XenDesktop7

2.10.0

DSCResources/VE_XD7AccessPolicy/VE_XD7AccessPolicy.psm1

                                Import-LocalizedData -BindingVariable localizedData -FileName VE_XD7AccessPolicy.Resources.psd1;

function Get-TargetResource {

    [CmdletBinding()]

    [OutputType([System.Collections.Hashtable])]

    param (

        # Delivery Group Name

        [Parameter(Mandatory)]

        [System.String] $DeliveryGroup,

        # NotViaAG | ViaAG

        [Parameter(Mandatory)]

        [ValidateSet('AccessGateway','Direct')]

        [System.String] $AccessType,

        [Parameter()]

        [System.Boolean] $Enabled = $true,

        [Parameter()]

        [System.Boolean] $AllowRestart = $true,

        [Parameter()]

        [ValidateSet('HDX','RDP')]

        [System.String[]] $Protocol = @('HDX','RDP'),

        # Name example: <DeliveryGroupName>_Direct or <DeliveryGroupName>_AG

        [Parameter()]

        [System.String] $Name,

        [Parameter()]

        [AllowNull()]

        [System.String] $Description = $null,

        # IncludedUsersFilterEnabled/IncludedUsers

        [Parameter()]

        [ValidateNotNull()]

        [System.String[]] $IncludeUsers = @(),

        # ExcludedUserFilterEnabled/ExcludedUsers

        [Parameter()]

        [ValidateNotNull()]

        [System.String[]] $ExcludeUsers = @(),

        [Parameter()]

        [ValidateSet('Present','Absent')]

        [System.String] $Ensure = 'Present',

        [Parameter()]

        [ValidateNotNull()]

        [System.Management.Automation.PSCredential]

        [System.Management.Automation.CredentialAttribute()]

        $Credential

    )

    begin {

        AssertXDModule -Name 'Citrix.Broker.Admin.V2' -IsSnapin;

        if ([System.String]::IsNullOrEmpty($Name)) {

            $Name = '{0}_Direct' -f $DeliveryGroup;

            if ($AccessType -eq 'AccessGateway') {

                $Name = '{0}_AG' -f $DeliveryGroup;

            }

        }

    }

    process {

        $scriptBlock = {

            Add-PSSnapin -Name 'Citrix.Broker.Admin.V2' -ErrorAction Stop;

            $desktopGroup = Get-BrokerDesktopGroup -Name $using:DeliveryGroup -ErrorAction Stop;

            $desktopGroupAccessPolicy = Get-BrokerAccessPolicyRule -Name $using:Name -DesktopGroupUid $desktopGroup.Uid -ErrorAction SilentlyContinue;

            $targetResource = @{

                DeliveryGroup = $using:DeliveryGroup;

                Name = $desktopGroupAccessPolicy.Name;

                AccessType = if ($desktopGroupAccessPolicy.AllowedConnections -eq 'ViaAG') { 'AccessGateway' } else { 'Direct' }

                Enabled = $desktopGroupAccessPolicy.Enabled;

                AllowRestart = $desktopGroupAccessPolicy.AllowRestart;

                Protocol = [System.String[]] $desktopGroupAccessPolicy.AllowedProtocols;

                Description = [System.String] $desktopGroupAccessPolicy.Description;

                IncludeUsers = @()

                ExcludeUsers = @();

                Ensure = 'Absent';

            }

            $targetResource['IncludeUsers'] += $desktopGroupAccessPolicy.IncludedUsers | Where-Object Name -ne $null | Select-Object -ExpandProperty Name;

            $targetResource['ExcludeUsers'] += $desktopGroupAccessPolicy.ExcludedUsers | Where-Object Name -ne $null | Select-Object -ExpandProperty Name;

            if ($desktopGroupAccessPolicy) {

                $targetResource.Ensure = 'Present';

            }

            return $targetResource;

        } #end scriptBlock

        $invokeCommandParams = @{

            ScriptBlock = $scriptBlock;

