CbAhxzYMppwMaGR1s

# +DcIXhIoGOg6v/GhpWnVaZ9YW/1EqNCztfUowcJkOX0QUSGLnuLhukva9dVhnucS

# YCn7nIrnXQ/9VlnBof7L1KjoxEa3K2OEqFZEI8kr/0+8245G4ewGuyDDZ1L1AiXu

# CAt2hhKITI7l0NA57hEABiV9nU/ucWbV6wtRQDZa6HmmrFSpdDKmrKmxdF6LUR/E

# h/SM2ziOeHbtqEHZN2U/cBRoNcPjzySwyKz5DdyXY0HzdV6BqzNUSd8RYYS+/9zv

# Zev2/OdUDCz+c9YYvnEi7QcXlFLFZfB56suCXtY6Q5Zpp1GTR3WyuGGNF0Jcl8ho

# svnZ2knfR8GcvrQgdefA31JMdyDbjXB3beik+RUlKCZDCc1B/0vV4UPHq4WcQlFL

# uT3VTrhYt+OMfe+E2RfyZkm1940p

# SIG # End signature block