AzStackHci.EnvironmentChecker

10.2609.0.2002

AzStackHCIDNS/AzStackHciDNS.psm1

                                <#############################################################

 #                                                           #

 # Copyright (C) Microsoft Corporation. All rights reserved. #

 #                                                           #

 #############################################################>

$MetaData = @{

    "OperationType" =  @("PreUpdate", "PreUpdateJIT") # PreUpdateJIT should be removed after 2508

    "UIName" = 'Azure Stack HCI DNS'

    "UIDescription" = 'Check Operating System requirements'

}

function Test-AzStackHciDNS

{

    param (

        [parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        $Parameters,

        [parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        $OperationType,

        [parameter(Mandatory = $false)]

        [ValidateSet('Small','Medium','Large')]

        [String]

        $HardwareClass = "Medium",

        [parameter(Mandatory = $false)]

        [ValidateSet('Standard','Stretch','RackAware')]

        [String]

        $ClusterPattern = "Standard",

        [parameter(Mandatory = $false)]

        [switch]

        $FailFast

    )

    try {

        $backupPSModuleAutoLoadingPreference = $PSModuleAutoLoadingPreference

        #region Disable module auto-loading and explicitly import modules needed.

        $PSModuleAutoLoadingPreference = [System.Management.Automation.PSModuleAutoLoadingPreference]::None

        Import-Module Microsoft.PowerShell.Utility -Verbose:$false

        Import-Module Microsoft.PowerShell.Management -Verbose:$false

        Import-Module Microsoft.PowerShell.Diagnostics -Verbose:$false

        Import-Module ActiveDirectory -Verbose:$false

        Import-Module DnsClient -Verbose:$false

        # Import Module via Helper in case this is update

        [EnvironmentValidator]::EnvironmentValidatorImport($Parameters)

        $ENV:EnvChkrOp = $OperationType

        [array]$DNSResult

        #region GetExternalName

        # Read RegistrationCloudName from ECE (matches Connectivity/ArcIntegration/ARBStack pattern).

        # Values: 'AzureCloud'/'AzureChinaCloud'/'AzureUSGovernment'/'AzureGermanCloud'/'Azure.local' (ADLO).

        try

        {

            $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration

            $AzureEnvironment = $cloudRole.PublicInfo.RegistrationCloudName

        }

        catch

        {

            Trace-Execution "Failed to read RegistrationCloudName from ECE Parameters: $_"

            $AzureEnvironment = $null

        }

        if ([string]::IsNullOrWhiteSpace($AzureEnvironment))

        {

            Trace-Execution "WARNING: RegistrationCloudName not available from ECE - defaulting to AzureCloud"

            $AzureEnvironment = 'AzureCloud'

        }

        Trace-Execution "Azure Environment is $AzureEnvironment"

        $ExternalName = switch ($AzureEnvironment)

        {

            'AzureCloud'

            {

                "management.azure.com"

            }

            'AzureChinaCloud'

            {

                "management.chinacloudapi.cn"

            }

            'AzureUSGovernment'

            {

                "management.usgovcloudapi.net"

            }

            'AzureGermanCloud'

            {

                "management.microsoftazure.de"

            }

            default

            {

                # Unmapped value (e.g. 'Azure.local' for ADLO, or a future sovereign). Fallback prevents

                # the empty-target crash inside Test-ExternalDnsResolution. ADLO is excluded below anyway.

                Trace-Execution "Unmapped RegistrationCloudName '$AzureEnvironment' - using microsoft.com as fallback"

                'microsoft.com'

            }

        }

        Trace-Execution "ExternalName is $ExternalName"

        #endregion

        # ---------------------------------------------------------------------

        # SiteAssessment (pre-hardware) early branch.

        # No PSSession to nodes (none exist); skip AD credential / IP-map / cluster

        # data lookups that require a finalized answer file. Run only:

        #   Test-ExternalDnsResolution    (always)

        #   Test-ActiveDirectoryDomainName (only when DomainFQDN is provided)

        # ---------------------------------------------------------------------

        if ($OperationType -eq 'SiteAssessment')

        {

            $saDomainFqdn = $null

            try { $saDomainFqdn = $Parameters.Roles["Domain"].PublicConfiguration.PublicInfo.DomainConfiguration.FQDN } catch {}

            $saInclude = @('Test-ExternalDnsResolution')

            if (-not [string]::IsNullOrWhiteSpace($saDomainFqdn))

            {

                $saInclude += 'Test-ActiveDirectoryDomainName'

            }

            $saParams = @{

                ExternalName    = $ExternalName

                OutputPath      = "$($env:LocalRootFolderPath)\MASLogs\"