            ErrorAction = 'Stop';

        }

        Write-Verbose ($localizedData.InvokingScriptBlockWithParams -f [System.String]::Join("','", @($Name, $Enabled, $Ensure)));

        if ($Credential) {

            AddInvokeScriptBlockCredentials -Hashtable $invokeCommandParams -Credential $Credential;

            $targetResource = Invoke-Command  @invokeCommandParams;

        }

        else {

            $invokeScriptBlock = [System.Management.Automation.ScriptBlock]::Create($scriptBlock.ToString().Replace('$using:','$'));

            $targetResource = InvokeScriptBlock -ScriptBlock $invokeScriptBlock;

        }

        return $targetResource;

    }

} #end function Get-TargetResource

function Test-TargetResource {

    [CmdletBinding()]

    [OutputType([System.Boolean])]

    param (

        # Delivery Group Name

        [Parameter(Mandatory)]

        [System.String] $DeliveryGroup,

        # NotViaAG | ViaAG

        [Parameter(Mandatory)]

        [ValidateSet('AccessGateway','Direct')]

        [System.String] $AccessType,

        [Parameter()]

        [System.Boolean] $Enabled = $true,

        [Parameter()]

        [System.Boolean] $AllowRestart = $true,

        [Parameter()]

        [ValidateSet('HDX','RDP')]

        [System.String[]] $Protocol = @('HDX','RDP'),

        # Name example: <DeliveryGroupName>_Direct or <DeliveryGroupName>_AG

        [Parameter()]

        [System.String] $Name,

        [Parameter()]

        [AllowNull()]

        [System.String] $Description = $null,

        # IncludedUsersFilterEnabled/IncludedUsers

        [Parameter()]

        [ValidateNotNull()]

        [System.String[]] $IncludeUsers = @(),

        # ExcludedUserFilterEnabled/ExcludedUsers

        [Parameter()]

        [ValidateNotNull()]

        [System.String[]] $ExcludeUsers = @(),

        [Parameter()]

        [ValidateSet('Present','Absent')]

        [System.String] $Ensure = 'Present',

        [Parameter()]

        [ValidateNotNull()]

        [System.Management.Automation.PSCredential]

        [System.Management.Automation.CredentialAttribute()]

        $Credential

    )

    begin {

        if ([System.String]::IsNullOrEmpty($Name)) {

            $Name = '{0}_Direct' -f $DeliveryGroup;

            if ($AccessType -eq 'AccessGateway') { $Name = '{0}_AG' -f $DeliveryGroup; }

        }

    } #end begin

    process {

        $PSBoundParameters['Ensure'] = $Ensure;

        $targetResource = Get-TargetResource @PSBoundParameters;

        $inCompliance = $true;

        foreach ($property in $PSBoundParameters.Keys) {

            if ($targetResource.ContainsKey($property)) {

                $expected = $PSBoundParameters[$property];

                $actual = $targetResource[$property];

                if ($PSBoundParameters[$property] -is [System.String[]]) {

                    if (Compare-Object -ReferenceObject $expected -DifferenceObject $actual) {

                        Write-Verbose ($localizedData.ResourcePropertyMismatch -f $property, ($expected -join ','), ($actual -join ','));

                        $inCompliance = $false;

                    }

                }

                elseif ($expected -ne $actual) {

                    Write-Verbose ($localizedData.ResourcePropertyMismatch -f $property, $expected, $actual);

                    $inCompliance = $false;

                }

            }

        }

        if ($inCompliance) {

            Write-Verbose ($localizedData.ResourceInDesiredState -f $DeliveryGroup);

        }

        else {

            Write-Verbose ($localizedData.ResourceNotInDesiredState -f $DeliveryGroup);

        }

        return $inCompliance;

    } #end process

} #end function Test-TargetResource

function Set-TargetResource {

    [CmdletBinding()]

