Microsoft.AzLocal.CSSTools

1.2608.31.1

packages/SdnDiagnostics.4.2607.14.122/modules/SdnDiag.Health.Config.psd1

                                # Copyright='© Microsoft Corporation. All rights reserved.'

# Licensed under the MIT License.

@{

    HealthValidations = @{

        # COMMON TESTS

        'Test-SdnDiagnosticsCleanupTaskEnabled' = @{

            FriendlyName = "SDN Diagnostics Task Enabled"

            Description = "Ensure that scheduled task is enabled to automatically clean up and prune diagnostic log files."

            Impact = "Unconstrained log files may grow and consume disk space."

            PublicDocUrl = ""

        }

        'Test-SdnNetworkControllerApiNameResolution' = @{

            FriendlyName = "Network Controller API Name Resolution"

            Description = "Ensure that the Network Controller URL is resolvable."

            Impact = "Calls to Network Controller API will fail resulting in policy configuration failures and unable to manage SDN resources."

            PublicDocUrl = ""

        }

        'Test-SdnNonSelfSignedCertificateInTrustedRootStore' = @{

            FriendlyName = "Non-Self-Signed Certificate in Trusted Root Store"

            Description = "Ensure that only trusted root certificates exist in the host Trusted Root CA store."

            Impact = "Network Controller will have issues communicating to hosts resulting in policy configuration failures."

            PublicDocUrl = "https://learn.microsoft.com/en-us/troubleshoot/developer/webapps/iis/site-behavior-performance/http-403-forbidden-access-website#cause-2-non-self-signed-certificates-are-in-trusted-root-certification-authorities-certificate-store"

        }

        'Test-SdnServiceState' = @{

            FriendlyName = "SDN Service State"

            Description = "Ensure that required services are running on the SDN infrastructure node(s)."

            Impact = "SDN services and functionality will be impacted without the service running."

            PublicDocUrl = ""

        }

        'Test-SdnCertificateExpired' = @{

            FriendlyName = "SDN Certificate Expired"

            Description = "Ensure that SDN infrastructure node certificates are valid and not expired."

            Impact = "Network Controller may have issues communicating and programming policies to SDN infrastructure nodes resulting in impact to workloads and services."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure/azure-local/manage/update-sdn-infrastructure-certificates"

        }

        'Test-SdnCertificateMultiple' = @{

            FriendlyName = "SDN Certificate Multiple"

            Description = "Ensure that only one certificate with the same subject name and NetworkController OID exists in the SDN infrastructure node certificate store."

            Impact = "Network Controller may have issues communicating and programming policies to SDN infrastructure nodes resulting in impact to workloads and services."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure/azure-local/manage/update-sdn-infrastructure-certificates"

        }

        # GATEWAY TESTS

        'Test-SdnAdapterPerformanceSetting' = @{

            FriendlyName = "SDN Adapter Performance Setting"

            Description = "Ensure that network adapter performance settings are configured as recommended on the SDN node(s)."

            Impact = "You may not achieve optimal performance for network traffic flowing through the SDN Node(s)."

            PublicDocUrl = ""

        }

        'Test-SdnGatewayRemoteAccessCimClass' = @{

            FriendlyName = "Gateway RemoteAccess CIM Class"

            Description = "Ensure that the PS_RemoteAccess CIM class is accessible in the root/microsoft/windows/remoteaccess namespace on Gateway node(s)."

            Impact = "Gateway functionality may be impacted if the RemoteAccess WMI provider is not installed or operational."

            PublicDocUrl = ""

        }

        # LOAD BALANCER MUX TESTS

        'Test-SdnMuxConnectionStateToRouter' = @{

            FriendlyName = "SDN Mux Connection State to Router"

            Description = "Ensure that each Load Balancer Mux has an active BGP connection to the switch over TCP port 179."

