dbatools

1.1.19

functions/New-DbaFirewallRule.ps1

                                function New-DbaFirewallRule {

    <#

    .SYNOPSIS

        Creates a new inbound firewall rule for a SQL Server instance and adds the rule to the target computer.

    .DESCRIPTION

        Creates a new inbound firewall rule for a SQL Server instance and adds the rule to the target computer.

        This is basically a wrapper around New-NetFirewallRule executed at the target computer.

        So this only works if New-NetFirewallRule works on the target computer.

        Both DisplayName and Name are set to the same value, since DisplayName is required

        but only Name uniquely defines the rule, thus avoiding duplicate rules with different settings.

        The names and the group for all rules are fixed to be able to get them back with Get-DbaFirewallRule.

        The functionality is currently limited. Help to extend the functionality is welcome.

        As long as you can read this note here, there may be breaking changes in future versions.

        So please review your scripts using this command after updating dbatools.

        The firewall rule for the instance itself will have the following configuration (parameters for New-NetFirewallRule):

            DisplayName = 'SQL Server default instance' or 'SQL Server instance <InstanceName>'

            Name        = 'SQL Server default instance' or 'SQL Server instance <InstanceName>'

            Group       = 'SQL Server'

            Enabled     = 'True'

            Direction   = 'Inbound'

            Protocol    = 'TCP'

            LocalPort   = '<Port>' (for instances with static port)

            Program     = '<Path ending with MSSQL\Binn\sqlservr.exe>' (for instances with dynamic port)

        The firewall rule for the SQL Server Browser will have the following configuration (parameters for New-NetFirewallRule):

            DisplayName = 'SQL Server Browser'

            Name        = 'SQL Server Browser'

            Group       = 'SQL Server'

            Enabled     = 'True'

            Direction   = 'Inbound'

            Protocol    = 'UPD'

            LocalPort   = '1434'

    .PARAMETER SqlInstance

        The target SQL Server instance or instances.

    .PARAMETER Credential

        Credential object used to connect to the Computer as a different user.

    .PARAMETER Type

        Creates firewall rules for the given type(s).

        Valid values are:

            Engine - for the SQL Server instance

            Browser - for the SQL Server Browser

        If this parameter is not used, the firewall rule for the SQL Server instance will be created

        and in case the instance is listening on a port other than 1433,

        also the firewall rule for the SQL Server Browser will be created if not already in place.

    .PARAMETER Configuration

        A hashtable with custom configuration parameters that are used when calling New-NetFirewallRule.

        These will override the default settings.

        Parameters Name, DisplayName and Group are not allowed here and will be silently ignored.

        https://docs.microsoft.com/en-us/powershell/module/netsecurity/new-netfirewallrule

    .PARAMETER Force

        If the rule to be created already exists, a warning is displayed.

        If this switch is enabled, the rule will be deleted and created again.

    .PARAMETER EnableException

        By default, when something goes wrong we try to catch it, interpret it and give you a friendly warning message.

        This avoids overwhelming you with "sea of red" exceptions, but is inconvenient because it basically disables advanced scripting.

        Using this switch turns this "nice by default" feature off and enables you to catch exceptions with your own try/catch.

    .PARAMETER WhatIf

        If this switch is enabled, no actions are performed but informational messages will be displayed that explain what would happen if the command were to run.

    .PARAMETER Confirm

        If this switch is enabled, you will be prompted for confirmation before executing any operations that change state.

    .NOTES

        Tags: Firewall, Network

        Author: Andreas Jordan (@JordanOrdix), ordix.de

        Website: https://dbatools.io

        Copyright: (c) 2021 by dbatools, licensed under MIT

        License: MIT https://opensource.org/licenses/MIT

    .LINK

        https://dbatools.io/New-DbaFirewallRule

    .EXAMPLE

        PS C:\> New-DbaFirewallRule -SqlInstance SRV1, SRV1\TEST

        Automatically configures the needed firewall rules for both the default instance and the instance named TEST on SRV1.

