AzStackHci.EnvironmentChecker

10.2609.0.2002

AzStackHciNetwork/AzStackHciNetwork.psm1

                                <#############################################################

 #                                                           #

 # Copyright (C) Microsoft Corporation. All rights reserved. #

 #                                                           #

 #############################################################>

 $MetaData = @{

    "OperationType" =  @("Deployment", "AddNode", "Upgrade", "PreUpdate", "PreUpdateJIT")

    "UIName" = 'Azure Stack HCI Network'

    "UIDescription" = 'Check network requirements'

}

function Test-AzStackHciNetwork

{

    param (

        [parameter(Mandatory = $true)]

        [ValidateNotNullOrEmpty()]

        $Parameters,

        [parameter(Mandatory = $true)]

        [ValidateSet('AddNode','Deployment','Upgrade', 'PreUpdate')]

        $OperationType,

        [parameter(Mandatory = $false)]

        [ValidateSet('Small','Medium','Large')]

        [String]

        $HardwareClass = "Medium",

        [parameter(Mandatory = $false)]

        [ValidateSet('Standard','Stretch','RackAware')]

        [String]

        $ClusterPattern = "Standard",

        [parameter(Mandatory = $false)]

        [switch]

        $FailFast

    )

    Import-Module $PSScriptRoot\..\CommonLibrary\AzureLocal.EnvValidator.CommonLibrary.psd1 -Force -DisableNameChecking -Global | Out-Null

    try

    {

        $backupPSModuleAutoLoadingPreference = $PSModuleAutoLoadingPreference

        # Disable module auto-loading and explicitly import modules needed.

        $PSModuleAutoLoadingPreference = [System.Management.Automation.PSModuleAutoLoadingPreference]::None

        Import-Module Microsoft.PowerShell.Utility -Verbose:$false

        Import-Module Microsoft.PowerShell.Management -Verbose:$false

        Import-Module NetTCPIP -Verbose:$false

        Import-Module Hyper-V -Verbose:$false

        Import-Module NetAdapter -Verbose:$false

        Import-Module DnsClient -Verbose:$false

        # Import Module via Helper in case this is update

        [EnvironmentValidator]::EnvironmentValidatorImport($Parameters)

        $ENV:EnvChkrOp = $OperationType

        if (Get-Command -Name IsDHCPEnabled -ErrorAction SilentlyContinue)

        {

            $dhcpEnabled = IsDHCPEnabled -Parameters $Parameters

        }

        else

        {

            $dhcpEnabled = $false

        }

        Trace-Execution "DHCP Enabled (ECE): $dhcpEnabled"

        $networkRole = $Parameters.Roles["Network"].PublicConfiguration

        $mgmtNetValue = $networkRole.NetworkDefinitions.Node.Networks.Network | Where-Object { $_.Name -eq "Management"}

        $mgmtSubnetValue =  $mgmtNetValue.IPv4.Subnet

        $hostNetworkRole = $Parameters.Roles["HostNetwork"].PublicConfiguration

        $atcHostNetworkConfiguration = $hostNetworkRole.PublicInfo.ATCHostNetwork.Configuration | ConvertFrom-JSON

        $physicalMachinesPublicConfig = $Parameters.Roles["BareMetal"].PublicConfiguration

        $nodesCount = $physicalMachinesPublicConfig.Nodes.Node.Count

        [PSObject[]] $allIntentInfoForTesting = @()

        switch ($OperationType)

        {

            { $_ -in @("AddNode", "Upgrade", "PreUpdate") }

            {

                $allIntentInfoForTesting = EnvValidatorNwkLibCreateAtcHostIntentsInfoFromSystem

            }

            default

            {

                $allIntentInfoForTesting = $atcHostNetworkConfiguration.Intents

                if (($null -eq $allIntentInfoForTesting) -or ($allIntentInfoForTesting.Count -eq 0))

                {

                    # If no intents are provided in these scenarios, we will try to get info from the running system.

                    $allIntentInfoForTesting = EnvValidatorNwkLibCreateAtcHostIntentsInfoFromSystem

                }

            }

        }

        # At this point, we should have the valid intent info from ECE or the running system.

        if ($allIntentInfoForTesting.Count -eq 0)

        {

            throw "No ATC Host Intents found. Please provide ATC Host Intents in the configuration."