            Impact = "Public IP addresses may not be routable as Load Balancer Muxes are not advertising the public IP addresses to the switch."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-software-load-balancer"

        }

        'Test-SdnMuxConnectionStateToSlbManager' = @{

            FriendlyName = "SDN Mux Connection State to SLB Manager"

            Description = "Ensure that SLB Manager connectivity to Mux(es) over TCP port 8560 is established."

            Impact = "SLB Manager will not be able to program VIP:DIP mappings to the Load Balancer Mux(es) which will impact routing of Virtual IPs."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-software-load-balancer"

        }

        # NETWORK CONTROLLER TESTS

        'Test-SdnNetworkControllerNodeRestInterface' = @{

            FriendlyName = "Network Controller Node REST Interface"

            Description = "Ensure that Network Controller node(s) have the required network adapter for the REST interface."

            Impact = "Failover of the NB API will not occur if the Network Controller node(s) are missing the Network Adapter that is required for the REST interface."

            PublicDocUrl = "https://learn.microsoft.com/en-us/powershell/module/networkcontroller/set-networkcontrollernode"

        }

        'Test-SdnServiceFabricApplicationHealth' = @{

            FriendlyName = "Network Controller Service Fabric Application Health"

            Description = "Ensure that the Network Controller Service Fabric application is healthy."

            Impact = "Network Controller services and functionality may be impacted."

            PublicDocUrl = ""

        }

        'Test-SdnServiceFabricClusterHealth' = @{

            FriendlyName = "Network Controller Service Fabric Cluster Health"

            Description = "Ensure that the Service Fabric cluster for Network Controller is healthy."

            Impact = "Network Controller services and functionality may be impacted."

            PublicDocUrl = ""

        }

        'Test-SdnServiceFabricNodeStatus' = @{

            FriendlyName = "Network Controller Service Fabric Node Status"

            Description = "Ensure that Service Fabric node(s) are online and participating in the cluster."

            Impact = "Minimum amount of nodes are required to maintain quorum and cluster availability. Services will be in read-only state if quorum is lost and may result in data loss."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-disaster-recovery"

        }

        'Test-SdnResourceConfigurationState' = @{

            FriendlyName = "SDN Resource Configuration State"

            Description = "Ensure that infrastructure resources report configuration state as Success."

            Impact = "SDN services and functionality may be impacted."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#hoster-validate-system-health"

        }

        'Test-SdnResourceProvisioningState' = @{

            FriendlyName = "SDN Resource Provisioning State"

            Description = "Ensure that infrastructure resources report provisioning state as Succeeded."

            Impact = "SDN services and functionality may be impacted."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#hoster-validate-system-health"

        }

        'Test-NetworkInterfaceAPIDuplicateMacAddress' = @{

            FriendlyName = "Network Interface API Duplicate MAC Address"

            Description = "Ensure that MAC addresses are unique for network interfaces in the API."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host. Network Interfaces reporting configurationState failure will not be routable."

            PublicDocUrl = ""

        }

        'Test-SdnEncryptionCertificateIsPresent' = @{

            FriendlyName = "SDN Encryption Certificate Is Present"

            Description = "Ensure that the encryption certificate is present on the network controller node."

            Impact = "The encryption certificate is missing from the LocalMachine\My store. It is used to decrypt the SDN database and may result in failures when accessing SDN resources."

            PublicDocUrl = ""

        }

        # SERVER TESTS

        'Test-SdnEncapOverhead' = @{

            FriendlyName = "SDN Encap Overhead"

            Description = "Ensure that EncapOverhead and JumboPacket values are configured correctly on Hyper-V hosts."

            Impact = "Intermittent packet loss may occur under certain conditions when routing traffic within the logical network."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#check-mtu-and-jumbo-frame-support-on-hnv-provider-logical-network"

        }

        'Test-SdnHostAgentConnectionStateToApiService' = @{

            FriendlyName = "SDN Host Agent Connection State to API Service"

            Description = "Ensure that the Network Controller Host Agent is connected to the Network Controller API service."

