Microsoft.AzLocal.CSSTools

1.2607.16.2249

modules/AzStack.Insights/analyzers/AzStackHci.DiagnosticSettings.OsConfig.ConfigurationConsistency.ps1

                                <#

.SYNOPSIS

    Surfaces the cross-node OS configuration "Consistency Checks" produced by the

    AzStackHci.DiagnosticSettings module as Insights rules.

.DESCRIPTION

    Runs Get-AzStackHciOsConfigSettings -Scope Cluster once and parses the returned health summary

    (Strategy A: run-and-parse, identical to how the NetworkConnectivity analyzer consumes

    Test-AzureLocalConnectivity). The module fans out across every cluster node itself via inline

    Invoke-Command - it is NOT required to be installed on remote nodes - so this analyzer only needs

    to invoke it from the local node.

    Each entry in the returned ConsistencyChecks collection is delegated to the data-driven

    AzStackHci.DiagnosticSettings.OsConfig.ConsistencyCheck rule, which maps the upstream Result

    (PASS/WARNING/FAILURE/INFO/SKIPPED) onto an InsightStatus and carries check-specific remediation.

    No OS configuration is collected or compared here; the DiagnosticSettings module is the single

    source of truth for every cross-node comparison.

#>

[CmdletBinding()]

param(

    # Collection scope forwarded to Get-AzStackHciOsConfigSettings. 'Cluster' (default) fans out to all

    # nodes; 'Node' evaluates only the local node (the module then omits the cross-node consistency checks).

    [Parameter(Mandatory = $false)]

    [ValidateSet('Cluster', 'Node')]

    [string]$Scope = 'Cluster',

    # Requests the module's per-node software inventory (-IncludeInventoryData, 0.6.8+) and adds an

    # 'Installed Programs' per-node property report. On by default because the per-node inventory is useful

    # information; pass -IncludeInventoryData:$false to skip it and avoid the extra cross-node collection cost.

    [Parameter(Mandatory = $false)]

    [bool]$IncludeInventoryData = $true

)

# Load the parent module when invoked directly (e.g. Pester). No-op when called via Invoke-SupportInsight

# because the module is already loaded.

if (-not (Get-Command -Name 'Initialize-InsightAnalyzer' -ErrorAction SilentlyContinue)) {

    Import-Module $PSScriptRoot\..\AzStack.Insights.psm1 -Force -DisableNameChecking

}

Import-LocalizedData -BindingVariable 'localizedData' -BaseDirectory "$PSScriptRoot\locale" -UICulture $PSUICulture

$insightAnalyzer = Initialize-InsightAnalyzer -Id $localizedData.Id -Properties $localizedData.Insight

<# START ANALYZER LOGIC #>

try {

    # 'Get-AzStackHciOsConfigSettings -Scope Cluster' fans out to all nodes via a nested Invoke-Command, which

    # is needed for the cross-node comparison. When THIS analyzer is already running inside a remote session

    # (PSSenderInfo set), that nested call becomes a SECOND hop and cross-node collection fails (the PowerShell

    # double-hop authentication problem) - producing partial "(not collected)" data on the remote node.

    #

    # Instead of throwing NotSupportedException (which leaves remote nodes as NOT_APPLICABLE), downgrade to

    # -Scope Node so the module evaluates ONLY the local node (no second hop). This still surfaces that node's

    # own collected properties so each per-node report carries local data - useful when "a node has a different

    # view of the world" (e.g. disks/storage). NOTE: Node scope does NOT emit cross-node ConsistencyChecks, so

    # the rules table will be empty on remote-session invocations; the full comparison still comes from the

    # single local (orchestrator) -Scope Cluster run.

    if ($PSSenderInfo -and $Scope -eq 'Cluster') {

        Write-InsightLog -Level 'Informational' -Message $localizedData.DowngradeToNodeScope

        $Scope = 'Node'

    }

    # Fail fast with a clear message if the module/cmdlet is not present.

    $osConfigCommand = Get-Command -Name 'Get-AzStackHciOsConfigSettings' -ErrorAction Stop