        }

        [PSObject[]] $storageNetworkDefinition = $atcHostNetworkConfiguration.storageNetworks

        [System.Collections.Hashtable] $storageNetworksVlanIdInfo = @{}

        foreach ($storagenetworkInfo in $storageNetworkDefinition)

        {

            $storageNetworksVlanIdInfo.Add($storagenetworkInfo.networkAdapterName, $storagenetworkInfo.VlanId)

        }

        Trace-Execution "Starting network validation for $($OperationType), detail output can be found in $($env:LocalRootFolderPath)\MASLogs\AzStackHciEnvironmentChecker*"

        $IpPools = New-Object System.Collections.ArrayList

        $ipPool = [PSCustomObject]@{

            StartingAddress = $mgmtNetValue.IPv4.StartAddress # Infra IP Pool Starting Address

            EndingAddress   = $mgmtNetValue.IPv4.EndAddress # Infra IP Pool Ending Address

        }

        $IpPools.Add($ipPool) | Out-Null

        $AdditionalInfrastructureSubnetsValue = $null

        if ($hostNetworkRole.PublicInfo.AdditionalInternalSubnets)

        {

            try

            {

                $AdditionalInfrastructureSubnetsText = $hostNetworkRole.PublicInfo.AdditionalInternalSubnets.configuration

                $AdditionalInfrastructureSubnetsValue = ConvertFrom-JSON $AdditionalInfrastructureSubnetsText -ErrorAction Stop

            }

            catch

            {

                # In case of upgrade, the parameter won't have any value in it but just a string "[AdditionalInternalSubnets]""

                Trace-Execution "Failed to parse AdditionalInfrastructureSubnets.Configuration. $_. Ignore error and continue."

            }

        }

        if ($AdditionalInfrastructureSubnetsValue)

        {

            foreach ($pool in $AdditionalInfrastructureSubnetsValue)

            {

                $ipPool = [PSCustomObject]@{

                    StartingAddress = $pool.StartingAddress # Infra IP Pool Starting Address

                    EndingAddress   = $pool.EndingAddress # Infra IP Pool Ending Address

                }

                $IpPools.Add($ipPool) | Out-Null

            }

        }

        Trace-Execution "Trying to get IP pools information"

        foreach ($ipPool in $ipPools)

        {

            $startingAddress = $ipPool.StartingAddress

            $endingAddress = $ipPool.EndingAddress

            Trace-Execution "Found pool with StartingAddress: $startingAddress EndingAddress: $endingAddress"

        }

        [System.Collections.Hashtable] $nodeToIPMap = Get-NetworkMgmtIPv4FromECEForAllHosts -Parameters $Parameters

        $domainCredential = [EnvironmentValidator]::GetDomainAdminCredential($Parameters)

        $localCredential = [EnvironmentValidator]::GetLocalAdminCredential($Parameters)

        Trace-Execution "Starting $($OperationType) Network Validation"

        # Detect storage type from ECE parameters

        [System.String] $detectedStorageType = "S2D"

        try {

            $storageConfig = $Parameters.Roles["Storage"].PublicConfiguration.PublicInfo.StorageConfiguration

            if ($storageConfig -and $storageConfig.Type) {

                $type = $storageConfig.Type

                if ($type -and $type -ne "" -and $type -notmatch '^\[\{') {

                    $detectedStorageType = $type

                }

            }

        } catch {

            Trace-Execution "Could not read StorageType from ECE parameters. Defaulting to S2D. More Info: $_"