            Impact = "Policy configuration may not be pushed to the Hyper-V host(s) if no southbound connectivity is available."

            PublicDocUrl = ""

        }

        'Test-SdnProviderNetwork' = @{

            FriendlyName = "SDN Provider Network"

            Description = "Ensure that the logical network supports VXLAN or NVGRE encapsulated traffic."

            Impact = "Intermittent packet loss may occur under certain conditions when routing traffic within the logical network."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#check-mtu-and-jumbo-frame-support-on-hnv-provider-logical-network"

        }

        'Test-VfpDuplicateMacAddress' = @{

            FriendlyName = "VFP Duplicate MAC Address"

            Description = "Ensure that MAC addresses are unique within Virtual Filtering Platform (VFP)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host. In addition, network traffic may be impacted."

            PublicDocUrl = ""

        }

        'Test-SdnVfpEnabledVMSwitch' = @{

            FriendlyName = "SDN VFP Enabled VMSwitch"

            Description = "Ensure that at least one VMSwitch with VFP enabled is present on Hyper-V host(s)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host."

            PublicDocUrl = ""

        }

        'Test-SdnVfpEnabledVMSwitchMultiple' = @{

            FriendlyName = "SDN VFP Enabled VMSwitch Multiple"

            Description = "Ensure that only one VFP-enabled virtual switch is present on Hyper-V host(s)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host."

            PublicDocUrl = ""

        }

        'Test-VMNetAdapterDuplicateMacAddress' = @{

            FriendlyName = "VM Network Adapter Duplicate MAC Address"

            Description = "Ensure that data-plane VM network adapter MAC addresses are unique on Hyper-V host(s)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host. In addition, network traffic may be impacted for the interfaces that are duplicated."

            PublicDocUrl = ""

        }

        'Test-ServerHostId' = @{

            FriendlyName = "Server Host ID"

            Description = "Ensure that HostID is configured correctly on Hyper-V hosts."

            Impact = "Mismatch of HostId between Hyper-V host(s) and Network Controller will result in policy configuration failures."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#check-for-corresponding-hostids-and-certificates-between-network-controller-and-each-hyper-v-host"

        }

    }

    ConfigurationStateErrorCodes = @{

        'Unknown' = @{

            Message = 'Unknown error'

            Action = 'Collect the logs and contact Microsoft Support'

        }

        'HostUnreachable' = @{

            Message = 'The host machine is not reachable'

            Action = 'Check the Management network connectivity between Network Controller and Host'

        }

        'PAIpAddressExhausted' = @{

            Message = 'The PA Ip addresses exhausted'

            Action = 'Increase the HNV Provider logical subnet''s IP Pool Size'

        }

        'PAMacAddressExhausted' = @{

            Message = 'The PA Mac addresses exhausted'

            Action = 'Increase the Mac Pool Range'

        }

        'PAAddressConfigurationFailure' = @{

            Message = 'Failed to plumb PA addresses to the host'

            Action = 'Check the management network connectivity between Network Controller and Host.'

        }

        'CertificateNotTrusted' = @{

            Message = 'Certificate is not trusted'

            Action = 'Fix the certificates used for communication with the host.'

        }

        'CertificateNotAuthorized' = @{

            Message = 'Certificate not authorized'

            Action = 'Fix the certificates used for communication with the host.'

        }

        'PolicyConfigurationFailureOnVfp' = @{

            Message = 'Failure in configuring VFP policies'

            Action = 'This is a runtime failure.  No definite workarounds. Collect logs.'

