Microsoft.AzLocal.CSSTools

1.2607.16.2249

modules/AzStack.Insights/remediations/ResetCredSSPConfiguration.ps1

                                <#

.SYNOPSIS

    Resets CredSSP authentication configuration to the correct state required for Azure Local operations.

.DESCRIPTION

    This remediation resets the CredSSP registry keys and WinRM settings required for delegated credential

    operations (Deployment, Upgrade, Update, AddNode, RepairNode). It enables CredSSP on both the WinRM

    Service and Client, and configures the AllowFreshCredentials and AllowFreshCredentialsWhenNTLMOnly

    delegation policies.

    Note: These values may be reverted by Group Policy. If settings revert after running gpupdate /force,

    check Domain Group Policy or Local Group Policy under Computer Configuration > Administrative Templates >

    System > Credentials Delegation.

.PARAMETER Force

    If specified, the remediation will proceed without prompting the user for confirmation.

    Use with caution as applying the remediation without user confirmation could make changes to the system unexpectedly.

.PARAMETER SkipEnvironmentCheck

    If specified, the remediation will proceed even if the environment requirements are not met.

    Use with caution as applying the remediation in an unsupported environment could cause issues.

#>

[CmdletBinding()]

param(

    [Parameter(Mandatory = $false, Position = 0)]

    [switch]$Force,

    [Parameter(Mandatory = $false, Position = 1)]

    [switch]$SkipEnvironmentCheck

)

Import-LocalizedData -BindingVariable 'localizedData' -BaseDirectory "$PSScriptRoot\locale" -UICulture $PSUICulture

$remediationObject = Initialize-RemediationObject -Properties $localizedData.Remediation -SkipEnvironmentCheck:$SkipEnvironmentCheck

# if $remediationObject.Status is set to 'NOT_APPLICABLE' at this point,

# it means that environment requirements are not met and user did not choose to SkipEnvironmentCheck,

# so we should exit without applying the remediation

if ($remediationObject.Status -eq [RemediationStatus]::NOT_APPLICABLE) {

    return $remediationObject

}

#if force is not specified, confirm that user wants to proceed with remediation

# confirm with the user before applying the remediation, if user cancels then update remediation status and exit

if (-not $Force) {

    if (-not (Confirm-RemediationAction -Properties $localizedData.Remediation)) {

        $remediationObject.Status = [RemediationStatus]::USER_CANCELLED

        return $remediationObject

    }

}

$changesApplied = $false

try {

    <# START REPAIR LOGIC #>

    $credDelegPath = 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation'

    $allowFreshPath = "$credDelegPath\AllowFreshCredentials"

    $allowNtlmPath = "$credDelegPath\AllowFreshCredentialsWhenNTLMOnly"

    # Enable CredSSP on WinRM Service

    $currentServiceValue = Get-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\WSMAN\Service' -Name 'auth_credssp' -ErrorAction SilentlyContinue

    if (($null -eq $currentServiceValue) -or ($currentServiceValue.auth_credssp -ne 1)) {

        Write-InsightLog -Level 'Informational' -Message $localizedData.EnablingServiceCredSSP

        Set-Item 'wsman:\localhost\Service\Auth\CredSSP' $true -Force

        $changesApplied = $true

    }

    # Enable CredSSP on WinRM Client

    $currentClientValue = Get-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\WSMAN\Client' -Name 'auth_credssp' -ErrorAction SilentlyContinue

    if (($null -eq $currentClientValue) -or ($currentClientValue.auth_credssp -ne 1)) {

        Write-InsightLog -Level 'Informational' -Message $localizedData.EnablingClientCredSSP

        Set-Item 'wsman:\localhost\Client\Auth\CredSSP' $true -Force

        $changesApplied = $true

    }

    # Ensure CredentialsDelegation key exists

    if (-not (Test-Path -Path $credDelegPath)) {

        New-Item -Path $credDelegPath -ItemType Directory -Force | Out-Null

    }

    # Set AllowFreshCredentials DWORD

    $currentAllowFresh = Get-ItemProperty -Path $credDelegPath -Name 'AllowFreshCredentials' -ErrorAction SilentlyContinue

    if (($null -eq $currentAllowFresh) -or ($currentAllowFresh.AllowFreshCredentials -ne 1)) {

        Write-InsightLog -Level 'Informational' -Message ($localizedData.ConfiguringRegistryValue -f 'AllowFreshCredentials', '1')

        Set-ItemProperty -Path $credDelegPath -Name 'AllowFreshCredentials' -Value 1 -Type DWORD -Force

        $changesApplied = $true

    }

    # Set AllowFreshCredentialsWhenNTLMOnly DWORD

    $currentAllowNtlm = Get-ItemProperty -Path $credDelegPath -Name 'AllowFreshCredentialsWhenNTLMOnly' -ErrorAction SilentlyContinue

    if (($null -eq $currentAllowNtlm) -or ($currentAllowNtlm.AllowFreshCredentialsWhenNTLMOnly -ne 1)) {

