Samples/ApplianceConfig_Sample.ps1
############################################################################## # ApplianceConfig_Sample.ps1 # - Example scripts for configuring an HPE OneView appliance (networking, NTP, # etc.). # # VERSION 3.0 # # (C) Copyright 2013-2020 Hewlett Packard Enterprise Development LP ############################################################################## <# Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. #> ############################################################################## [CmdletBinding()] param ( [Parameter (Mandatory, HelpMessage = "Please provide the Appliances DHCP Address.")] [ValidateNotNullorEmpty()] [IPAddress]$vm_ipaddr, [Parameter (Mandatory, HelpMessage = "Please provide the Appliances NEW Hostname or FQDN.")] [String]$Hostname, [Parameter (Mandatory, HelpMessage = "Provide a [SecureString] pr [String] object representing the new appliance Administrator password.")] [ValidateNotNullorEmpty()] [Object]$NewPassword, [Parameter (Mandatory, HelpMessage = "Please provide the Appliances NEW Static IPv4 Address.")] [ValidateNotNullorEmpty()] [IPAddress]$IPv4Address, [Parameter (Mandatory, HelpMessage = "Please provide the Appliances NEW IPv4 Subnet.")] [ValidateNotNullorEmpty()] [String]$IPv4SubnetMask, [Parameter (Mandatory, HelpMessage = "Please provide the Appliances NEW IPv4 Default Gateway.")] [ValidateNotNullorEmpty()] [IPAddress]$IPv4Gateway, [Parameter (Mandatory, HelpMessage = "Please provide the Appliances NEW IPv4 DNS Servers.")] [ValidateNotNullorEmpty()] [Array]$IPv4DnsServers, [Parameter (Mandatory, HelpMessage = "Please provide the Appliances NEW DNS Domain Name.")] [ValidateNotNullorEmpty()] [String]$DnsDomainName, [Parameter (Mandatory = $false, HelpMessage = "Please provide the Appliances NEW IPv4 NTP Servers.")] [ValidateNotNullorEmpty()] [Array]$IPv4NtpServers, [Parameter (Mandatory = $False, HelpMessage = "Please provide the Appliances NEW IPv6 Static Address.")] [ValidateNotNullorEmpty()] [IPAddress]$IPv6Address, [Parameter (Mandatory = $False, HelpMessage = "Please provide the Appliances NEW IPv6 Static Address CIDR Subnet Mask.")] [ValidateNotNullorEmpty()] [Int]$IPv6CidrMask ) if (-not (get-module HPEOneView.530)) { Import-Module POneView.400 } #region Write-Host 'Waiting for appliance to respond to network test.' -NoNewline While (-not (Test-Connection -ComputerName $vm_ipaddr.IPAddressToString -Quiet)) { Write-Host '.' -NoNewline } Write-Host "" #Core Appliance Setup # Accept the EULA if (-not (Get-OVEulaStatus -Appliance $vm_ipaddr.IPAddressToString).Accepted ) { Write-Host "Accepting EULA..." Try { $ret = Set-OVEulaStatus -SupportAccess "yes" -Appliance $vm_ipaddr.IPAddressToString } Catch { $PSCMdlet.ThrowTerminatingError($_) } } # For initial setup, connect first using "default" Administrator credentials: Try { Connect-OVMgmt -appliance $vm_ipaddr.IPAddressToString -user "Administrator" -password "admin" } catch [HPEOneView.Appliance.PasswordChangeRequired] { Write-Host "Set initial password" Try { Set-OVInitialPassword -OldPassword "admin" -NewPassword $NewPassword -Appliance $vm_ipaddr.IPAddressToString } Catch { $PSCMdlet.ThrowTerminatingError($_) } } Catch { $PSCMdlet.ThrowTerminatingError($_) } Write-Host "Reconnect with new password" Try { $ApplianceConnection = Connect-OVMgmt -appliance $vm_ipaddr.IPAddressToString -user Administrator -password $NewPassword } Catch { $PSCMdlet.ThrowTerminatingError($_) } Write-Host "Set appliance networking configuration" $params = @{ Hostname = $Hostname; IPv4Addr = $IPv4Address.IPAddressToString; IPv4Subnet = $IPv4SubnetMask; IPv4Gateway = $IPv4Gateway.IPAddressToString; DomainName = $DnsDomainName; IPv4NameServers = $IPv4DnsServers } if ($IPv6Address) { $params.Add('IPv6Type','STATIC') $params.Add('IPv6Addr', $IPv6Address) $params.Add('IPv6Subnet', $IPv6CidrMask) } Try { $task = Set-OVApplianceNetworkConfig @params } Catch { $PSCMdlet.ThrowTerminatingError($_) } if (-not($Global:ConnectedSessions | ? Name -EQ $Hostname)) { Try { $ApplianceConnection = Connect-OVMgmt -appliance $Hostname -user Administrator -password $NewPassword } Catch { $PSCMdlet.ThrowTerminatingError($_) } } try { Write-Host 'Setting Appliance NTP Servers' $Results = Set-OVApplianceDateTime -NtpServers $IPv4NtpServers } catch { $PSCmdlet.ThrowTerminatingError($_) } Write-Host "Completed appliance networking configuration" $template = "WebServer" # must always use concatenated name format $CA = "MyCA.domain.local\domain-MyCA-CA" $csrdir = "C:\Certs\Requests" if (-not(Test-Path $csrdir)) { New-Item -Path $csrdir -ItemType directory | Out-Null } #Process appliance certificate $CSR = @{ Country = "US"; State = "California"; City = "Palo Alto"; Organization = "Hewlett-Packard"; CommonName = $Hostname; AlternativeName = "$Hostname,hpov,$IPv4Address" } Try { $request = New-OVApplianceCsr @CSR -ApplianceConnection $ApplianceConnection } Catch { $PSCMdlet.ThrowTerminatingError($_) } $baseName = $Hostname $csrFileName = "$Hostname.csr" $cerFileName = "$Hostname.cer" Set-Content -path (Join-Path $csrdir -ChildPath $csrFileName) -value $request.base64Data -Force $csr = Get-ChildItem $csrdir | ? name -eq $csrFileName $parameters = "-config {0} -submit -attrib CertificateTemplate:{1} {2}\{3}.csr {2}\{3}.cer {2}\{3}.p7b" -f $CA, $template, $csrdir, $baseName $request = [System.Diagnostics.Process]::Start("certreq", $parameters) $request.WaitForExit() $Task = gc $csrdir\$cerFileName | Install-OVApplianceCertificate -ApplianceConnection $ApplianceConnection | Wait-OVTaskComplete #Configuring appliance LDAP/AD Security $dc1 = New-OVLdapServer -Name dc1.domain.local $dc2 = New-OVLdapServer -Name dc2.domain.local $AuthParams = @{ UserName = "ftoomey@domain.local" Password = convertto-securestring -asplaintext "HPinv3nt" -force } Try { $LdapAuthDirectory = New-OVLdapDirectory -Name 'domain.local' -AD -BaseDN 'dc=domain,dc=local' -servers $dc1,$dc2 @AuthParams $LdapGroups = $LdapAuthDirectory | Show-OVLdapGroups @AuthParams $InfrastructureAdminGroup = $LdapGroups | ? Name -match 'CI Manager Full' $ServerAdminGroup = $LdapGroups | ? Name -match 'CI Manager Server' $StorageAdminGroup = $LdapGroups | ? Name -match 'CI Manager Storage' $NetworkAdminGroup = $LdapGroups | ? Name -match 'CI Manager Network' New-OVLdapGroup -d $LdapAuthDirectory -GroupName $InfrastructureAdminGroup -Roles "Infrastructure administrator" @AuthParams New-OVLdapGroup -d $LdapAuthDirectory -GroupName $NetworkAdminGroup -Roles "Network administrator" @AuthParams New-OVLdapGroup -d $LdapAuthDirectory -GroupName $ServerAdminGroup -Roles "Server administrator" @AuthParams New-OVLdapGroup -d $LdapAuthDirectory -GroupName $StorageAdminGroup -Roles "Storage administrator" @AuthParams } Catch { $PSCMdlet.ThrowTerminatingError($_) } Try { #Upload custom SPP Baseline gci \\Server\SPP\bp-Default-Baseline-0-1.iso | Add-OVBaseline } Catch { $PSCMdlet.ThrowTerminatingError($_) } Try { write-host "Adding OneView license." New-OVLicense -License '9CDC D9MA H9P9 