AzStackHCIRemoteManagement/AzStackHci.RemoteManagement.Helpers.psm1

Import-LocalizedData -BindingVariable lWRMTxt -FileName AzStackHci.RemoteManagement.Strings.psd1

# This file contains a list of discreet tests that can be run against the environment
# Each test named Test-* is exported and discovered to be run by the user-facing function.
# The user uses Include and Exclude parameters to run specific tests. (this provides a consistent experience across validators)
# If tests have dependencies on other tests, or they should be run in a specific order, the pattern describe above should be removed.

function Test-CimSession
{
    [CmdletBinding()]
    param (
        [Parameter()]
        [string[]]
        $ComputerName,

        [Parameter()]
        [pscredential]
        $Credential,

        [int]
        $MaxRetries = 6,

        [int]
        $RetryDelaySeconds = 5
    )

    try
    {
        $severity = 'Warning'
        $instanceResults = @()
        foreach ($computer in $ComputerName)
        {
            $cimSession = $null
            $status = 'FAILURE'
            $dtl = @()
            try
            {
                # Create a new CIM session
                $attempt = 0
                do {
                    $attempt++
                    try {
                        $cimSession = New-CimSession -ComputerName $computer -Credential $Credential
                        if ($cimSession -is [CimSession]) {
                            break
                        }
                    } catch {
                        if ($attempt -ge $MaxRetries) {
                            throw
                        }
                        Start-Sleep -Seconds $RetryDelaySeconds
                    }
                } while ($attempt -lt $MaxRetries)
                # Test the CIM session by querying a known class
                if ($cimSession -is [CimSession])
                {
                    $dtl += "CIM Session: Successful, ComputerName: {0}, Protocol: {1}, Attempts: {2}" -f $cimSession.ComputerName, $cimSession.Protocol, "$attempt/$maxRetries"
                    $result = Get-CimInstance -CimSession $cimSession -ClassName Win32_OperatingSystem
                    if ($result -is [CimInstance])
                    {
                        $status = 'SUCCESS'
                        $dtl += $lWRMTxt.CimQuerySuccess -f $env:computername, $computer, 'Win32_OperatingSystem'
                    }
                    else
                    {
                        $dtl += $lWRMTxt.CimQueryFailed -f $env:computername, $computer, 'Win32_OperatingSystem'
                    }
                }
                else
                {
                    $dtl += $lWRMTxt.CimSessionNotEstablished -f $env:computername, $computer
                }
            }
            catch
            {
                $dtl += $lWRMTxt.CimSessionAttemptsFailed -f $env:computername, $computer, $attempt, $MaxRetries, $_.Exception.Message
            }
            finally
            {
                $detail = $dtl -join ". "
                $instanceResults += New-LightweightResult `
                    -Name 'AzStackHci_RemoteManagement_Cim_Test' `
                    -Status $status `
                    -Severity $severity `
                    -TargetResourceName $computer `
                    -Source $ENV:COMPUTERNAME `
                    -Resource $computer `
                    -Detail $detail
                Log-Info $detail -Type $(if ( $status -eq 'FAILURE' ){ $severity } else { "INFO" } )

                if ($cimSession -is [CimSession])
                {
                    Remove-CimSession -CimSession $cimSession
                    $cimSession = $null
                }
            }
        }
        return @(New-AggregatedTestResult -TestName 'Test-CimSession' `
            -DisplayName 'CIM Session Connectivity' `
            -Description 'Validates CIM (Common Information Model) connectivity to each cluster node by establishing a CimSession with credentials and querying Win32_OperatingSystem. Retries up to MaxRetries with configurable delays to handle transient WinRM/DCOM initialization. CIM connectivity is required for hardware inventory and remote management operations.' `
            -DetailResults $instanceResults `
            -ValidatorName 'RemoteManagement' `
            -ResourceType 'CimSession' `
            -Remediation $lWRMTxt.CimSessionRemediation)
    }
    catch
    {
        throw ("New CimSession test failed: {0}" -f $_.Exception)
    }
}

function Test-NewPsSession
{
        [CmdletBinding()]
    param (
        [Parameter()]
        [string[]]
        $ComputerName,