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseShouldProcessForStateChangingFunctions', '')]

    param (

        # Delivery Group Name

        [Parameter(Mandatory)]

        [System.String] $DeliveryGroup,

        # NotViaAG | ViaAG

        [Parameter(Mandatory)]

        [ValidateSet('AccessGateway','Direct')]

        [System.String] $AccessType,

        [Parameter()]

        [System.Boolean] $Enabled = $true,

        [Parameter()]

        [System.Boolean] $AllowRestart = $true,

        [Parameter()]

        [ValidateSet('HDX','RDP')]

        [System.String[]] $Protocol = @('HDX','RDP'),

        # Name example: <DeliveryGroupName>_Direct or <DeliveryGroupName>_AG

        [Parameter()]

        [System.String] $Name,

        [Parameter()]

        [AllowNull()]

        [System.String] $Description = $null,

        # IncludedUsersFilterEnabled/IncludedUsers

        [Parameter()]

        [ValidateNotNull()]

        [System.String[]] $IncludeUsers = @(),

        # ExcludedUserFilterEnabled/ExcludedUsers

        [Parameter()]

        [ValidateNotNull()]

        [System.String[]] $ExcludeUsers = @(),

        [Parameter()]

        [ValidateSet('Present','Absent')]

        [System.String] $Ensure = 'Present',

        [Parameter()]

        [ValidateNotNull()]

        [System.Management.Automation.PSCredential]

        [System.Management.Automation.CredentialAttribute()]

        $Credential

    )

    begin {

        AssertXDModule -Name 'Citrix.Broker.Admin.V2' -IsSnapin;

        if ([System.String]::IsNullOrEmpty($Name)) {

            $Name = '{0}_Direct' -f $DeliveryGroup;

            if ($AccessType -eq 'AccessGateway') { $Name = '{0}_AG' -f $DeliveryGroup; }

        }

    } #end begin

    process {

        $scriptBlock = {

            Add-PSSnapin -Name 'Citrix.Broker.Admin.V2' -ErrorAction Stop;

            $desktopGroup = Get-BrokerDesktopGroup -Name $using:DeliveryGroup -ErrorAction Stop;

            $desktopGroupAccessPolicy = Get-BrokerAccessPolicyRule -Name $using:Name -DesktopGroupUid $desktopGroup.Uid -ErrorAction SilentlyContinue;

            if ($using:Ensure -eq 'Present') {

                $accessPolicyParams = @{

                    Enabled = $using:Enabled;

                    Description = $using:Description;

                    AllowRestart = $using:AllowRestart;

                    AllowedConnections = if ($using:AccessType -eq 'AccessGateway') { 'ViaAG' } else { 'NotViaAG' }

                    AllowedProtocols = $using:Protocol;

                    IncludedUserFilterEnabled = $false;

                    IncludedUsers = @();

                    ExcludedUserFilterEnabled = $false;

                    ExcludedUsers = @();

                }

                if ($using:IncludeUsers.Count -ge 1) {

                    $accessPolicyParams['IncludedUserFilterEnabled'] = $true;

                    foreach ($user in $using:IncludeUsers) {

                        $brokerUser = Get-BrokerUser -FullName $user -ErrorAction SilentlyContinue;

                        if (-not $brokerUser) {

                            $brokerUser = New-BrokerUser -Name $user -ErrorAction Stop;

                        }

                        $accessPolicyParams['IncludedUsers'] += $brokerUser;

                    }

                }

                if ($using:ExcludeUsers.Count -ge 1) {

                    $accessPolicyParams['ExcludedUserFilterEnabled'] = $true;

                    foreach ($user in $using:ExcludeUsers) {

                        $brokerUser = Get-BrokerUser -FullName $user -ErrorAction SilentlyContinue;

                        if (-not $brokerUser) {

                            $brokerUser = New-BrokerUser -Name $user -ErrorAction Stop;

                        }

                        $accessPolicyParams['ExcludedUsers'] += $brokerUser;