    # Build invocation parameters. Always quiet (NoOutput), never self-update (NoAutoUpdate), never prompt to

    # upload (UploadResults = $false), and return the parsed summary object (PassThru).

    # Write the module's report/transcript files INTO this node's own report folder - the SAME per-node folder the

    # Insights framework builds and copies back to the orchestrator: <OutputDirectory>\<COMPUTERNAME>\. We anchor to

    # the framework's resolved OutputDirectory (exposed on the Insights cache) rather than reconstructing it from

    # Get-AzsSupportWorkingDirectory: on a REMOTE node the framework uses the orchestrator-supplied OutputDirectory,

    # which differs from the remote node's own (per-session, timestamped) working directory - so reconstructing it

    # would write the report to a divergent folder that is never collected. Falling back to the working directory

    # keeps direct/Pester invocations working. We replicate Export-AzsSupportInsightToHtml's exact folder-name

    # transform (ToUpper() with whitespace -> '_') so the report lands inside the collected node folder and its

    # relative ReportLinks anchor resolves in the bundle.

    $insightOutputDir = if ($Global:AzStack_Insights.Cache.OutputDirectory) { $Global:AzStack_Insights.Cache.OutputDirectory }

                        else { Join-Path (Get-AzsSupportWorkingDirectory) 'InsightReport' }

    $nodeReportFolder = (Join-Path $insightOutputDir $env:COMPUTERNAME.ToUpper()) -replace '\s', '_'

    $ExportPath = Join-Path $nodeReportFolder 'AzLocalOsConfig'

    # Params for splatting to Get-AzStackHciOsConfigSettings. -ExportPath is required for the module to write its

    # report/transcript files, even when -NoOutput is specified.

    $osConfigParams = @{

        Scope         = $Scope

        PassThru      = $true

        NoOutput      = $true

        NoAutoUpdate  = $true

        UploadResults = $false

        ExportPath    = $ExportPath

        ErrorAction   = 'Stop'

    }

    # HealthSummaryOnly = $false keeps the module writing its full on-disk output (incl. the HTML report) while

    # PassThru gives us the parsed summary. Only add it when the installed cmdlet exposes the parameter, so an

    # older module version that lacks it does not fail binding (which would end the analyzer as UNKNOWN).

    if ($osConfigCommand.Parameters.ContainsKey('HealthSummaryOnly')) {

        $osConfigParams['HealthSummaryOnly'] = $false

    }

    # Optionally request the per-node software inventory. Guarded on BOTH the caller opt-in and the cmdlet

    # actually exposing the parameter (0.6.8+), so older module versions are simply left unaffected.

    if ($IncludeInventoryData -and $osConfigCommand.Parameters.ContainsKey('IncludeInventoryData')) {

        $osConfigParams['IncludeInventoryData'] = $true

    }

    Write-InsightLog -Message ($localizedData.InvokingModule -f $Scope)

    $summary = $null

    try {

        # IMPORTANT: do NOT cast the result or wrap the call in @(...). The module returns a single

        # PSCustomObject health summary; bind it directly to a variable per its documented contract.

        $summary = Get-AzStackHciOsConfigSettings @osConfigParams

    }

    catch {

        Write-InsightLog -Level 'Error' -Message ($localizedData.InvokeFailed -f $_.Exception.Message)

        throw

    }

    if (-not $summary) {

        Write-InsightLog -Level 'Warning' -Message $localizedData.NoSummary

        $insightAnalyzer.Status = [InsightStatus]::WARNING

    }

    else {

        # Log the schema version and warn (non-fatal) if it is below the minimum contract this consumer was

        # written against. A missing or older/unparseable schema means the producer/consumer contract may not

        # line up and some sections could be absent - surface it so a version mismatch is visible in the report.

        $schemaRaw = if ($summary.PSObject.Properties['SchemaVersion']) { [string]$summary.SchemaVersion } else { '' }

        if ($schemaRaw) {

            Write-InsightLog -Message ($localizedData.SchemaVersion -f $schemaRaw)

            $parsedSchema = $null

            if (-not [version]::TryParse($schemaRaw, [ref]$parsedSchema) -or $parsedSchema -lt [version]$localizedData.MinimumSchemaVersion) {

                Write-InsightLog -Level 'Warning' -Message ($localizedData.SchemaVersionBelowMinimum -f $schemaRaw, $localizedData.MinimumSchemaVersion)

            }

        }

        else {

            Write-InsightLog -Level 'Warning' -Message $localizedData.SchemaVersionMissing

        }

        # Extract the cross-node consistency checks. Absent on single-node / -Scope Node runs.

        $consistencyChecks = @()

        if ($summary.PSObject.Properties['ConsistencyChecks'] -and $summary.ConsistencyChecks) {

