Microsoft.AzLocal.CSSTools

1.2607.29.1310

modules/AzStack.Insights/analyzers/AzStackHci.DiagnosticSettings.OsConfig.ConfigurationConsistency.ps1

                                <#

.SYNOPSIS

    Surfaces the cross-node OS configuration "Consistency Checks" produced by the

    AzStackHci.DiagnosticSettings module as Insights rules.

.DESCRIPTION

    Runs Get-AzStackHciOsConfigSettings -Scope Cluster once and parses the returned health summary

    (Strategy A: run-and-parse, identical to how the NetworkConnectivity analyzer consumes

    Test-AzureLocalConnectivity). The module fans out across every cluster node itself via inline

    Invoke-Command - it is NOT required to be installed on remote nodes - so this analyzer only needs

    to invoke it from the local node.

    Each entry in the returned ConsistencyChecks collection is delegated to the data-driven

    AzStackHci.DiagnosticSettings.OsConfig.ConsistencyCheck rule, which maps the upstream Result

    (PASS/WARNING/FAILURE/INFO/SKIPPED) onto an InsightStatus and carries check-specific remediation.

    No OS configuration is collected or compared here; the DiagnosticSettings module is the single

    source of truth for every cross-node comparison.

#>

[CmdletBinding()]

param(

    # Collection scope forwarded to Get-AzStackHciOsConfigSettings. 'Cluster' (default) fans out to all

    # nodes; 'Node' evaluates only the local node (the module then omits the cross-node consistency checks).

    [Parameter(Mandatory = $false)]

    [ValidateSet('Cluster', 'Node')]

    [string]$Scope = 'Cluster',

    # Requests the module's per-node software inventory (-IncludeInventoryData, 0.6.8+) and adds an

    # 'Installed Programs' per-node property report. On by default because the per-node inventory is useful

    # information; pass -IncludeInventoryData:$false to skip it and avoid the extra cross-node collection cost.

    [Parameter(Mandatory = $false)]

    [bool]$IncludeInventoryData = $true

)

# Load the parent module when invoked directly (e.g. Pester). No-op when called via Invoke-SupportInsight

# because the module is already loaded.

if (-not (Get-Command -Name 'Initialize-InsightAnalyzer' -ErrorAction SilentlyContinue)) {

    Import-Module $PSScriptRoot\..\AzStack.Insights.psm1 -Force -DisableNameChecking

}

Import-LocalizedData -BindingVariable 'localizedData' -BaseDirectory "$PSScriptRoot\locale" -UICulture $PSUICulture

$insightAnalyzer = Initialize-InsightAnalyzer -Id $localizedData.Id -Properties $localizedData.Insight

<# START ANALYZER LOGIC #>

try {

    # 'Get-AzStackHciOsConfigSettings -Scope Cluster' fans out to all nodes via a nested Invoke-Command, which

    # is needed for the cross-node comparison. When THIS analyzer is already running inside a remote session

    # (PSSenderInfo set), that nested call becomes a SECOND hop and cross-node collection fails (the PowerShell

    # double-hop authentication problem) - producing partial "(not collected)" data on the remote node.

    #

    # Instead of throwing NotSupportedException (which leaves remote nodes as NOT_APPLICABLE), downgrade to

    # -Scope Node so the module evaluates ONLY the local node (no second hop). This still surfaces that node's

    # own collected properties so each per-node report carries local data - useful when "a node has a different

    # view of the world" (e.g. disks/storage). NOTE: Node scope does NOT emit cross-node ConsistencyChecks, so

    # the rules table will be empty on remote-session invocations; the full comparison still comes from the

    # single local (orchestrator) -Scope Cluster run.

    if ($PSSenderInfo -and $Scope -eq 'Cluster') {

        Write-InsightLog -Level 'Informational' -Message $localizedData.DowngradeToNodeScope

        $Scope = 'Node'

    }

    # Fail fast with a clear message if the module/cmdlet is not present.

    $osConfigCommand = Get-Command -Name 'Get-AzStackHciOsConfigSettings' -ErrorAction Stop

