classes/OSConfig.ps1
|
# Copyright (c) Microsoft Corporation. All rights reserved. function Get-ServerType() { try { $Value = Get-ItemPropertyValue -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" -Name "SysvolReady" if (-not [String]::IsNullOrWhiteSpace($Value)) { return "Domain Controller" } } catch { # Ignored. } try { $Value = Get-ItemPropertyValue -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" -Name "Domain" if (-not [String]::IsNullOrWhiteSpace($Value)) { return "Member Server" } } catch { # Ignored. } return "Workgroup Member" } function Get-EnvironmentType { $Properties = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" if ($Properties.InstallationType -match "Server") { if ($Properties.EditionId -eq "ServerAzureStackHCICor") { $InstallationType = "AzureLocal" if ($Properties.DisplayVersion -eq "24H2") { $Version = "24H2" } elseif ($Properties.DisplayVersion -eq "23H2") { $Version = "23H2" } else { return } } else { $InstallationType = "WindowsServer" # We need to have the necessary update for Windows Server 2022 and Windows Server 23H2 # but not for Windows Server 2025. We can use the UBR (Update Build Revision) to # determine the version. if ($Properties.DisplayVersion -eq "24H2") { $Version = "2025" } elseif (($Properties.DisplayVersion -eq "23H2") -and ($Properties.UBR -ge 1369)) { $Version = "2022" } elseif (($Properties.DisplayVersion -eq "21H2") -and ($Properties.UBR -ge 3091)) { $Version = "2022" } else { return } } } else { return } $Role = (Get-ServerType) -replace " ", "" "$InstallationType\$Version\$Role" } function ConvertFrom-Expression($Expression) { if ($Expression -isnot [String] -or [String]::IsNullOrWhiteSpace($Expression)) { throw [InvalidValueException]::new($Strings.ErrorInvalidExpression -f $Expression) } $InQuotes = $False $ProcessedExpression = $Expression.Clone() for ($i = 0; $i -lt $Expression.Length; $i++) { if ($Expression[$i] -eq '"') { $InQuotes = -not $InQuotes continue } if ($InQuotes) { continue } if ($Expression[$i] -eq ";") { $ProcessedExpression = $ProcessedExpression.Remove($i, 1).Insert($i, "`n") } } try { $Result = @($ProcessedExpression | ConvertFrom-Csv -Header @("Name", "Value") -Delimiter ":") if (($Result.Count -eq 1) -and (-not $Result.Value)) { $Result[0].Value = $Result[0].Name $Result[0].Name = "*" } , $Result } catch { throw [InvalidValueException]::new($Strings.ErrorInvalidExpression -f $Expression) } } function Find-Rule($Name, $Rules) { foreach ($Rule in $Rules) { $InclusionRule = -not $Rule.Name.StartsWith("!") if ($InclusionRule -and ($Name -like $Rule.Name)) { return $Rule } if (-not $InclusionRule -and ($Name -like $Rule.Name.Substring(1))) { return $null } } } # Temporary workaround until `$Parameters` is implemented function ConvertTo-ResourceValue($Type, $Properties, $Value) { if ($null -eq $Value) { return $Value } switch ($Type) { 'Microsoft.Windows/CSP' { switch ($Properties.Type) { 'string' { return $Value } 'integer' { return [Int64] $Value } 'boolean' { return [Bool]::Parse($Value) } } } 'Microsoft.Windows/Registry' { switch ($Properties.Type) { 'REG_SZ' { return $Value } 'REG_MULTI_SZ' { return $Value -split ',' } 'REG_DWORD' { return [Int32] $Value } } } } } class OSConfigReason { [DscProperty()] [String] $Code [DscProperty()] [String] $Phrase OSConfigReason() { } OSConfigReason([String] $RuleId, [Bool] $IsCompliant, [String] $Reason) { $Status = if ($IsCompliant) { 'BaselineSettingCompliant' } else { 'BaselineSettingNotCompliant' } if ($RuleId) { $Status = "$Status`:$RuleId" } $this.Code = $Status $this.Phrase = $Reason } } [DscResource()] class OSConfig { [DscProperty()] [String] $RuleId [String] $Severity [DscProperty(Key)] [String] $Name [DscProperty(Key)] [String] $Type [DscProperty(Key)] [String] $Properties # [DscProperty()] # [String] $Parameters [DscProperty()] [String] $Value [DscProperty(NotConfigurable)] [OSConfigReason[]] $Reasons hidden [Bool] $IsCompliant = $True [OSConfig] Get() { $CurrentState = [OSConfig]::new() $CurrentState.Name = $this.Name $CurrentState.Type = $this.Type $CurrentState.Properties = $this.Properties # $CurrentState.Parameters = $this.Parameters $CurrentState.Value = $this.Value $CurrentState.Reasons = @() try { $ErrorActionPreference = 'Stop' $Resource = @{ 'name' = $this.Name 'type' = $this.Type 'properties' = $this.Properties | ConvertFrom-Json -ErrorAction SilentlyContinue } $Rule = if (-not [String]::IsNullOrWhiteSpace($this.Value)) { $EnvironmentType = Get-EnvironmentType $Rules = ConvertFrom-Expression -Expression $this.Value Find-Rule -Name $EnvironmentType -Rules $Rules } if (($null -ne $Rule) -or [String]::IsNullOrWhiteSpace($this.Value)) { $StringValue = if ($null -ne $Rule) { $Rule.Value } else { $this.Value } $ActualValue = ConvertTo-ResourceValue -Type $this.Type -Properties $Resource.Properties -Value $StringValue $PropertiesJson = @{ 'resource' = $Resource 'schema' = @{ 'const' = $ActualValue } } | ConvertTo-Json -Depth $Script:Constants.MaxJsondepth -Compress $Output = Invoke-Native resource status --name $this.Name --type 'Microsoft.OSConfig/Audit' --properties $PropertiesJson $CurrentState.IsCompliant = $Output.Properties.Compliance.Status -eq 'compliant' $CurrentState.Reasons += [OSConfigReason]::new($this.RuleId, $CurrentState.IsCompliant, $Output.Properties.Compliance.Reason) } else { $CurrentState.IsCompliant = $True $CurrentState.Reasons += [OSConfigReason]::new($this.RuleId, $CurrentState.IsCompliant, "Not applicable") } } catch { $CurrentState.IsCompliant = $False $CurrentState.Reasons += [OSConfigReason]::new($this.RuleId, $CurrentState.IsCompliant, "Failed to get reported configuration: $_") Write-Verbose "Error: $_" } return $CurrentState } [Bool] Test() { try { return $this.Get().IsCompliant } catch { Write-Verbose "Error: $_" } return $False } [Void] Set() { try { if ($this.Test()) { return } throw 'Not implemented!' } catch { Write-Verbose "Error: $_" } } } # SIG # Begin signature block # MIIoUAYJKoZIhvcNAQcCoIIoQTCCKD0CAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC9TB5NuYslK9ht # 9dW2aYG1WL7I2tg84aYeGFEmiy0GNaCCDYUwggYDMIID66ADAgECAhMzAAAEhJji # EuB4ozFdAAAAAASEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p # bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM1WhcNMjYwNjE3MTgyMTM1WjB0MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB # AQDtekqMKDnzfsyc1T1QpHfFtr+rkir8ldzLPKmMXbRDouVXAsvBfd6E82tPj4Yz # aSluGDQoX3NpMKooKeVFjjNRq37yyT/h1QTLMB8dpmsZ/70UM+U/sYxvt1PWWxLj # MNIXqzB8PjG6i7H2YFgk4YOhfGSekvnzW13dLAtfjD0wiwREPvCNlilRz7XoFde5 # KO01eFiWeteh48qUOqUaAkIznC4XB3sFd1LWUmupXHK05QfJSmnei9qZJBYTt8Zh # ArGDh7nQn+Y1jOA3oBiCUJ4n1CMaWdDhrgdMuu026oWAbfC3prqkUn8LWp28H+2S # LetNG5KQZZwvy3Zcn7+PQGl5AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE # AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUBN/0b6Fh6nMdE4FAxYG9kWCpbYUw # VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh # dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwNTM2MjAfBgNVHSMEGDAW # gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw # MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov # L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx # XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB # AGLQps1XU4RTcoDIDLP6QG3NnRE3p/WSMp61Cs8Z+JUv3xJWGtBzYmCINmHVFv6i # 8pYF/e79FNK6P1oKjduxqHSicBdg8Mj0k8kDFA/0eU26bPBRQUIaiWrhsDOrXWdL # m7Zmu516oQoUWcINs4jBfjDEVV4bmgQYfe+4/MUJwQJ9h6mfE+kcCP4HlP4ChIQB # UHoSymakcTBvZw+Qst7sbdt5KnQKkSEN01CzPG1awClCI6zLKf/vKIwnqHw/+Wvc # Ar7gwKlWNmLwTNi807r9rWsXQep1Q8YMkIuGmZ0a1qCd3GuOkSRznz2/0ojeZVYh # ZyohCQi1Bs+xfRkv/fy0HfV3mNyO22dFUvHzBZgqE5FbGjmUnrSr1x8lCrK+s4A+ # bOGp2IejOphWoZEPGOco/HEznZ5Lk6w6W+E2Jy3PHoFE0Y8TtkSE4/80Y2lBJhLj # 27d8ueJ8IdQhSpL/WzTjjnuYH7Dx5o9pWdIGSaFNYuSqOYxrVW7N4AEQVRDZeqDc # fqPG3O6r5SNsxXbd71DCIQURtUKss53ON+vrlV0rjiKBIdwvMNLQ9zK0jy77owDy # XXoYkQxakN2uFIBO1UNAvCYXjs4rw3SRmBX9qiZ5ENxcn/pLMkiyb68QdwHUXz+1 # fI6ea3/jjpNPz6Dlc/RMcXIWeMMkhup/XEbwu73U+uz/MIIHejCCBWKgAwIBAgIK # YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV # BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv # c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm # aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw # OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD # VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG # 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la # UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc # 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D # dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+ # lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk # kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6 # A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd # X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL # 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd # sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3 # T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS # 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI # bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL # BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD # uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv # c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf # MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf # MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF # BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h # cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA # YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn # 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7 # v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b # pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/ # KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy # CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp # mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi # hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb # BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS # oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL # gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX # cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiEwghodAgEBMIGVMH4x # CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt # b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p # Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAASEmOIS4HijMV0AAAAA # BIQwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw # HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEINm+ # pUbQeoReM2928S5WM/474o7DBDc+rGsY7/vOXKmVMEIGCisGAQQBgjcCAQwxNDAy # oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20wDQYJKoZIhvcNAQEBBQAEggEAlp5rn3i6SHzRkzmDO+UjTfTkgQTC8hs203q9 # ULEVuBXxWsYt0m3SefOrEdRdGSsc74HBgMAT59OBDvTL8Fng0z6Y/BnPCxVwiaMe # 8d0sDdnKCurCiFG95AZKE46Err/VgJfv6F+hZWjDKGGSQ1msh4lO3aYlIRJt3C7L # QCIpLVRmrdBblL51AinuoqgywZorQNmLX4x7W6Icn74gEf12fA2k7uxKeofuciVP # 2LX+jnP1mJ76qxq3exmYPS3I5CBclV0T+lIAcXVThpYo2yTuijLZZ7JfeAElITcS # zlZWPZRdK7PBZLuvj90TGyJVxoRnJLPLbwWe77K8ycoM2YanQKGCF6swghenBgor # BgEEAYI3AwMBMYIXlzCCF5MGCSqGSIb3DQEHAqCCF4QwgheAAgEDMQ8wDQYJYIZI # AWUDBAIBBQAwggFYBgsqhkiG9w0BCRABBKCCAUcEggFDMIIBPwIBAQYKKwYBBAGE # WQoDATAxMA0GCWCGSAFlAwQCAQUABCDR04IsnFss6HVKMpQ3PKgqnP5kzRUlNh9T # lgy+3pnhkgIGaPITJcM4GBEyMDI1MTAzMDA2NDE0Ny4yWjAEgAIB9KCB2aSB1jCB # 0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMk # TWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5u # U2hpZWxkIFRTUyBFU046NDMxQS0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29m # dCBUaW1lLVN0YW1wIFNlcnZpY2WgghH7MIIHKDCCBRCgAwIBAgITMwAAAh1LwJKH # OIV+OQABAAACHTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UE # CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z # b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ # Q0EgMjAxMDAeFw0yNTA4MTQxODQ4MzNaFw0yNjExMTMxODQ4MzNaMIHTMQswCQYD # VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe # MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3Nv # ZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQg # VFNTIEVTTjo0MzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt # U3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKK0 # oGgAPKDpeKYee+M8NvXoFDfAw3qURy1/BTNcxzSZlxuiq0qlCsM3Cmn6KbmHT0xE # 0wr2/WiXxErgFNIhjVBSPw+kdJL3X6XtqD1/hN7G00LxouCTx+anSGFGieOVf+G6 # nvHjb21s6QvmSox9fdw3oiNVwCPdfCaEJgYZRF6P06J9e9tZbmSYIp3LH+S4zGN4 # 1/OFsl1El93bEu4f+8VSPsNco4O6WvtMt6P5ntk7L+lCVHUk0GqeTkRknwp3JZz9 # c9yIoliFq91aO2iD1rICc6t5uRsacVBwkJPKs1IZOdMv7gfixhN1iCtgu+4svYhb # En0i1J8jBMxkQ1vZlx0+Dx+zs8+gh6kBIjb8HB6pb5QodaR0IdTV0EgKjqFQbOZo # unmrH+ssVk33uQ60e/edN6/KVOlagtmPVzEVOMB/UG2F2LCFGd9yZp3cttltSwQw # G8QT0BwgZZ3Bg1NwYHYVVFS3vNJoIBTvfBXZFoaOu8OJD3Qk0ZL3b5GPD60GBP50 # Ix1wmtIOy3DLbWW+nozB30PrVFl7+vp2eGJ5K9jpGsXJRQsOESGDTFg9ugFm0I/1 # hHc4GtfHyrcOui+YM1z82uoxQXzyXihNx/EALsKYq5h+JrPuZ1IzTUDpjYKiZ9FN # ft2J+wpbMA+/WDdK933W2ATAwKQWSaTZSu6ux10bAgMBAAGjggFJMIIBRTAdBgNV # HQ4EFgQUhFnwcTRGpmbV5vIJfdmKvNI38V0wHwYDVR0jBBgwFoAUn6cVXQBeYl2D # 9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3Nv # ZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUy # MDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDov # L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1l # LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUB # Af8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQAD # ggIBAJHcHgeMsby7KSyqtA/posg+ENBHMVRaTWbicYkeeIFkZHkww7spjXgdNyYZ # bAaW8EmCebmUoAwQr8BxA9lS/JSaRZTqayc8bF1gtjU3wPjvjzuRZOY8Oix4eo3g # QAwxHUAMdx6ou2ZtCcL0Pd8+X+nbcZJtvVqjnB2F0V3wEMMtYUqy18n3m5akeuo6 # T//Z9HwpFlOIILFI0KUNjYI9Q1dPSeGN8u6fTXfNfl7OqmKPvu0SpvKogf+TQ3oo # Di45QHhYIhFyEVCVvpicqqUMPjjkZWqnBY0fB7tBvv+2zHXpOvGF/pD6QwZO1Hvi # P8YImCdcXA0QZ/73My7Te9vkSJQ+FIF2C7gUgpP/6QxD1+c9/Qq/q5HOhOGNvBT5 # OAYZaAMr6etvD+MXxJUGPE3Ma2lG2UocqaHBOp8veQ9StQZJbWZqx1SgsZoJZ7jp # TNeTSiK1xZVws3aqQrSMEONe8DQFRf0Az78827pj3U4un29LS20nGKG1es72wbDL # ChDBOE49W/aCFwvHcmyauJ226BF2KUcItUAG6Uja5/j8Rlvbn9autxZzCbuIJtzo # et541v4lX+9t6rs8h60oo1jIGNB4kYh0ItCcrtIfDHYUVKe5sW5i0HJD4jhcAJSG # lDf5O9ucv2i1qZEVOn6pi5RDsh+Vqci3dtwGMva/L/kKG2urMIIHcTCCBVmgAwIB # AgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UE # BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc # BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0 # IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1 # WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCC # AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O # 1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZn # hUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t # 1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxq # D89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmP # frVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSW # rAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv # 231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zb # r17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYcten # IPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQc # xWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17a # j54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQAB # MCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQU # n6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEw # QTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9E # b2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/ # MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJ # oEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01p # Y1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYB # BQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9v # Q2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3h # LB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x # 5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74p # y27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1A # oL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbC # HcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB # 9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNt # yo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3 # rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcV # v7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A24 # 5oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lw # Y1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1YwggI+AgEBMIIBAaGB2aSB1jCB # 0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMk # TWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5u # U2hpZWxkIFRTUyBFU046NDMxQS0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29m # dCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVALqDvgSm3186sn4v # RixHVh5Ai3k/oIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # DQYJKoZIhvcNAQELBQACBQDsrQs8MCIYDzIwMjUxMDI5MjE1MzAwWhgPMjAyNTEw # MzAyMTUzMDBaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAOytCzwCAQAwBwIBAAIC # Ce4wBwIBAAICE/8wCgIFAOyuXLwCAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYB # BAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQsFAAOC # AQEAmSOMESZ+1NM4yza6nMfibT2NrGEeL6Z6lyjWgwvw/NBQcTqe8UFhUYjz89ng # Id//kKOSlqj+EZ8pTpp48SfiGstTd43etIx4I14XEzHVikcScs+R9rYCnu52o0/Q # etP195qJ4fFedfzejweEDXsmvChP1BKbuD/zvS8R0W+bGklD7EZ+IJ0gLTZ+OPFi # BLwbVrlTjjRqjmyyvhKH7kbDq6fPZ6612szg8xLsfbVYowIUYsvvaImkSnYO9FNR # VUu/NgrCQ0wBFa+z+lRCMNiPwHUS6s2tyd0cayWN7buOWAAEboOBUbetSpI5nsfS # b8+/SlEcgKoYQW/m3bCKko4lhjGCBA0wggQJAgEBMIGTMHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwAhMzAAACHUvAkoc4hX45AAEAAAIdMA0GCWCGSAFlAwQC # AQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkE # MSIEIK2355mFs7pxNsEXENW8+4d/GsY2jwl3B7x7RySjm/eMMIH6BgsqhkiG9w0B # CRACLzGB6jCB5zCB5DCBvQQgsbaVzFxIiyc66jO+3qeK0zcKzDo+oKVjfYWb6Y+U # BVEwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ # MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u # MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAh1L # wJKHOIV+OQABAAACHTAiBCAbebATCd2NaavZKhlXhGz9H+kM6cJSVSmJOE6G5TDr # 3zANBgkqhkiG9w0BAQsFAASCAgAXkcqn/O4hVArpzPC4quSJokcgK+q4D9/zZFeS # ahPlNUQyU5p2WzkD6z7T4zokYn9dzY3/6Azcwe3a4n1JOVBhKleYN6BHP8j+rlm3 # MwhoJQ24dPEjPf/EAl4ZbjmwJO+hte05yxvi9T+e1voAihpxntYYAkfRFr9+WV3C # 6UuW4oQX0GvijBcvStD7mlEZFhDxUBLol57HPOKm+UpNS1zu83kC87x4maW00dHx # eEg/S+WkgLjCbl92p7De9JzegccfAzJ9VCXpBcFaJq2hD5Tu/ZoAbOa6R0N5oIZ0 # B31BAbHpQRR3n4jYa4V1Q4SVyU4u5iAcyV/iULhIyMnpJZYoSHMWcPUut8dgXwD+ # jTgfav02k1E9j/LoOrYYYeS1efKBVXC21XQD1sHcZHxF1pufk1QhbvoDDAcgXEdb # a6x8fewSn4C6idPoHEqEFrm/P6qTgwJMVv8vipkA1EnMClLyHNgwSHN4KzrARG4a # upW7rTJHFJaFI87BH3QlASY8jtM1wNsFp7yZ43W6PbW/j8DZp7YCVqXtaG/dZLyA # H/Gyi6ScJGJw3nSdrsuPOKhU5TbsNDxdVbFU//xV6i2vFPMNl08Y00UK6XO3EB7I # qofTSOfxkSlQw/bZOpa10LkYYctOFk/PB4H0UJwHiY/lTmQs5msYti9O1eUcQqgi # YBF5kg== # SIG # End signature block |