        [Parameter()]
        [pscredential]
        $Credential,

        [int]
        $MaxRetries = 6,

        [int]
        $RetryDelaySeconds = 5
    )

    try
    {
        $severity = 'CRITICAL'
        $instanceResults = @()
        foreach ($computer in $ComputerName)
        {
            $psSession = $null
            $status = 'FAILURE'
            $dtl = @()
            try
            {
                # Create a new PsSession session with retries
                $attempt = 0
                do {
                    $attempt++
                    try {
                        $psSession = New-PsSession -ComputerName $computer -Credential $Credential
                        if ($psSession -is [System.Management.Automation.Runspaces.PSSession]) {
                            break
                        }
                    } catch {
                        if ($attempt -ge $MaxRetries) {
                            throw
                        }
                        Start-Sleep -Seconds $RetryDelaySeconds
                    }
                } while ($attempt -lt $MaxRetries)
                # Test the PS session by returning the computername and IP
                if ($psSession -is [System.Management.Automation.Runspaces.PSSession])
                {
                    $dtl += $lWRMTxt.PsSessionSuccess -f $ENV:ComputerName, $psSession.ComputerName, "$attempt/$maxRetries"
                    $result = Invoke-Command -Session $psSession -ScriptBlock {
                        [PSCustomObject]@{
                            ComputerName = $ENV:COMPUTERNAME
                            IPAddress    = (Get-NetIPAddress -AddressFamily IPv4).IPAddress
                        }
                    }
                    if ($result -is [PSCustomObject])
                    {
                        $status = 'SUCCESS'
                        $dtl += $lWRMTxt.InvokeCommandSuccess -f $env:computername, $computer
                    }
                    else
                    {
                        $dtl += $lWRMTxt.InvokeCommandFailed -f $env:computername, $computer
                    }
                }
                else
                {
                    $dtl += $lWRMTxt.PsSessionNotEstablished -f $env:computername, $computer
                }
            }
            catch
            {
                $dtl += $lWRMTxt.PsSessionAttemptsFailed -f $env:computername, $computer, $attempt, $MaxRetries, $_.Exception.Message
            }
            finally
            {
                $detail = $dtl -join ". "
                $instanceResults += New-LightweightResult `
                    -Name 'AzStackHci_RemoteManagement_PowerShell_Test' `
                    -Status $status `
                    -Severity $severity `
                    -TargetResourceName $computer `
                    -Source $ENV:COMPUTERNAME `
                    -Resource $computer `
                    -Detail $detail
                Log-Info $detail -Type $(if ( $status -eq 'FAILURE' ){ $severity } else { "INFO" } )

                if ($psSession -is [System.Management.Automation.Runspaces.PSSession])
                {
                    Remove-PSSession -Session $psSession
                    $psSession = $null
                }
            }
        }
        return @(New-AggregatedTestResult -TestName 'Test-NewPsSession' `
            -DisplayName 'PowerShell Session Connectivity' `
            -Description 'Validates PowerShell Remoting (WinRM) connectivity to each cluster node by creating a PSSession and executing a remote command to retrieve hostname and IP address. Retries up to MaxRetries with configurable delays. PSSession connectivity is a prerequisite for all remote validation operations and deployment actions.' `
            -DetailResults $instanceResults `
            -ValidatorName 'RemoteManagement' `
            -ResourceType 'PsSession' `
            -Remediation $lWRMTxt.PsSessionRemediation)
    }
    catch
    {
        throw ("New PsSession test failed: {0}" -f $_.Exception)
    }
}

function Test-NewPsSessionWithCredSSP
{
    [CmdletBinding()]
    param (
        [Parameter()]
        [string[]]
        $ComputerName,