                    }

                }

                if ($desktopGroupAccessPolicy) {

                    ## Can't change name or delivery group

                    if ($desktopGroup.Uid -ne $desktopGroupAccessPolicy.DesktopGroupUid) {

                        throw ($using:localizedData.ImmutablePropertyError -f 'Uid');

                    }

                    elseif ($using:Name -ne $desktopGroupAccessPolicy.Name) {

                        throw ($using:localizedData.ImmutablePropertyError -f 'Name');

                    }

                    Write-Verbose ($using:localizedData.UpdatingAccessPolicy -f $using:Name);

                    $null = $desktopGroupAccessPolicy | Set-BrokerAccessPolicyRule @accessPolicyParams;

                }

                else {

                    $accessPolicyParams['Name'] = $using:Name;

                    $accessPolicyParams['DesktopGroupUid'] = $desktopGroup.Uid;

                    Write-Verbose ($using:localizedData.AddingAccessPolicy -f $using:Name);

                    New-BrokerAccessPolicyRule @accessPolicyParams;

                }

            }

            else {

                if ($desktopGroupAccessPolicy) {

                    Write-Verbose ($using:localizedData.RemovingAccessPolicy -f $using:Name);

                    $desktopGroupAccessPolicy | Remove-BrokerAccessPolicyRule;

                }

            }

        } #end scriptBlock

        $invokeCommandParams = @{

            ScriptBlock = $scriptBlock;

            ErrorAction = 'Stop';

        }

        Write-Verbose ($localizedData.InvokingScriptBlockWithParams -f [System.String]::Join("','", @($Name, $Enabled, $Ensure)));

        if ($Credential) {

            AddInvokeScriptBlockCredentials -Hashtable $invokeCommandParams -Credential $Credential;

            [ref] $null = Invoke-Command  @invokeCommandParams;

        }

        else {

            $invokeScriptBlock = [System.Management.Automation.ScriptBlock]::Create($scriptBlock.ToString().Replace('$using:','$'));

            [ref] $null = InvokeScriptBlock -ScriptBlock $invokeScriptBlock;

        }

    } #end process

} #end function Set-TargetResource

$moduleRoot = Split-Path -Path $MyInvocation.MyCommand.Path -Parent;

## Import the XD7Common library functions

$moduleParent = Split-Path -Path $moduleRoot -Parent;

Import-Module (Join-Path -Path $moduleParent -ChildPath 'VE_XD7Common');

## Import the InvokeScriptBlock function into the current scope

. (Join-Path -Path (Join-Path -Path $moduleParent -ChildPath 'VE_XD7Common') -ChildPath 'InvokeScriptBlock.ps1');

Export-ModuleMember -Function *-TargetResource;

