AzStackHCILocalIdentity/AzStackHci.LocalIdentity.Helpers.psm1

Import-LocalizedData -BindingVariable lnTxt -FileName AzStackHci.LocalIdentity.Strings.psd1

# This file contains a list of discreet tests that can be run against the environment
# Each test named Test-* is exported and discovered to be run by the user-facing function.
# The user uses Include and Exclude parameters to run specific tests. (this provides a consistent experience across validators)
# If tests have dependencies on other tests, or they should be run in a specific order, the pattern describe above should be removed.
function Test-LocalUser_IsAdmin_IsNotBuiltInAdmin
{
    <#
    .SYNOPSIS
        For Local Identity deployments, ensure the local administrator account is not the built-in Administrator account and is a member of the Administrators group on each node.
    #>

    [CmdletBinding()]
    param (
        [Parameter()]
        [System.Management.Automation.Runspaces.PSSession[]]
        $PsSession = $null,

        [string]
        $localAdminUsername
    )
    try
    {
        # when validating the local account, use username without domain
        $localAdminUsernameOnly = $localAdminUsername.Split('\')[-1]

        $status = 'SUCCESS'
        $localAdminAccountSb = {
            $localAdminUsernameOnly = $args[0]
            return @{
                LocalAdminAccount = (Get-LocalGroupMember -Group "Administrators" | Where-Object { $_.ObjectClass -eq "User" -and $_.Name.Split('\')[-1] -eq $localAdminUsernameOnly })
                ComputerName = $ENV:COMPUTERNAME
            }
        }
        Log-Info "Checking if local account $localAdminUsernameOnly is a member of the Administrators group"

        if ($PsSession)
        {
            $result = Invoke-Command -Session $PsSession -ScriptBlock $localAdminAccountSb -ArgumentList $localAdminUsernameOnly
        }
        else
        {
            $result = Invoke-Command -ScriptBlock $localAdminAccountSb -ArgumentList $localAdminUsernameOnly
        }

        if (-not $result.LocalAdminAccount)
        {
            $detail = $lnTxt.NonAdminFail -f $result.ComputerName, $localAdminUsername
            $status = 'FAILURE'
            Log-Info $detail
        }
        if ($localAdminUsernameOnly -ieq "Administrator")
        {
            $detail += $lnTxt.BuiltInAdminFail -f $result.ComputerName, $localAdminUsername
            $status = 'FAILURE'
            Log-Info $detail
        }
        if ($status -eq 'SUCCESS')
        {
            $detail = $lnTxt.AdminPass -f $result.ComputerName, $localAdminUsername
            Log-Info $detail
        }

        $params = @{
            Name               = 'AzStackHci_Connectivity_LocalIdentity_Validate_LocalAccount'
            Title              = 'Validate Local Account for Local Identity'
            DisplayName        = "Validate Local Account for Local Identity"
            Severity           = 'Critical'
            Description        = 'Checks that the local administrator account provided is not the built-in Administrator account but is a member of the Administrators group on each node'
            Tags               = @{
                Service = 'System'
            }
            Remediation        = "Create a new local account with the same username and password on each node and add it to the Administrators group"
            TargetResourceID   = "ValidateLocalAccount"
            TargetResourceName = "ValidateLocalAccount"
            TargetResourceType = "ValidateLocalAccount"
            Timestamp          = [datetime]::UtcNow
            Status             = $Status
            AdditionalData     = @{
                Source = $ENV:COMPUTERNAME
                Resource = "ValidateLocalAccount"
                Status = $status
                Detail = $detail
                TimeStamp = [datetime]::UtcNow
            }
            HealthCheckSource  = $ENV:EnvChkrId
        }
        return New-AzStackHciResultObject @params
    }
    catch
    {
        throw $_
    }
}