    .EXAMPLE

        PS C:\> New-DbaFirewallRule -SqlInstance SRV1, SRV1\TEST -Configuration @{ Profile = 'Domain' }

        Automatically configures the needed firewall rules for both the default instance and the instance named TEST on SRV1,

        but configures the firewall rule for the domain profile only.

    .EXAMPLE

        PS C:\> New-DbaFirewallRule -SqlInstance SRV1\TEST -Type Engine -Force -Confirm:$false

        Creates or recreates the firewall rule for the instance TEST on SRV1. Does not prompt for confirmation.

    #>

    [CmdletBinding(SupportsShouldProcess, ConfirmImpact = "High")]

    param (

        [parameter(Mandatory, ValueFromPipeline)]

        [DbaInstanceParameter[]]$SqlInstance,

        [PSCredential]$Credential,

        [ValidateSet('Engine', 'Browser')]

        [string[]]$Type,

        [hashtable]$Configuration,

        [switch]$Force,

        [switch]$EnableException

    )

    begin {

        if ($Configuration) {

            foreach ($notAllowedKey in 'Name', 'DisplayName', 'Group') {

                if ($notAllowedKey -in $Configuration.Keys) {

                    Write-Message -Level Verbose -Message "Key $notAllowedKey is not allowed in Configuration and will be removed."

                    $Configuration.Remove($notAllowedKey)

                }

            }

        }

        $cmdScriptBlock = {

            # This scriptblock will be processed by Invoke-Command2.

            $firewallRuleParameters = $args[0]

            $force = $args[1]

            try {

                if (-not (Get-Command -Name New-NetFirewallRule -ErrorAction SilentlyContinue)) {

                    throw 'The module NetSecurity with the command New-NetFirewallRule is missing on the target computer, so New-DbaFirewallRule is not supported.'

                }

                $successful = $true

                if ($force) {

                    $null = Remove-NetFirewallRule -Name $firewallRuleParameters.Name -WarningAction SilentlyContinue -ErrorAction SilentlyContinue

                }

                $cimInstance = New-NetFirewallRule @firewallRuleParameters -WarningVariable warn -ErrorVariable err -WarningAction SilentlyContinue -ErrorAction SilentlyContinue

                if ($warn.Count -gt 0) {

                    $successful = $false

                } else {

                    # Change from an empty System.Collections.ArrayList to $null for better readability

                    $warn = $null

                }

                if ($err.Count -gt 0) {

                    $successful = $false

                } else {

                    # Change from an empty System.Collections.ArrayList to $null for better readability

                    $err = $null

                }

                [PSCustomObject]@{

                    Successful  = $successful

                    CimInstance = $cimInstance

                    Warning     = $warn

                    Error       = $err

                    Exception   = $null

                }

            } catch {

                [PSCustomObject]@{

                    Successful  = $false

                    CimInstance = $null

                    Warning     = $null

                    Error       = $null

                    Exception   = $_

                }

            }

        }

    }

    process {

        foreach ($instance in $SqlInstance) {

            $rules = @( )

            $programNeeded = $false

            $browserNeeded = $false

            if ($PSBoundParameters.Type) {

                $browserOptional = $false

            } else {

                $browserOptional = $true

            }

            # Create rule for instance

            if (-not $PSBoundParameters.Type -or 'Engine' -in $PSBoundParameters.Type) {

                # Apply the defaults

                $rule = @{

                    Type         = 'Engine'

                    InstanceName = $instance.InstanceName

                    Config       = @{

                        Group     = 'SQL Server'

                        Enabled   = 'True'

                        Direction = 'Inbound'

                        Protocol  = 'TCP'

                    }

                }

                # Test for default or named instance

                if ($instance.InstanceName -eq 'MSSQLSERVER') {

                    $rule.Config.DisplayName = 'SQL Server default instance'

                    $rule.Config.Name = 'SQL Server default instance'

                    $rule.SqlInstance = $instance.ComputerName

                } else {

                    $rule.Config.DisplayName = "SQL Server instance $($instance.InstanceName)"

                    $rule.Config.Name = "SQL Server instance $($instance.InstanceName)"