        }

        'HostNotConnectedToController' = @{

            Message = 'The Host is not yet connected to the Network Controller'

            Action = 'Validate that Host is online and operational, NCHostAgent service is started and HostID registry key matches the Instance ID of the server resource'

        }

        'MultipleVfpEnabledSwitches' = @{

            Message = 'There are multiple VFp enabled Switches on the host'

            Action = 'Delete one of the switches, since Network Controller Host Agent only supports one vSwitch with the VFP extension enabled'

        }

        'PolicyConfigurationFailure' = @{

            Message = 'Failed to push policies (vSwitch, vNet, ACL) for a VmNic due to certificate errors or connectivity errors'

            Action = 'Check if proper certificates have been deployed (Certificate subject name must match FQDN of host). Also verify the host connectivity with the Network Controller'

        }

        'DistributedRouterConfigurationFailure' = @{

            Message = 'Failed to configure the Distributed router settings on the host vNic'

            Action = 'TCPIP stack error. May require cleaning up the PA and DR Host vNICs on the server on which this error was reported'

        }

        'DhcpAddressAllocationFailure' = @{

            Message = 'DHCP address allocation failed for a VMNic'

            Action = 'Check if the static IP address attribute is configured on the NIC resource'

        }

        'CertificateNotTrusted CertificateNotAuthorized' = @{

            Message = 'Failed to connect to Mux due to network or cert errors'

            Action = 'Check the numeric code provided in the error message code: this corresponds to the winsock error code. Certificate errors are granular (for example, cert cannot be verified, cert not authorized, etc.)'

        }

        'PortBlocked' = @{

            Message = 'The VFP port is blocked, due to lack of VNET / ACL policies'

            Action = 'Check if there are any other errors, which might cause the policies to be not configured.'

        }

        'Overloaded' = @{

            Message = 'Loadbalancer MUX is overloaded'

            Action = 'Performance issue with MUX'

        }

        'RoutePublicationFailure' = @{

            Message = 'Loadbalancer MUX is not connected to a BGP router'

            Action = 'Check if the MUX has connectivity with the BGP routers and that BGP peering is setup correctly'

        }

        'VirtualServerUnreachable' = @{

            Message = 'Loadbalancer MUX is not connected to SLB manager'

            Action = 'Check connectivity between SLBM and MUX'

        }

        'QosConfigurationFailure' = @{

            Message = 'Failed to configure QOS policies'

            Action = 'See if sufficient bandwidth is available for all VM''s if QOS reservation is used'

        }

    }

}

# SIG # Begin signature block

# MIInUAYJKoZIhvcNAQcCoIInQTCCJz0CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBGZ9F2rGLNe+Dk

# u1kt9UJ8m9r1d8ITJdrgKBXehpLyIKCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghndMIIZ2QIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIGCceyYG8UM8Ch0WD/3by/yfP66G