        }

        switch ($OperationType)

        {

            { $_ -in @("Deployment", "Upgrade", "PreUpdate") }

            {

                # Network Validation Checks

                [System.Boolean] $isProxyEnabled= $false

                $proxySettings = Get-ASProxySettings -Parameters $Parameters

                $isProxyEnabled = $proxySettings -and ($proxySettings.HTTP -or $proxySettings.HTTPS)

                $psSession = [EnvironmentValidator]::NewPsSessionAllHosts($Parameters)

                $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration

                $deployADLess = $cloudRole.PublicInfo.DeployADLess

                if ($deployADLess -eq "true" -and $OperationType -eq "PreUpdate")

                {

                    Trace-Execution "Do not test credentials for AD'less update"

                }

                else

                {

                    $ConnectionCredential = [EnvironmentValidator]::GetDomainAdminCredential($Parameters)

                    $allStampNodes = [EnvironmentValidator]::GetAllHostNicIps($Parameters)

                    $testNode = $allStampNodes[-1]

                    Import-Module -Name Microsoft.WSMan.Management -Verbose:$false -Scope Global -ErrorAction SilentlyContinue | Out-Null

                    if (Test-WSMan -ComputerName $testNode -Credential $ConnectionCredential -Authentication Default -ErrorAction SilentlyContinue)

                    {

                        Trace-Execution "Attempting PsSession $testNode with domain credentials"

                    }

                    else

                    {

                        Trace-Execution "Attempting PsSession $testNode with local credentials"

                        $ConnectionCredential = [EnvironmentValidator]::GetLocalAdminCredential($Parameters)

                        if ($null -eq $ConnectionCredential)

                        {

                            throw "Unable to create a valid session to $testNode. No local admin credential found."

                        }

                    }

                }

                $param = @{

                    IpPools = $IpPools

                    ManagementSubnetValue = $mgmtSubnetValue

                    HostNetworkInfo = $atcHostNetworkConfiguration

                    ATCHostIntents = $allIntentInfoForTesting

                    ProxyEnabled = $isProxyEnabled

                    PSSession = $psSession

                    PassThru = $true

                    dhcpEnabled = $dhcpEnabled

                    OutputPath = "$($env:LocalRootFolderPath)\MASLogs\"

                    OperationType = $OperationType

                    HardwareClass = $HardwareClass

                    ClusterPattern = $ClusterPattern

                    NodesInCluster = $nodesCount

                    NodeToManagementIPMap = $nodeToIPMap

                    ConnectionDomainAdminCredential = $domainCredential

                    ConnectionLocalAdminCredential = $localCredential

                    DeployADLess = $deployADLess

                    StorageType = $detectedStorageType

                }

                $RegistrationCloudName = $Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.RegistrationCloudName

                if ($RegistrationCloudName -ieq 'Azure.local')

                {

                    $param += @{

                        RegionName = 'AzureLocal'

                    }

                }

                [array]$Result = AzStackHci.EnvironmentChecker\Invoke-AzStackHciNetworkValidation @param

                # If this is a CI environment downgrade inbox driver test result

                if (Get-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\SQMClient -Name IsCIEnv -ErrorAction SilentlyContinue)

                {

                    Trace-Execution "CI Environment. Downgrade inbox driver result severity from CRITICAL to WARNING"

                    $Result | Where-Object Name -eq 'AzStackHci_Network_Test_AdapterDriver' | Where-Object { if ($_.Severity -eq "CRITICAL") { $_.Severity = "WARNING" } }

                    if (($ClusterPattern -eq 'RackAware') -and ((Get-WmiObject -Class Win32_ComputerSystem).Model -eq "Virtual Machine"))

                    {

                        Trace-Execution "CI Virtual RackAware Environment. Downgrade network intent result severity from CRITICAL to WARNING"

