AzStackHciExternalActiveDirectory/AzStackHciExternalActiveDirectory.psm1

<#############################################################
 # #
 # Copyright (C) Microsoft Corporation. All rights reserved. #
 # #
 #############################################################>

$MetaData = @{
    "OperationType" =  @("Deployment","Upgrade","PreUpdate","PreUpdateJIT")
    "UIName" = 'Azure Stack HCI External Active Directory'
    "UIDescription" = 'Check external active directory preparation'
}

Import-Module $PSScriptRoot\AzStackHci.ExternalActiveDirectory.Helpers.psm1 -Force -DisableNameChecking -Global
Import-Module $PSScriptRoot\AzStackHci.ExternalActiveDirectory.Tests.psm1 -Force -DisableNameChecking -Global
Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Reporting.psm1 -Force -DisableNameChecking -Global

function Test-AzStackHciExternalActiveDirectory
{
    param (
        [parameter(Mandatory = $true)]
        [ValidateNotNullOrEmpty()]
        $Parameters,

        [parameter(Mandatory = $true)]
        [ValidateNotNullOrEmpty()]
        $OperationType,

        [parameter(Mandatory = $false)]
        [ValidateSet('Small','Medium','Large')]
        [String]
        $HardwareClass = "Medium",

        [parameter(Mandatory = $false)]
        [ValidateSet('Standard','Stretch','RackAware')]
        [String]
        $ClusterPattern = "Standard",

        [parameter(Mandatory = $false)]
        [switch]
        $FailFast
    )
    try
    {
        $backupPSModuleAutoLoadingPreference = $PSModuleAutoLoadingPreference
        # Disable module auto-loading and explicitly import modules needed.
        $PSModuleAutoLoadingPreference = [System.Management.Automation.PSModuleAutoLoadingPreference]::None
        Import-Module Microsoft.PowerShell.Utility -Verbose:$false
        Import-Module Microsoft.PowerShell.Management -Verbose:$false
        Import-Module ActiveDirectory -Verbose:$false

        # Import Module via Helper in case this is update
        [EnvironmentValidator]::EnvironmentValidatorImport($Parameters)
        $ENV:EnvChkrOp = $OperationType
        # Active Directory Checks
        Trace-Execution "Gathering External Active Directory validation assets."
        $asHciClusterName = $Parameters.Roles["Cluster"].PublicConfiguration.Clusters.Node.Name
        $domainFQDN = $Parameters.Roles["Domain"].PublicConfiguration.PublicInfo.DomainConfiguration.FQDN
        $hciDeploymentPrefix = $Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.DeploymentPrefix
        $physicalMachineNames = $Parameters.Roles["BareMetal"].PublicConfiguration.Nodes.Node | ForEach-Object  {$_.Name}
        $hciOUName = $Parameters.Roles["Cloud"].PublicConfiguration.PublicInfo.ADOUPath
        $domainAdminCredential = [EnvironmentValidator]::GetDomainAdminCredential($Parameters)

        if ($OperationType -match 'Deployment')
        {

            if (![string]::IsNullOrEmpty($asHciClusterName) -and ![string]::IsNullOrEmpty($domainFQDN) -and ![string]::IsNullOrEmpty($hciDeploymentPrefix))
            {

                Trace-Execution "Starting External Active Directory validation. Detail output can be found in $($env:LocalRootFolderPath)\MASLogs\AzStackHciEnvironmentChecker*"

                Install-ActiveDirectoryModule
                Install-GroupPolicyModule
                $exAdParams = @{
                    ADOUPath = $hciOUName
                    DomainFQDN = $domainFQDN
                    NamingPrefix = $hciDeploymentPrefix
                    ClusterName = $asHciClusterName
                    ActiveDirectoryServer = $domainFQDN
                    ActiveDirectoryCredential = $domainAdminCredential
                    PassThru = $true
                    OutputPath = "$($env:LocalRootFolderPath)\MASLogs\"
                    HardwareClass = $HardwareClass
                    ClusterPattern = $ClusterPattern
                    PhysicalMachineNames = $physicalMachineNames
                    OperationType = $OperationType
                }