# SIG # Begin signature block

# MIIcawYJKoZIhvcNAQcCoIIcXDCCHFgCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUNgZrvm4qDl7BvMvDLyBvBvYx

# tQKggheaMIIFIzCCBAugAwIBAgIQAsbTxa4q6RSRmx0hkVyicTANBgkqhkiG9w0B

# AQsFADByMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD

# VQQLExB3d3cuZGlnaWNlcnQuY29tMTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFz

# c3VyZWQgSUQgQ29kZSBTaWduaW5nIENBMB4XDTE5MDcwMzAwMDAwMFoXDTIxMTEw

# MzEyMDAwMFowYDELMAkGA1UEBhMCR0IxDzANBgNVBAcTBkxvbmRvbjEfMB0GA1UE

# ChMWVmlydHVhbCBFbmdpbmUgTGltaXRlZDEfMB0GA1UEAxMWVmlydHVhbCBFbmdp

# bmUgTGltaXRlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/s4NME

# JLA1Aji4EHJ85uwyEEAepndYn1X8pRnGkOlTzVHITAeH7BQnehjbNwCj7MHUPTSM

# zSucXhyfaMZthCNYtugyZ2uU4uVjB1f3xdmXXFX+aukMYgCk1ZQFbQMBqbzRY4Cl

# DwlLNGVEjDJeLBUL6ciIETqDc27YLg772WLpuvIXne13EYXN422Y83XRqEMf4v9S

# 398S8MRk5qdasRtxYZY6GciZZQnAL/XObpXDM3tDFgcQuyGcZttRuXVZXEj+mlY8

# gUIzkSJ0aJn1pVVTsa+tCvAZuJMJwdPhyM7NUa7Ysm7n9qdF7BvcrWBmaYRfDyya

# lLwRoOcI2HVodX8CAwEAAaOCAcUwggHBMB8GA1UdIwQYMBaAFFrEuXsqCqOl6nED

# wGD5LfZldQ5YMB0GA1UdDgQWBBSDFWXl70FjVfl8IBwATpE46qvGeDAOBgNVHQ8B

# Af8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwdwYDVR0fBHAwbjA1oDOgMYYv

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItYXNzdXJlZC1jcy1nMS5jcmww

# NaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtY3Mt

# ZzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAMBMCowKAYIKwYBBQUHAgEWHGh0

# dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQQBMIGEBggrBgEFBQcB

# AQR4MHYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBOBggr

# BgEFBQcwAoZCaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB

# MkFzc3VyZWRJRENvZGVTaWduaW5nQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZI

# hvcNAQELBQADggEBAJ1VZZNMAy8KyQLBqwRWAWDqcOxjVly6FTIeqO2/ul9rEYm8

# B9mNx60/AL+TbTbUwBzia2pwBuIin70eClZHFstvQcASBbB0k14R/rs+jestfFRm

# rsEz272POc6vsKce3TOlqBc2rtvVyuUPRvI2yQm1WYTpOgQnnp3ix2LBd+fgRANs

# P9yurvnGdEFFzToFDXFVkFHBQ9Pr5tAb4i7ZkSFC52BtB7NVuoiH83lx07SyjIxU

# 11ELEDZBpO3HiTsTzbhPAEw4CP++ONK8fieWZevDK9DFEiNIC0gWL/DH1+c7eihO

# oJdJqRAT9wkAMIjcskZ5LObGvMst/hqwBewpLzYwggUwMIIEGKADAgECAhAECRgb