            $consistencyChecks = @($summary.ConsistencyChecks)

        }

        if ($consistencyChecks.Count -eq 0) {

            Write-InsightLog -Message $localizedData.NoConsistencyChecks

        }

        else {

            Write-InsightLog -Message ($localizedData.EvaluatingChecks -f $consistencyChecks.Count)

            foreach ($check in $consistencyChecks) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.ConsistencyCheck.ps1 -Check $check

                )

            }

        }

        # Evaluate the top-level OS configuration health sections. Unlike ConsistencyChecks (a cross-node

        # collection), each of these is a single named object on the health summary carrying its own

        # Result / Severity / Message. Iterate a fixed, ordered list of the section property names and invoke

        # the HealthCheck rule for each one that is present, so a section that is absent on a given run (or

        # module version) is simply skipped rather than producing a spurious rule.

        $healthSectionNames = @(

            'ArcAgentHealth'

            'NonMicrosoftServices'

            'StorageHealth'

            'KeyServicesHealth'

            'StabilityEvents'

            'GPOHealthCheck'

            'NetworkATCHealth'

            # Per-node ABSOLUTE health signals (0.6.9+): each has a single correct value per node and now

            # evaluates in BOTH -Scope Node and -Scope Cluster (previously power plan was consistency-only, and

            # time sync / pending reboot were collected but not evaluated). Absent on older module versions, so

            # simply skipped by the PRESENT-section filter below.

            'PowerPlanHealth'

            'TimeSyncHealth'

            'PendingRebootHealth'

        )

        $presentHealthSections = @($healthSectionNames | Where-Object { $summary.PSObject.Properties[$_] -and $summary.$_ })

        if ($presentHealthSections.Count -eq 0) {

            Write-InsightLog -Message $localizedData.NoHealthSections

        }

        else {

            Write-InsightLog -Message ($localizedData.EvaluatingHealthSections -f $presentHealthSections.Count)

            foreach ($sectionName in $presentHealthSections) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.HealthCheck.ps1 -Section $summary.$sectionName -SectionName $sectionName

                )

            }

        }

        # Surface the per-node software inventory (Installed Programs) as its own INFO rule when requested, so it

        # renders as a compact drill-down row rather than a large inline table (see the Properties note below).

        # This keeps the analyzer view readable on large clusters where the full inventory is many rows per node.

        # Only emit the rule when at least one node actually carries InstalledPrograms, so we never add a noise

        # "no inventory" rule (e.g. an older module version that does not populate the inventory).

        if ($IncludeInventoryData -and $summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {

            $hasInventory = @($summary.Nodes | Where-Object {

                    $inventoryNode = $_

                    if ($inventoryNode -is [System.Collections.IDictionary]) { $inventoryNode = [pscustomobject]$inventoryNode }

                    $inventoryNode.PSObject.Properties['InstalledPrograms'] -and $inventoryNode.InstalledPrograms

                }).Count -gt 0

            if ($hasInventory) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.InstalledProgramsInventory.ps1 -Nodes $summary.Nodes

                )

            }

            # Same treatment for the per-node device driver inventory (typically hundreds of rows per node) - its

            # own INFO drill-down rule, only when at least one node actually carries DriverVersions. Cross-node NIC

            # driver drift is evaluated separately by the NetworkAdapterDriverConsistency check.

            $hasDriverInventory = @($summary.Nodes | Where-Object {

                    $driverNode = $_

                    if ($driverNode -is [System.Collections.IDictionary]) { $driverNode = [pscustomobject]$driverNode }

                    $driverNode.PSObject.Properties['DriverVersions'] -and $driverNode.DriverVersions

                }).Count -gt 0

            if ($hasDriverInventory) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.DriverVersionsInventory.ps1 -Nodes $summary.Nodes

                )

            }

        }

        # Build a per-node property report from the summary's structured Nodes collection.

        $reportObject = Initialize-InsightAnalyzerPropertyReport -Name 'Cluster Nodes'

        if ($summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {

            foreach ($node in @($summary.Nodes)) {

                # The module returns each structured node as an [ordered] dictionary, whose ENTRIES are not

                # exposed via PSObject.Properties. Normalise to a PSCustomObject so the member-existence guards

                # below read the real values instead of always falling back to ''.

                if ($node -is [System.Collections.IDictionary]) { $node = [pscustomobject]$node }