                [array]$ExtAdCheckResult = AzStackHci.EnvironmentChecker\Invoke-AzStackHciExternalActiveDirectoryValidation @exAdParams
                [EnvironmentValidator]::ParseResult($ExtAdCheckResult, 'ExternalAD', $FailFast)
            }
            else
            {
                Trace-Execution "asHciClusterName: $asHciClusterName, domainFQDN: $domainFQDN, hciDeploymentPrefix: $hciDeploymentPrefix"
                Trace-Execution "Skipping External Active Directory validation unable to parse neccessary information from answer file."
            }
        }
        elseif ($OperationType -match 'PreUpdate')
        {
            $cloudRole = $Parameters.Roles["Cloud"].PublicConfiguration
            $deployADLess = $cloudRole.PublicInfo.DeployADLess

            # Local Identity environments use local admin credentials for LcmUser. Skip AD check
            if ($deployADLess -ne "True")
            {
                Import-Module $PSScriptRoot\AzStackHci.ExternalActiveDirectory.Tests.psm1 -Force -DisableNameChecking -Global
                Trace-Execution "Starting External Active Directory validation checks before update."
                [array]$ExtAdCheckResult = Test-LcmUserCredentials -LcmUserCredentials $domainAdminCredential -DomainFQDN  $domainFQDN
                [EnvironmentValidator]::ParseResult($ExtAdCheckResult, 'ExternalAD', $FailFast)
            }
        }
        elseif ($OperationType -match 'Upgrade')
        {
            Import-Module $PSScriptRoot\AzStackHci.ExternalActiveDirectory.Tests.psm1 -Force -DisableNameChecking -Global
            Trace-Execution "Starting External Active Directory validation checks before upgrade."
            [array]$ExtAdCheckResult = Test-CauClusterRole -HciClusterName $asHciClusterName
            [EnvironmentValidator]::ParseResult($ExtAdCheckResult, 'ExternalAD', $FailFast)
        }
        else
        {
            Trace-Execution "No interface found for $OperationType"
        }
    }
    catch
    {
        Trace-Execution "Validator failed. $_"
        Trace-Execution "$($_.ScriptStackTrace)"
        throw $_
    }
    finally
    {
        if ($backupPSModuleAutoLoadingPreference)
        {
            $PSModuleAutoLoadingPreference = $backupPSModuleAutoLoadingPreference
        }
        # Remove any PSSession created during the validation.
        if ($PsSession)
        {
            $PsSession | Microsoft.PowerShell.Core\Remove-PSSession
        }
    }
}