                    $rule.SqlInstance = $instance.ComputerName + '\' + $instance.InstanceName

                    $browserNeeded = $true

                }

                # Get information about IP addresses for LocalPort

                try {

                    $tcpIpAddresses = Get-DbaNetworkConfiguration -SqlInstance $instance -Credential $Credential -OutputType TcpIpAddresses -EnableException

                } catch {

                    Stop-Function -Message "Failed." -Target $instance -ErrorRecord $_ -Continue

                }

                if ($tcpIpAddresses.Count -gt 1) {

                    # I would have to test this, so I better not support this in the first version.

                    # As LocalPort is [<String[]>], $tcpIpAddresses.TcpPort will probably just work with the current implementation.

                    Stop-Function -Message "SQL Server instance $instance listens on more than one IP addresses. This is currently not supported by this command." -Continue

                }

                if ($tcpIpAddresses.TcpPort -ne '') {

                    $rule.Config.LocalPort = $tcpIpAddresses.TcpPort

                    if ($tcpIpAddresses.TcpPort -ne '1433') {

                        $browserNeeded = $true

                    }

                } else {

                    $programNeeded = $true

                }

                if ($programNeeded) {

                    # Get information about service for Program

                    try {

                        $service = Get-DbaService -ComputerName $instance.ComputerName -InstanceName $instance.InstanceName -Credential $Credential -Type Engine -EnableException

                    } catch {

                        Stop-Function -Message "Failed." -Target $instance -ErrorRecord $_ -Continue

                    }

                    $rule.Config.Program = $service.BinaryPath -replace '^"?(.*sqlservr.exe).*$', '$1'

                }

                $rules += $rule

            }

            # Create rule for Browser

            if ((-not $PSBoundParameters.Type -and $browserNeeded) -or 'Browser' -in $PSBoundParameters.Type) {

                # Apply the defaults

                $rule = @{

                    Type         = 'Browser'

                    InstanceName = $null

                    SqlInstance  = $null

                    Config       = @{

                        DisplayName = 'SQL Server Browser'

                        Name        = 'SQL Server Browser'

                        Group       = 'SQL Server'

                        Enabled     = 'True'

                        Direction   = 'Inbound'

                        Protocol    = 'UDP'

                        LocalPort   = '1434'

                    }

                }

                $rules += $rule

            }

            foreach ($rule in $rules) {

                # Apply the given configuration

                if ($Configuration) {

                    foreach ($param in $Configuration.Keys) {

                        $rule.Config.$param = $Configuration.$param

                    }

                }

                # Run the command for the instance

                if ($PSCmdlet.ShouldProcess($instance, "Creating firewall rule for instance $($instance.InstanceName) on $($instance.ComputerName)")) {

                    try {

                        $commandResult = Invoke-Command2 -ComputerName $instance.ComputerName -Credential $Credential -ScriptBlock $cmdScriptBlock -ArgumentList $rule.Config, $Force

                    } catch {

                        Stop-Function -Message "Failed to execute command on $($instance.ComputerName) for instance $($instance.InstanceName)." -Target $instance -ErrorRecord $_ -Continue

                    }

                    if ($commandResult.Error.Count -eq 1 -and $commandResult.Error[0] -match 'Cannot create a file when that file already exists') {

                        $status = 'The desired rule already exists. Use -Force to remove and recreate the rule.'

                        $commandResult.Error = $null

                        if ($rule.Type -eq 'Browser' -and $browserOptional) {

                            $commandResult.Successful = $true

                        }

                    } elseif ($commandResult.CimInstance.Status -match 'The rule was parsed successfully from the store') {

                        $status = 'The rule was successfully created.'

                    } else {

                        $status = $commandResult.CimInstance.Status

                    }

                    if ($commandResult.Warning) {

                        Write-Message -Level Verbose -Message "commandResult.Warning: $($commandResult.Warning)."

                        $status += " Warning: $($commandResult.Warning)."

                    }

                    if ($commandResult.Error) {

                        Write-Message -Level Verbose -Message "commandResult.Error: $($commandResult.Error)."

                        $status += " Error: $($commandResult.Error)."