                        $Result | Where-Object Name -eq 'AzStackHci_Network_Test_NetworkIntentRequirement' | Where-Object { if ($_.Severity -eq "CRITICAL") { $_.Severity = "WARNING" } }

                    }

                }

                # Check if the ParseResult method supports the Parameters

                if ([EnvironmentValidator]::ParseResult.OverloadDefinitions -match 'EceInterfaceParameters')

                {

                    Trace-Execution "ParseResult method supports EceInterfaceParameters argument"

                    return [EnvironmentValidator]::ParseResult($Result, 'Network', $FailFast, $Parameters)

                }

                else

                {

                    Trace-Execution "ParseResult method does not support EceInterfaceParameters argument"

                    return [EnvironmentValidator]::ParseResult($Result, 'Network', $FailFast)

                }

            }

            "AddNode"

            {

                # Get nodes name from runtime parameters "NodeName", which is a string separated by space

                $runtimeParameters = $Parameters.RunInformation['RuntimeParameter']

                Trace-Execution "Node to be added: $($runtimeParameters['NodeName'])"

                [System.String[]] $allNodeNamesToBeAdded = $runtimeParameters['NodeName'].Split()

                [System.Management.Automation.Runspaces.PSSession[]] $psSession =  [EnvironmentValidator]::NewPsSessionByHost($Parameters, $allNodeNamesToBeAdded, $false)

                # IpAddress is not a runtime parameter during Repair-Server run, so set the array to null

                [System.String[]] $allNodeIpAddresses = if ($runtimeParameters['IpAddress']) { $runtimeParameters['IpAddress'].Split() } else { @() }

                Trace-Execution "Node IP found: $($allNodeIpAddresses -join ', ')"

                # Add the node to the map if it's not already there

                foreach ($nodeToBeAdded in $allNodeNamesToBeAdded)

                {

                    if ($nodeToBeAdded -notin $nodeToIPMap.Keys)

                    {

                        $Ipv4OrHostName = if ($allNodeIpAddresses.Count -gt 0) { $allNodeIpAddresses[$allNodeNamesToBeAdded.IndexOf($nodeToBeAdded)] } else { $null }

                        if ($dhcpEnabled -or ([string]::IsNullOrEmpty($Ipv4OrHostName)))

                        {

                            # IpAddress is not a runtime parameter during Repair-Server call, so need to get from network helper instead

                            $Ipv4OrHostName = ([EnvironmentValidator]::GetHostNicIpByName($Parameters, $nodeToBeAdded) | Select-Object -First 1)

                        }

                        $nodeToIPMap.Add($nodeToBeAdded, $Ipv4OrHostName)

                    }

                }

                # Check to see if BrownfieldUpgrade or GreenfieldDeployment

                $InstallationMethod = Get-InstallationMethod -Parameters $Parameters

                $param = @{

                    IpPools = $IpPools

                    ManagementSubnetValue = $mgmtSubnetValue

                    PSSession = $psSession

                    ATCHostIntents = $allIntentInfoForTesting

                    NodeToManagementIPMap = $nodeToIPMap

                    PassThru = $true

                    dhcpEnabled = $dhcpEnabled

                    OutputPath = "$($env:LocalRootFolderPath)\MASLogs\"

                    OperationType = $OperationType

                    HardwareClass = $HardwareClass

                    ClusterPattern = $ClusterPattern

                    InstallationMethod = $InstallationMethod

                    NodesInCluster = $nodesCount

                    StorageType = $detectedStorageType

                }

                $RegistrationCloudName = $Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.RegistrationCloudName

                if ($RegistrationCloudName -ieq 'Azure.local')

                {

                    $param += @{

                        RegionName = 'AzureLocal'

                    }

                }

                [array]$Result = AzStackHci.EnvironmentChecker\Invoke-AzStackHciNetworkValidation @param

                # If this is a CI environment downgrade inbox driver test result

                if (Get-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\SQMClient -Name IsCIEnv -ErrorAction SilentlyContinue)