Export-ModuleMember -Function Test-AzStackHciExternalActiveDirectory -Variable MetaData
# SIG # Begin signature block
# MIIoVAYJKoZIhvcNAQcCoIIoRTCCKEECAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA//9oJv6olnjef
# C/G9OGFBBOH+xbJ6ia9ZLEqlZdQWjaCCDYUwggYDMIID66ADAgECAhMzAAAEhJji
# EuB4ozFdAAAAAASEMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjUwNjE5MTgyMTM1WhcNMjYwNjE3MTgyMTM1WjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQDtekqMKDnzfsyc1T1QpHfFtr+rkir8ldzLPKmMXbRDouVXAsvBfd6E82tPj4Yz
# aSluGDQoX3NpMKooKeVFjjNRq37yyT/h1QTLMB8dpmsZ/70UM+U/sYxvt1PWWxLj
# MNIXqzB8PjG6i7H2YFgk4YOhfGSekvnzW13dLAtfjD0wiwREPvCNlilRz7XoFde5
# KO01eFiWeteh48qUOqUaAkIznC4XB3sFd1LWUmupXHK05QfJSmnei9qZJBYTt8Zh
# ArGDh7nQn+Y1jOA3oBiCUJ4n1CMaWdDhrgdMuu026oWAbfC3prqkUn8LWp28H+2S
# LetNG5KQZZwvy3Zcn7+PQGl5AgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUBN/0b6Fh6nMdE4FAxYG9kWCpbYUw
# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwNTM2MjAfBgNVHSMEGDAW
# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw
# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx
# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB
# AGLQps1XU4RTcoDIDLP6QG3NnRE3p/WSMp61Cs8Z+JUv3xJWGtBzYmCINmHVFv6i
# 8pYF/e79FNK6P1oKjduxqHSicBdg8Mj0k8kDFA/0eU26bPBRQUIaiWrhsDOrXWdL
# m7Zmu516oQoUWcINs4jBfjDEVV4bmgQYfe+4/MUJwQJ9h6mfE+kcCP4HlP4ChIQB
# UHoSymakcTBvZw+Qst7sbdt5KnQKkSEN01CzPG1awClCI6zLKf/vKIwnqHw/+Wvc
# Ar7gwKlWNmLwTNi807r9rWsXQep1Q8YMkIuGmZ0a1qCd3GuOkSRznz2/0ojeZVYh
# ZyohCQi1Bs+xfRkv/fy0HfV3mNyO22dFUvHzBZgqE5FbGjmUnrSr1x8lCrK+s4A+
# bOGp2IejOphWoZEPGOco/HEznZ5Lk6w6W+E2Jy3PHoFE0Y8TtkSE4/80Y2lBJhLj
# 27d8ueJ8IdQhSpL/WzTjjnuYH7Dx5o9pWdIGSaFNYuSqOYxrVW7N4AEQVRDZeqDc
# fqPG3O6r5SNsxXbd71DCIQURtUKss53ON+vrlV0rjiKBIdwvMNLQ9zK0jy77owDy
# XXoYkQxakN2uFIBO1UNAvCYXjs4rw3SRmBX9qiZ5ENxcn/pLMkiyb68QdwHUXz+1
# fI6ea3/jjpNPz6Dlc/RMcXIWeMMkhup/XEbwu73U+uz/MIIHejCCBWKgAwIBAgIK
# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm
# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw
# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD
# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG
# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la
# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc
# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D
# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+
# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk
# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6
# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd
# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL
# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd
# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3
# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS
# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI
# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL
# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD
# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv
# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h
# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA
# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn
# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7
# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b
# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/
# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy
# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp
# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi
# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb
# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS
# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL
# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX
# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiUwghohAgEBMIGVMH4x
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p
# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAASEmOIS4HijMV0AAAAA
# BIQwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw
# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIEoL
# rAqgrWKyGK+caBN3t2OEbd0Fe1iRDAteEA/QWixrMEIGCisGAQQBgjcCAQwxNDAy
# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j