KHVY V7B5 HWWB Y9JL KMPL FE2H 5BP4 DXAU 2CSM GHTG L762 EG4Z X3VJ KJVT D5KM EFVW DW5J G4QM M6SW 9K2P 3E82 AJYM LURN TZZP AB6X 82Z5 WHEF D9ED 3RUX BJS2 XFXC T84U R42A 58S5 XA2D WXAP GMTQ 4YLB MM2S CZU7 2E4X E8EW BGB5 BWPD CAAR YT9J 4NUG 2NJN J9UF "424710048 HPOV-NFR1 HP_OneView_16_Seat_NFR 64HTAYJH92EY"_3KB73-R2JV9-V9HS6-LYGTN-6RLYW' } Catch { $PSCMdlet.ThrowTerminatingError($_) } # Create the new users New-OVUser Nat -fullName "Nat Network Admin" -password hpinvent -roles "Network administrator" New-OVUser Sally -fullName "Sally Server Admin" -password hpinvent -roles "Server administrator" New-OVUser Sandy -fullName "Sandy SAN Admin" -password hpinvent -roles "Storage administrator" New-OVUser Rheid -fullName "Rheid Read-Only" -password hpinvent -roles "Read only" New-OVUser Bob -fullName "Bob Backup" -password hpinvent -roles "Backup administrator" New-OVUser admin -fullName "admin" -password hpinvent -roles "Infrastructure administrator" #endregion #region #Resource Configuration $params = @{ hostname = "172.18.15.1"; type = "BNA"; username = "administrator"; password = "password"; UseSsl = $True } write-host "Importing BNA SAN Manager" Try { Add-OVSanManager @params | Wait-OVTaskComplete } Catch { $PSCMdlet.ThrowTerminatingError($_) } Write-Host "Creating network resources" # Management networks Try { New-OVNetwork -Name "VLAN 1-A" -type "Ethernet" -vlanId 1 -smartlink $true -purpose Management New-OVNetwork -Name "VLAN 1-B" -type "Ethernet" -vlanId 1 -smartlink $true -purpose Management # Internal Networks New-OVNetwork -Name "Live Migration" -type "Ethernet" -vlanId 100 -smartlink $true -purpose VMMigration New-OVNetwork -Name "Heartbeat" -type "Ethernet" -vlanId 101 -smartlink $true -purpose Management New-OVNetwork -Name "iSCSI Network" -type "Ethernet" -vlanId 3000 -smartlink $true -purpose ISCSI # VM Networks 10,20,30,40,50 | % { New-OVNetwork -Name "VLAN $_-A" -type "Ethernet" -vlanId $_ -smartlink $true -purpose General } 10,20,30,40,50 | % { New-OVNetwork -Name "VLAN $_-B" -type "Ethernet" -vlanId $_ -smartlink $true -purpose General } 101,102,103,104,105 | % { New-OVNetwork -Name "Dev VLAN $_-A" -type "Ethernet" -vlanId $_ -smartlink $true -purpose General } 101,102,103,104,105 | % { New-OVNetwork -Name "Dev VLAN $_-B" -type "Ethernet" -vlanId $_ -smartlink $true -purpose General } #Misc networks New-OVNetwork -Name "My Vlan 501" -type "Ethernet" -vlanId 3000 -smartlink $true -purpose General $ProdNetsA = Get-OVNetwork -Name "VLAN *0-A" -ErrorAction Stop $ProdNetsB = Get-OVNetwork -Name "VLAN *0-B" -ErrorAction Stop $DevNetsA = Get-OVNetwork -Name "Dev VLAN *-A" -ErrorAction Stop $DevNetsB = Get-OVNetwork -Name "Dev VLAN *-B" -ErrorAction Stop $InternalNetworks = 'Live Migration','Heartbeat' | % { Get-OVNetwork -Name $_ -ErrorAction Stop } # Create the network sets New-OVNetworkSet -Name "Prod NetSet1 A" -networks $ProdNetsA -untaggedNetwork $ProdNetsA[0] -typicalBandwidth 2500 -maximumBandwidth 10000 New-OVNetworkSet -Name "Prod NetSet1 B" -networks $ProdNetsB -untaggedNetwork $ProdNetsB[0] -typicalBandwidth 2500 -maximumBandwidth 10000 New-OVNetworkSet -Name "Dev Networks A" -networks $DevNetsA -untaggedNetwork $DevNetsA[0] -typicalBandwidth 2500 -maximumBandwidth 10000 New-OVNetworkSet -Name "Dev Networks B" -networks $DevNetsB -untaggedNetwork $DevNetsB[0] -typicalBandwidth 2500 -maximumBandwidth 10000 # Create the FC networks: New-OVNetwork -Name "Fabric A" -type "FibreChannel" -typicalBandwidth 4000 -autoLoginRedistribution $true -managedSan "SAN1_0" New-OVNetwork -Name "Fabric B" -type "FibreChannel" -typicalBandwidth 4000 -autoLoginRedistribution $true -managedSan "SAN1_1" New-OVNetwork -Name "DirectAttach A" -type "FibreChannel" -typicalBandwidth 4000 -autoLoginRedistribution $true -fabricType DirectAttach New-OVNetwork -Name "DirectAttach B" -type "FibreChannel" -typicalBandwidth 4000 -autoLoginRedistribution $true -fabricType DirectAttach } Catch { $PSCMdlet.ThrowTerminatingError($_) } Try { $LigName = "Default VC FF LIG" $Bays = @{ 1 = 'Flex2040f8'; 2 = 'Flex2040f8'} $SnmpDest1 = New-OVSnmpTrapDestination -Destination mysnmpserver.domain.local -Community MyR3adcommun1ty -SnmpFormat SNMPv1 -TrapSeverities critical,warning $SnmpDest2 = New-OVSnmpTrapDestination -Destination 10.44.120.9 -Community MyR3adcommun1ty -SnmpFormat SNMPv1 -TrapSeverities critical,warning -VCMTrapCategories legacy -EnetTrapCategories Other,PortStatus,PortThresholds -FCTrapCategories Other,PortStatus $SnmpConfig = New-OVSnmpConfiguration -ReadCommunity MyR3adC0mmun1ty -AccessList '10.44.120.9/32','172.20.148.0/22' -TrapDestinations $SnmpDest1,$SnmpDest2 $CreatedLig = New-OVLogicalInterconnectGroup -Name $LigName -Bays $Bays -Snmp $SnmpConfig -EnableIgmpSnooping $True -InternalNetworks $InternalNetworks | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup # Get FC Network Objects $FabricA = Get-OVNetwork -Name "Fabric A" -ErrorAction Stop $FabricB = Get-OVNetwork -Name "Fabric B" -ErrorAction Stop $DAFabricA = Get-OVNetwork -Name "DirectAttach A" -ErrorAction Stop $DAFabricB = Get-OVNetwork -Name "DirectAttach B" -ErrorAction Stop # Create Ethernet Uplink Sets $CreatedLig = $CreatedLig | New-OVUplinkSet -Name "Uplink Set 1" -Type "Ethernet" -Networks $ProdNetsA -nativeEthNetwork $ProdNetsA[0] -UplinkPorts "BAY1:X1","BAY1:X2" -EthMode "Auto" | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup -ErrorAction Stop $CreatedLig = $CreatedLig | New-OVUplinkSet -Name "Uplink Set 2" -Type "Ethernet" -Networks $ProdNetsB -nativeEthNetwork $ProdNetsB[0] -UplinkPorts "BAY2:X1","BAY2:X2" -EthMode "Auto" | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup -ErrorAction Stop # FC Uplink Sets $CreatedLig = $CreatedLig | New-OVUplinkSet -Name "FC Fabric A" -Type "FibreChannel" -Networks $FabricA -UplinkPorts "BAY1:X7" | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup -ErrorAction Stop $CreatedLig = $CreatedLig | New-OVUplinkSet -Name "FC Fabric B" -Type "FibreChannel" -Networks $FabricB -UplinkPorts "BAY2:X7" | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup -ErrorAction Stop $CreatedLig = $CreatedLig | New-OVUplinkSet -Name "DA Fabric A" -Type "FibreChannel" -Networks $DAFabricA -UplinkPorts "BAY1:X3",'BAY1:X4' | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup -ErrorAction Stop $CreatedLig = $CreatedLig | New-OVUplinkSet -Name "DA Fabric B" -Type "FibreChannel" -Networks $DAFabricB -UplinkPorts "BAY2:X3",'BAY2:X4' | Wait-OVTaskComplete | Get-OVLogicalInterconnectGroup -ErrorAction Stop } Catch { $PSCMdlet.ParameterSetName $PSCMdlet.ThrowTerminatingError($_) } Try { $EGParams = @{ Name = "Default EG 1" LogicalInterConnectGroup = $CreatedLig ConfigurationScript = 'ADD USER "admin" "Supersecretpassword" SET USER CONTACT "admin" "" SET USER FULLNAME "admin" "" SET USER ACCESS "admin" ADMINISTRATOR ASSIGN SERVER 1-16 "admin" ASSIGN INTERCONNECT 1-8 "admin" ASSIGN OA "admin" ENABLE USER "admin" hponcfg all >> end_marker <RIBCL VERSION="2.0"> <LOGIN USER_LOGIN="admin" PASSWORD="passthrough"> <USER_INFO