                    }

                    if ($commandResult.Exception) {

                        Write-Message -Level Verbose -Message "commandResult.Exception: $($commandResult.Exception)."

                        $status += " Exception: $($commandResult.Exception)."

                    }

                    # Output information

                    [PSCustomObject]@{

                        ComputerName = $instance.ComputerName

                        InstanceName = $rule.InstanceName

                        SqlInstance  = $rule.SqlInstance

                        DisplayName  = $rule.Config.DisplayName

                        Name         = $rule.Config.Name

                        Type         = $rule.Type

                        Protocol     = $rule.Config.Protocol

                        LocalPort    = $rule.Config.LocalPort

                        Program      = $rule.Config.Program

                        RuleConfig   = $rule.Config

                        Successful   = $commandResult.Successful

                        Status       = $status

                        Details      = $commandResult

                    } | Select-DefaultView -Property ComputerName, InstanceName, SqlInstance, DisplayName, Type, Successful, Status, Protocol, LocalPort, Program

                }

            }

        }

    }

}

# SIG # Begin signature block

# MIIZewYJKoZIhvcNAQcCoIIZbDCCGWgCAQExCzAJBgUrDgMCGgUAMGkGCisGAQQB

# gjcCAQSgWzBZMDQGCisGAQQBgjcCAR4wJgIDAQAABBAfzDtgWUsITrck0sYpfvNR

# AgEAAgEAAgEAAgEAAgEAMCEwCQYFKw4DAhoFAAQUJLOr2AgFQFDlP+vXhNKsJ5dm

# Xo2gghSJMIIE/jCCA+agAwIBAgIQDUJK4L46iP9gQCHOFADw3TANBgkqhkiG9w0B

# AQsFADByMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD

# VQQLExB3d3cuZGlnaWNlcnQuY29tMTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFz

# c3VyZWQgSUQgVGltZXN0YW1waW5nIENBMB4XDTIxMDEwMTAwMDAwMFoXDTMxMDEw

# NjAwMDAwMFowSDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMu

# MSAwHgYDVQQDExdEaWdpQ2VydCBUaW1lc3RhbXAgMjAyMTCCASIwDQYJKoZIhvcN

# AQEBBQADggEPADCCAQoCggEBAMLmYYRnxYr1DQikRcpja1HXOhFCvQp1dU2UtAxQ

# tSYQ/h3Ib5FrDJbnGlxI70Tlv5thzRWRYlq4/2cLnGP9NmqB+in43Stwhd4CGPN4

# bbx9+cdtCT2+anaH6Yq9+IRdHnbJ5MZ2djpT0dHTWjaPxqPhLxs6t2HWc+xObTOK

# fF1FLUuxUOZBOjdWhtyTI433UCXoZObd048vV7WHIOsOjizVI9r0TXhG4wODMSlK

# XAwxikqMiMX3MFr5FK8VX2xDSQn9JiNT9o1j6BqrW7EdMMKbaYK02/xWVLwfoYer

# vnpbCiAvSwnJlaeNsvrWY4tOpXIc7p96AXP4Gdb+DUmEvQECAwEAAaOCAbgwggG0

# MA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsG

# AQUFBwMIMEEGA1UdIAQ6MDgwNgYJYIZIAYb9bAcBMCkwJwYIKwYBBQUHAgEWG2h0

# dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAfBgNVHSMEGDAWgBT0tuEgHf4prtLk

# YaWyoiWyyBc1bjAdBgNVHQ4EFgQUNkSGjqS6sGa+vCgtHUQ23eNqerwwcQYDVR0f

# BGowaDAyoDCgLoYsaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItYXNzdXJl

# ZC10cy5jcmwwMqAwoC6GLGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFz

# c3VyZWQtdHMuY3JsMIGFBggrBgEFBQcBAQR5MHcwJAYIKwYBBQUHMAGGGGh0dHA6

# Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBPBggrBgEFBQcwAoZDaHR0cDovL2NhY2VydHMu

# ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJRFRpbWVzdGFtcGluZ0NB

# LmNydDANBgkqhkiG9w0BAQsFAAOCAQEASBzctemaI7znGucgDo5nRv1CclF0CiNH

# o6uS0iXEcFm+FKDlJ4GlTRQVGQd58NEEw4bZO73+RAJmTe1ppA/2uHDPYuj1UUp4

# eTZ6J7fz51Kfk6ftQ55757TdQSKJ+4eiRgNO/PT+t2R3Y18jUmmDgvoaU+2QzI2h

# F3MN9PNlOXBL85zWenvaDLw9MtAby/Vh/HUIAHa8gQ74wOFcz8QRcucbZEnYIpp1

# FUL1LTI4gdr0YKK6tFL7XOBhJCVPst/JKahzQ1HavWPWH1ub9y4bTxMd90oNcX6X

# t/Q/hOvB46NJofrOp79Wz7pZdmGJX36ntI5nePk2mOHLKNpbh6aKLzCCBRowggQC

# oAMCAQICEAMFu4YhsKFjX7/erhIE520wDQYJKoZIhvcNAQELBQAwcjELMAkGA1UE

# BhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj

# ZXJ0LmNvbTExMC8GA1UEAxMoRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElEIENvZGUg

# U2lnbmluZyBDQTAeFw0yMDA1MTIwMDAwMDBaFw0yMzA2MDgxMjAwMDBaMFcxCzAJ

# BgNVBAYTAlVTMREwDwYDVQQIEwhWaXJnaW5pYTEPMA0GA1UEBxMGVmllbm5hMREw

# DwYDVQQKEwhkYmF0b29sczERMA8GA1UEAxMIZGJhdG9vbHMwggEiMA0GCSqGSIb3

# DQEBAQUAA4IBDwAwggEKAoIBAQC8v2N7q+O/vggBtpjmteofFo140k73JXQ5sOD6

# QLzjgija+scoYPxTmFSImnqtjfZFWmucAWsDiMVVro/6yGjsXmJJUA7oD5BlMdAK

# fuiq4558YBOjjc0Bp3NbY5ZGujdCmsw9lqHRAVil6P1ZpAv3D/TyVVq6AjDsJY+x

# rRL9iMc8YpD5tiAj+SsRSuT5qwPuW83ByRHqkaJ5YDJ/R82ZKh69AFNXoJ3xCJR+

# P7+pa8tbdSgRf25w4ZfYPy9InEvsnIRVZMeDjjuGvqr0/Mar73UI79z0NYW80yN/

# 7VzlrvV8RnniHWY2ib9ehZligp5aEqdV2/XFVPV4SKaJs8R9AgMBAAGjggHFMIIB

# wTAfBgNVHSMEGDAWgBRaxLl7KgqjpepxA8Bg+S32ZXUOWDAdBgNVHQ4EFgQU8MCg

# +7YDgENO+wnX3d96scvjniIwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsG

# AQUFBwMDMHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv

# bS9zaGEyLWFzc3VyZWQtY3MtZzEuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdp

# Y2VydC5jb20vc2hhMi1hc3N1cmVkLWNzLWcxLmNybDBMBgNVHSAERTBDMDcGCWCG

# SAGG/WwDATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v

# Q1BTMAgGBmeBDAEEATCBhAYIKwYBBQUHAQEEeDB2MCQGCCsGAQUFBzABhhhodHRw

# Oi8vb2NzcC5kaWdpY2VydC5jb20wTgYIKwYBBQUHMAKGQmh0dHA6Ly9jYWNlcnRz

# LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJBc3N1cmVkSURDb2RlU2lnbmluZ0NB

# LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCPzflwlQwf1jak

# EqymPOc0nBxiY7F4FwcmL7IrTLhub6Pjg4ZYfiC79Akz5aNlqO+TJ0kqglkfnOsc

# jfKQzzDwcZthLVZl83igzCLnWMo8Zk/D2d4ZLY9esFwqPNvuuVDrHvgh7H6DJ/zP

# Vm5EOK0sljT0UQ6HQEwtouH5S8nrqCGZ8jKM/+DeJlm+rCAGGf7TV85uqsAn5JqD

# En/bXE1AlyG1Q5YiXFGS5Sf0qS4Nisw7vRrZ6Qc4NwBty4cAYjzDPDixorWI8+FV

# OUWKMdL7tV8i393/XykwsccCstBCp7VnSZN+4vgzjEJQql5uQfysjcW9rrb/qixp

# csPTKYRHMIIFMDCCBBigAwIBAgIQBAkYG1/Vu2Z1U0O1b5VQCDANBgkqhkiG9w0B

# AQsFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYD

# VQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVk

# IElEIFJvb3QgQ0EwHhcNMTMxMDIyMTIwMDAwWhcNMjgxMDIyMTIwMDAwWjByMQsw

# CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu

# ZGlnaWNlcnQuY29tMTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQg

# Q29kZSBTaWduaW5nIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA

# +NOzHH8OEa9ndwfTCzFJGc/Q+0WZsTrbRPV/5aid2zLXcep2nQUut4/6kkPApfmJ

# 1DcZ17aq8JyGpdglrA55KDp+6dFn08b7KSfH03sjlOSRI5aQd4L5oYQjZhJUM1B0

# sSgmuyRpwsJS8hRniolF1C2ho+mILCCVrhxKhwjfDPXiTWAYvqrEsq5wMWYzcT6s

# cKKrzn/pfMuSoeU7MRzP6vIK5Fe7SrXpdOYr/mzLfnQ5Ng2Q7+S1TqSp6moKq4Tz

# rGdOtcT3jNEgJSPrCGQ+UpbB8g8S9MWOD8Gi6CxR93O8vYWxYoNzQYIH5DiLanMg

# 0A9kczyen6Yzqf0Z3yWT0QIDAQABo4IBzTCCAckwEgYDVR0TAQH/BAgwBgEB/wIB

# ADAOBgNVHQ8BAf8EBAMCAYYwEwYDVR0lBAwwCgYIKwYBBQUHAwMweQYIKwYBBQUH

# AQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYI

# KwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFz

# c3VyZWRJRFJvb3RDQS5jcnQwgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmw0

# LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaG

# NGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RD

# QS5jcmwwTwYDVR0gBEgwRjA4BgpghkgBhv1sAAIEMCowKAYIKwYBBQUHAgEWHGh0

# dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCgYIYIZIAYb9bAMwHQYDVR0OBBYE

# FFrEuXsqCqOl6nEDwGD5LfZldQ5YMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6en

# IZ3zbcgPMA0GCSqGSIb3DQEBCwUAA4IBAQA+7A1aJLPzItEVyCx8JSl2qB1dHC06

# GsTvMGHXfgtg/cM9D8Svi/3vKt8gVTew4fbRknUPUbRupY5a4l4kgU4QpO4/cY5j

# DhNLrddfRHnzNhQGivecRk5c/5CxGwcOkRX7uq+1UcKNJK4kxscnKqEpKBo6cSgC

# PC6Ro8AlEeKcFEehemhor5unXCBc2XGxDI+7qPjFEmifz0DLQESlE/DmZAwlCEIy

# sjaKJAL+L3J+HNdJRZboWR3p+nRka7LrZkPas7CM1ekN3fYBIM6ZMWM9CBoYs4Gb

# T8aTEAb8B4H6i9r5gkn3Ym6hU/oSlBiFLpKR6mhsRDKyZqHnGKSaZFHvMIIFMTCC

# BBmgAwIBAgIQCqEl1tYyG35B5AXaNpfCFTANBgkqhkiG9w0BAQsFADBlMQswCQYD

# VQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGln

# aWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0Ew

# HhcNMTYwMTA3MTIwMDAwWhcNMzEwMTA3MTIwMDAwWjByMQswCQYDVQQGEwJVUzEV

# MBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29t

# MTEwLwYDVQQDEyhEaWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQgVGltZXN0YW1waW5n

# IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdAy7kvNj3/dqbqC

# mcU5VChXtiNKxA4HRTNREH3Q+X1NaH7ntqD0jbOI5Je/YyGQmL8TvFfTw+F+CNZq

# FAA49y4eO+7MpvYyWf5fZT/gm+vjRkcGGlV+Cyd+wKL1oODeIj8O/36V+/OjuiI+

