Microsoft.AzLocal.CSSTools

1.2605.27.145

packages/SdnDiagnostics.4.2604.29.191/modules/SdnDiag.Health.Config.psd1

                                # Copyright='© Microsoft Corporation. All rights reserved.'

# Licensed under the MIT License.

@{

    HealthValidations = @{

        # COMMON TESTS

        'Test-SdnDiagnosticsCleanupTaskEnabled' = @{

            FriendlyName = "SDN Diagnostics Task Enabled"

            Description = "Ensure that scheduled task is enabled to automatically clean up and prune diagnostic log files."

            Impact = "Unconstrained log files may grow and consume disk space."

            PublicDocUrl = ""

        }

        'Test-SdnNetworkControllerApiNameResolution' = @{

            FriendlyName = "Network Controller API Name Resolution"

            Description = "Ensure that the Network Controller URL is resolvable."

            Impact = "Calls to Network Controller API will fail resulting in policy configuration failures and unable to manage SDN resources."

            PublicDocUrl = ""

        }

        'Test-SdnNonSelfSignedCertificateInTrustedRootStore' = @{

            FriendlyName = "Non-Self-Signed Certificate in Trusted Root Store"

            Description = "Ensure that only trusted root certificates exist in the host Trusted Root CA store."

            Impact = "Network Controller will have issues communicating to hosts resulting in policy configuration failures."

            PublicDocUrl = "https://learn.microsoft.com/en-us/troubleshoot/developer/webapps/iis/site-behavior-performance/http-403-forbidden-access-website#cause-2-non-self-signed-certificates-are-in-trusted-root-certification-authorities-certificate-store"

        }

        'Test-SdnServiceState' = @{

            FriendlyName = "SDN Service State"

            Description = "Ensure that required services are running on the SDN infrastructure node(s)."

            Impact = "SDN services and functionality will be impacted without the service running."

            PublicDocUrl = ""

        }

        'Test-SdnCertificateExpired' = @{

            FriendlyName = "SDN Certificate Expired"

            Description = "Ensure that SDN infrastructure node certificates are valid and not expired."

            Impact = "Network Controller may have issues communicating and programming policies to SDN infrastructure nodes resulting in impact to workloads and services."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure/azure-local/manage/update-sdn-infrastructure-certificates"

        }

        'Test-SdnCertificateMultiple' = @{

            FriendlyName = "SDN Certificate Multiple"

            Description = "Ensure that only one certificate with the same subject name and NetworkController OID exists in the SDN infrastructure node certificate store."

            Impact = "Network Controller may have issues communicating and programming policies to SDN infrastructure nodes resulting in impact to workloads and services."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure/azure-local/manage/update-sdn-infrastructure-certificates"

        }

        # GATEWAY TESTS

        'Test-SdnAdapterPerformanceSetting' = @{

            FriendlyName = "SDN Adapter Performance Setting"

            Description = "Ensure that network adapter performance settings are configured as recommended on the SDN node(s)."

            Impact = "You may not achieve optimal performance for network traffic flowing through the SDN Node(s)."

            PublicDocUrl = ""

        }

        # LOAD BALANCER MUX TESTS

        'Test-SdnMuxConnectionStateToRouter' = @{

            FriendlyName = "SDN Mux Connection State to Router"

            Description = "Ensure that each Load Balancer Mux has an active BGP connection to the switch over TCP port 179."

            Impact = "Public IP addresses may not be routable as Load Balancer Muxes are not advertising the public IP addresses to the switch."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-software-load-balancer"

        }

        'Test-SdnMuxConnectionStateToSlbManager' = @{

            FriendlyName = "SDN Mux Connection State to SLB Manager"

            Description = "Ensure that SLB Manager connectivity to Mux(es) over TCP port 8560 is established."