# b20wDQYJKoZIhvcNAQEBBQAEggEAju8ss1YB8kDLfF4qfQ6n8YzuDxAPbHCPqWt1
# L2ERaUqPzJB9aGnX/UA3VPGYRWP2ZhXTGB7Rf/ytH2TpGZXAeST2JovtNpxAYZsZ
# Ymt2DwQn44itPIDU4tDR+K2aoZwWuNhyY+2azMe5J7QvllZ4ED68ckoy+j0wx5In
# DMK7MFcbkSXZ8yxifODh2b3zzg6dAWc/1Qr9eS7aI61pcK7DBHKzAu3NQs4UCGE2
# HnOvAr/h7Fiafl5Cqde6x4db9EjLesGfLa9KbX97B5yiAqRJS7EG625L9qBqGSx6
# li3gGLU3okcjqse5bhiNEF26mcL3VFV4+O3XYrBXaHUujDKQNKGCF68wgherBgor
# BgEEAYI3AwMBMYIXmzCCF5cGCSqGSIb3DQEHAqCCF4gwgheEAgEDMQ8wDQYJYIZI
# AWUDBAIBBQAwggFZBgsqhkiG9w0BCRABBKCCAUgEggFEMIIBQAIBAQYKKwYBBAGE
# WQoDATAxMA0GCWCGSAFlAwQCAQUABCAQ6qa9au1TvR+phgRiAXZhJnM7DnpPTplM
# eiWLApVffAIGaK4AZHijGBIyMDI1MDkwOTE5MjIwOC44MVowBIACAfSggdmkgdYw
# gdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsT
# JE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMe
# blNoaWVsZCBUU1MgRVNOOjM2MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3Nv
# ZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR/jCCBygwggUQoAMCAQICEzMAAAH3WCB1
# BMr7wvQAAQAAAfcwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# UENBIDIwMTAwHhcNMjQwNzI1MTgzMTA2WhcNMjUxMDIyMTgzMTA2WjCB0zELMAkG
# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx
# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEtMCsGA1UECxMkTWljcm9z
# b2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScwJQYDVQQLEx5uU2hpZWxk
# IFRTUyBFU046MzYwNS0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l
# LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQ
# 50dME2ibr+5cpoQo/2s8hORPpDEXXW2PMHQ2TVvIOk+sVMeFreHHBJ1NyvxjRreT
# oRCXCrLpE7PjZ7RHl4Nb50KhBqmKkMgVQ5ineg26rBf/F6kBMSRjXszJcXHqtBbY
# 1xZQlbdCjYC4nQc61uVKki1Bk8aYecaqS38MHjkXDGTpWhK/E1xAqEoROS7Ou3xT
# oNFxxCbUV2GY8qAPOBx8M8zmj4afNuIy7rLTr0DgQeYsyaR5xKRW8GZxnxWfMUdM
# OQYt2mcNXkVeNU5sCBtIzRyephIZ9GntUYcFGrKixy9HhtxD4JX2kONsnpLmtmfW
# 4DyFGGPT0ezfcdF6+3ihYBVgYi2ASwb4GsJhumBYwMQhWcCA9kSI8BojzAEZ6YTh
# 94SS7PtMDCCREFxTMuBDi68+pEPUD4mS3br6kOpZhKfQwDyPTNpxCT2r8C9yI9cP
# 0i3Z7P6aoTOAVFGwkYu1x/0eSy8rwmx3ojnMVKGWqLlunN/Vjg06I06HlDBbWki8
# DmKuVqXuoWGQB555mqainz643FlfEUJAbdHezmldbz0WIKH2uZetWo4LCBxcUglA
# BCSWUqwj5Qmoar2uZEAEnPmUcpMViYXBwznYpZaM3HfPqh3DPaH6zFrF7BOh70aq
# 0PHf9pT7Ko1FwHzDS1JdR/7KU3i6TnEcSkunH5k02wIDAQABo4IBSTCCAUUwHQYD
# VR0OBBYEFN9GpDM/eb09la4t/Wnz+Z4V+SaYMB8GA1UdIwQYMBaAFJ+nFV0AXmJd
# g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El
# MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6
# Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt
# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l
# AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA
# A4ICAQA3RqNp8gt4vpJAgwgwBczVB3rFqhyLaY6ulHy8pbLJOwvdvzcDtcYuIBtD
# FOuqde9VZZ42y3lhAPyxo75ROA4sl1N19QAOEtegr5GXCN+d2KYglP0wf21RhcvM
# lcqFkzT2i4/A2yufxg4sil0CLlM/I3wKXXU4ZlKU/2vwme+iZbTQCgng+X2uWDQb
# mVxCScBeodr2dB1anVnFeo137QmwqaVHy1wA1ffcKUz02doKUkTEtAeIp4dRRa2r
# IsyXrlNbrBEzteUXtj49OcLx241afi4ueD4439nf0Y7qoGPsgRnGirijdq8SH1tr
# jdRTpODNVloGbxVoDTBLBR7+mqlM5gVY3rZcveCX8kLanN8g/E/rpd9EsjFp+MFV
# ebwpUOfZwwv0i9ErTaz3jVjn5FHiBIA6EuJBDoDTdU1G6n6ykxrST5dM8CL7Zowf
# nFrVmNv8ry71/0zTlTT9tQwlckM/77KxakltVEOIcbuzNpxr6vceJQ+NAnJCXY2I
# 5xhMZX8NwussIErbMbnTcUZvTg3kp/XReADAVpeWh3kH14qH3k+dcrHYs0GAvAbz
# lqeWGEbHEFDmYWwkaQGfQ9k+0DNnJ+v3qrHOmnakf0MklyMoIOsyZnOJdrOlrlVU
# 3foI7WQNTgAGRJhNc4zxGYle5CbuZQXdtaaP6GMAlvinPqFPlTCCB3EwggVZoAMC
# AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV
# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w
# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m
# dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy
# NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp
# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw
# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw
# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9
# DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2
# Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N