    # Build invocation parameters. Always quiet (NoOutput), never self-update (NoAutoUpdate), never prompt to

    # upload (UploadResults = $false), and return the parsed summary object (PassThru).

    # Write the module's report/transcript files INTO this node's own report folder - the SAME per-node folder the

    # Insights framework builds and copies back to the orchestrator: <OutputDirectory>\<COMPUTERNAME>\. We anchor to

    # the framework's resolved OutputDirectory (exposed on the Insights cache) rather than reconstructing it from

    # Get-AzsSupportWorkingDirectory: on a REMOTE node the framework uses the orchestrator-supplied OutputDirectory,

    # which differs from the remote node's own (per-session, timestamped) working directory - so reconstructing it

    # would write the report to a divergent folder that is never collected. Falling back to the working directory

    # keeps direct/Pester invocations working. We replicate Export-AzsSupportInsightToHtml's exact folder-name

    # transform (ToUpper() with whitespace -> '_') so the report lands inside the collected node folder and its

    # relative ReportLinks anchor resolves in the bundle.

    $insightOutputDir = if ($Global:AzStack_Insights.Cache.OutputDirectory) { $Global:AzStack_Insights.Cache.OutputDirectory }

                        else { Join-Path (Get-AzsSupportWorkingDirectory) 'InsightReport' }

    $nodeReportFolder = (Join-Path $insightOutputDir $env:COMPUTERNAME.ToUpper()) -replace '\s', '_'

    $ExportPath = Join-Path $nodeReportFolder 'AzLocalOsConfig'

    # Params for splatting to Get-AzStackHciOsConfigSettings. -ExportPath is required for the module to write its

    # report/transcript files, even when -NoOutput is specified.

    $osConfigParams = @{

        Scope         = $Scope

        PassThru      = $true

        NoOutput      = $true

        NoAutoUpdate  = $true

        UploadResults = $false

        ExportPath    = $ExportPath

        ErrorAction   = 'Stop'

    }

    # HealthSummaryOnly = $false keeps the module writing its full on-disk output (incl. the HTML report) while

    # PassThru gives us the parsed summary. Only add it when the installed cmdlet exposes the parameter, so an

    # older module version that lacks it does not fail binding (which would end the analyzer as UNKNOWN).

    if ($osConfigCommand.Parameters.ContainsKey('HealthSummaryOnly')) {

        $osConfigParams['HealthSummaryOnly'] = $false

    }

    # Optionally request the per-node software inventory. Guarded on BOTH the caller opt-in and the cmdlet

    # actually exposing the parameter (0.6.8+), so older module versions are simply left unaffected.

    if ($IncludeInventoryData -and $osConfigCommand.Parameters.ContainsKey('IncludeInventoryData')) {

        $osConfigParams['IncludeInventoryData'] = $true

    }

    Write-InsightLog -Message ($localizedData.InvokingModule -f $Scope)

    $summary = $null

    try {

        # IMPORTANT: do NOT cast the result or wrap the call in @(...). The module returns a single

        # PSCustomObject health summary; bind it directly to a variable per its documented contract.

        $summary = Get-AzStackHciOsConfigSettings @osConfigParams

    }

    catch {

        Write-InsightLog -Level 'Error' -Message ($localizedData.InvokeFailed -f $_.Exception.Message)

        throw

    }

    if (-not $summary) {

        Write-InsightLog -Level 'Warning' -Message $localizedData.NoSummary

        $insightAnalyzer.Status = [InsightStatus]::WARNING

    }

    else {

        # Log the schema version and warn (non-fatal) if it is below the minimum contract this consumer was

        # written against. A missing or older/unparseable schema means the producer/consumer contract may not

        # line up and some sections could be absent - surface it so a version mismatch is visible in the report.

        $schemaRaw = if ($summary.PSObject.Properties['SchemaVersion']) { [string]$summary.SchemaVersion } else { '' }

        if ($schemaRaw) {

            Write-InsightLog -Message ($localizedData.SchemaVersion -f $schemaRaw)

            $parsedSchema = $null

            if (-not [version]::TryParse($schemaRaw, [ref]$parsedSchema) -or $parsedSchema -lt [version]$localizedData.MinimumSchemaVersion) {

                Write-InsightLog -Level 'Warning' -Message ($localizedData.SchemaVersionBelowMinimum -f $schemaRaw, $localizedData.MinimumSchemaVersion)

            }

        }

        else {

            Write-InsightLog -Level 'Warning' -Message $localizedData.SchemaVersionMissing

        }

        # Extract the cross-node consistency checks. Absent on single-node / -Scope Node runs.

        $consistencyChecks = @()

        if ($summary.PSObject.Properties['ConsistencyChecks'] -and $summary.ConsistencyChecks) {

            $consistencyChecks = @($summary.ConsistencyChecks)