        Write-InsightLog -Level 'Informational' -Message ($localizedData.ConfiguringRegistryValue -f 'AllowFreshCredentialsWhenNTLMOnly', '1')

        Set-ItemProperty -Path $credDelegPath -Name 'AllowFreshCredentialsWhenNTLMOnly' -Value 1 -Type DWORD -Force

        $changesApplied = $true

    }

    # Set ConcatenateDefaults_AllowFresh DWORD

    $currentConcatFresh = Get-ItemProperty -Path $credDelegPath -Name 'ConcatenateDefaults_AllowFresh' -ErrorAction SilentlyContinue

    if (($null -eq $currentConcatFresh) -or ($currentConcatFresh.ConcatenateDefaults_AllowFresh -ne 1)) {

        Write-InsightLog -Level 'Informational' -Message ($localizedData.ConfiguringRegistryValue -f 'ConcatenateDefaults_AllowFresh', '1')

        Set-ItemProperty -Path $credDelegPath -Name 'ConcatenateDefaults_AllowFresh' -Value 1 -Type DWORD -Force

        $changesApplied = $true

    }

    # Set ConcatenateDefaults_AllowFreshNTLMOnly DWORD

    $currentConcatNtlm = Get-ItemProperty -Path $credDelegPath -Name 'ConcatenateDefaults_AllowFreshNTLMOnly' -ErrorAction SilentlyContinue

    if (($null -eq $currentConcatNtlm) -or ($currentConcatNtlm.ConcatenateDefaults_AllowFreshNTLMOnly -ne 1)) {

        Write-InsightLog -Level 'Informational' -Message ($localizedData.ConfiguringRegistryValue -f 'ConcatenateDefaults_AllowFreshNTLMOnly', '1')

        Set-ItemProperty -Path $credDelegPath -Name 'ConcatenateDefaults_AllowFreshNTLMOnly' -Value 1 -Type DWORD -Force

        $changesApplied = $true

    }

    # Create AllowFreshCredentials sub-key and set value

    if (-not (Test-Path -Path $allowFreshPath)) {

        New-Item -Path $allowFreshPath -ItemType Directory -Force | Out-Null

        $changesApplied = $true

    }

    $currentFreshValue = Get-ItemProperty -Path $allowFreshPath -Name '1' -ErrorAction SilentlyContinue

    if (($null -eq $currentFreshValue) -or ($currentFreshValue.'1' -ne 'WSMAN/*')) {

        Write-InsightLog -Level 'Informational' -Message ($localizedData.ConfiguringRegistryValue -f 'AllowFreshCredentials\1', 'WSMAN/*')

        Set-ItemProperty -Path $allowFreshPath -Name '1' -Value 'WSMAN/*' -Type String -Force

        $changesApplied = $true

    }

    # Create AllowFreshCredentialsWhenNTLMOnly sub-key and set value

    if (-not (Test-Path -Path $allowNtlmPath)) {

        New-Item -Path $allowNtlmPath -ItemType Directory -Force | Out-Null

        $changesApplied = $true

    }

    $currentNtlmValue = Get-ItemProperty -Path $allowNtlmPath -Name '1' -ErrorAction SilentlyContinue

    if (($null -eq $currentNtlmValue) -or ($currentNtlmValue.'1' -ne 'WSMAN/*')) {

        Write-InsightLog -Level 'Informational' -Message ($localizedData.ConfiguringRegistryValue -f 'AllowFreshCredentialsWhenNTLMOnly\1', 'WSMAN/*')

        Set-ItemProperty -Path $allowNtlmPath -Name '1' -Value 'WSMAN/*' -Type String -Force

        $changesApplied = $true

    }

    <# END REPAIR LOGIC #>

    if ($changesApplied) {

        $remediationObject.ChangesApplied = $true

        $remediationObject.Status = [RemediationStatus]::SUCCESS

        Write-InsightLog -Level 'Informational' -Message $localizedData.ChangesApplied

    }

    else {

        $remediationObject.ChangesApplied = $false

        $remediationObject.Status = [RemediationStatus]::NO_CHANGE_APPLIED

        Write-InsightLog -Level 'Informational' -Message $localizedData.ChangesNotApplied

    }

}

catch {

    # ensure that any exceptions are caught and the remediation status is updated accordingly

    # but do not rethrow the exception as we want to continue with any other remediation steps if applicable

    $_ | Write-InsightLog -Level 'Exception'

    $remediationObject.ExceptionMessage = $localizedData.ChangesFailed -f $_.Exception.Message