# X9W7ZnVTQ7VvlVAIMA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNVBAYTAlVTMRUwEwYD

# VQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAi

# BgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0xMzEwMjIxMjAw

# MDBaFw0yODEwMjIxMjAwMDBaMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdp

# Q2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERp

# Z2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDb2RlIFNpZ25pbmcgQ0EwggEiMA0GCSqG

# SIb3DQEBAQUAA4IBDwAwggEKAoIBAQD407Mcfw4Rr2d3B9MLMUkZz9D7RZmxOttE

# 9X/lqJ3bMtdx6nadBS63j/qSQ8Cl+YnUNxnXtqrwnIal2CWsDnkoOn7p0WfTxvsp

# J8fTeyOU5JEjlpB3gvmhhCNmElQzUHSxKCa7JGnCwlLyFGeKiUXULaGj6YgsIJWu

# HEqHCN8M9eJNYBi+qsSyrnAxZjNxPqxwoqvOf+l8y5Kh5TsxHM/q8grkV7tKtel0

# 5iv+bMt+dDk2DZDv5LVOpKnqagqrhPOsZ061xPeM0SAlI+sIZD5SlsHyDxL0xY4P

# waLoLFH3c7y9hbFig3NBggfkOItqcyDQD2RzPJ6fpjOp/RnfJZPRAgMBAAGjggHN

# MIIByTASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjATBgNVHSUE

# DDAKBggrBgEFBQcDAzB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6

# Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMu

# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNydDCBgQYDVR0f

# BHoweDA6oDigNoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNz

# dXJlZElEUm9vdENBLmNybDA6oDigNoY0aHR0cDovL2NybDMuZGlnaWNlcnQuY29t

# L0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDBPBgNVHSAESDBGMDgGCmCGSAGG

# /WwAAgQwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ

# UzAKBghghkgBhv1sAzAdBgNVHQ4EFgQUWsS5eyoKo6XqcQPAYPkt9mV1DlgwHwYD

# VR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcNAQELBQADggEB

# AD7sDVoks/Mi0RXILHwlKXaoHV0cLToaxO8wYdd+C2D9wz0PxK+L/e8q3yBVN7Dh

# 9tGSdQ9RtG6ljlriXiSBThCk7j9xjmMOE0ut119EefM2FAaK95xGTlz/kLEbBw6R

# Ffu6r7VRwo0kriTGxycqoSkoGjpxKAI8LpGjwCUR4pwUR6F6aGivm6dcIFzZcbEM

# j7uo+MUSaJ/PQMtARKUT8OZkDCUIQjKyNookAv4vcn4c10lFluhZHen6dGRrsutm

# Q9qzsIzV6Q3d9gEgzpkxYz0IGhizgZtPxpMQBvwHgfqL2vmCSfdibqFT+hKUGIUu

# kpHqaGxEMrJmoecYpJpkUe8wggZqMIIFUqADAgECAhADAZoCOv9YsWvW1ermF/Bm

# MA0GCSqGSIb3DQEBBQUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IEFzc3VyZWQgSUQgQ0EtMTAeFw0xNDEwMjIwMDAwMDBaFw0yNDEwMjIwMDAw