                $reportObject.Data += [PSCustomObject]@{

                    Node      = if ($node.PSObject.Properties['Name'])      { [string]$node.Name }      else { '' }

                    OsBuild   = if ($node.PSObject.Properties['OsBuild'])   { [string]$node.OsBuild }   else { '' }

                    Ubr       = if ($node.PSObject.Properties['Ubr'])       { [string]$node.Ubr }       else { '' }

                    FullBuild = if ($node.PSObject.Properties['FullBuild']) { [string]$node.FullBuild } else { '' }

                    Collected = if ($node.PSObject.Properties['Collected']) { [bool]$node.Collected }   else { $false }

                }

            }

        }

        # The per-node OS build summary is a small table (one row per node), so it stays as an inline analyzer

        # property report. The larger Installed Programs software inventory is surfaced as its own INFO rule

        # (invoked above when -IncludeInventoryData is set) so it renders as a compact drill-down rather than a

        # large inline table - which keeps large clusters readable.

        $insightAnalyzer.Properties = $reportObject

        # Surface a link to the module's own detailed HTML report (which renders the full hardware / GPO / per-node

        # breakdown that is not part of the structured -PassThru contract). The report engine renders this as a

        # RELATIVE anchor when the file lives inside the InsightReport tree and safely skips it otherwise, so this

        # never produces a broken link. The module writes this report under our -ExportPath (inside the tree).

        if ($summary.PSObject.Properties['HTMLReportPath'] -and $summary.HTMLReportPath) {

            Add-Member -InputObject $insightAnalyzer -NotePropertyName 'ReportLinks' -NotePropertyValue @(

                [pscustomobject]@{

                    Title = 'View Detailed AzLocal OS Configuration Report'

                    Path  = [string]$summary.HTMLReportPath

                }

            ) -Force

        }

    }

}

catch {

     # gracefully handle not supported scenarios such as when the environment does not meet the requirements

    if ($_.Exception -is [System.NotSupportedException]) {

        Write-InsightLog -Level 'Informational' -Message $_.Exception.Message

        $insightAnalyzer.Status = [InsightStatus]::NOT_APPLICABLE

    }

    else {

        $_ | Write-InsightLog -Level 'Exception'

        $insightAnalyzer.ScriptStackTrace = Get-FormattedException -Exception $_.Exception

        $insightAnalyzer.Status = [InsightStatus]::UNKNOWN

    }

}

<# END ANALYZER LOGIC #>

# enumerate the rules and set the analyzer status based on the rules status

# if any rule is in failure, the analyzer is in failure; if any rule is in warning, the analyzer is in warning

if ($insightAnalyzer.Rules.Status -icontains [InsightStatus]::FAILURE) {

    $insightAnalyzer.Status = [InsightStatus]::FAILURE

}

elseif ($insightAnalyzer.Rules.Status -icontains [InsightStatus]::WARNING) {

    $insightAnalyzer.Status = [InsightStatus]::WARNING

}

$insightAnalyzer.Duration = New-TimeSpan -Start $insightAnalyzer.OccurrenceTimeUTC -End $([System.DateTime]::UtcNow)