# 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc
# ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ
# j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk
# lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy
# L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M
# 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX
# pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU
# HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode
# 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA
# ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE
# FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB
# MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE
# AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
# /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug
# SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N
# aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG
# AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv
# b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt
# 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP
# MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++
# Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9
# QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2
# wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR
# AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z
# bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx
# t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3
# Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN
# uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z
# cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNZMIICQQIBATCCAQGhgdmkgdYw
# gdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsT
# JE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMe
# blNoaWVsZCBUU1MgRVNOOjM2MDUtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3Nv
# ZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBvbwoMb/Fds0GO
# Yzv+erDduCsQ5qCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo
# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y
# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw
# MA0GCSqGSIb3DQEBCwUAAgUA7GrylzAiGA8yMDI1MDkwOTE4MzgxNVoYDzIwMjUw
# OTEwMTgzODE1WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDsavKXAgEAMAoCAQAC
# Ag0fAgH/MAcCAQACAhJtMAoCBQDsbEQXAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwG
# CisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQEL
# BQADggEBAJyL9Tz7Wrp9xTtYUGg1Qij7aFq0JYdpDi1TZTgn4go/b1VBywJWKxsH
# ASAraI/y6jbmIlwSYTZlV6xK9cgtjVXWOX1ogXY0d5SssJhXEp5l4kPYNIfaEY3x
# sCvxGFhgG2QFolNeGDtzbocU7H/aGeLuFbnnwKtY3QUuyJbAAOD68IRORrMI62va
# qVh6+JLVHM+TwY7wDObukgcI2b4iTD5HRyXfnjzwgnXPq1NOnesHjSE/MmmgdDDE
# e0xnBsO64sRSp8MvIP0fQaiI3gnLF8ZQVvxPCd0cJPTjb5Qxn6aiIoOVixWVzNlZ
# AX6BSPmvW1l48HiJOoj5CCt2ZzsrTCsxggQNMIIECQIBATCBkzB8MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQg
# VGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAfdYIHUEyvvC9AABAAAB9zANBglghkgB
# ZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3
# DQEJBDEiBCAnz+3s8I1QHXlDGqeUQemCDmXxB5bBmJ/QQ/e4bDLKjjCB+gYLKoZI
# hvcNAQkQAi8xgeowgecwgeQwgb0EICHamNprdxrR5xi6G7rS5gc/8gqc9t51tVAn
# lKggflniMIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0
# b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
# dGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMA
# AAH3WCB1BMr7wvQAAQAAAfcwIgQgv7qFtu/bdq7liBG5dJcyCeB8uKdJD53fqWrC
# xhW28sIwDQYJKoZIhvcNAQELBQAEggIAswN1vMj38dvu5tkP0AhfcIzwZsrD89Je
# qkRacgnXzbBv48tkp0WCZWSdaMxe8a4Kz8xIcw8PPN9L02UTkvhOsa8tQiOLJ+kv
# aVireodoQSaltlFfOGkd7SYC8MXip53Wp/+XeM2tCSYjFEaO3yXXJONh2/0MaUar
# eA/GvgfOF1cP7fc9mLvJlpF/fcWAdupjqiqK3p1oznfmV35z59OIn1sB2ljVaWlT
# oT/RQ+LUayWI4To7jhrOIA99JWwN57kdragfO7lXXZLmfgPAgVyDVAbdtNZSnl02
# tf31eG2uZOFeWmeOI+xwERVlYCtb1DNzGMyP4tFNHfQREcci+thkdmAxU5cXEBFs
# r1s7uG95xZwq0ebfmnzKOxpaaIgv5pDPhDEmtTNNNZfipZ6p2OV/PsDcyio6IFKU
# 3x9MKvfQT40zL2O9sNg3xwDCvMX0wJQt61Hb0QzNyNiGXJG2opOrHJIV21zZHqlZ
# 7QZGaulYR/VgDWDHzupM8fF/n4TQypYvtXXuEusWNr8GHYI5z7QdHhgzFvpXgojj
# cj1dgR42U8gknk5Bn78sUqzUgq36VhP8kq66R043SZVnMeIi9odf9D084mfQshlV
# MBcZ0OOdgOe5T/wEVnRWEzGcvS7ByYv/YNUefDjN3Zbn5Z8DF8SKw4p/rEoa8e6P
# m9WK8VCz0EU=
# SIG # End signature block