        [Parameter()]
        [pscredential]
        $Credential,

        [int]
        $MaxRetries = 6,

        [int]
        $RetryDelaySeconds = 5
    )

    try
    {
        $severity = 'INFORMATIONAL'
        $instanceResults = @()
        foreach ($computer in $ComputerName)
        {
            $psSession = $null
            $status = 'FAILURE'
            $dtl = @()
            try
            {
                # Create a new PsSession session with retries
                $attempt = 0
                do {
                    $attempt++
                    try {
                        $psSession = New-PsSession -ComputerName $computer -Credential $Credential -Authentication CredSSP
                        if ($psSession -is [System.Management.Automation.Runspaces.PSSession]) {
                            break
                        }
                    } catch {
                        if ($attempt -ge $MaxRetries) {
                            throw
                        }
                        Start-Sleep -Seconds $RetryDelaySeconds
                    }
                } while ($attempt -lt $MaxRetries)
                # Test the PS session by returning the computername and IP
                if ($psSession -is [System.Management.Automation.Runspaces.PSSession])
                {
                    $dtl += $lWRMTxt.PsSessionSuccess -f $ENV:ComputerName, $psSession.ComputerName, "$attempt/$maxRetries"
                    $result = Invoke-Command -Session $psSession -ScriptBlock {
                        [PSCustomObject]@{
                            ComputerName = $ENV:COMPUTERNAME
                            IPAddress    = (Get-NetIPAddress -AddressFamily IPv4).IPAddress
                        }
                    }
                    if ($result -is [PSCustomObject])
                    {
                        $status = 'SUCCESS'
                        $dtl += $lWRMTxt.InvokeCommandSuccess -f $env:computername, $computer
                    }
                    else
                    {
                        $dtl += $lWRMTxt.InvokeCommandFailed -f $env:computername, $computer
                    }
                }
                else
                {
                    $dtl += $lWRMTxt.PsSessionNotEstablished -f $env:computername, $computer
                }
            }
            catch
            {
                $dtl += $lWRMTxt.PsSessionAttemptsFailed -f $env:computername, $computer, $attempt, $MaxRetries, $_.Exception.Message
            }
            finally
            {
                $detail = $dtl -join ". "
                $instanceResults += New-LightweightResult `
                    -Name 'AzStackHci_RemoteManagement_AuthCredSSP_PowerShell_Test' `
                    -Status $status `
                    -Severity $severity `
                    -TargetResourceName $computer `
                    -Source $ENV:COMPUTERNAME `
                    -Resource $computer `
                    -Detail $detail
                Log-Info $detail -Type $(if ( $status -eq 'FAILURE' ){ $severity } else { "INFO" } )

                if ($psSession -is [System.Management.Automation.Runspaces.PSSession])
                {
                    Remove-PSSession -Session $psSession
                    $psSession = $null
                }
            }
        }
        return @(New-AggregatedTestResult -TestName 'Test-NewPsSessionWithCredSSP' `
            -DisplayName 'CredSSP PowerShell Session Connectivity' `
            -Description 'Validates CredSSP (Credential Security Support Provider) delegation to each cluster node by creating a PSSession with -Authentication CredSSP and executing a remote command. CredSSP enables double-hop authentication required for accessing network resources from remote sessions. Retries up to MaxRetries with configurable delays.' `
            -DetailResults $instanceResults `
            -ValidatorName 'RemoteManagement' `
            -ResourceType 'CredSSPSession' `
            -Remediation $lWRMTxt.CredSSPRemediation)
    }
    catch
    {
        throw ("New PsSession CredSSP test failed: {0}" -f $_.Exception)
    }
}

function Test-RemoteEventLog
{
    [CmdletBinding()]
    param (
        [Parameter()]
        [string[]]
        $ComputerName,