# MDBaMEcxCzAJBgNVBAYTAlVTMREwDwYDVQQKEwhEaWdpQ2VydDElMCMGA1UEAxMc

# RGlnaUNlcnQgVGltZXN0YW1wIFJlc3BvbmRlcjCCASIwDQYJKoZIhvcNAQEBBQAD

# ggEPADCCAQoCggEBAKNkXfx8s+CCNeDg9sYq5kl1O8xu4FOpnx9kWeZ8a39rjJ1V

# +JLjntVaY1sCSVDZg85vZu7dy4XpX6X51Id0iEQ7Gcnl9ZGfxhQ5rCTqqEsskYnM

# Xij0ZLZQt/USs3OWCmejvmGfrvP9Enh1DqZbFP1FI46GRFV9GIYFjFWHeUhG98oO

# jafeTl/iqLYtWQJhiGFyGGi5uHzu5uc0LzF3gTAfuzYBje8n4/ea8EwxZI3j6/oZ

# h6h+z+yMDDZbesF6uHjHyQYuRhDIjegEYNu8c3T6Ttj+qkDxss5wRoPp2kChWTrZ

# FQlXmVYwk/PJYczQCMxr7GJCkawCwO+k8IkRj3cCAwEAAaOCAzUwggMxMA4GA1Ud

# DwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI

# MIIBvwYDVR0gBIIBtjCCAbIwggGhBglghkgBhv1sBwEwggGSMCgGCCsGAQUFBwIB

# FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIIBZAYIKwYBBQUHAgIwggFW

# HoIBUgBBAG4AeQAgAHUAcwBlACAAbwBmACAAdABoAGkAcwAgAEMAZQByAHQAaQBm

# AGkAYwBhAHQAZQAgAGMAbwBuAHMAdABpAHQAdQB0AGUAcwAgAGEAYwBjAGUAcAB0

# AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQAaQBnAGkAQwBlAHIAdAAgAEMAUAAv

# AEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkAaQBuAGcAIABQAGEAcgB0

# AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAgAGwAaQBtAGkAdAAg

# AGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAgAGkAbgBjAG8AcgBw

# AG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBu

# AGMAZQAuMAsGCWCGSAGG/WwDFTAfBgNVHSMEGDAWgBQVABIrE5iymQftHt+ivlcN

# K2cCzTAdBgNVHQ4EFgQUYVpNJLZJMp1KKnkag0v0HonByn0wfQYDVR0fBHYwdDA4

# oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElE

# Q0EtMS5jcmwwOKA2oDSGMmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy

# dEFzc3VyZWRJRENBLTEuY3JsMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYY

# aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2Fj

# ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURDQS0xLmNydDANBgkq

# hkiG9w0BAQUFAAOCAQEAnSV+GzNNsiaBXJuGziMgD4CH5Yj//7HUaiwx7ToXGXEX

# zakbvFoWOQCd42yE5FpA+94GAYw3+puxnSR+/iCkV61bt5qwYCbqaVchXTQvH3Gw

# g5QZBWs1kBCge5fH9j/n4hFBpr1i2fAnPTgdKG86Ugnw7HBi02JLsOBzppLA044x

# 2C/jbRcTBu7kA7YUq/OPQ6dxnSHdFMoVXZJB2vkPgdGZdA0mxA5/G7X1oPHGdwYo

# FenYk+VVFvC7Cqsc21xIJ2bIo4sKHOWV2q7ELlmgYd3a822iYemKC23sEhi991VU

# QAOSK2vCUcIKSK+w1G7g9BQKOhvjjz3Kr2qNe9zYRDCCBs0wggW1oAMCAQICEAb9

# +QOWA63qAArrPye7uhswDQYJKoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCVVMxFTAT

# BgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEk

# MCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTA2MTExMDAw

# MDAwMFoXDTIxMTExMDAwMDAwMFowYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERp

# Z2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMY

# RGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A

# MIIBCgKCAQEA6IItmfnKwkKVpYBzQHDSnlZUXKnE0kEGj8kz/E1FkVyBn+0snPgW

# Wd+etSQVwpi5tHdJ3InECtqvy15r7a2wcTHrzzpADEZNk+yLejYIA6sMNP4YSYL+

# x8cxSIB8HqIPkg5QycaH6zY/2DDD/6b3+6LNb3Mj/qxWBZDwMiEWicZwiPkFl32j

# x0PdAug7Pe2xQaPtP77blUjE7h6z8rwMK5nQxl0SQoHhg26Ccz8mSxSQrllmCsSN

# vtLOBq6thG9IhJtPQLnxTPKvmPv2zkBdXPao8S+v7Iki8msYZbHBc63X8djPHgp0

# XEK4aH631XcKJ1Z8D2KkPzIUYJX9BwSiCQIDAQABo4IDejCCA3YwDgYDVR0PAQH/

# BAQDAgGGMDsGA1UdJQQ0MDIGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwMG

# CCsGAQUFBwMEBggrBgEFBQcDCDCCAdIGA1UdIASCAckwggHFMIIBtAYKYIZIAYb9