        }

        if ($consistencyChecks.Count -eq 0) {

            Write-InsightLog -Message $localizedData.NoConsistencyChecks

        }

        else {

            Write-InsightLog -Message ($localizedData.EvaluatingChecks -f $consistencyChecks.Count)

            foreach ($check in $consistencyChecks) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.ConsistencyCheck.ps1 -Check $check

                )

            }

        }

        # Evaluate the top-level OS configuration health sections. Unlike ConsistencyChecks (a cross-node

        # collection), each of these is a single named object on the health summary carrying its own

        # Result / Severity / Message. Iterate a fixed, ordered list of the section property names and invoke

        # the HealthCheck rule for each one that is present, so a section that is absent on a given run (or

        # module version) is simply skipped rather than producing a spurious rule.

        $healthSectionNames = @(

            'ArcAgentHealth'

            'NonMicrosoftServices'

            'StorageHealth'

            'KeyServicesHealth'

            'StabilityEvents'

            'GPOHealthCheck'

            'NetworkATCHealth'

            # Per-node ABSOLUTE health signals (0.6.9+): each has a single correct value per node and now

            # evaluates in BOTH -Scope Node and -Scope Cluster (previously power plan was consistency-only, and

            # time sync / pending reboot were collected but not evaluated). Absent on older module versions, so

            # simply skipped by the PRESENT-section filter below.

            'PowerPlanHealth'

            'TimeSyncHealth'

            'PendingRebootHealth'

        )

        $presentHealthSections = @($healthSectionNames | Where-Object { $summary.PSObject.Properties[$_] -and $summary.$_ })

        if ($presentHealthSections.Count -eq 0) {

            Write-InsightLog -Message $localizedData.NoHealthSections

        }

        else {

            Write-InsightLog -Message ($localizedData.EvaluatingHealthSections -f $presentHealthSections.Count)

            foreach ($sectionName in $presentHealthSections) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.HealthCheck.ps1 -Section $summary.$sectionName -SectionName $sectionName

                )

            }

        }

        # Surface the per-node software inventory (Installed Programs) as its own INFO rule when requested, so it

        # renders as a compact drill-down row rather than a large inline table (see the Properties note below).

        # This keeps the analyzer view readable on large clusters where the full inventory is many rows per node.

        # Only emit the rule when at least one node actually carries InstalledPrograms, so we never add a noise

        # "no inventory" rule (e.g. an older module version that does not populate the inventory).

        if ($IncludeInventoryData -and $summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {

            $hasInventory = @($summary.Nodes | Where-Object {

                    $inventoryNode = $_

                    if ($inventoryNode -is [System.Collections.IDictionary]) { $inventoryNode = [pscustomobject]$inventoryNode }

                    $inventoryNode.PSObject.Properties['InstalledPrograms'] -and $inventoryNode.InstalledPrograms

                }).Count -gt 0

            if ($hasInventory) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.InstalledProgramsInventory.ps1 -Nodes $summary.Nodes

                )

            }

            # Same treatment for the per-node device driver inventory (typically hundreds of rows per node) - its

            # own INFO drill-down rule, only when at least one node actually carries DriverVersions. Cross-node NIC

            # driver drift is evaluated separately by the NetworkAdapterDriverConsistency check.

            $hasDriverInventory = @($summary.Nodes | Where-Object {

                    $driverNode = $_

                    if ($driverNode -is [System.Collections.IDictionary]) { $driverNode = [pscustomobject]$driverNode }

                    $driverNode.PSObject.Properties['DriverVersions'] -and $driverNode.DriverVersions

                }).Count -gt 0

            if ($hasDriverInventory) {

                $insightAnalyzer.Rules += @(

                    & $PSScriptRoot\..\rules\AzStackHci.DiagnosticSettings.OsConfig.DriverVersionsInventory.ps1 -Nodes $summary.Nodes

                )

            }

        }

        # Build a per-node property report from the summary's structured Nodes collection.

        $reportObject = Initialize-InsightAnalyzerPropertyReport -Name 'Cluster Nodes'

        if ($summary.PSObject.Properties['Nodes'] -and $summary.Nodes) {

            foreach ($node in @($summary.Nodes)) {

                # The module returns each structured node as an [ordered] dictionary, whose ENTRIES are not

                # exposed via PSObject.Properties. Normalise to a PSCustomObject so the member-existence guards

                # below read the real values instead of always falling back to ''.

                if ($node -is [System.Collections.IDictionary]) { $node = [pscustomobject]$node }

                $reportObject.Data += [PSCustomObject]@{

                    Node      = if ($node.PSObject.Properties['Name'])      { [string]$node.Name }      else { '' }