                {

                    Trace-Execution "CI Environment. Downgrade inbox driver result severity from CRITICAL to WARNING"

                    $Result | Where-Object Name -eq 'AzStackHci_Network_Test_AdapterDriver' | Where-Object { if ($_.Severity -eq "CRITICAL") { $_.Severity = "WARNING" } }

                }

                # Check if the ParseResult method supports the Parameters

                if ([EnvironmentValidator]::ParseResult.OverloadDefinitions -match 'EceInterfaceParameters')

                {

                    Trace-Execution "ParseResult method supports EceInterfaceParameters argument"

                    return [EnvironmentValidator]::ParseResult($Result, 'Network', $FailFast, $Parameters)

                }

                else

                {

                    Trace-Execution "ParseResult method does not support EceInterfaceParameters argument"

                    return [EnvironmentValidator]::ParseResult($Result, 'Network', $FailFast)

                }

            }

            default

            {

                Trace-Execution "No interface found for $OperationType"

            }

        }

    }

    catch

    {

        Trace-Execution "Validator failed. $_"

        Trace-Execution "$($_.ScriptStackTrace)"

        throw $_

    }

    finally

    {

        if ($backupPSModuleAutoLoadingPreference)

        {

            $PSModuleAutoLoadingPreference = $backupPSModuleAutoLoadingPreference

        }

        $PsSession | Microsoft.PowerShell.Core\Remove-PSSession -ErrorAction SilentlyContinue

    }

}

Export-ModuleMember -Function Test-AzStackHciNetwork -Variable MetaData

# SIG # Begin signature block

# MIInQQYJKoZIhvcNAQcCoIInMjCCJy4CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCB7C7hF235Df6dL

# 8AuVjAWbo5y47dSyjr8m7krlWNs8naCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ

# KoZIhvcNAQkEMSIEIOQbG9g8c6WFzTTKyCdYpTM1qJpcrgpoe7zVBHcQ1E18MEIG

# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAu3J9W5zIDoLNzhzh

# wJmGZEtpZMCsVfSxeOjm6UZm33iBGqKgvKa4DJh6m/0NDW312iVvc1sUBXsrDYrc

# nc+rIkRjna5jkjFkry12ftDeFdDXr8c9ter5uWgmqpzLz6EVJOGi0z/RyF7UZcIM

# tujdOMEb+Vf4z0N/iSxC2FLqqAIQSVpPNO6fn/6OmGlUxkn3KWJ/icaHVWOABSEP

# 99rqtQyFBBZdvcYocSIUvu/Ic9l0wQw7H5iqus9BNNukkNymRjLgDbjzdohHVljE

# 4Xc1AXRNFarTC1wOxBiJq3vpjYV4s6av2m7GUUJrKHitSz1DqilVftR/OktMdnFG

# scTGbKGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4Yw

# gheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFF

# MIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCCfsMbpqHvfEn8m

# K/nCVoCSnShoxxzbcA257PZxBLU8mAIGaojzuxJ2GBMyMDI2MDgyNzE2Mzg0Ny4x

# NTlaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0QzFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIF

# EKADAgECAhMzAAACGCXZkgXi5+XkAAEAAAIYMA0GCSqGSIb3DQEBCwUAMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgyNVoXDTI2MTEx

# MzE4NDgyNVowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# LTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEn

# MCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjRDMUEtMDVFMC1EOTQ3MSUwIwYDVQQD

# ExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEAsdzo6uuQJqAfxLnvEBfIvj6knK+p6bnMXEFZ/QjPOFyw

# lcjDfzI8Dg1nzDlxm7/pqbvjWhyvazKmFyO6qbPwClfRnI57h5OCixgpOOCGJJQI

# ZSTiMgui3B8DPiFtJPcfzRt3FsnxjLXwBIjGgnjGfmQl7zejA1WoYL/qBmQhw/FD

# FTWebxfo4m0RCCOxf2qwj31aOjc2aYUePtLMXHsXKPFH0tp5SKIF/9tJxRSg0NYE

# vQqVilje8aQkPd3qzAux2Mc5HMSK4NMTtVVCYAWDUZ4p+6iDI9t5BNCBIsf5ooFN

# UWtxCqnpFYiLYkHfFfxhVUBZ8LGGxYsA36snD65s2Hf4t86k0e8WelH/usfhYqOM

# 3z2yaI8rg08631IkwqUzyQoEPqMsHgBem1xpmOGSIUnVvTsAv+lmECL2RqrcOZlZ

# ax8K0aiij8h6UkWBN2IA/ikackTSGVRBQmWWZuLFWV/T4xuNzscC0X7xo4fetgps

# qaEA0jY/QevkTvLv4OlNN9eOL8LNh7Vm0R65P7oabOQDqtUFAwCgjgPJ0iV/jQCa

# MAcO3SYpG5wSAYiJkk4XLjNSlNxU2Idjs1sORhl7s7LC6hOb7bVAHVwON74GxfFN

# iEIA6BfudANjpQJ0nUc/ppEXpT4pgDBHsYtV8OyKSjKsIxOdFR7fIJIjDc8DvUkC

# AwEAAaOCAUkwggFFMB0GA1UdDgQWBBQkLqHEXDobY7dHuoQCBa4sX7aL0TAfBgNV

# HSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5o

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBU

# aW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwG

# CCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRz

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNV

# HRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIH

# gDANBgkqhkiG9w0BAQsFAAOCAgEAnkjRhjwPgdoIpvt4YioT/j0LWuBxF3ARBKXD

# ENggraKvC0oRPwbjAmsXnPEmtuo5MD8uJ9Xw9eYrxqqkK4DF9snZMrHMfooxCa++

# 1irLz8YoozC4tci+a4N37Sbke1pt1xs9qZtvkPgZGWn5BcwVfmAwSZLHi2CuZ06Y

# 0/X+t6fNBnrbMVovNaDX4WPdyI9GEzxfIggDsck2Ipo4VXL/Arcz7p2F7bEZGRuy

# xjgMC+woCkDJaH/yk/wcZpAsixe4POdN0DW6Zb35O3Dg3+a6prANMc3WIdvfKDl7

# 5P0aqcQbQAR7b0f4gH4NMkUct0Wm4GN5KhsE1YK7V/wAqDKmK4jx3zLz3a8Hsxa9

# HB3GyitlmC5sDhOl4QTGN5kRi6oCoV4hK+kIFgnkWjHhSRNomz36QnbCSG/BHLEm

# 2GRU9u3/I4zUd9E1AC97IJEGfwb+0NWb3QEcrkypdGdWwl0LEObhrQR9B1V7+edc

# yNmsX0p2BX0rFpd1PkXJSbxf8IcEiw/bkNgagZE+VlDtxXeruLdo5k3lGOv7rPYu

# OEaoZYxDvZtpHP9P36wmW4INjR6NInn2UM+krP/xeLnRbDBkm9RslnoDhVraliKD

# H62BxhcgL9tiRgOHlcI0wqvVWLdv8yW8rxkawOlhCRqT3EKECW8ktUAPwNbBULkT

# +oWcvBcwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3

# DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4G

# A1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIw

# MAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAx

# MDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# 5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/

# XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1

# hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7

# M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3K

# Ni1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy

# 1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF80

# 3RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQc

# NIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahha

# YQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkL

# iWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV

# 2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIG

# CSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUp

# zxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBT

# MFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYI

# KwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGG

# MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186a

# GMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3Br

# aS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsG

# AQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcN

# AQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1

# OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYA

# A7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbz

# aN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6L

# GYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3m

# Sj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0

# SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxko

# JLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFm

# PWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC482

# 2rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7

# vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCC

# Aj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExp

# bWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0QzFBLTA1RTAtRDk0NzEl

# MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsO

# AwIaAxUAnWtGrXWiuNE8QrKfm4CtGr57z+mggYMwgYCkfjB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO46segwIhgPMjAyNjA4