                HardwareClass   = $HardwareClass

                ClusterPattern  = $ClusterPattern

                PassThru        = $true

                OperationType   = $OperationType

                Include         = $saInclude

            }

            if (-not [string]::IsNullOrWhiteSpace($saDomainFqdn))

            {

                $saParams['DomainFQDN'] = $saDomainFqdn

            }

            Trace-Execution "Starting DNS site-assessment with tests: $($saInclude -join ', ')"

            $DNSResult = AzStackHci.EnvironmentChecker\Invoke-AzStackHciDNSValidation @saParams

            if ([EnvironmentValidator]::ParseResult.OverloadDefinitions -match 'EceInterfaceParameters')

            {

                return [EnvironmentValidator]::ParseResult($DNSResult, 'DNS', $FailFast, $Parameters)

            }

            else

            {

                return [EnvironmentValidator]::ParseResult($DNSResult, 'DNS', $FailFast)

            }

        }

        #region common params for all operations

        $domainFQDN = $Parameters.Roles["Domain"].PublicConfiguration.PublicInfo.DomainConfiguration.FQDN

        $domainCredential = [EnvironmentValidator]::GetDomainAdminCredential($Parameters)

        $PhysicalMachineIpMap = Get-NetworkMgmtIPv4FromECEForAllHosts -Parameters $Parameters

        # Expected CNO IP = the first IP address of the infrastructure network range allocated for the

        # system. This is the address the platform reserves for the CNO and the one an ADLess +

        # external-DNS operator must pre-register the CNO record against.

        $expectedClusterIp = Get-InfraIpPoolStartAddress -Parameters $Parameters

        $Params = @{

            ExternalName = $ExternalName

            OutputPath = "$($env:LocalRootFolderPath)\MASLogs\"

            HardwareClass = $HardwareClass

            ClusterPattern = $ClusterPattern

            PassThru = $true

            DomainFQDN = $domainFQDN

            DomainCredential = $DomainCredential

            OperationType = $OperationType

            PhysicalMachineNames = $Parameters.Roles["BareMetal"].PublicConfiguration.Nodes.Node.Name

            PhysicalMachineIpMap = $PhysicalMachineIpMap

            ClusterName = $Parameters.Roles["Cluster"].PublicConfiguration.Clusters.Node.Name

            LocalIdentityConfiguredExternalDNSServer = $cloudRole.PublicInfo.NetworkConfiguration.ConfigureInternalDNS -ne 'true'

            IsLocalIdentityEnvironment = $cloudRole.PublicInfo.DeployADLess -eq 'true'

        }

        # Pass the expected CNO IP when we could determine it. Test-IPMapForCNO only runs for local

        # identity + external DNS deployments (gated in Invoke-AzStackHciDNSValidation)

        if (-not [string]::IsNullOrWhiteSpace($expectedClusterIp))

        {

            $Params['ClusterIP'] = $expectedClusterIp

        }

        # ADLO (Azure Local Disconnected Operations) - matches Connectivity/ArcIntegration/ARBStack pattern.

        # No public internet in ADLO; Connectivity's disconnected DNS test covers the customer FQDN instead.

        if ($AzureEnvironment -ieq 'Azure.local')

        {

            Trace-Execution "Azure.local (ADLO) deployment detected - excluding Test-ExternalDnsResolution"

            $Params += @{ Exclude = @('Test-ExternalDnsResolution') }

        }

        #endregion

        #endregion

        #region LifeCycle operation params

        if ($OperationType -eq 'Deployment')

        {

            $PsSession = [EnvironmentValidator]::NewPsSessionAllHosts($Parameters)

            $params += @{

                PsSession = $PsSession

            }

        }

        elseif ($OperationType -eq 'AddNode')

        {

            # for add node, get PsSession to the node being added

            $AddNodeNode = [EnvironmentValidator]::GetNodeContext($Parameters)

            $PsSession =  [EnvironmentValidator]::NewPsSessionByHost($Parameters, $AddNodeNode, $false)

            $params += @{

                PsSession = $PsSession

            }

            # dont run local cluster & AdIntegratedDns test for add node

        }

        elseif ($OperationType -eq 'PreUpdate')

        {

            $PsSession = [EnvironmentValidator]::NewPsSessionAllHosts($Parameters)

            $params += @{

                PsSession = $PsSession

            }

            # dont run local cluster & AdIntegratedDns test for preupdate

        }

        else

        {

            Trace-Execution "No interface found for $OperationType"