                    OsBuild   = if ($node.PSObject.Properties['OsBuild'])   { [string]$node.OsBuild }   else { '' }

                    Ubr       = if ($node.PSObject.Properties['Ubr'])       { [string]$node.Ubr }       else { '' }

                    FullBuild = if ($node.PSObject.Properties['FullBuild']) { [string]$node.FullBuild } else { '' }

                    Collected = if ($node.PSObject.Properties['Collected']) { [bool]$node.Collected }   else { $false }

                }

            }

        }

        # The per-node OS build summary is a small table (one row per node), so it stays as an inline analyzer

        # property report. The larger Installed Programs software inventory is surfaced as its own INFO rule

        # (invoked above when -IncludeInventoryData is set) so it renders as a compact drill-down rather than a

        # large inline table - which keeps large clusters readable.

        $insightAnalyzer.Properties = $reportObject

        # Surface a link to the module's own detailed HTML report (which renders the full hardware / GPO / per-node

        # breakdown that is not part of the structured -PassThru contract). The report engine renders this as a

        # RELATIVE anchor when the file lives inside the InsightReport tree and safely skips it otherwise, so this

        # never produces a broken link. The module writes this report under our -ExportPath (inside the tree).

        if ($summary.PSObject.Properties['HTMLReportPath'] -and $summary.HTMLReportPath) {

            Add-Member -InputObject $insightAnalyzer -NotePropertyName 'ReportLinks' -NotePropertyValue @(

                [pscustomobject]@{

                    Title = 'View Detailed AzLocal OS Configuration Report'

                    Path  = [string]$summary.HTMLReportPath

                }

            ) -Force

        }

    }

}

catch {

     # gracefully handle not supported scenarios such as when the environment does not meet the requirements

    if ($_.Exception -is [System.NotSupportedException]) {

        Write-InsightLog -Level 'Informational' -Message $_.Exception.Message

        $insightAnalyzer.Status = [InsightStatus]::NOT_APPLICABLE

    }

    else {

        $_ | Write-InsightLog -Level 'Exception'

        $insightAnalyzer.ScriptStackTrace = Get-FormattedException -Exception $_.Exception

        $insightAnalyzer.Status = [InsightStatus]::UNKNOWN

    }

}

<# END ANALYZER LOGIC #>

# enumerate the rules and set the analyzer status based on the rules status

# if any rule is in failure, the analyzer is in failure; if any rule is in warning, the analyzer is in warning

if ($insightAnalyzer.Rules.Status -icontains [InsightStatus]::FAILURE) {

    $insightAnalyzer.Status = [InsightStatus]::FAILURE

}

elseif ($insightAnalyzer.Rules.Status -icontains [InsightStatus]::WARNING) {

    $insightAnalyzer.Status = [InsightStatus]::WARNING

}

$insightAnalyzer.Duration = New-TimeSpan -Start $insightAnalyzer.OccurrenceTimeUTC -End $([System.DateTime]::UtcNow)

# Cache the analyzer results, write event and return result

Set-InsightCache -Type 'Analyzer' -Data $insightAnalyzer

Write-InsightEvent -Insight $insightAnalyzer

return $insightAnalyzer

# SIG # Begin signature block

# MIInKAYJKoZIhvcNAQcCoIInGTCCJxUCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCezdkbFlygyreE

# FrC7bkus4lfYdu6C7MOIrzEVxypUEqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnEMIIZwAIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ

# KoZIhvcNAQkEMSIEIPJarQVMSaihoSDu0PjrPFa5wjX3vMFNY4/HhCZtTUmBMEIG

# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEArtsSM9tKMp3IhFfO

# gmlsk6+Byq2SbyLJxuNbodKLk8KtGXEvhW6h3F06lR+EFicz7UvCzjAGkouJy0D6

# GbAq+c1LMQYRwoyhEANAvXBRXQLD+pbYjFiUMRYTY13UQZA99UmBnxICc2Ol6Dz1

# XSjDhdSCqUNcDbnqUCLvU5rBKDgHwhB+q+FCRh07eerPLsGKo8vQJCmCw6qi/flw

# 5AvMGxIvPOKLD3QZzxfd7neeAeLikCZvX8XN/nxxAUL4W4/iyuhPk6LH1JuPoS93

# M4WgZzeC5rmNQ1xIkSCFCrD1uSCsCdDpKkSpl+4CkR0zlEyV0cpTPh5FrG4+gL2I

# xeRjTqGCF5QwgheQBgorBgEEAYI3AwMBMYIXgDCCF3wGCSqGSIb3DQEHAqCCF20w

# ghdpAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9

# MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCDvaqqKiM8at0hO

# jZi38vNmcVIQwOOlI2jiIHRVjDLgKwIGal9aBcmrGBMyMDI2MDcyOTEzMTU0Ny41

# MjhaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw

# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMT

# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHqMIIHIDCCBQigAwIBAgIT

# MwAAAh86cGnkojAulQABAAACHzANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTM5NTFaFw0yNzA1MTcxOTM5NTFa

# MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL

# ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk

# IFRTUyBFU046MzcwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDL

# O8XFOcfGqAqgiz0+AmQmFl3dZ0aTG4UFJkqqNdMHy28DaheCBs6ONufukye5x42C

# WkzgRIy9kE2VWwEntZ8ZkgyrykC0bIqsID7+6FxguseTXf1Vwvm1D8104VmetoBJ

# lJ4uGbuyJZUvXDx55nVh50ygLTzZ24WkQsnPpvRZv2kPc39f3bhLyHVtnHsa/W/8

# 6Vrftd+AfFveA+qN/EY+XGj5c/DPMXCYECb0arYb92dDJWtwzpyBrp4gfHlgY1UE

# pc4l4AGELrf2J4wrxTzTW+SM8XhV1dOOPrYjD080IbZqL8B+IF0RCdn269YXrGK6

# QIHipznKZcCS8jN30YAHnTJVN5Zzs6t/2YsqBGDquvDad7934FFTwzvUcO3VoIyd

# 93XWwvP8/SCFVJh21W8oGQTptGHyly+Fl4henVMVZF1v6osOtirX8GFTiEhnf8nR

# dOg7yZYAJ0xy9CtDfbXaTn/cf3Lq3N/GCYKFjC+5mUCE+AJhmxMuMdvSUGmKiAFd

# iPAjUTqsWWBBZJm0eCwgeGJFmmQA+V7/98BKcE+gUL7O9eWRDQwKeAcvo6rxNv2Y

# 4jKrHA6Z/wi3a/fKUhLCNZES8qGdrpDAm7qh+6FjYxytAbkiKM6uTNy/ULPlwtlY

# ZoAJDDQP7eYCywwVbNTbHXRBSS+NccC0sSB4W7U67wIDAQABo4IBSTCCAUUwHQYD

# VR0OBBYEFNk72sGDlH0r5DwvfGR5XwJI8B7bMB8GA1UdIwQYMBaAFJ+nFV0AXmJd

# g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El

# MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6

# Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt

# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l

# AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA

# A4ICAQBlbu3IoynnPz0K1iPbeNnsej2b15l5sdl2FAFBBGT9lRdc2gNV8LAIusPY

# HHhUvRDcsx4lbMNhVKPGu4TDLaqNt/CI+SFtGuqdRLpVP1XE9cCLyKrKPpcJFJCq

# PpV+efoAtYBmIUQcxxwT7WIQ7gag8+rkKvrMkCoRqKS0mKv8J1sKfi85+G2uhZ/1

# RteSVdYZOZOj+Sb4wzonTCTj7EtgMN/BX35W5dTzd7wJdGepYkVi871dSrC2Tr1Z

# FzAR7S44drCWZpJ6phJabVNOsNxFJKgSykugOGWzQ318Rr3MTPg2s3Bns+pUPVgM

# ijd4bUOH2BlEsLMMwOcolTTZqg1HYrdY1jxpUAI9ipjBQRINL/O705Z+/f2LjNmJ

# QooCVJVX24adpZ519SsfazGoqXGt91bmqKo0fI09Il4sUHh4ih6rpiQDBlyL7vmv

# CejwVxYevY4qVwTZ/o3gvl+R0lFxYS9feIM4NeG0+WsDZ7jLci5MFeuNwosQY3z2

# 6Xg1oj0U9u+ncR9uTU+xBmJ8BtlCdhQ13RNMX5P+krRYPB3XCp9Jm6XaO1995q32

# AIZm1mzBGI6yHlviXaEC5TzGiO1LXuPtXZU2X93oQJbMoe3v8+5CPKrQalGWyYuh

# 2a3V1pwbj+W0FEmEFPpu8TI+qYO1IIQWUSRvFjXth5Ob02hMMjCCB3EwggVZoAMC

# AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV

# BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w

# HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m

# dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy

# NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp

# bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw

# b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw

# ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9

# DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2

# Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N