# Cache the analyzer results, write event and return result

Set-InsightCache -Type 'Analyzer' -Data $insightAnalyzer

Write-InsightEvent -Insight $insightAnalyzer

return $insightAnalyzer

# SIG # Begin signature block

# MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCezdkbFlygyreE

# FrC7bkus4lfYdu6C7MOIrzEVxypUEqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK

# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIPJarQVM

# SaihoSDu0PjrPFa5wjX3vMFNY4/HhCZtTUmBMEIGCisGAQQBgjcCAQwxNDAyoBSA

# EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w

# DQYJKoZIhvcNAQEBBQAEggEACCKb0I8d5gyWqaAvW0Otnb64Y1MNM5xuyy3mSNvu

# m4zUWX0Fa753WBp9ggiLJqkdev12a3vYmop/peDzB6FqrOJvtpx+xFJJ9tWp3ZUm

# c4GMzAGPiuHSW2S9mVwnMxDdaXLO3ELwZej/PG387wuHocR3qoES8HEV01hi1dnT

# /mcWRNCC63855gsq9kk8rsSFWXTg9349AOWft+zcN+8mmznkcJXvPDLpwGETUMYc

# OymWT4RWiXFSrRgX4ptMCKjrP6r6sd2iwEBTdeSNqbCRl/xLq75IThyaNDsknX7s

# tt7Dc6z4Z0/GNU6w9SZkBl2w+TRAynB6VR/g15ftTiEl86GCF5cwgheTBgorBgEE

# AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD

# BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD

# ATAxMA0GCWCGSAFlAwQCAQUABCCFj5QB5pkK1/kE4r8dfA7FRFsAB5iXcOey0SN0

# Ss8IPgIGajFUYvvBGBMyMDI2MDcxNjIyNTQwMi4xNjFaMASAAgH0oIHRpIHOMIHL

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN

# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT

# UyBFU046ODYwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAiWAxzfGzap3SQABAAAC

# JTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe

# Fw0yNjAyMTkxOTQwMDFaFw0yNzA1MTcxOTQwMDFaMIHLMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj

# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046ODYwMy0wNUUw

# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCm8RIP0eLA46VcCPovvmqsIlN6

# qkmz5IsHWmUU0neUqp8uGxadeo+SwWBCwQ5alZI/DNdpXfyiZLZR6XYgpRPFzepI

# l7OCDb4NtEskJCIZDkQMNwrH9YwUyu71GGigsLIxeleHtA3utoVTeHjS1b8UnwOR

# RtknKkyrUArT6ZpB2rodIcmcLcv3x3wwgYlOs0FEg5EsVrZb7LNc/nd0bXDp+HTO

# WWui8eoTVwJeLxcVP869oF8li5SU81aa2tGJ6/Jsejiz9JMW8SJXKBT2DCXMOUkC

# sGjonPZRqfvoMSIQZgtaOTyAJlrvsy0TZ78XrGqoygtQimQnbOAL4KNLSCuW5TZE

# QGTHLOQJGgggb3j5gKC778+RIPJA+n/hmHJ/x4qT/HTTPoVeMCcuBKWrQXR1+/pY

# au3Fwe0tWIyG+LWzkRr/ZNPPupcA2Yci3qn8HR9RwvQopqSNJwn2Ri6am8AQyfVV

# y/BBw0t6jpoRPjwKvuUjfCzpae6duOxQtQ1XDN9PA2yl9sDko/+AXV/SOe8ea8Qo

# Qcv3s3ErkG+Lp6hnvw6OMPian4ggNkRtgtB7ro1OiopOUXJn9Y5EO3JUAXNcuM9m

# +5My1VEuvGytgAH3uxmslTnW3YbrfazaySCSSnWkhaOZ33hgbuUQfH7n2NFEAUc/

# cFzfmCQUikWisnJYywIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFLE40qoXTuMHX3Af

# ZUu1n8nx2h93MB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud

# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr

# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv

# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw

# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw

# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQAHnfc2yUyoHZbvvyVK

# FuXh5HxxHIvIaR9JWpIfITJlc/Ki03juR+vckzq3tp5fFH5LL7eIFXRIuoewMsvW

# eFrWufrrW4HhmhCwkqArfA1C0xk+HaYs2O48YSxMX9lgS1kTTIb3YsfoFdFpKurP

# f2nc2Yd4wLg+FgwmkxkeyE3MUKVna8SZeVpEjnS5ucFck4srPwK2ORAf70I23GGy

# PhqgIKZphNXhSscTAQsyIqB5GwDMdRV5LK37NfU4YmxvCYh3TFYE/Gh01Q6yJvf9

# HxiEZpwW+oUk0gruHobg3sgIR5rfgUo8l30vUnaDYMcPAClaFMC/QbHZSaUhWXZG

# 1OOcMp0g9vYQNLDEqFX2jlquvzVSSwtHtm1KTldCjRED+kdCybcPxbPalwJigXc1

# BsI9CitnTf0ljwb9NkZ/JVI8/D62rXXzhz4F3u0iVGzwncGaxRxHG/Xv4nTrpkOe

# epoYbNBbMWS2G1qP3Xj7pVf0+4qRyAqJ0stjQjoVOJImVPWRjz5PR3Dn6adQVMBJ

# DM6gDrj1rZTFVgCtTijqGZSGzvXpGkF3vYsyE6ZDma/kGdiUe5saeI6lH66PiWWX

# gqxt7sy2Ezv0yIjSVv+eMOT2QMUiZ6WCc7gVtAmXpfeIus+NmgFvM+Ic1X58e4I9

# EL4ZSAidSpWW0GZTLNC02mryLjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA

# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow

# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX

# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q

# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d

# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN

# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k

# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d

# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS

# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8

# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm

# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF

# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID

# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU

# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1

# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0

# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA

# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL

# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p

# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w

# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz

# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU

# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN

# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU

# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5

# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy

# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6

# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE

# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp

# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd

# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb

# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd

# VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg

# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjg2MDMtMDVFMC1E

# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw

# BwYFKw4DAhoDFQBTb+bKOPAjCBflhzw5EXBuSWxeDqCBgzCBgKR+MHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7gNbmjAiGA8y

# MDI2MDcxNjEzMzEwNloYDzIwMjYwNzE3MTMzMTA2WjB3MD0GCisGAQQBhFkKBAEx

# LzAtMAoCBQDuA1uaAgEAMAoCAQACAgtaAgH/MAcCAQACAhMRMAoCBQDuBK0aAgEA

# MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI

# AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBADZFN65zgmTLZhQhdmSvpVzrY8zW

# ZtQRSqT3gpBZAPDzPVumiCU7/Y6GKJenyhmWivFgUzjN43dAan32vOgn3fUm80dH

# xl9K3Q2mHCR7mbLbnK5NKyKpx+pHvsrKSAFKXPlhMKqddtC+uzMSIesoma7viKGw

# uj1IMyADWVs9YeB45ofGboTupUHaHYW7HAdWO8yXtA/UX44Z8UnkdCZFxXFpU7pn

# JuPxntXoYkPlqymHxkxG6U2l1q5mL/KR6atbWMvMMUPeIOy4PnxCpAzJ1AbuVeDU

# WIQiiuvLAZDf9cUjgxXeilYruoc0TjvHntuwS6DpNQP+Dp2P4/U1ecbSDnMxggQN

# MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ

# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u

# MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiWA

# xzfGzap3SQABAAACJTANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G

# CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCDfqzMRtoAmrF8QNEvaB+MIQSE6

# mBgCvnjq9crXZOf79zCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIFYN7oh6

# ON3y92CmAl/lF0CYwrjWWQP6dCUxajPSHKEQMIGYMIGApH4wfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTACEzMAAAIlgMc3xs2qd0kAAQAAAiUwIgQgHhd/t1cj

# 09ZgVotvBr6U9JxAGzIAWpHKSZYfsi8vBK4wDQYJKoZIhvcNAQELBQAEggIAT5nz

# YRoHhdMqv1qmbtShCkXO+IqrsMgHesijG0+U3/h+WGFGZL4oJNYTOdN451To2xKe

# bWhHSOtGV9LZbvt1Ybdm05qFhLrexx0z6K+qvuBFg97MV0B4p1tIqv10tkfwDUZd

# joqcZpb0BQrYsockwAs0yDd19jjzL5AVMyj4EJQI8PkCs1SkUgbQDflhv9kkm4wx

# 3grwRtxcpdWC5JZxD0iO3Vh/CbHNYf+R9D/BPjYZcDQGNd06nZ0HoAm5NQtSU3aR

# +inF1ENW7bNv0iFmCDK1/PvvT+mEyZRRX2bZz529c9qKHhx6t2hie6gpmU8UVgHI

# mywr/RHmydalBXlu+N7PFTc4sXQ7g2Gb98ncyrKZpsM7auR1VH2TPfAfNuKmUI0M

# NpKbfMMPVvJtPfVVr1syaeJG0eiD9GZaYxHYhMXn2F/HaXRY8el4rmBmrBHGkFCH

# VS5/gI2x9MutPizBGNm2xgtRSTtz2M6VnwXxvJdbypq7LlfIGqNuiJQ7OKgIBI3x

# U++4sGxSPOHkIjIwBEodbUH98znRAToCIhvKDyfXJORDvVPJW1bg5y8m71G1nibY

# P5fDsxK2aOy6Ol8b9XRvP9lDyqF9e3hVWCuljmR4dcsvrYBzX3ZnxgwQvo3s+Rcc

# 0qEmP7D65hrTWgr03kV3Ss6jLDiCBDjUHdz6N78=

# SIG # End signature block