            Impact = "SLB Manager will not be able to program VIP:DIP mappings to the Load Balancer Mux(es) which will impact routing of Virtual IPs."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-software-load-balancer"

        }

        # NETWORK CONTROLLER TESTS

        'Test-SdnNetworkControllerNodeRestInterface' = @{

            FriendlyName = "Network Controller Node REST Interface"

            Description = "Ensure that Network Controller node(s) have the required network adapter for the REST interface."

            Impact = "Failover of the NB API will not occur if the Network Controller node(s) are missing the Network Adapter that is required for the REST interface."

            PublicDocUrl = "https://learn.microsoft.com/en-us/powershell/module/networkcontroller/set-networkcontrollernode"

        }

        'Test-SdnServiceFabricApplicationHealth' = @{

            FriendlyName = "Network Controller Service Fabric Application Health"

            Description = "Ensure that the Network Controller Service Fabric application is healthy."

            Impact = "Network Controller services and functionality may be impacted."

            PublicDocUrl = ""

        }

        'Test-SdnServiceFabricClusterHealth' = @{

            FriendlyName = "Network Controller Service Fabric Cluster Health"

            Description = "Ensure that the Service Fabric cluster for Network Controller is healthy."

            Impact = "Network Controller services and functionality may be impacted."

            PublicDocUrl = ""

        }

        'Test-SdnServiceFabricNodeStatus' = @{

            FriendlyName = "Network Controller Service Fabric Node Status"

            Description = "Ensure that Service Fabric node(s) are online and participating in the cluster."

            Impact = "Minimum amount of nodes are required to maintain quorum and cluster availability. Services will be in read-only state if quorum is lost and may result in data loss."

            PublicDocUrl = "https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-disaster-recovery"

        }

        'Test-SdnResourceConfigurationState' = @{

            FriendlyName = "SDN Resource Configuration State"

            Description = "Ensure that infrastructure resources report configuration state as Success."

            Impact = "SDN services and functionality may be impacted."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#hoster-validate-system-health"

        }

        'Test-SdnResourceProvisioningState' = @{

            FriendlyName = "SDN Resource Provisioning State"

            Description = "Ensure that infrastructure resources report provisioning state as Succeeded."

            Impact = "SDN services and functionality may be impacted."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#hoster-validate-system-health"

        }

        'Test-NetworkInterfaceAPIDuplicateMacAddress' = @{

            FriendlyName = "Network Interface API Duplicate MAC Address"

            Description = "Ensure that MAC addresses are unique for network interfaces in the API."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host. Network Interfaces reporting configurationState failure will not be routable."

            PublicDocUrl = ""

        }

        # SERVER TESTS

        'Test-SdnEncapOverhead' = @{

            FriendlyName = "SDN Encap Overhead"

            Description = "Ensure that EncapOverhead and JumboPacket values are configured correctly on Hyper-V hosts."

            Impact = "Intermittent packet loss may occur under certain conditions when routing traffic within the logical network."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#check-mtu-and-jumbo-frame-support-on-hnv-provider-logical-network"

        }

        'Test-SdnHostAgentConnectionStateToApiService' = @{

            FriendlyName = "SDN Host Agent Connection State to API Service"

            Description = "Ensure that the Network Controller Host Agent is connected to the Network Controller API service."

            Impact = "Policy configuration may not be pushed to the Hyper-V host(s) if no southbound connectivity is available."

            PublicDocUrl = ""

        }

        'Test-SdnProviderNetwork' = @{

            FriendlyName = "SDN Provider Network"

            Description = "Ensure that the logical network supports VXLAN or NVGRE encapsulated traffic."

            Impact = "Intermittent packet loss may occur under certain conditions when routing traffic within the logical network."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#check-mtu-and-jumbo-frame-support-on-hnv-provider-logical-network"

        }

        'Test-VfpDuplicateMacAddress' = @{

            FriendlyName = "VFP Duplicate MAC Address"

            Description = "Ensure that MAC addresses are unique within Virtual Filtering Platform (VFP)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host. In addition, network traffic may be impacted."