# 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc

# ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ

# j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk

# lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy

# L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M

# 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX

# pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU

# HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode

# 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA

# ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE

# FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB

# MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE

# AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB

# /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug

# SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N

# aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG

# AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv

# b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt

# 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP

# MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++

# Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9

# QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2

# wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR

# AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z

# bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx

# t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3

# Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN

# uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z

# cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNNMIICNQIBATCB+aGB0aSBzjCB

# yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl

# ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc

# TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU

# U1MgRVNOOjM3MDMtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T

# dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQBLIMg1P7sNuCXpmbH2IXT2tXeE

# EKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw

# DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3

# DQEBCwUAAgUA7hRjVDAiGA8yMDI2MDcyOTExMzIzNloYDzIwMjYwNzMwMTEzMjM2

# WjB0MDoGCisGAQQBhFkKBAExLDAqMAoCBQDuFGNUAgEAMAcCAQACAgOHMAcCAQAC

# AhMZMAoCBQDuFbTUAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKg

# CjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAMviH8Xc

# +lr0iATL4YakwJC4YHBj8hN4xGVHg5cLPdT/8DwBws6srhkAtvKD6sQM3AaFb0cf

# BVDqvHme9P6xJHQa4TjcaZmGIfUCZFZcMLGfqYfw4SI8B9GQP+7IhuZmvoTGj3We

# 6awNPRmRbmPlSHvVwu8KnFujERMw1nBzjqGT+AQtd+Jcw1TcillQnmMgRTPmV8zU

# maZUDCgmYyQA5BptVJWEZvLwz/D/B6rTJ4+AFQMCwIs6DtgLLhLj9xXJ6YBG/8BP

# cgQkCXT6tDrO339b8kgNzLS5wg6nv0ukhizayiWVCNgzqfmZ+9OA+rooFhVXt/9h

# T8yV5r1iRFCpZ7cxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UE

# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z

# b2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQ

# Q0EgMjAxMAITMwAAAh86cGnkojAulQABAAACHzANBglghkgBZQMEAgEFAKCCAUow

# GgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCCMHzQQ

# HITuzAUVlIJqMvZA6YMBIH6mUfINi+YChjvAWTCB+gYLKoZIhvcNAQkQAi8xgeow

# gecwgeQwgb0EILAkCt9WkCsMtURkFu6TY0P3UXdRnCiYuPZhe3ykLfwUMIGYMIGA

# pH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcT

# B1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UE

# AxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIfOnBp5KIwLpUA

# AQAAAh8wIgQgvjJrIFDtRplTmDzVZOa/1ZuBy+NuRfPAcz0oDsSjESMwDQYJKoZI

# hvcNAQELBQAEggIAGQGx8N9vJNadiBYfFRQSn58S/FFr2v3tWUHLFcjYGt2MMk2X

# grKpM1IK/wb6jpVmBFBfsyEW/mlYpRZjILdMz2dY/TeuRQZK1kDEYq73kOiG29hk

# bvgwO0JjrrYeMpvfQIap0U2LHN9soRADI9aTMBpck6YJvH8jucDIpmh5/JTwfcd/

# uKskrmMVksYo7JP12wDnbQ4MpiIJqvasSAbVYhv27SwnEXYfSA62JeXqKamb+4hv

# +Lp0yCutpNhmdZVz06rkq6/5eQw/kf36Yiv9KwRFOR+eUkK2Kr+FkT/Pwj5G4MRu

# 17iqx401pQh6rD9ajHPlGhsZiGr2cMUB9lS99bnOmCU3Iv1CTZzvDGDtyaSyVQ4g

# I3oG1t+1otTUPGGgKqsyx0y6j2bYdLfXLpxZR/Lu0zG//vb2G0NQh/tlsCyy06lJ

# SFrFAaraGz3Iu2PsB9lsOfYjLowbkA4OFTqkXQcZI+u4rkeJHnv8xuMpx1EZ+LDP

# FgthoyZhtLDQCECSCLLjAwXjS9YBtfJ+OmrDa3+6nICHB1FnIdmjNy8HKemx8Hn2

# hWTkXSwDrgftuJbLVgLEWxztCJ738DjRdCX20PCel9qe10K2q0JhdnTgSZ8atGK7

# 9cr6EJzbHtkDJGBimu9h59mp3Wu3t4/8/TTGUd2yMwDEAG0xMnyJV0IHs74=

# SIG # End signature block