# SIG # Begin signature block
# MIInQwYJKoZIhvcNAQcCoIInNDCCJzACAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAq78kZwOnjLEW6
# dLs8TGj/R2iTxdDU2g4T4tBKB4WRV6CCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnfMIIZ2wIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ
# KoZIhvcNAQkEMSIEINJNJyN6iNPgNG2Sl+iC9Kg8pjquqG07haN2RzTPnvZjMEIG
# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAVXTDzN7ruSPO2O+p
# AkDZD4OrqZLR7Tv4SLB1NrchMGZn0PhARqmKeMyGiWHgwmNf2MOydkRJvqM4RQ+o
# NTlZMXLjybQRPqhkxPettTFCeWGIi+2t49gUZFXIYO0Jx9XH84AKfEp0LU6f1Gou
# EGErtN1bb4Dg+3CbI600DDj3dG9ZqZ3N+9m7b0dO7h+7n0OJuyg67KrqyAte6m6e
# BsuKRM7eDhPq5lseAaJF4rntcCpHjDxt7yRycwPGXUzbMtAc3Jfzlb/K3O6RJgOO
# PM6Z78vd7z65kYaYPkcc5abXq47zjle6tIaijcZ/aQIevCkW5Y7Wm7lHHO/f7WRT
# VxHcwaGCF68wgherBgorBgEEAYI3AwMBMYIXmzCCF5cGCSqGSIb3DQEHAqCCF4gw
# gheEAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG9w0BCRABBKCCAUgEggFE
# MIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAAbw0IsMMnT2nT
# y0HWsN3c+b2K2vo1rdyvfVKbLb54jgIGaonl3RBDGBIyMDI2MDgyNzE2MzgzOS42
# OFowBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt
# aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUw
# IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR/jCCBygwggUQ
# oAMCAQICEzMAAAIVGAPTgQcmfFMAAQAAAhUwDQYJKoZIhvcNAQELBQAwfDELMAkG
# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx
# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjUwODE0MTg0ODIwWhcNMjYxMTEz
# MTg0ODIwWjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEt
# MCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046NjUxQS0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQDDcdXeFXEvSURg9XTdd40pnnXtUhuB7GGUM92lfANLQFi3
# E/CLhdillHWV3S7pyvZeO66B2DnQNTHlYcvRCFjZ32+QlKTTasT/vmFwq33WbYiH
# bztBHFEyYW7cEXrjrqTyqnm5e197q5yKrj1hpLyn53O/e5NqsPiFDxRPstr3mk4m
# JGrHF3So4YsQK8csRc9eKg1LH2nKHOGbqW3t7MvEl4VVi3FKGRq8+hk3R04KJh6H
# gqCgqjJqDMy5KIsKIxRbhR7hCybrnwUk0ZM2HtXmpdhUDqTnGPDlZ5Z0o7PSL0Dm
# MFxtj19U6j9wDyLVvK3NwNPFvedy1yXLz85h42y2Rpv8iyrcLF7W+r3p8gcTX5ka
# YmORrWyh3Co/JxWn/a1v4GO6U8vkPquBRdM8XzhTzZEsodXntsHx8dGmCeNxYFC5
# c+BV5JekRFaKa3Q0XaUI4vOqCu9L+9ip17kuf1iUoqEBn/EMTRMsgivr4j/YlO1c
# /fid+NMQ1WowEhJZxqQjEDAZvdEHnIcLHKcgU1Utx8oCwR0LlTZ6bR8C+ZW/Syie
# qe/Xty5piLZ4ItaGgrUhzzkPDuz+WFxesGljif9GXmXfAfOzi84iG7zsMjLlBRoS
# 6kSzJjQ1aqAjgFaXq/XCCx76XwNYV5Reh+FS4KBVO5Mc3cryJ2gxufxDd51QgQID
# AQABo4IBSTCCAUUwHQYDVR0OBBYEFIkhd/FyoDAWoaP2N3BC11Kpp2PXMB8GA1Ud
# IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp
# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI
# KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv
# TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud
# EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA
# MA0GCSqGSIb3DQEBCwUAA4ICAQB3jYe1X6QZu/HMsFMLk7u+QIgE/L8HCmMLN4vn
# eECIQ55un5V02fCb0ZUJ9ircox+uPhS8pBNQBpLlmTB7WC9neWNJKcI7JLk7A271
# 2mDfDD5BbZ45xIuTJUBYWsufoiKDdML/NYy9WGpe10WEbYonWVJs3bbZyxjcTf8G
# saW4CW8RP2CbFXLLE3Ln3/skXnMgZwmJvJ3Gz3gkvUG0+Bck59nND7/eJNzp4O2Z
# pZPoMp2cmhynzCRcpY8iwER+QPqTVCK3C+3SYes5FqHvlKN5w4q3ihZrJUuQ9OGj
# XZ7SieASDVyN7l/FJka2GsytYq8jhHscQLuTyZof148DdWIfQJVJI559o9MYzMiE
# cKjmneMblIxzI7d4D24RphAkhMmUsbcHDAabKljsL/z+ePVI6GDHUeAnTLA4kv3F
# 8/gA5xaYJ9uyqAZsJoLtYfmwg13N8xqvxXtg0WqRsIZQqFzwakjIT4wqfJWffeOy
# 5oYCU1GDt1VFRKhgsnG9SzD0Y7DIGkHBsT2yo4ub4ew7TSgXbc8yKjtYVdwVNkCO
# ne6OKEEB8utcgKAY4c92RnTja7Utmo5yeWvdfO+Ax76Y8/Jqxbx/Su3MmPdXkT8Q
# qLJCU/GP0x+rbH2GKaeVdYZkJU94QFE6s1sNgF9rNPIs0I5OxG2Sw5JXcUG0+elC
# 0s3vnjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN
# AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD
# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw
# BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw
# MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx
# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT
# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt
# U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk
# 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c
# T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG
# UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz
# rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2
# LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV
# wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd
# EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0
# gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph
# AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ
# YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb
# GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ
# KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP
# EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw
# UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr
# BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw
# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY
# xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp
# L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB
# BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
# cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B
# AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5
# 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD
# sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo
# 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ
# iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK
# PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI
# LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk
# ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9
# af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba
# ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/
# OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNZMIIC
# QQIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt
# aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjY1MUEtMDVFMC1EOTQ3MSUw
# IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4D
# AhoDFQCPp5N6Nu5gTUh+Nt+u3q1d68JRIKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l
# LVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7jpSlTAiGA8yMDI2MDgy
# NzA2MDcxN1oYDzIwMjYwODI4MDYwNzE3WjB3MD0GCisGAQQBhFkKBAExLzAtMAoC
# BQDuOlKVAgEAMAoCAQACAggmAgH/MAcCAQACAhI3MAoCBQDuO6QVAgEAMDYGCisG
# AQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMB
# hqAwDQYJKoZIhvcNAQELBQADggEBAHjzD6J69wt2fqmiuZHY+CwZAXxpYPfYM3Yv
# r4m9RMPrr132A5+uYqyrWZZhCEtz7qB1JEnWS5tsAsgwk52wvPmyMty5BEMghyTo
# NlZB8irOxY0ImA+yvdyXeNSatsJ5zUsMlCorq7h3QGjjFl5xszL6LfF0rduvdSrM
# //5hue0D9/cwSjYvB/wt5U08/zmq+edATG9p1QrMU4msmZaGHWthdRz6V1pP3s6q
# JOc8WgQWvuaEm37B2685BriJhqS5KQnyukRxKh0gebv435Jf9DYBf1yEh5lVSgxD
# mk/TuSBFiLedFXznbre5sx1UmERnQDIVXTbCBfqCOQBzI0oooxExggQNMIIECQIB
# ATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD
# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAhUYA9OBByZ8
# UwABAAACFTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3
# DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCBW4PMVySRbAbUgUpoqhFtOs1D29Z21WoUa
# rntmV4uewDCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIHAQ9HY8OtMUtyu1
# CwqtSLujPkk1EIX8pEcyKFI17uyKMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzAR
# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p
# Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh
# bXAgUENBIDIwMTACEzMAAAIVGAPTgQcmfFMAAQAAAhUwIgQgVgVnisKSo5OxtW3U
# iXruJFLrvvqNHnDp0PoLDgK7jSkwDQYJKoZIhvcNAQELBQAEggIAHruuo9SoZTQP
# O8LbV7ad6F2ykcOxt7n/TmMTmvUfw79Uyf7FZmucgrKYfxILtz7D53BXV3+0gXux
# NdtO7JiOdCige3LEUS+vqil/Uir8fMnzO9QGtoE7ay8ezZ5ehS5+sS6RT0lOmBm9
# QGt5hcXFwfHdgbbCytNdJrdyTRa7PLQ77RS8mSe0zxp5R0WbRpwgmB6jkYYbJ3Ur
# 6QKtCNE+ceMiNoo98AtFfgQLyBESo551/SF5VT7Hx39mruT0iZ/VpuJ2W3yo7xnQ
# BetRlQxGEVCXDrludxI5ixOWw5JkSBtrN+tlX3tTs1TCUzbZfDiV+UGSsUFkFsCY
# y5xKrEH/b9eIaP2h6Smqv8bcprgnJnOYKsuGJviQHHbQZxMIzW0WK8A19PtRxNgC
# ElUt+k8naAQ81EtSxnbCtCePxfZccbwOh0RabLtvd3A9aykEesDkMabW3iMmHDUX
# cuOAkgpsZ8U7um7cRtZrW6xYvFZkQez3qxaBE851lzp9Y5vGUvA9w9roQqOzWZpz
# LfHypmUsoM7U2HRIFBZBmhI7j66sDvkbhoPUK3tmiKF+4Eknb3l/SKdc6ShUFW8V
# s7MdM4F/Txgj0FbSCSK3pb+O57HQLRFkMD/IZR7rgidVpZ0nKIT7wzLOYJ3G0pgS
# gWIBvVRs+JBJNYPTlqtCsViIYTaZuD4=
# SIG # End signature block