            PublicDocUrl = ""

        }

        'Test-SdnVfpEnabledVMSwitch' = @{

            FriendlyName = "SDN VFP Enabled VMSwitch"

            Description = "Ensure that at least one VMSwitch with VFP enabled is present on Hyper-V host(s)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host."

            PublicDocUrl = ""

        }

        'Test-SdnVfpEnabledVMSwitchMultiple' = @{

            FriendlyName = "SDN VFP Enabled VMSwitch Multiple"

            Description = "Ensure that only one VFP-enabled virtual switch is present on Hyper-V host(s)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host."

            PublicDocUrl = ""

        }

        'Test-VMNetAdapterDuplicateMacAddress' = @{

            FriendlyName = "VM Network Adapter Duplicate MAC Address"

            Description = "Ensure that data-plane VM network adapter MAC addresses are unique on Hyper-V host(s)."

            Impact = "Policy configuration failures may be reported by Network Controller when applying policies to the Hyper-v host. In addition, network traffic may be impacted for the interfaces that are duplicated."

            PublicDocUrl = ""

        }

        'Test-ServerHostId' = @{

            FriendlyName = "Server Host ID"

            Description = "Ensure that HostID is configured correctly on Hyper-V hosts."

            Impact = "Mismatch of HostId between Hyper-V host(s) and Network Controller will result in policy configuration failures."

            PublicDocUrl = "https://learn.microsoft.com/en-us/windows-server/networking/sdn/troubleshoot/troubleshoot-windows-server-software-defined-networking-stack#check-for-corresponding-hostids-and-certificates-between-network-controller-and-each-hyper-v-host"

        }

    }

    ConfigurationStateErrorCodes = @{

        'Unknown' = @{

            Message = 'Unknown error'

            Action = 'Collect the logs and contact Microsoft Support'

        }

        'HostUnreachable' = @{

            Message = 'The host machine is not reachable'

            Action = 'Check the Management network connectivity between Network Controller and Host'

        }

        'PAIpAddressExhausted' = @{

            Message = 'The PA Ip addresses exhausted'

            Action = 'Increase the HNV Provider logical subnet''s IP Pool Size'

        }

        'PAMacAddressExhausted' = @{

            Message = 'The PA Mac addresses exhausted'

            Action = 'Increase the Mac Pool Range'

        }

        'PAAddressConfigurationFailure' = @{

            Message = 'Failed to plumb PA addresses to the host'

            Action = 'Check the management network connectivity between Network Controller and Host.'

        }

        'CertificateNotTrusted' = @{

            Message = 'Certificate is not trusted'

            Action = 'Fix the certificates used for communication with the host.'

        }

        'CertificateNotAuthorized' = @{

            Message = 'Certificate not authorized'

            Action = 'Fix the certificates used for communication with the host.'

        }

        'PolicyConfigurationFailureOnVfp' = @{

            Message = 'Failure in configuring VFP policies'

            Action = 'This is a runtime failure.  No definite workarounds. Collect logs.'

        }

        'HostNotConnectedToController' = @{

            Message = 'The Host is not yet connected to the Network Controller'

            Action = 'Validate that Host is online and operational, NCHostAgent service is started and HostID registry key matches the Instance ID of the server resource'

        }

        'MultipleVfpEnabledSwitches' = @{

            Message = 'There are multiple VFp enabled Switches on the host'

            Action = 'Delete one of the switches, since Network Controller Host Agent only supports one vSwitch with the VFP extension enabled'

        }

        'PolicyConfigurationFailure' = @{

            Message = 'Failed to push policies (vSwitch, vNet, ACL) for a VmNic due to certificate errors or connectivity errors'

            Action = 'Check if proper certificates have been deployed (Certificate subject name must match FQDN of host). Also verify the host connectivity with the Network Controller'

        }

        'DistributedRouterConfigurationFailure' = @{

            Message = 'Failed to configure the Distributed router settings on the host vNic'