MODE="write"> <ADD_USER USER_NAME="admin" USER_LOGIN="admin" PASSWORD="Supersecretpassword"> <ADMIN_PRIV value ="N"/> <REMOTE_CONS_PRIV value ="Y"/> <RESET_SERVER_PRIV value ="N"/> <VIRTUAL_MEDIA_PRIV value ="N"/> <CONFIG_ILO_PRIV value="Yes"/> </ADD_USER> </USER_INFO> </LOGIN> </RIBCL> end_marker' } $EnclosureGroup = New-OVEnclosureGroup @EGParams } Catch { $PSCMdlet.ThrowTerminatingError($_) } Write-host "Sleeping 30 seconds" start-sleep -Seconds 30 $params = @{ username = "3paradm"; password = "3pardata"; hostname = "172.18.11.11"; domain = "NO DOMAIN" } Write-Host "Importing storage array: $($params.hostname)" Try { $Results = Add-OVStorageSystem @params | Wait-OVTaskComplete $Results = Get-OVStorageSystem -ErrorAction Stop | Add-OVStoragePool -Pool 'FST_CPG1','FST_CPG2' | Wait-OVTaskComplete $StorageVolume = Get-OVStoragePool -Pool 'FST_CPG1' -ErrorAction Stop | New-OVStorageVolume -Name 'DO NOT DELETE' -Capacity 1 } Catch { $PSCMdlet.ThrowTerminatingError($_) } #Add Encl1 Try { $EnclosureAddParams = @{ Hostname = '172.18.1.11'; Username = 'administrator'; Password = 'password'; EnclosureGroup = $EnclosureGroup } $Results = Add-OVEnclosure @EnclosureAddParams } Catch { $PSCMdlet.ThrowTerminatingError($_) } Disconnect-OVMgmt Remove-Module HPEOneView.530 #endregion # SIG # Begin signature block # MIIilAYJKoZIhvcNAQcCoIIihTCCIoECAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCB4mPVrhRw4FnW2 # soFG1DL62sr813zT5lKOBun3KYeWb6CCEOMwggVhMIIESaADAgECAhB2TE55PkNI # O10XEYNqkr0BMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAkdCMRswGQYDVQQI # ExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoT # D1NlY3RpZ28gTGltaXRlZDEkMCIGA1UEAxMbU2VjdGlnbyBSU0EgQ29kZSBTaWdu # aW5nIENBMB4XDTIwMDEyOTAwMDAwMFoXDTIxMDEyODIzNTk1OVowgdIxCzAJBgNV # BAYTAlVTMQ4wDAYDVQQRDAU5NDMwNDELMAkGA1UECAwCQ0ExEjAQBgNVBAcMCVBh # bG8gQWx0bzEcMBoGA1UECQwTMzAwMCBIYW5vdmVyIFN0cmVldDErMCkGA1UECgwi # SGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2UgQ29tcGFueTEaMBgGA1UECwwRSFAg # Q3liZXIgU2VjdXJpdHkxKzApBgNVBAMMIkhld2xldHQgUGFja2FyZCBFbnRlcnBy # aXNlIENvbXBhbnkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRDPh # KKeABVHX3uR8gbgwJRObEp72PUbtdRaTIiZfmgrd6zGNv4Jm/Y7NaAbJU4zqBVgE # jxheJu7zMlsqOwCtPmocdi9MNIbY/pkFJ7DxM3kLejDGB1u0cHaDUL0EiyzDTzIC # 7XtsIGw/BOLrRjqKsDGRNytiaNSt//acldDLq2z1CZmAYMQfkvJ0yjGARFTGb2Ti # tXrIu7nXjU8KrBrEyyUVDPS8w3MMhTq+ot/XjCl9TF0akN4foJm5AVS9ByKSpiae # RUY94wRMMiBBkbmZ2tLUs3Dq1u4eOyGXCBRgnOdymrn13JTTV4FOcWh7VisEG68x # 2BSyrS/HGsDCYQYbAgMBAAGjggGGMIIBgjAfBgNVHSMEGDAWgBQO4TqoUzox1Yq+ # wbutZxoDha00DjAdBgNVHQ4EFgQUh4Yh6Id9YrSze2lDYQHnUSpKqUYwDgYDVR0P # AQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwMwEQYJ # YIZIAYb4QgEBBAQDAgQQMEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQMCMCUwIwYI # KwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMEMGA1UdHwQ8MDowOKA2 # oDSGMmh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQUNvZGVTaWduaW5n # Q0EuY3JsMHMGCCsGAQUFBwEBBGcwZTA+BggrBgEFBQcwAoYyaHR0cDovL2NydC5z # ZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ29kZVNpZ25pbmdDQS5jcnQwIwYIKwYBBQUH # MAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBCwUAA4IBAQAv # 2YEjwnu/UrMtMhKcSzUuwDgDoMyK8X40qdzOHED1jq1o7AUkz3fVI1BvT6xQdfRU # yk1v+EkfM3LXsgc+U3sXt0U0BuDWyXfa1LgcU3DGnDk26R1EZyGQ4/rtrIh6nf/p # JMmd+Exowu1qvObVgJi6miAXS58T4Pq5Pptn7E4t2gwXfkSdNVgwiSYZEAo/nlj5 # W3SgUF7FsBRpQH9fvQFvRjXeKFYjYiXCnOQd2rmwtKj51++Fmpn+5bqUoeltHrSG # Wqw8ACgj1ZsC0QfxoIT6Cu29N3Kf/Odgk/Gm0f5zVdPUGGUFpPbRaT8OyMF8hx9G # sN6uUOLceuLXLZq6CIJmMIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTAN # BgkqhkiG9w0BAQwFADB7MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBN # YW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0Eg # TGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5 # MDMxMjAwMDAwMFoXDTI4MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMV # VGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENl # cnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC # CgKCAgEAgBJlFzYOw9sIs9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbP # wdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJ # GLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc # /xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy2 # 9lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLD # U+/bqv50TmnHa4xgk97Exwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H # +nND5X4OpWaxKXwyhGNVicQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJ # k2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e # 5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eH # nlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clX # hB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB # 7zAfBgNVHSMEGDAWgBSgEQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/ # WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMB # Af8wEQYDVR0gBAowCDAGBgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9j # cmwuY29tb2RvY2EuY29tL0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsG # AQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29t # MA0GCSqGSIb3DQEBDAUAA4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WO # nnL+5Nb+qh+cli3vA0p+rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M30 # 9z/+3ri0ivCRlv79Q2R+/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3J # MrO66BQavHHxW/BBC5gACiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LE # ApE9GQDTF1w52z97GA1FzZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RH # fxBdiSprhTEUxOipakyAvGp4z7h/jnZymQyd/teRCBaho1+VMIIF9TCCA92gAwIB # AgIQHaJIMG+bJhjQguCWfTPTajANBgkqhkiG9w0BAQwFADCBiDELMAkGA1UEBhMC # VVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4w # HAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVz # dCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTgxMTAyMDAwMDAwWhcN # MzAxMjMxMjM1OTU5WjB8MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBN # YW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExp # bWl0ZWQxJDAiBgNVBAMTG1NlY3RpZ28gUlNBIENvZGUgU2lnbmluZyBDQTCCASIw # DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIYijTKFehifSfCWL2MIHi3cfJ8U # z+MmtiVmKUCGVEZ0MWLFEO2yhyemmcuVMMBW9aR1xqkOUGKlUZEQauBLYq798PgY # rKf/7i4zIPoMGYmobHutAMNhodxpZW0fbieW15dRhqb0J+V8aouVHltg1X7XFpKc # AC9o95ftanK+ODtj3o+/bkxBXRIgCFnoOc2P0tbPBrRXBbZOoT5Xax+YvMRi1hsL # jcdmG0qfnYHEckC14l/vC0X/o84Xpi1VsLewvFRqnbyNVlPG8Lp5UEks9wO5/i9l # NfIi6iwHr0bZ+UYc3Ix8cSjz/qfGFN1VkW6KEQ3fBiSVfQ+noXw62oY1YdMCAwEA # AaOCAWQwggFgMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud # DgQWBBQO4TqoUzox1Yq+wbutZxoDha00DjAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0T # AQH/BAgwBgEB/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAwYIKwYBBQUHAwgwEQYD # VR0gBAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNl # cnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNy # bDB2BggrBgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRy # dXN0LmNvbS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZ # aHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEATWNQ # 7Uc0SmGk295qKoyb8QAAHh1iezrXMsL2s+Bjs/thAIiaG20QBwRPvrjqiXgi6w9G # 7PNGXkBGiRL0C3danCpBOvzW9Ovn9xWVM8Ohgyi33i/klPeFM4MtSkBIv5rCT0qx # jyT0s4E307dksKYjalloUkJf/wTr4XRleQj1qZPea3FAmZa6ePG5yOLDCBaxq2Na # yBWAbXReSnV+pbjDbLXP30p5h1zHQE1jNfYw08+1Cg4LBH+gS667o6XQhACTPlNd # NKUANWlsvp8gJRANGftQkGG+OY96jk32nw4e/gdREmaDJhlIlc5KycF/8zoFm/lv # 34h/wCOe0h5DekUxwZxNqfBZslkZ6GqNKQQCd3xLS81wvjqyVVp4Pry7bwMQJXcV # NIr5NsxDkuS6T/FikyglVyn7URnHoSVAaoRXxrKdsbwcCtp8Z359LukoTBh+xHsx # QXGaSynsCz1XUNLK3f2eBVHlRHjdAd6xdZgNVCT98E7j4viDvXK6yz067vBeF5Jo # bchh+abxKgoLpbn0nu6YMgWFnuv5gynTxix9vTp3Los3QqBqgu07SqqUEKThDfgX # xbZaeTMYkuO1dfih6Y4KJR7kHvGfWocj/5+kUZ77OYARzdu1xKeogG/lU9Tg46LC # 0lsa+jImLWpXcBw8pFguo/NbSwfcMlnzh6cabVgxghEHMIIRAwIBATCBkDB8MQsw # CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQH # EwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxJDAiBgNVBAMTG1Nl # Y3RpZ28gUlNBIENvZGUgU2lnbmluZyBDQQIQdkxOeT5DSDtdFxGDapK9ATANBglg # hkgBZQMEAgEFAKB8MBAGCisGAQQBgjcCAQwxAjAAMBkGCSqGSIb3DQEJAzEMBgor # BgEEAYI3AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3 # DQEJBDEiBCBjVUyU4gGavvibJpfbtXN61WdlLKaV14qRzcIVNXRFqzANBgkqhkiG # 9w0BAQEFAASCAQCRj8MD2GMuuLklmSWeTPu3eTuN6GL9uiOs/xJpWFWnYbMAn8de # hqWrl4duVluikUVf+GPIKjk8VHhEnZHYPNjwclcEIvTvAPQxZQI6REvBgttHuncy # Zid7CdK+u+YvwrWXcJJyxgBa6MMOSRxJmzDGtdPzKTETZD0B66IvE0fPW/T9DtXz # uJN+GSscpog7BVAaZcPcwmw25Lo6hCgB31kgYhvDbZlDr4vd0Xk2NNRUFi4wpSij # juPz0o3YI7cHAM12fY08OQXbB/lbTyZFnpLHyYyYYA9Vh23GZgoB4/0GNwZk9vlX # xrWRyd2hZVMPatOmaFvYhPlX3mrKCAjJOFI9oYIOyTCCDsUGCisGAQQBgjcDAwEx # gg61MIIOsQYJKoZIhvcNAQcCoIIOojCCDp4CAQMxDzANBglghkgBZQMEAgEFADB4 # BgsqhkiG9w0BCRABBKBpBGcwZQIBAQYJYIZIAYb9bAcBMDEwDQYJYIZIAWUDBAIB # BQAEIC8rIkMqTWEGB0/bZ33lBYvtxowF88uxUro82Yqm+TXIAhEA3cJ3m87UEvwO # 8g23vaesDBgPMjAyMDA4MTgyMDE0MTlaoIILuzCCBoIwggVqoAMCAQICEATNP4Vo # rnbGG7D+cWDMp20wDQYJKoZIhvcNAQELBQAwcjELMAkGA1UEBhMCVVMxFTATBgNV # BAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTExMC8G # A1UEAxMoRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElEIFRpbWVzdGFtcGluZyBDQTAe # Fw0xOTEwMDEwMDAwMDBaFw0zMDEwMTcwMDAwMDBaMEwxCzAJBgNVBAYTAlVTMRcw # FQYDVQQKEw5EaWdpQ2VydCwgSW5jLjEkMCIGA1UEAxMbVElNRVNUQU1QLVNIQTI1 # Ni0yMDE5LTEwLTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WQ1 # nPqpmGVkG+QX3LgpNsxnCViFTTDgyf/lOzwRKFCvBzHiXQkYwvaJjGkIBCPgdy2d # FeW46KFqjv/UrtJ6Fu/4QbUdOXXBzy+nrEV+lG2sAwGZPGI+fnr9RZcxtPq32UI+ # p1Wb31pPWAKoMmkiE76Lgi3GmKtrm7TJ8mURDHQNsvAIlnTE6LJIoqEUpfj64Ylw # RDuN7/uk9MO5vRQs6wwoJyWAqxBLFhJgC2kijE7NxtWyZVkh4HwsEo1wDo+KyuDT # 17M5d1DQQiwues6cZ3o4d1RA/0+VBCDU68jOhxQI/h2A3dDnK3jqvx9wxu5CFlM2 # RZtTGUlinXoCm5UUowIDAQABo4IDODCCAzQwDgYDVR0PAQH/BAQDAgeAMAwGA1Ud # EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwggG/BgNVHSAEggG2MIIB # sjCCAaEGCWCGSAGG/WwHATCCAZIwKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp # Z2ljZXJ0LmNvbS9DUFMwggFkBggrBgEFBQcCAjCCAVYeggFSAEEAbgB5ACAAdQBz # AGUAIABvAGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYAaQBjAGEAdABlACAAYwBv # AG4AcwB0AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQAYQBuAGMAZQAgAG8AZgAg # AHQAaABlACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMAIABhAG4AZAAg # AHQAaABlACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwByAGUAZQBt # AGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0 # AHkAIABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABo # AGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wCwYJYIZIAYb9 # bAMVMB8GA1UdIwQYMBaAFPS24SAd/imu0uRhpbKiJbLIFzVuMB0GA1UdDgQWBBRW # Uw/BxgenTdfYbldygFBM5OyewTBxBgNVHR8EajBoMDKgMKAuhixodHRwOi8vY3Js # My5kaWdpY2VydC5jb20vc2hhMi1hc3N1cmVkLXRzLmNybDAyoDCgLoYsaHR0cDov # L2NybDQuZGlnaWNlcnQuY29tL3NoYTItYXNzdXJlZC10cy5jcmwwgYUGCCsGAQUF # BwEBBHkwdzAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME8G # CCsGAQUFBzAChkNodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRT # SEEyQXNzdXJlZElEVGltZXN0YW1waW5nQ0EuY3J0MA0GCSqGSIb3DQEBCwUAA4IB # AQAug6FEBUoE47kyUvrZgfAau/gJjSO5PdiSoeZGHEovbno8Y243F6Mav1gjskOc # lINOOQmwLOjH4eLM7ct5a87eIwFH7ZVUgeCAexKxrwKGqTpzav74n8GN0SGM5CmC # w4oLYAACnR9HxJ+0CmhTf1oQpvgi5vhTkjFf2IKDLW0TQq6DwRBOpCT0R5zeDyJy # d1x/T+k5mCtXkkTX726T2UPHBDNjUTdWnkcEEcOjWFQh2OKOVtdJP1f8Cp8jXnv0 # lI3dnRq733oqptJFplUMj/ZMivKWz4lG3DGykZCjXzMwYFX1/GswrKHt5EdOM55n # aii1TcLtW5eC+MupCGxTCbT3MIIFMTCCBBmgAwIBAgIQCqEl1tYyG35B5AXaNpfC # FTANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNl # cnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdp # Q2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMTYwMTA3MTIwMDAwWhcNMzEwMTA3 # MTIwMDAwWjByMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw # FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEy # IEFzc3VyZWQgSUQgVGltZXN0YW1waW5nIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC # AQ8AMIIBCgKCAQEAvdAy7kvNj3/dqbqCmcU5VChXtiNKxA4HRTNREH3Q+X1NaH7n # tqD0jbOI5Je/YyGQmL8TvFfTw+F+CNZqFAA49y4eO+7MpvYyWf5fZT/gm+vjRkcG # GlV+Cyd+wKL1oODeIj8O/36V+/OjuiI+GKwR5PCZA207hXwJ0+5dyJoLVOOoCXFr # 4M8iEA91z3FyTgqt30A6XLdR4aF5FMZNJCMwXbzsPGBqrC8HzP3w6kfZiFBe/WZu # VmEnKYmEUeaC50ZQ/ZQqLKfkdT66mA+Ef58xFNat1fJky3seBdCEGXIX8RcG7z3N # 1k3vBkL9olMqT4UdxB08r8/arBD13ays6Vb/kwIDAQABo4IBzjCCAcowHQYDVR0O # BBYEFPS24SAd/imu0uRhpbKiJbLIFzVuMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1R # i6enIZ3zbcgPMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgGGMBMG # A1UdJQQMMAoGCCsGAQUFBwMIMHkGCCsGAQUFBwEBBG0wazAkBggrBgEFBQcwAYYY # aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEMGCCsGAQUFBzAChjdodHRwOi8vY2Fj # ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MIGB # BgNVHR8EejB4MDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNl # cnRBc3N1cmVkSURSb290Q0EuY3JsMDqgOKA2hjRodHRwOi8vY3JsMy5kaWdpY2Vy # dC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMFAGA1UdIARJMEcwOAYK # YIZIAYb9bAACBDAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j # b20vQ1BTMAsGCWCGSAGG/WwHATANBgkqhkiG9w0BAQsFAAOCAQEAcZUS6VGHVmnN # 793afKpjerN4zwY3QITvS4S/ys8DAv3Fp8MOIEIsr3fzKx8MIVoqtwU0HWqumfgn # oma/Capg33akOpMP+LLR2HwZYuhegiUexLoceywh4tZbLBQ1QwRostt1AuByx5jW # PGTlH0gQGF+JOGFNYkYkh2OMkVIsrymJ5Xgf1gsUpYDXEkdws3XVk4WTfraSZ/tT # YYmo9WuWwPRYaQ18yAGxuSh1t5ljhSKMYcp5lH5Z/IwP42+1ASa2bKXuh1Eh5Fhg # m7oMLSttosR+u8QlK0cCCHxJrhO24XxCQijGGFbPQTS2Zl22dHv1VjMiLyI2skui # SpXY9aaOUjGCAk0wggJJAgEBMIGGMHIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxE # aWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xMTAvBgNVBAMT # KERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBUaW1lc3RhbXBpbmcgQ0ECEATNP4Vo # rnbGG7D+cWDMp20wDQYJYIZIAWUDBAIBBQCggZgwGgYJKoZIhvcNAQkDMQ0GCyqG # SIb3DQEJEAEEMBwGCSqGSIb3DQEJBTEPFw0yMDA4MTgyMDE0MTlaMCsGCyqGSIb3 # DQEJEAIMMRwwGjAYMBYEFAMlvVBe2pYwLcIvT6AeTCi+KDTFMC8GCSqGSIb3DQEJ # BDEiBCA8h2XDAR5a0u0qUaggNqzq6Zm20VX5yzZtVsNW4L++MzANBgkqhkiG9w0B # AQEFAASCAQAkq5E+S+3KY7QDvWi7M6rqz3DFN0NimFyCyb8PhyhQYGh/rX62S6+f # V/yL+XD0jasI2RxOPWwco5KUvbY8JOBmtf9yt8AWzC4iTE/yBblncamdxUyf8ur3 # DbRwS0D7JpG741mq4z7meaPJYGtoW/aYXhpq/5fq6l6gMq4oDXA6FENJEtlR2Ztu # Fcrcj65LkIf9PGl2zeoA/1aBB16ZX3qaPBYKRmujOjpiuqx5I2p9XZCgU55b4iZw # W6ohrh7Yhng9+qIhKVFdkKlpca00P7nUcYyIxh+VCekRcpyZvHlmNfAUWgR7dIFi # Ovj/dFYdq87M/T/w2+3yS01bhTTtv5aB # SIG # End signature block |