# MjcxMjU0MDBaGA8yMDI2MDgyODEyNTQwMFowdDA6BgorBgEEAYRZCgQBMSwwKjAK

# AgUA7jqx6AIBADAHAgEAAgInjjAHAgEAAgISMjAKAgUA7jwDaAIBADA2BgorBgEE

# AYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYag

# MA0GCSqGSIb3DQEBCwUAA4IBAQAekIs3hBkWPsAUkgLWfYndbTYdES29alwkax3R

# FxqCQC8CrftUlbPBOP6eTMqqCIxyRdiWctvaNrOZxZD8KhCoUak7tH4okZxpvLMB

# //tnyrecIwWUY5rSmk703oRb0c/RN8BywP7+V/P6Vj1LuZnx1xXyH8jNTrk6ixUb

# 9RT1V0q4uFnQE1D/7mGQDvyBRUvDTuvC+k/hQ2LIXTjIb7l8wzMCJWdznVH2DyAD

# 5MDq9eKmRi+lkwLYI7ORScNCZVxBHoIbzUetY4H4Xh/bVLz4xgUOBZfMp7TwvYFZ

# 3OfawD10euQlzgh7S+7QFMOF81Nem5vOZg0MIS6hl23shRbcMYIEDTCCBAkCAQEw

# gZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE

# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIYJdmSBeLn5eQA

# AQAAAhgwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0B

# CRABBDAvBgkqhkiG9w0BCQQxIgQg1Se5Pm1dp4H1zVDtZkCEF9GiVHxPfM6vRWfx

# QWzzr1QwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCZE9yJuOTItIwWaES6

# lzGKK1XcSoz1ynRzaOVzx9eFajCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwAhMzAAACGCXZkgXi5+XkAAEAAAIYMCIEIK3fchsKonyRg78EaFMj

# zfTaqPQlpKycrXplloik6GZbMA0GCSqGSIb3DQEBCwUABIICADu62izbLlLpxcdJ

# kRxXhC2KkOAMfm6sKvAY94dYFnvp7lBnNkBHsJj2n9aDYH9fuQ8tueZjDiTlvmRt

# 0wKDYyhdqhY0kNtaa77eE2beglmSZ9TMIIA55ntPvZpQdsd5oT/vgpATl2S97hJB

# JYczwy03xdoszXqRR9nGo4hI5TY+6rJX05W3jAKC0SRnYn/MMzRbiUfoskvcKyu1

# NEFSmjY5IulG1fdgqUKmKs0WbBX8+6PTPr22gB/N7UjPqeJSeFN7CVs1wKcajc7Q

# 0nQoKstQCA/48lPO3trd/yuuVPplYreL9/88ayqIauTc/9Q5fnxfGwHJIobc7xz+

# xGvPpUsVUzUvAfi/jCdxHjw7ZukzegFcENtI/J52+IMoJ8dTQTEHkSS8i20piH7R

# ufSgZtEE6BFFcFirwsS9BK2vO2EarMusP1DmcI+i06x95tg90ylWJ/Qht8plTDrh

# rFWeGl9bTQp4uaYPmabXad4nui+erf4qlFdQvy5Feda+IUy1vCDHuSt0ulrqscw5

# HHfLiPcYfORG+IpsRN0/QA+La/kY9g39Tr5xwrbkVYLDa94r8j/OGFXcFgsd0tR4

# coa2fp2Yp3NH0ahRtwlE+XRhMx4FQHHLvE8FeXotARecy6ST0h0YdTKYFLVVTjsM

# j3JwNoT4vxcBsS/39LQ/Vyq3piyr

# SIG # End signature block