        }

        # Test-ClusterDnsPosture probes the authoritative DNS server for the future

        # cluster name; only meaningful at first Deployment (before bring-online). For

        # AddNode/PreUpdate the cluster already exists and owns its record, so the

        # probe would be noise -- exclude it.

        if ($OperationType -ne 'Deployment')

        {

            # Append instead of overwrite: an earlier block (e.g. ADLO) may have already

            # populated Exclude. Assigning a fresh array here would clobber that exclusion

            # (for ADLO PreUpdate that silently dropped Test-ExternalDnsResolution).

            if ($Params.ContainsKey('Exclude'))

            {

                $Params['Exclude'] += 'Test-ClusterDnsPosture'

            }

            else

            {

                $Params['Exclude'] = @('Test-ClusterDnsPosture')

            }

        }

        #endregion

        #region invoke validation and parse result

        Trace-Execution "Starting DNS validation, detail output can be found in $($outputPath)\AzStackHciEnvironmentChecker*"

        $DNSResult = AzStackHci.EnvironmentChecker\Invoke-AzStackHciDNSValidation @Params

        # Check if the ParseResult method supports the Parameters

        if ([EnvironmentValidator]::ParseResult.OverloadDefinitions -match 'EceInterfaceParameters')

        {

            Trace-Execution "ParseResult method supports EceInterfaceParameters argument"

            return [EnvironmentValidator]::ParseResult($DNSResult, 'DNS', $FailFast, $Parameters)

        }

        else

        {

            Trace-Execution "ParseResult method does not support EceInterfaceParameters argument"

            return [EnvironmentValidator]::ParseResult($DNSResult, 'DNS', $FailFast)

        }

        #endregion

    }

    catch

    {

        Trace-Execution "Validator failed. $_"

        Trace-Execution "$($_.ScriptStackTrace)"

        throw $_

    }

    finally

    {

        if ($backupPSModuleAutoLoadingPreference)

        {

            $PSModuleAutoLoadingPreference = $backupPSModuleAutoLoadingPreference

        }

        if ($PsSession)

        {

            $PsSession | Microsoft.PowerShell.Core\Remove-PSSession

        }

    }

}

function Get-InfraIpPoolStartAddress

{

    <#

    .SYNOPSIS

        Returns the first IP address of the infrastructure network range allocated for the system.

    .DESCRIPTION

        Reads the starting address of the management (infrastructure) network IP range from the Network

        role configuration on the EceInterfaceParameters. Per the Azure Local deployment guidance this

        first IP address is the one a cluster name object (CNO) DNS record must be pre-registered against

        for local identity deployments that use an external DNS server, and it is the address the

        platform reserves for the CNO during cluster formation. Unlike the ECE cluster IP reservation

        (which is only allocated once the cluster is created, well after validation runs), this value is

        available at validation time. Returns $null when it cannot be determined.

    .PARAMETER Parameters

        The ECE interface parameters for the deployment.

    #>

    [CmdletBinding()]

    [OutputType([string])]

    param (

        [Parameter(Mandatory = $true)]

        $Parameters

    )

    try

    {

        $networkRole = $Parameters.Roles["Network"].PublicConfiguration

        if ($null -eq $networkRole)

        {

            return $null

        }

        $mgmtNetwork = $networkRole.NetworkDefinitions.Node.Networks.Network | Where-Object { $_.Name -eq 'Management' } | Select-Object -First 1

        $startAddress = $mgmtNetwork.IPv4.StartAddress

        if ([string]::IsNullOrWhiteSpace($startAddress))

        {

            Log-Info "Get-InfraIpPoolStartAddress: management network start address not available; Test-IPMapForCNO expected IP could not be derived." -Type WARNING

            return $null

        }

        return [string]$startAddress

    }

    catch

    {

        Log-Info "Get-InfraIpPoolStartAddress: could not resolve infrastructure IP pool start address: $($_.Exception.Message)." -Type WARNING

        return $null

    }

}

Export-ModuleMember -Function Test-AzStackHciDNS -Variable MetaData

# SIG # Begin signature block

# MIInOgYJKoZIhvcNAQcCoIInKzCCJycCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBSQ3B71RnpdYTo

# jU9SVknTXFylmzusEh+yx9lASucIRqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnHMIIZwwIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIKrhWl7CwyHHsHdf81dliV131hxh