            Action = 'TCPIP stack error. May require cleaning up the PA and DR Host vNICs on the server on which this error was reported'

        }

        'DhcpAddressAllocationFailure' = @{

            Message = 'DHCP address allocation failed for a VMNic'

            Action = 'Check if the static IP address attribute is configured on the NIC resource'

        }

        'CertificateNotTrusted CertificateNotAuthorized' = @{

            Message = 'Failed to connect to Mux due to network or cert errors'

            Action = 'Check the numeric code provided in the error message code: this corresponds to the winsock error code. Certificate errors are granular (for example, cert cannot be verified, cert not authorized, etc.)'

        }

        'PortBlocked' = @{

            Message = 'The VFP port is blocked, due to lack of VNET / ACL policies'

            Action = 'Check if there are any other errors, which might cause the policies to be not configured.'

        }

        'Overloaded' = @{

            Message = 'Loadbalancer MUX is overloaded'

            Action = 'Performance issue with MUX'

        }

        'RoutePublicationFailure' = @{

            Message = 'Loadbalancer MUX is not connected to a BGP router'

            Action = 'Check if the MUX has connectivity with the BGP routers and that BGP peering is setup correctly'

        }

        'VirtualServerUnreachable' = @{

            Message = 'Loadbalancer MUX is not connected to SLB manager'

            Action = 'Check connectivity between SLBM and MUX'

        }

        'QosConfigurationFailure' = @{

            Message = 'Failed to configure QOS policies'

            Action = 'See if sufficient bandwidth is available for all VM''s if QOS reservation is used'

        }

    }

}

# SIG # Begin signature block

# MIIncQYJKoZIhvcNAQcCoIInYjCCJ14CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBkyGqMyH5rdAHv

# 05jM9GCZIPIsuc52URr1KOl9TRd//aCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn+MIIZ+gIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEINnt9rq+4teSB/9/EwS+fdsOYQL7WMiGo4pXNRujj0ksMEIGCisG

# AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3

# Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAiRtB3oQ3sRObnCE7eNlk

# uXhxGfK6ncjvgm51V+9KUf/kQuHuxyaGtUgqrqzQM0cWk0geObXoS8yXoqQXuQIB

# DVCW1ZPM4DS8zVne+NcafYOoarNJPctS4/KmduJFd5hzdQK4v0hrn9gWVoBVYLyn

# DB3x8p3bGmZ+osmzqQf89i+sTwQjgSlQA6Ngo00HNR/7vmzfxgYyROCgwZiiplhn

# t4y+cQ44ovX0Wkl+p6u0PE9u3rkfzp0klN/KVuEK+cDt6HzuiAlSiVjsNhYjN0fT

# AsoiWYDowQd9sq242u2T44bXHK3v61+vUGF0EftE0oKWlCu1vcT/po14eVPe4oC2

# 3KGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCCF5gGCSqGSIb3DQEHAqCCF4kwgheF

# AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIB

# QQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDhlzWIt65u7NciYzxa

# sjeG4LzwZ5lEO6ctrz6B4x2h5QIGahCny3CgGBMyMDI2MDUyNzE0MDcxNS4wODJa

# MASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyQTFBLTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEf4wggcoMIIFEKAD