    $remediationObject.Status = [RemediationStatus]::FAILURE

}

return $remediationObject

# SIG # Begin signature block

# MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBvQmnIOjR33y9e

# qzeFXJFHgvKbkenmR2bdpB5+tHBa16CCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK

# KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIKeL/TVh

# JHazPBHR2tQzqwugwwuuIGuTFCygS6S5SO4eMEIGCisGAQQBgjcCAQwxNDAyoBSA

# EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w

# DQYJKoZIhvcNAQEBBQAEggEAZ4oG5bsdSzOVACIYPP3Mz7Rq63msXXDtTPZ8NI1i

# F+ay+2ouulyHFpX5Sy94s27fVAKiCkRgtSMXpstkVRzQi4+mtBOlMW9yYhAXz4oZ

# n5TULzdegiDK493hrhKeMMZYqPMsmT6S+WkNHhGzLDQfcUulKxgIfod8t7IQBHDs

# YEpA2vBjd9VA78er71Hd4ql595zJD0eFsnk/qWQFFiULdIhwcQ0M9lC7oMylG0n4

# 846Is71RpITinIYDdnIRx18EQ7WwQ1CJ7+5H7QWcgJtJYcVnrpSCNgiz9a5KFz4N

# 5X7n4RYn14DW8UGXIbPgDQSX2cGGKWdVwpaYbzAWQkkPSKGCF5cwgheTBgorBgEE

# AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD

# BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD

# ATAxMA0GCWCGSAFlAwQCAQUABCCu72uoHGrQhEXVbUg6kX7G9COIyDbIUzbi1PmB

# aAeLBQIGakfveZWDGBMyMDI2MDcxNjIyNTQ0MS4zOTZaMASAAgH0oIHRpIHOMIHL

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN

# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT

# UyBFU046OTIwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAiNP2WAkU8/+KwABAAAC

# IzANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe

# Fw0yNjAyMTkxOTM5NTdaFw0yNzA1MTcxOTM5NTdaMIHLMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj

# YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTIwMC0wNUUw

# LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCK6Q2nk5WUdKzSCSafp+UjUARs

# WxHKS63rJhFC/zSabFumTBuaJ0QNrmqevub5Db7fSj5qtwwKnjIO92+HXF67192f

# ujL7DFot5WEj/AtEZ/XrzFHimKlN1h6gEQwP5I67wizaPW5ZzSBNpaLBg5oHvASP

# OZtwdNUoZ+DQKF3hJl1KZuoIlVK+qi7cLjgak6s5oOZcRCMrKnuC3aoVa6wRDbYv

# KUuj7rkFx9KO0PsHJ/k+LnZMggRheh4AVdawyh+oOzKPjlQGUNfSeWUgym2U9CLa

# 8tt0mQX4DxDz6+ram50gj1oAfyQ6TQ7r96PADFOKBgaU7+cpHnaZG89dTegQ6ydB

# RGIycOw1dRX2eKDRRzziK3cn0WaIm/7OeGsyQKjIzEQuUTDv0Jj/9zQ7truLOOpJ

# D98BJVOK7je84Sz2hb3HvUST7j1j2N8peD6olkpFHR/1Z8Jz4F+mkrUF7MmPAirY

# HRzunbIg3HrDMNwFYN7yBkDA4/VMo9CY0y9oGUoq2yjbCwTibz9VYl93nB3QQiTC

# T9nW3M+TOWB+PMrZpExq1BSHmKPzIqehKqrUDoM33PK+dEKwpYLET6uXq4HuQRMX

# WT//sPubUnQAaaUMfQhAZSy23HtxwtN3eK9+T4wCav2wQFt57eUOwUW5/DCzMF9t

# ua5He1hNvgcAXaiG1wIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFNbAh89v29nPY9bw

# Qb1QYCzxVgeXMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud

# HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js

# L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr

# BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv

# bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw

# MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw

# DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQCHQwe7z5tp4NZwAf1c

# B+4c9J4svw3P6WqGBMxtqznS6DdzUzStXHCaPZhM41g1iKHNnmcnLjwLujOEaNjh

# SnUDiAZqQjW5ZapOBxgc7Egghh9k+r78qWAe3rJ4QohBbhSGdZtKivTRaeRqmnhy

# 8+ThrKhzCeEwaarXJimZwSpdQQUDbheWHeyAxASqultd5KO0m/UFvO03tfepqGXA

# 4tCg/WGECwKqOjJzpRAfPIB6y1HyVrk+vmL5rpEbTwwLOtX7WxFGG8+cYLk9HjaD

# kxraA/HYlKQRx1sdza+w/gulLwgOnByRJKF2rr8M7FNIlwoi6ywFpaNc8A7HewaG

# jgw/tfcE260I1XekGluANI9HnONOYWlI7BKBQbWE2teo6vsQ1Vg8B8rTZSePVdmX

# L1PPqqs3KVdFKM5kYocPCDM+6VL32IV96sESf2T7DjxanpCg2D2UYj4Z1i7cy8U1

# LLDGg55KWs4af2RRBjH2MulHgAmW5obKxiZCDQjRaroJ2XElXUhigE9BzvhCFbT/

# HDY2vpVpl5HnSpcCSxmL5i5lIT/xbAQMI7Luh75Xrm+IslfFWOGOGMlCp+24qEJE

# glXEP7xwsolNdBNndXihhyIefVGlI1DR7xGELiJrk8ifVWYo9XEbEXv/lbvp6F2R

# 2UsnweWckvq0y1HWnLHDqH6dPjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA

# AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow

# fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX

# 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q

# UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d

# q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN

# pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k

# rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d

# Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS

# Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8

# QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm

# gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF

# ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID

# AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU

# KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1

# GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0

# bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA

# QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL

# j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p

# Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w

# Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz

# LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU

# tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN

# 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU

# 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5

# KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy

# qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6

# 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE

# AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp

# AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd

# FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb

# atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd

# VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg

# T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjkyMDAtMDVFMC1E

# OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw

# BwYFKw4DAhoDFQA4RWFs+kTiZnoZiAj1BtYj8zCNaqCBgzCBgKR+MHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7gOPuDAiGA8y

# MDI2MDcxNjE3MTMyOFoYDzIwMjYwNzE3MTcxMzI4WjB3MD0GCisGAQQBhFkKBAEx

# LzAtMAoCBQDuA4+4AgEAMAoCAQACAhfLAgH/MAcCAQACAhNMMAoCBQDuBOE4AgEA

# MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI

# AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAIw+r2ssmtsu9GGil95OmJZ2P3zI

# TeH8UFob+IMlrDR/B4F25enAuWJA1Risv78wCrCrBzhxeW3iHzM0/LtK/cpXmYcb

# oNJ6eE3GklEPwMqJKHJfmwQdWuJ9W1VgTHy9+l+FQTsDteJ+7Isw2zPCUGTV4wFD

# qQd3e/mXCxwnyp/MXFSGajNG/CD2drOmZnHbM9Zu4Z2vB6gNRxCO72oSeWjN2CDz

# irPzuTHAc25izNt51HuNkXZNPNSkD4jPQqoT3lZhdIWoUBX/k5bVlvNpXWMEWY8r

# YiIvLXwEJIyFC58Q3KnscmHuHkMtZcEHCKDuV9J2g2upk2n5qX0Qo9/seHAxggQN

# MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ

# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u

# MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiNP

# 2WAkU8/+KwABAAACIzANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G

# CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCDJQy85O1jC19cg1zULLcJgPZSs

# SBpqgABoZybLP8U6cTCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIJbwMywR

# bvcGiynjnwjAqcaD47yYvebKZRAvtEAR5u6zMIGYMIGApH4wfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTACEzMAAAIjT9lgJFPP/isAAQAAAiMwIgQgV83lnBR2

# c8xTVYUM/TWwjK6TAuLXUKsdz19SXSr8lTswDQYJKoZIhvcNAQELBQAEggIAiBaN

# daFv3cfn59iSTUwoUCgawSMeqcQBGD/x/1THPJo3/eT+EAkW7QMVVPqMYS78Nlnw

# pKRtIn6fG9ya54xZ/3WU5V/L2vgVug3BvsZPUYcOOQpVKpgvO69jVKVM6FeNNVwj

# JdfT3uuXkyWgiJoVPlVMMPmZPGiKCnOS5qElLTYIe9GJwHG71WOINbjHXWoMbuOx

# +Jk3va38qQRjGSeO/mLdvwnKd7qkrtxR8ByAR07MyG19sSFQVBTrGSA16X/c0Chm

# 1kDT+KU0dprngEIsgHp2KYfL+vKqyukspMY8DIWoECKQTpbJi/v9rgLI4j5d5QVb

# WEn/vOaN2bh0cPGzbMpre9dZMKTMkpA+nSxim6F3EBxCW333PTc89mHoUmK3EUsz

# K8iPPxYKbPvZ7Kf7UpkPL08iFV03nwLAP8AeasaHmdJw7S6FJw1UGqU7BR3eG9P5

# sIst79Y4BqcgFp2vJbAlYrk54+hsqh3EmvL4FR7cEUtoHuhwU2xPk3K7cVdQjpYq

# vCVau1OTgkI9AgZDuVa9tUesAYJ5WErsVbQzEsBiUyTidRkD44hjmY+iHjmb0os1

# 2fGF36vDVczSOyVo5up+vs0pXTHKndbnXNmMwdKDlolR4kjN07xLl8hCtPlL/0jJ

# QMaSR+NPaGhEsSaqNcclGnSL+AugCpa27rAw7dA=

# SIG # End signature block