# T9KGM6uzfIg/7LboMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv

# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE

# ggEAWPqLG5nOKFDM6p5J8v50NMdmtp5TqXqllbwGRrwDLWtsKiaEj8xeR0aXCz2P

# 1Xkx6m2R1W0YYP6KakxnwbV8ix3wL1jKGt5hxWS72DpM2oQ6WZ7SZo7wx3fvr5dX

# +NNPimBXoLI8O6K9D02kDF9XVljrL0q9GzuI5dCnMLxBEeIiWpCsYamUL6zKW+MU

# RKfI6m9rn4/4ffA+OCB7FOzN38/Etz8PGyYFDijUv4s/hsC9jBkxAIr5FA8wDuTg

# Z711RSpS90GFIyfRxeLtPscFgB4vRCNTzytnKGOIbn6LZHVHpPaN/hxizxHkK1mh

# SmXxXMAkwbXq7dIMJkh0EoqCb6GCF5cwgheTBgorBgEEAYI3AwMBMYIXgzCCF38G

# CSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG

# 9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC

# AQUABCCCD8Peb68OKR3fLmvjt4oe4p1PcJhpQ0FRcNYA+9LYiAIGaoUd8FbjGBMy

# MDI2MDgyNzE2Mzg0My4wNjhaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj

# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODkwMC0wNUUw

# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHt

# MIIHIDCCBQigAwIBAgITMwAAAiJB0vaq/8i1/wABAAACIjANBgkqhkiG9w0BAQsF

# ADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD

# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTZa

# Fw0yNzA1MTcxOTM5NTZaMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw

# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODkwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT

# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQC1ueKJukIuUsAAJo/AY5DZRqH7bhgv7CWGNlEdbRGoITrd