# z2t+ojiZXXLq/VGIMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv

# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE

# ggEAK5rRyC+7cPlY7kMNGwMUnkCR8gkbbYrGi4Czlv1AVm1vXWdHcG1hIR9sNq1U

# /dH6VyTH+KHQYexk22NP1AbxeU4WtZwvVSCck42IS+zfvQgsjyN5K68pNuW0Am+0

# JmvLszQ+xG6Zm1xad5iV9qa+MwUJXEablzLIaJUf0/qznAVNQtO9L8yj8HRuZ9If

# n2YX9aX64NBGNmWZN2GkegQI3yxhaVfdrik0MIaTvt5oW/yK9X8hGR2gT4XDzEVF

# uZ4QixSkSiKbmBgYbaB1J1iKm68jIlH6x65u0jljJIqXq6DAoM6PTcxSJfrnBF7W

# DZv5beb1Jab4tP28QjZqaEXN+6GCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UG

# CSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG

# 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC

# AQUABCA4NqYPHQDlN8AQpLp100zducOPpk8Tan83ccxFZM0D7QIGaojbL7qCGBMy

# MDI2MDkwMjE1MjU1OS45MTJaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu

# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0

# MDFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy

# dmljZaCCEfswggcoMIIFEKADAgECAhMzAAACGV6y2FR19LGNAAEAAAIZMA0GCSqG

# SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgx

# NDE4NDgyNloXDTI2MTExMzE4NDgyNlowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv

# ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjQwMUEtMDVF

# MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApqFIyUkzIyxpL3Q03WmLuy4G

# 9YIUScznhKr+cHOT+/u7ParxI96gxxb1WrWuAxB8qjGLfsbImx8V3ouK1nUcf+R/

# nsnXas5/iTgV/Tl3QTRGT0DeuXBNbpHqc+wC1NiTyA76gLnirvSBEoBzlrpNQFEn

# uwdbPLCLpTS3KWSCu5J02b+RFWR/kcFzVxnhoE3gIaeURtrGKGBZGKLBXvqggkDE

# NtKkvtvRT32xLvAvL/RpReu5z18ZojCs72ZSoa74Dy8YbaWsDm3OZOpJRZxZsPKC

# HZ6xNqgFKf0xNHj0t9v0Q3W+2z5gAVaasJJCvR52Sl0XJ2AOf3l0LSetXgUA5gD5

# IQ1RvEslTmNnSouTrGID3D1njY7mBu0puiIdPK2jK/1Weef2+YR4cQpWQkeBZmXi

# dh9AuWdlwxKQL15LJ6K2dw8y/t/PBhmLyt6QAf0CepWRdgZnMytVAUuWHwlZRV9J

# LY7aX8D55eL9+cOLpX3bGNOmN24UpIW8qtZaqXaesFvIOW23JNLhaaQVvObr1eu7

# GE/5Mn43e+/DbtdYl/bLP2IQ1xYEJdSbcUkDFfW3KlZEh+nBKDtaRnNRkbgIgxIb

# KdT38OKQwZ/aA4uSsiAg6nEPiWBHGuytIo5wU75M5VdjhEqqTHfXYu8BJi6GTzvW

# T+9ekfMXezqCkksxaG8CAwEAAaOCAUkwggFFMB0GA1UdDgQWBBSAaOo5HWatNzqZ

# n1IF1fcD6nr3ITAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV

# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny

# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI

# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy

# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI

# MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAXxzVZLLXBFfoCCCT

# iY7MHXdb7civJSTfrHYJC5Ok2NN75NpzTMT9V2TcIQjfQ3AFUbh1NBAYtMUuwxC6

# D4ceEXG5lXAnbvkC9YjeLVDRyImXYYmft7z+Qpl9t3C/8a0tiqnOz8Ue8/DYLtMT

# gvWMnsqLNjILDaImOfnHI36TLCjGFe8RYLXGdCUdOLlfAdMGePxSTA3TAAOc+GQb

# mPWjrguLWbxvnl3NVjRvrBZVkxFMoVZH0f7qGwDOShjpnv5nYnQ48ufL0uBz52Rb

# PGdX4Fv9+UGOrBprmcHzmIutFtJec2Y4kujNtTK2wBGgWscEOVhFiaVdje8VLJ7M

# VNKE5TmsuGM3jTLr1nuR5AFGs3UKkP7g3cQD4cHK7XdLiTm7e606QJ+WqeQsADYE

# 9dvU9wIUbI9Dl4UcIErFw+FHaWSTrkfJ4SvLmhKnl5khhpJ1sF3z6e1BxepUliXH

# qzRLiHWihWIWESF8IHElF3POxbP4VJqHBiYvaXMV0SyRgwoD6zXddbUnX9WR6JL2

# BlqAjjHxINwelsp/VhxAWThzuMA58LxvE/VAzjfFF4Wm7a1ZALmJVw3oL/s/uxo1

# Op4tcT+hfZ9uN1htC1JN4DuRqFfLttjuoAmUQobO5zUFRzvCn8Ck/hiO+bzR15sq

# kjlxLMyMjpkc/ef4SUUikD468vUwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ

# AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK

# V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0

# IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0

# ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF

# AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1

# V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9

# alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv

# Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928

# jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t

# pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe

# HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o

# ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C

# vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug

# poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps

# xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C

# AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE

# FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT

# NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo

# dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o

# dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD

# AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW

# y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t

# aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt

# MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y

# My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc

# FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT

# Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j

# VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3

# +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR

# sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw

# ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b

# RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx

# aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX

# HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0

# W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0

# HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu

# ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0

# MDFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy

# dmljZaIjCgEBMAcGBSsOAwIaAxUAMXYp/Wqqdyb0enigrLfxl0InAz6ggYMwgYCk

# fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD

# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF

# AO5CgcIwIhgPMjAyNjA5MDIxMTA2NDJaGA8yMDI2MDkwMzExMDY0MlowdDA6Bgor

# BgEEAYRZCgQBMSwwKjAKAgUA7kKBwgIBADAHAgEAAgIfIzAHAgEAAgITLjAKAgUA

# 7kPTQgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAID

# B6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQATpMi6NkORxUmNeurE

# Pk1vMy0E2aG9H5pF7ePiN8pwwzspYW7lCkUNNGDWsg6YLmfwlVh64Zff/WmSAx1W

# BOltft0iZYnsYZGxYuxVgt0JJC+vRZYSFhVLu1Ip1dopVCnBRZpONvx5GD/Q2Ifx

# 4RJwoS7UPgpTzXvUxmqy842ZBtaExfJKj02u3rzCNQ+p9g/c1JXuB7iDuWurQTaT

# KGs3b5utOJRW4NuudFF2FiVlwj0DZdY4WY9auHHHghaKsymhfdJ4/cSb+uPN+zaM

# 8Ec1lgJjlmRKRe56jFQgKTs1KbTtoYLqCrpGJQOxckZ30J3VtlPa8klyxm/RCX6g

# 082RMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAC

# EzMAAAIZXrLYVHX0sY0AAQAAAhkwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3

# DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgDDBJtBf3GH31BF+A

# taGHvRs6vqM8INlyNDffXGbp4WwwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9

# BCDckX633E1y1EF32V18zQcrsgjzI9+3Le7mlvk2OebthjCBmDCBgKR+MHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACGV6y2FR19LGNAAEAAAIZMCIE

# IGaJHek+aBceiVPdcT8sUusgl+VktD3XyE1aQ4LjVaNnMA0GCSqGSIb3DQEBCwUA

# BIICABWi4+gOcr0wnvaNGw8FPd/BTJMVtFksBTQZ4m3fy+YQWKiQyo3VfaS1l0cD

# E8ULjMiEWhDS65B8HyTrGd5yrUmYWvpLA2tVZCAtWYyEdfBMAXwdIVRA0ZWS5Fr8

# szxYwEwEy4hXJbm5vBLCz9oUVAD8h39BL03sKb29fAd7XAQff0pynXmJftW9gO7g

# 4eXuJtO1peRyXGxOxwxVXg/4juIClVSllopLoECPjRhI2WTzK/RUxq8ZaMKuo3PM

# oE22kZnO8YNGBEZBU1FinkUxdMFDoxFs44A4ew71i1ipk+074hjVLnQyVFSpeqGs

# phHXIsXZDuiSNZ6NW7un8RwlxNBaej1PZ+vfO/NxwsT/9evmRR8mxR7yE4SwpSNs

# AgHUrypdHBUsm3TRmAVKhZBWvc2NItDBWkIfnKiWOqHJXwCmgopa8TMj2MXHw4Bk

# 861DfhMW8reNllwM2HNRumE7fJzkAuLrrpkzvn6biGELbvkWN96YAnzoW6+yXtZU

# MXxQr8PIzljg3+XVN2MHI5TOP1PTyCLrBF0XY6XW1tBwamjOy3P2/Q8WHx1kbvUZ

# 6PWDSw0luTcxJi+Kzxun+ayCDoU4icMzULyTpQg7FSrtNuuBm4BykN3bIUIYVHW6

# qzfxfXkXbak1sAs3R9KqAo5xbZ6s4hlM4XNXgzC7+swqbsR0

# SIG # End signature block