        [Parameter()]
        [pscredential]
        $Credential,

        [int]
        $MaxRetries = 6,

        [int]
        $RetryDelaySeconds = 5
    )

    try
    {
        $severity = 'Warning'
        $instanceResults = @()
        foreach ($computer in $ComputerName)
        {
            Log-Info ($lWRMTxt.TestWinEvent -f $ENV:COMPUTERNAME, $computer, $Credential.UserName)
            $status = 'FAILURE'
            $dtl = @()
            try
            {
                # Check the event log for a specific event ID
                $attempt = 0
                do {
                    $attempt++
                    try {
                        $eventLog = Get-WinEvent -LogName System -ComputerName $computer -Credential $Credential -ErrorAction Stop | Where-Object { $_.Id -eq 6005 }
                        if ($eventLog) {
                            break
                        }
                    } catch {
                        if ($attempt -ge $MaxRetries) {
                            throw
                        }
                        Start-Sleep -Seconds $RetryDelaySeconds
                    }
                } while ($attempt -lt $MaxRetries)
                if ($eventLog)
                {
                    $status = 'SUCCESS'
                    $numReboots = ($eventLog | Measure-Object).Count
                    $lastRebootTime = (($eventLog | Sort-Object TimeCreated -Descending | Select-Object -First 1).TimeCreated)#.ToString("yyyy-MM-dd HH:mm:ss")
                    $dtl += $lWRMTxt.RemoteEventLogSuccess -f $computer, "$attempt/$maxRetries", $numReboots, $lastRebootTime
                }
                else
                {
                    $dtl += $lWRMTxt.RemoteEventLogEmpty -f $computer, "$attempt/$maxRetries"
                }
            }
            catch
            {
                $dtl += $lWRMTxt.RemoteEventLogFailed -f $computer, "$attempt/$MaxRetries", $_.Exception.Message
            }
            finally
            {
                $detail = $dtl -join ". "
                $instanceResults += New-LightweightResult `
                    -Name 'AzStackHci_RemoteManagement_EventLog_Test' `
                    -Status $status `
                    -Severity $severity `
                    -TargetResourceName $computer `
                    -Source $ENV:COMPUTERNAME `
                    -Resource $computer `
                    -Detail $detail
                Log-Info $detail -Type $(if ( $status -eq 'FAILURE' ){ $severity } else { "INFO" } )
            }
        }
        return @(New-AggregatedTestResult -TestName 'Test-RemoteEventLog' `
            -DisplayName 'Remote Event Log Access' `
            -Description 'Validates Windows Event Log accessibility on each cluster node by querying System log for EventID 6005 (Event Log Service started) entries via Get-WinEvent with credentials. Reports boot history including reboot count and last reboot time. Retries up to MaxRetries with configurable delays.' `
            -DetailResults $instanceResults `
            -ValidatorName 'RemoteManagement' `
            -ResourceType 'EventLog' `
            -Remediation $lWRMTxt.EventLogRemediation)
    }
    catch
    {
        throw ("Remote Windows Event Log test failed: {0}" -f $_.Exception)
    }
}

function Test-RemoteWmiQuery {
    [CmdletBinding()]
    param (
        [Parameter()]
        [string[]]
        $ComputerName,

        [Parameter()]
        [pscredential]
        $Credential,

        [int]
        $MaxRetries = 6,

        [int]
        $RetryDelaySeconds = 5
    )
    try
    {
        $severity = 'WARNING'
        $instanceResults = @()
        foreach ($computer in $ComputerName)
        {
            if ($computer -like "$ENV:COMPUTERNAME*")
            {
                # If the computer name matches the local machine, skip the test
                Log-Info "Skipping Remote WMI query test for local machine: $computer"
                continue
            }
            Log-Info ($lWRMTxt.WmiTest -f $ENV:COMPUTERNAME, $computer, $Credential.UserName)
            $status = 'FAILURE'
            $dtl = @()
            try
            {
                # Check WMI for install date
                $attempt = 0
                do {
                    $attempt++
                    try {
                        $wmiInstallDate = (Get-WmiObject -Class Win32_OperatingSystem -ComputerName $computer -Credential $Credential).InstallDate
                        if ($wmiInstallDate) {
                            break
                        }
                    } catch {
                        if ($attempt -ge $MaxRetries) {
                            throw
                        }
                        Start-Sleep -Seconds $RetryDelaySeconds
                    }
                } while ($attempt -lt $MaxRetries)