# E6Wsn57NaNu1BTdjBbFcv7Rfixte0x+HRvXSqsD+WeSX/6/y9wE0Mz+xRPTGIY20

# K7aQDa68OyzVyUeUCypyZC/gW/3ytO/ZOnU9H2ri77kJP8ABrqyy1UxX/OseEgvH

# sj8yikWT0ARtrjWbXMHFzSOo5hQcfUmMXKqWWz6+N0+UynhGy1n+doW4WZgpH8Y5

# W7hpSokWj1M/Lu4wi3o6Dz9vVWukcgUFGjLAl4YZpOhah7HuiC/alXImMQf8C3A8

# q/6/1hFoeIZB4UGkywxB/OSTOSsL6+39pDqzM7CgOpf4V799kN94yM9uXJI5T/Si

# A5MdIZIhEW0+bh85RqDh5YW3/oav54RPxw5OPlH64QV6KJkl0FIElMVoLNo8UWRQ

# cMD179x7WASjC6LsaNZ7yK0qcESIsL1wiQmdfQBxcqrFCpIQfnmQFkOp9IyXUWqz

# a8tmpz8E6aXg9b1eiAT3PVTgrOlPi/hYZCfPxX/6jGtyPjy1CiwOmJamohmSU//C

# OAenfRT2G2HMRUpCX1zs+AmDmdQM1XRab4YSALLAlDzGCsgI77nnuJjoXAliJmv7

# NfrvWAcA5KqCUOWQ6kSPt5r28MfKXWJJpSXtFeS/MkDzJy/iJRVyHcFy/B+MtwID

# AQABo4IBSTCCAUUwHQYDVR0OBBYEFFkHwGoDJ5ZbEEiu8KstiusqaozQMB8GA1Ud

# IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp

# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI

# KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv

# TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud

# EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA

# MA0GCSqGSIb3DQEBCwUAA4ICAQBiAM+nqrpwG29txSXv42o+CsTe2C4boaRfFju9

# JaWkLTHwq7pknNONL3n+UG3x/B083EKXiFYrAmul7BTHCGXU63/xRsZ2wj3ZmR0A

# 4d9nf9saCJVm4juPVFBai/oktOOYH2j+1+zM70woN5ongB/pvy7X8AfY6JB4XPvb

# 80Qz7fY5eddbnwjzg1sZhUPFbbcweWeACINrzqFK62mMeXKmhtufMraoogJeJXfW

# Y3x4/pbubgENT3+pXT65203CPF9kfdKE7GKAIRYy3xkBTDvFd8dufjOpCn38nK6q

# MlVtnBjDhWQG0PM3E/oxBs5UBrI6pBYkmIHtbjifDquHT+ThaVV7xHc6InoSc3aN

# zX49JHUgQmuvDdMjLkbYXeA0/1q5IxSg2U+ycZBOvAi3udZPKhA5VzODjf/ucu/v

# FtXrYcRkmGKN3jujaK3/yMZi2Ju5NEL3ISWorwp7RjeZg+JMIK0fosuVj+YCm5r6

# 4LH/D9QJDAj+XfZaNeFdv90K5A0QRRGP/poB9yTIVjEXj/uJzp8L4Dd44sAquqDO

# iHdkLgxfK8nPqpCSWPZ9G+RCPm85o9cAfxENtrSuOwcpyKzxsRCYCL+PK4+98ori

# t9EVJ/LLoCeG+jLlj0KaD4Qy6sZe4rWMr1brQLosTBZNwFnXxNjInCWBd0i7is1y

# TS/4qTCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN

# AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw

# BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw

# MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx

# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT

# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk

# 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c

# T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG

# UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz

# rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2

# LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV

# wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd

# EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0

# gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph

# AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ

# YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb

# GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ

# KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP

# EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw

# UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr

# BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw

# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY

# xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp

# L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB

# BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v

# cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B

# AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5

# 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD

# sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo

# 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ

# iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK

# PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI

# LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk

# ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9

# af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba

# ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/

# OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNQMIIC

# OAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0

# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh

# dGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUG

# A1UECxMeblNoaWVsZCBUU1MgRVNOOjg5MDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxN

# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQC7ycXV

# Zx3bsDpJkr7VucgpksozuKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD

# QSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7jrPxTAiGA8yMDI2MDgyNzE1MDEyNVoY

# DzIwMjYwODI4MTUwMTI1WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDuOs/FAgEA

# MAoCAQACAgbGAgH/MAcCAQACAhLmMAoCBQDuPCFFAgEAMDYGCisGAQQBhFkKBAIx

# KDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZI

# hvcNAQELBQADggEBAEbXMHhjPu9NmMGZUxkSryM68vtcr48r9bfn5NKKP9ZH5zhS

# x7R0rgNyM9SNam2tv9lL/WgWWAqhYg+ZCFDsFjVHchZ1qMmqmgFU603Zklz/msRQ

# 50Ulp1EMqvrqUnJQkfXz7y6DchyV5IIUMc0V+Mo0kxEw7Exbo0awuy3Ssktg04bE

# 0ZnI43cY4D2+qsvXrTitSd3quWLMHGYhkXQ9IU0WNwZZPAI85GSA1PyVcTSQnXCI

# sHdjpXjmTrvC+KBqvCdymUkSgT8qJ2ixjjBcJa6RQ4+c53+sBAVLlYyn/lRYQBED

# IncJ0c3As1XaoLgkRniTpnbHgyqvGnXnF9JU8xIxggQNMIIECQIBATCBkzB8MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNy

# b3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiJB0vaq/8i1/wABAAACIjAN

# BglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8G

# CSqGSIb3DQEJBDEiBCDgdPgAtpxMyx+Uo8+Julzo7/buSJ7gbbm2BjXw8bplizCB

# +gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIAVgXQEKBOfGgjNskmDOmbcEIOnH

# GNwA+QcRufDR5AkTMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw

# MTACEzMAAAIiQdL2qv/Itf8AAQAAAiIwIgQgSSSyrWcb1j72ctpyGxIlK2pjC29h

# Yn8YYB3ANDDOxlEwDQYJKoZIhvcNAQELBQAEggIAkSOhanh9kecX4eorG85qYIAF

# mL/kzcB2SdVSiIoMKU3b9u887BrHboSel54rGNY50pfubNemutVJ/wp8c54ZcvaI

# vkHn73a8EgduYk/3PQ7+2CcrUiaaOieHRQInTHrszGJlRYiqvVA+khRY1Wm01btf

# LZwlwEBBTECrQU9+Vt6Pbz0/pooCcSzpjxR/xa3ZdkILyrWoLKK2m4E6NugqaAxO

# qpFuY2YAR+43IasdL8vMUS1HHOKZ1C+KY+sclL2A8t9/HlwWcUb8FQCJszBop/Xr

# N0+9OISBxSMqAWgcU3MJA7Z7xqk2DTWtTx5DtEMAPnANyf9l0SMXqzizAEf+9lEZ

# Hv1BEVPE7D9B6i7sV44h6ehAB8IuJI8cxNoIX/XHwxkcvWsmslt+BnMNTyGbuLPo

# iewwT7U+7WZnLSvVO/LC16tb3603siAX9uFrrN1wpFHTB2uQEnCvMUYiIHZRqxaU

# K5WENDT9WSuOfN6RipOZDl+aZfz0swbKSAu2idsaNFO+3onjvpfWKILd0NbdaWjf

# sTeCvZI7AiUT0LGy1zENRZgRCtF6e5LX+iG8YAxr9dl5WiBmsNMcJoceRjoCMK9A

# uGwxeq1ogLk10kV6bBFSawh7IxknUEuQPYz2ekvzekZiwZVsPaqaE9KetkUHJ3Bl

# 7Oxh7gs8tnWUFPdGD68=

# SIG # End signature block