# AgECAhMzAAACEKvN5BYY7zmwAAEAAAIQMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m

# dCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgxMloXDTI2MTExMzE4

# NDgxMlowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTAr

# BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUG

# A1UECxMeblNoaWVsZCBUU1MgRVNOOjJBMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxN

# aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC

# Ag8AMIICCgKCAgEAjcc4q057ZwIgpKu4pTXWLejvYEduRf+1mIpbiJEMFWWmU2xp

# ip+zK7xFxKGB1CclUXBU0/ZQZ6LG8H0gI7yvosrsPEI1DPB/XccGCvswKbAKckng

# OuGTEPGk7K/vEZa9h0Xt02b7m2n9MdIjkLrFl0pDriKyz0QHGpdh93X6+NApfE1T

# L24Vo0xkeoFGpL3rX9gXhIOF59EMnTd2o45FW/oxMgY9q0y0jGO0HrCLTCZr50e7

# TZRSNYAy2lyKbvKI2MKlN1wLzJvZbbc//L3s1q3J6KhS0KC2VNEImYdFgVkJej4z

# ZqHfScTbx9hjFgFpVkJl4xH5VJ8tyJdXE9+vU0k9AaT2QP1Zm3WQmXedSoLjjI7L

# WznuHwnoGIXLiJMQzPqKqRIFL3wzcrDrZeWgtAdBPbipglZ5CQns6Baj5Mb6a/EZ

# C9G3faJYK5QVHeE6eLoSEwp1dz5WurLXNPsp0VWplpl/FJb8jrRT/jOoHu85qRcd

# YpgByU9W7IWPdrthmyfqeAw0omVWN5JxcogYbLo2pANJHlsMdWnxIpN5YwHbGEPC

# uosBHPk2Xd9+E/pZPQUR6v+D85eEN5A/ZM/xiPpxa8dJZ87BpTvui7/2uflUMJf2

# Yc9ZLPgEdhQQo0LwMDSTDT48y3sV7Pdo+g5q+MqnJztN/6qt1cgUTe9u+ykCAwEA

# AaOCAUkwggFFMB0GA1UdDgQWBBSe42+FrpdF2avbUhlk86BLSH5kejAfBgNVHSME

# GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l

# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG

# AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p

# Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB

# Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN

# BgkqhkiG9w0BAQsFAAOCAgEAvs4rO3oo8czOrxPqnnSEkUVq718QzlrIiy7/EW7J

# mQXsJoFxHWUF0Ux0PDyKFDRXPJVv29F7kpJkBJJmcQg5HQV7blUXIMWQ1qX0KdtF

# QXI/MRL77Z+pK5x1jX+tbRkA7a5Ft7vWuRoAEi02HpFH5m/Akh/dfsbx8wOpecJb

# YvuHuy4aG0/tGzOWFCxMMNhGAIJ4qdV87JnY/uMBmiodlm+Gz357XWW5tg3HrtNZ

# XuQ0tWUv26ud4nGKJo/oLZHP75p4Rpt7dMdYKUF9AuVFBwxYZYpvgk12tfK+/yOw

# q84/fjXVCdM83Qnawtbenbk/lnbc9KsZom+GnvA4itAMUpSXFWrcRkqdUQLN+JrG

# 6fPBoV8+D8U2Q2F4XkiCR6EU9JzYKwTuvL6t3nFuxnkLdNjbTg2/yv2j3WaDuCK5

# lSPgsndIiH6Bku2Ui3A0aUo6D9z9v+XEuBs9ioVJaOjf/z+Urqg7ESnxG0/T1dKc

# i7vLQ2XNgWFYO+/OlDjtGoma1ijX4m14N9qgrXTuWEGwgC7hhBgp3id/LAOf9BST

# WA5lBrilsEoexXBrOn/1wM3rjG0hIsxvF5/YOK78mVRGY6Y7zYJ+uXt4OTOFBwad

# Pv8MklreQZLPnQPtiwop4rlLUYaPCiD4YUqRNbLp8Sgyo9g0iAcZYznTuc+8Q8ZI

# rgwwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB

# CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD

# VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe

# Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm

# TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H

# ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc

# wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A

# W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w

# jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG

# MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ

# 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP

# 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz

# ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz

# NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3

# xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG

# AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/

# LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG

# DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB

# BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G

# A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw

# VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j

# cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF

# BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br

# aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL

# BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC

# cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF

# vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l

# 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn

# 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m

# O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx

# TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4

# S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9

# y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM

# +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw

# RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDWTCCAkEC

# AQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0

# ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyQTFBLTA1RTAtRDk0NzElMCMG

# A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIa

# AxUAOsyf2b6riPKnnXlIgIL2f53PUsKggYMwgYCkfjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO3BFJ4wIhgPMjAyNjA1Mjcw

# NjU4MzhaGA8yMDI2MDUyODA2NTgzOFowdzA9BgorBgEEAYRZCgQBMS8wLTAKAgUA

# 7cEUngIBADAKAgEAAgIdZgIB/zAHAgEAAgISgTAKAgUA7cJmHgIBADA2BgorBgEE

# AYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYag

# MA0GCSqGSIb3DQEBCwUAA4IBAQA+hnjUCVt4zsXgqGvBn9xY14CHncPH1pplcElL

# Qnkf7vyo43lfWbz4ZnvnqMO6O4j8vx6RNJ9hRV8o5mSCpuuoPOoLD3HNGOGdMwNo

# poqw7aC0oPuqVI7lc5LeNXPJZ0isaHRXIbTg1k3O+cNfB/Qd/dlI2aS/oH6xGONK

# 3xNM7aE9OwpbqyPPyV0+4DZ766T/3LZglQxzPd0D//60P8RTL6XiBDunpQhxwevZ

# /R8JtBMo2j6S5e0YJQ0fcCTNwbcDxrIMVyfvKxneMVziJgN5Q3VNSH5f7xjE4X5J

# qTYH29ChBO3uMnfLNmTU/NuwurkLbw6jK0cqqtQCGJe9JkTVMYIEDTCCBAkCAQEw

# gZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE

# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIQq83kFhjvObAA

# AQAAAhAwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0B

# CRABBDAvBgkqhkiG9w0BCQQxIgQgE/F7+fti3F5vV6V2B7aGJ0sR8LNChsM6fbMy

# DXJAS2EwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCDD1SHufsjzY59S1iHU

# QY9hnsKSrJPg5a9Mc4YnGmPHxjCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwAhMzAAACEKvN5BYY7zmwAAEAAAIQMCIEIHd9qZ/doaE3r6TTzwJs

# hRGklsq4KrN8B7M/DxAW2fbiMA0GCSqGSIb3DQEBCwUABIICAARmITFsCLW/KX0T

# RIvBK44QyVhcBVfaaqgkjHoV9YEw6rJpUuKWHgE9KY1F4DXTJuZ/Uls9yVa1tCkp

# +/4iHva0BF1opT3hxKTjCc+0jeL8XF6qih+xuhWoMB2bIohmgSAb2D7XM+xU48Wp

# M4iDxSALO8P7whi8mSkea5O+XUlCJ6wrTg3dsU9+YGJKmuZuTiEp8WYYCYCUdeiK

# 19444D8LcvuwmPkawQE86xk4ZZucrqIAol4LgE64HkKKnDp73POVMFKrDp3dc4HK

# 7ZwXrO2+QeDL+EG/FphiG6QdqNfpblatV2um4MQDGWx0YSPzsZw5mIRPg8BlE2A7

# ZBsQYJB9FOAVVKUN/uBSwRsQL05hw5I05/62hXkl63ogX+VCBji2SWCRsEOmUK17

# zNvYuWfX927EiDKtgPZZmFr4yB8ngcsq0AwlcBGHEuvLJ6kwyQ5kMTvGSqlLnQyO

# xNndF/HykPfu7osqaePOVC7piHubu7LbDvKRb8AzW241JHPa3WuuwmRb71ufLQo8

# TQ53YryUakiljAfNwsLNkRZ/J07ENFTC1cyfN9gc7/Ub74DQjcQ0++2gC6HSsvNM

# SNHA3Kb7BFsyWC3eG6qErMRPBz8eSIABL7R4DllQmQYw1ejejnyb8zS3k/gSNf3Q

# moYxxqgMIcy3yI4XCYrZk5ZHuTRb

# SIG # End signature block