                if ($wmiInstallDate)
                {
                    $status = 'SUCCESS'
                    $windowsInstallDateFormatted = ([Management.ManagementDateTimeConverter]::ToDateTime($wmiInstallDate))#.ToString("yyyy-MM-dd HH:mm:ss")
                    $dtl += $lWRMTxt.WmiQuerySuccess -f $computer, "$attempt/$maxRetries", $windowsInstallDateFormatted
                }
                else
                {
                    $dtl += $lWRMTxt.WmiQueryEmpty -f $computer, "$attempt/$maxRetries"
                }
            }
            catch
            {
                $dtl += $lWRMTxt.WmiQueryFailed -f $computer, "$attempt/$MaxRetries", $_.Exception.Message
            }
            finally
            {
                $detail = $dtl -join ". "
                $instanceResults += New-LightweightResult `
                    -Name 'AzStackHci_RemoteManagement_WMI_Test' `
                    -Status $status `
                    -Severity $severity `
                    -TargetResourceName $computer `
                    -Source $ENV:COMPUTERNAME `
                    -Resource $computer `
                    -Detail $detail
                Log-Info $detail -Type $(if ( $status -eq 'FAILURE' ){ $severity } else { "INFO" } )
            }
        }
        return @(New-AggregatedTestResult -TestName 'Test-RemoteWmiQuery' `
            -DisplayName 'Remote WMI Query' `
            -Description 'Validates WMI (Windows Management Instrumentation) connectivity to each remote cluster node by querying Win32_OperatingSystem.InstallDate via Get-WmiObject. Skips the local orchestrator machine. Retries up to MaxRetries with configurable delays. WMI access is required for legacy management and inventory operations.' `
            -DetailResults $instanceResults `
            -ValidatorName 'RemoteManagement' `
            -ResourceType 'WmiQuery' `
            -Remediation $lWRMTxt.WmiQueryRemediation)
    }
    catch
    {
        throw ("Remote WMI query test failed: {0}" -f $_.Exception)
    }
}