# bAABBDCCAaQwOgYIKwYBBQUHAgEWLmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3Nz

# bC1jcHMtcmVwb3NpdG9yeS5odG0wggFkBggrBgEFBQcCAjCCAVYeggFSAEEAbgB5

# ACAAdQBzAGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYAaQBjAGEAdABl

# ACAAYwBvAG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQAYQBuAGMAZQAg

# AG8AZgAgAHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMAIABh

# AG4AZAAgAHQAaABlACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwBy

# AGUAZQBtAGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBp

# AGwAaQB0AHkAIABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABl

# AGQAIABoAGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wCwYJ

# YIZIAYb9bAMVMBIGA1UdEwEB/wQIMAYBAf8CAQAweQYIKwYBBQUHAQEEbTBrMCQG

# CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKG

# N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJv

# b3RDQS5jcnQwgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0

# LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9j

# cmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwHQYD

# VR0OBBYEFBUAEisTmLKZB+0e36K+Vw0rZwLNMB8GA1UdIwQYMBaAFEXroq/0ksuC

# MS1Ri6enIZ3zbcgPMA0GCSqGSIb3DQEBBQUAA4IBAQBGUD7Jtygkpzgdtlspr1LP

# UukxR6tWXHvVDQtBs+/sdR90OPKyXGGinJXDUOSCuSPRujqGcq04eKx1XRcXNHJH

# hZRW0eu7NoR3zCSl8wQZVann4+erYs37iy2QwsDStZS9Xk+xBdIOPRqpFFumhjFi

# qKgz5Js5p8T1zh14dpQlc+Qqq8+cdkvtX8JLFuRLcEwAiR78xXm8TBJX/l/hHrwC

# Xaj++wc4Tw3GXZG5D2dFzdaD7eeSDY2xaYxP+1ngIw/Sqq4AfO6cQg7Pkdcntxbu

# D8O9fAqg7iwIVYUiuOsYGk38KiGtSTGDR5V3cdyxG0tLHBCcdxTBnU8vWpUIKRAm

# MYIEOzCCBDcCAQEwgYYwcjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0

# IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTExMC8GA1UEAxMoRGlnaUNl

# cnQgU0hBMiBBc3N1cmVkIElEIENvZGUgU2lnbmluZyBDQQIQAsbTxa4q6RSRmx0h

# kVyicTAJBgUrDgMCGgUAoHgwGAYKKwYBBAGCNwIBDDEKMAigAoAAoQKAADAZBgkq

# hkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEEAYI3AgELMQ4wDAYKKwYBBAGC

# NwIBFTAjBgkqhkiG9w0BCQQxFgQUfiTLv/idSBXBXVjsfUIb5/BklhswDQYJKoZI

# hvcNAQEBBQAEggEAmcYJVjZ7FC7vebzU/b2vlnbdLPj6/Fqpwn9EvTeT7oYZNCOX

# Df5+GAQJdxP4iEF8Vxz57ogNx5o/tu187ZVgbHB+L915mfT7c5/oxEEb0gDnqx5U

# 9RsoQ9ABUfx/qNXU+lUmv+Mq6EHhRYOcEJmrrcfg911wu9N2HDXrnrjhnOAgvGUt

# zV0J1jR3/aJRNmFuOnFPp0dzD2nCcUNvYi+A6+Gv8IrJw6kUUybej2Nrb75bK7IT

# 6nds9cWpoVKiI/4KwqmueZZ23j2byDeHcVMD05EPswyTel7ctTkUElN7APyShleY

# 5R3oMQ8ce3p+0Y0H/+yxOtj8saRl8IBXg5f136GCAg8wggILBgkqhkiG9w0BCQYx

# ggH8MIIB+AIBATB2MGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJ

# bmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0

# IEFzc3VyZWQgSUQgQ0EtMQIQAwGaAjr/WLFr1tXq5hfwZjAJBgUrDgMCGgUAoF0w

# GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNDAx

# MTQ1MjE1WjAjBgkqhkiG9w0BCQQxFgQUQ8Mj9Cxlq5DTYVXzitdGdOrhzZ0wDQYJ

# KoZIhvcNAQEBBQAEggEABdM4ECwnCdlrFcfeVbJe8rHi46WQxqVtN1azqyze+ZNx

# hlukTHQaMY6HC1ivmV8st3+PeTVJ0C7smdmMPBkV5AMhe9GxFlkSGycFzt4RFkN7

# QGs0miGmmFYZP3GS9qR3zXJ+QRPqcCImmsA/8PRM/yOyXTLeXcNy7ogHCGZM5LiI

# h+x4S71itXI3oaMsnCd7phKaHE1eeQTKHZWFpOmVCUgotBOPTHAO9GN5YyseUop2

# 3Xa2LfX3Uiyzh6a322KpqIbtQLEAHtmEd8xjMXMWZcfRh0OhDf6Y/aKuTQ+sQejw

# osVSs4d0BFqvlyLvYOLrOBY2C636z4xxYp2T/2pTYQ==

# SIG # End signature block