Export-ModuleMember -Function Test-*

# SIG # Begin signature block
# MIInKwYJKoZIhvcNAQcCoIInHDCCJxgCAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCrt3hErFny10HS
# uoyf+X1Os288bUNGVSbJdRJXdg+976CCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnHMIIZwwIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ
# KoZIhvcNAQkEMSIEIHWpkPnohrDwXJfOJ+uXaHuSbbEwopB7aEKSh7HYhd7mMEIG
# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEARoV8kUFZcvkHMbI7
# p362JVzqh7c2LUvCYRy4Xflcb3Lf5DV7PSHklGIQhOntRbQ1olgk9ReGsrBRLmDx
# EPOMFc0WeKZxmihfZ+iK/x9AERDx2CPDsKSM11CENjsDsWjCpLoLwbrEi6yWcawn
# lBw0HmRBE/WDOl4UvCgdciArVjEFS5KvtYAEdkCfkOH3+xl0kPv4I+0MGo8hgVXP
# AiXH7LMPZVibCjMX3fbl2Ab7M/tUmWLnFzlik/isdX/Gogi5cUvtQfG65YJjKNd3
# xVnEmG/magInN9/fnXMRBZ0eG3D9VSw3vz2OQksTr752OlIfVkc/i5sONDllQSWS
# /b2LDqGCF5cwgheTBgorBgEEAYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3Aw
# ghdsAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9
# MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDn+2vi0qTZop5H
# KUp7zxvhxyJt1UrU5h20TT1CIDxmIAIGaoUd8FfMGBMyMDI2MDgyNzE2Mzg0Ny45
# MTJaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv
# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODkwMC0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgIT
# MwAAAiJB0vaq/8i1/wABAAACIjANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV
# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE
# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt
# ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTZaFw0yNzA1MTcxOTM5NTZa
# MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL
# ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk
# IFRTUyBFU046ODkwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l
# LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1
# ueKJukIuUsAAJo/AY5DZRqH7bhgv7CWGNlEdbRGoITrdE6Wsn57NaNu1BTdjBbFc
# v7Rfixte0x+HRvXSqsD+WeSX/6/y9wE0Mz+xRPTGIY20K7aQDa68OyzVyUeUCypy
# ZC/gW/3ytO/ZOnU9H2ri77kJP8ABrqyy1UxX/OseEgvHsj8yikWT0ARtrjWbXMHF
# zSOo5hQcfUmMXKqWWz6+N0+UynhGy1n+doW4WZgpH8Y5W7hpSokWj1M/Lu4wi3o6
# Dz9vVWukcgUFGjLAl4YZpOhah7HuiC/alXImMQf8C3A8q/6/1hFoeIZB4UGkywxB
# /OSTOSsL6+39pDqzM7CgOpf4V799kN94yM9uXJI5T/SiA5MdIZIhEW0+bh85RqDh
# 5YW3/oav54RPxw5OPlH64QV6KJkl0FIElMVoLNo8UWRQcMD179x7WASjC6LsaNZ7
# yK0qcESIsL1wiQmdfQBxcqrFCpIQfnmQFkOp9IyXUWqza8tmpz8E6aXg9b1eiAT3
# PVTgrOlPi/hYZCfPxX/6jGtyPjy1CiwOmJamohmSU//COAenfRT2G2HMRUpCX1zs
# +AmDmdQM1XRab4YSALLAlDzGCsgI77nnuJjoXAliJmv7NfrvWAcA5KqCUOWQ6kSP
# t5r28MfKXWJJpSXtFeS/MkDzJy/iJRVyHcFy/B+MtwIDAQABo4IBSTCCAUUwHQYD
# VR0OBBYEFFkHwGoDJ5ZbEEiu8KstiusqaozQMB8GA1UdIwQYMBaAFJ+nFV0AXmJd
# g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El
# MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6
# Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt
# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l
# AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA
# A4ICAQBiAM+nqrpwG29txSXv42o+CsTe2C4boaRfFju9JaWkLTHwq7pknNONL3n+
# UG3x/B083EKXiFYrAmul7BTHCGXU63/xRsZ2wj3ZmR0A4d9nf9saCJVm4juPVFBa
# i/oktOOYH2j+1+zM70woN5ongB/pvy7X8AfY6JB4XPvb80Qz7fY5eddbnwjzg1sZ
# hUPFbbcweWeACINrzqFK62mMeXKmhtufMraoogJeJXfWY3x4/pbubgENT3+pXT65
# 203CPF9kfdKE7GKAIRYy3xkBTDvFd8dufjOpCn38nK6qMlVtnBjDhWQG0PM3E/ox
# Bs5UBrI6pBYkmIHtbjifDquHT+ThaVV7xHc6InoSc3aNzX49JHUgQmuvDdMjLkbY
# XeA0/1q5IxSg2U+ycZBOvAi3udZPKhA5VzODjf/ucu/vFtXrYcRkmGKN3jujaK3/
# yMZi2Ju5NEL3ISWorwp7RjeZg+JMIK0fosuVj+YCm5r64LH/D9QJDAj+XfZaNeFd
# v90K5A0QRRGP/poB9yTIVjEXj/uJzp8L4Dd44sAquqDOiHdkLgxfK8nPqpCSWPZ9
# G+RCPm85o9cAfxENtrSuOwcpyKzxsRCYCL+PK4+98orit9EVJ/LLoCeG+jLlj0Ka
# D4Qy6sZe4rWMr1brQLosTBZNwFnXxNjInCWBd0i7is1yTS/4qTCCB3EwggVZoAMC
# AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV
# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w
# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m
# dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy
# NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw
# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9
# DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2
# Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N
# 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc
# ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ
# j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk
# lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy
# L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M
# 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX
# pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU
# HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode
# 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA
# ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE
# FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB
# MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE
# AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
# /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug
# SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N
# aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG
# AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv
# b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt
# 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP
# MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++
# Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9
# QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2
# wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR
# AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z
# bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx
# t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3
# Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN
# uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z
# cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCB
# yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl
# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc
# TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU
# U1MgRVNOOjg5MDAtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T
# dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQC7ycXVZx3bsDpJkr7Vucgpksoz
# uKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw
# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x
# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3
# DQEBCwUAAgUA7jrPxTAiGA8yMDI2MDgyNzE1MDEyNVoYDzIwMjYwODI4MTUwMTI1
# WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDuOs/FAgEAMAoCAQACAgbGAgH/MAcC
# AQACAhLmMAoCBQDuPCFFAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkK
# AwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAEbX
# MHhjPu9NmMGZUxkSryM68vtcr48r9bfn5NKKP9ZH5zhSx7R0rgNyM9SNam2tv9lL
# /WgWWAqhYg+ZCFDsFjVHchZ1qMmqmgFU603Zklz/msRQ50Ulp1EMqvrqUnJQkfXz
# 7y6DchyV5IIUMc0V+Mo0kxEw7Exbo0awuy3Ssktg04bE0ZnI43cY4D2+qsvXrTit
# Sd3quWLMHGYhkXQ9IU0WNwZZPAI85GSA1PyVcTSQnXCIsHdjpXjmTrvC+KBqvCdy
# mUkSgT8qJ2ixjjBcJa6RQ4+c53+sBAVLlYyn/lRYQBEDIncJ0c3As1XaoLgkRniT
# pnbHgyqvGnXnF9JU8xIxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEG
# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj
# cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt
# cCBQQ0EgMjAxMAITMwAAAiJB0vaq/8i1/wABAAACIjANBglghkgBZQMEAgEFAKCC
# AUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCBw
# DGun5KbfOvJ9FxJM/J7bjcxyzwcxe0JSFPvIk8TwpDCB+gYLKoZIhvcNAQkQAi8x
# geowgecwgeQwgb0EIAVgXQEKBOfGgjNskmDOmbcEIOnHGNwA+QcRufDR5AkTMIGY
# MIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV
# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG
# A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIiQdL2qv/I
# tf8AAQAAAiIwIgQgSSSyrWcb1j72ctpyGxIlK2pjC29hYn8YYB3ANDDOxlEwDQYJ
# KoZIhvcNAQELBQAEggIAWlf6dv/vz2WCAYHDxNu8JGmUJ+lfYOFNkZxdUOVXU7JX
# 2XLPakb0gHsK42UasaRgRT4lRws83wJc3iPQUTwWIWN+45BIJf41u2dT55QH+NRb
# 2z16B/bhj0zNbxYgk6bMflA8ADSIHDQAPFrlrDMP2cJy6FcgLXEAhCthBykp3O6K
# b7YMXl00gl7pjR2KGN3WsPV/15mFyA2orgqpBu9fKaHXMGim9ekJc/y/d2ZxY7Rv
# R2Be9u3Td/SOo08C0Xft5Hl1WIC1JXOM9BnAZfTxmguDqgp6FvY9phhxlLvPMWKw
# ox4LAZJNTYrxqScQF0JmVFG6WsgQjXsrFMVkOHxHNPly5+nt1MHFjGQq4yYcmTpM
# ND+4DpZ3LJF5gscK8nHfB3a4jisngUaMLM49bgEQx8gW9ljfKvJ3uakLqXBYzxLg
# URazASZExTQsvCBXBFnMhAtQsWVAdHyxUKXgA+OywAAe6roNnfO7Sx/UN46kod4o
# VlZvYAePcptYf0UvXI63ciKLySy0pGYQ70R7Ej3Xyqc8tk/RvTtYPY6dejKPDBLD
# TjWid9FL6NWTMqCfPpdhmaoky65JEtxcWOlhQ7yhewd3aeOVcPnZ19nd7vVdY0oA
# LD7sWiWRVVrXQYC8US82bnyRGrDKsnSIyjLx64GvFeqy928DY4si+IO9QTVy85w=
# SIG # End signature block