# GKwR5PCZA207hXwJ0+5dyJoLVOOoCXFr4M8iEA91z3FyTgqt30A6XLdR4aF5FMZN

# JCMwXbzsPGBqrC8HzP3w6kfZiFBe/WZuVmEnKYmEUeaC50ZQ/ZQqLKfkdT66mA+E

# f58xFNat1fJky3seBdCEGXIX8RcG7z3N1k3vBkL9olMqT4UdxB08r8/arBD13ays

# 6Vb/kwIDAQABo4IBzjCCAcowHQYDVR0OBBYEFPS24SAd/imu0uRhpbKiJbLIFzVu

# MB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMBIGA1UdEwEB/wQIMAYB

# Af8CAQAwDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMIMHkGCCsG

# AQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t

# MEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRBc3N1cmVkSURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqgOKA2hjRodHRwOi8v

# Y3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3JsMDqg

# OKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS

# b290Q0EuY3JsMFAGA1UdIARJMEcwOAYKYIZIAYb9bAACBDAqMCgGCCsGAQUFBwIB

# FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAsGCWCGSAGG/WwHATANBgkq

# hkiG9w0BAQsFAAOCAQEAcZUS6VGHVmnN793afKpjerN4zwY3QITvS4S/ys8DAv3F

# p8MOIEIsr3fzKx8MIVoqtwU0HWqumfgnoma/Capg33akOpMP+LLR2HwZYuhegiUe

# xLoceywh4tZbLBQ1QwRostt1AuByx5jWPGTlH0gQGF+JOGFNYkYkh2OMkVIsrymJ

# 5Xgf1gsUpYDXEkdws3XVk4WTfraSZ/tTYYmo9WuWwPRYaQ18yAGxuSh1t5ljhSKM

# Ycp5lH5Z/IwP42+1ASa2bKXuh1Eh5Fhgm7oMLSttosR+u8QlK0cCCHxJrhO24XxC

# QijGGFbPQTS2Zl22dHv1VjMiLyI2skuiSpXY9aaOUjGCBFwwggRYAgEBMIGGMHIx

# CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3

# dy5kaWdpY2VydC5jb20xMTAvBgNVBAMTKERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJ

# RCBDb2RlIFNpZ25pbmcgQ0ECEAMFu4YhsKFjX7/erhIE520wCQYFKw4DAhoFAKB4

# MBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAwGQYJKoZIhvcNAQkDMQwGCisGAQQB

# gjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwIwYJKoZIhvcNAQkE

# MRYEFLfcjcvngTGkjC+PBOAiQlm5JuA0MA0GCSqGSIb3DQEBAQUABIIBADbZQfwW

# b8VCRyvD2QLirRjSK4PRwF36lUNi38XjmFEI/pAvJP3JgyQz8Cx/sE32l1rShS1b

# ZhtR9a7cnUhStuy52tirEAoRG2VI93PSmVrUk43G5/lz3B8oJNNWXNHk8x38RtC8

# 68F93kebAbnRoRK65N5NgHi2MRjRSqk7G6DXiHbIu91ON9r6oWJL61pqz+zcIFh5

# I7vyKC0Fk2ruyi8H3WXQJH6U5KHKTODYms+zWhapflDrkNnvGRSeuKi/kaTGtKB5

# NH29vK6gplHHh7CWJa0PBAqVdsCrsYykUra31QyhIrHKAH3TuDulNAwlUYjjWIvx

# ZFRR4Yx4VSz3JgqhggIwMIICLAYJKoZIhvcNAQkGMYICHTCCAhkCAQEwgYYwcjEL

# MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3

# LmRpZ2ljZXJ0LmNvbTExMC8GA1UEAxMoRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElE

# IFRpbWVzdGFtcGluZyBDQQIQDUJK4L46iP9gQCHOFADw3TANBglghkgBZQMEAgEF

# AKBpMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIx

# MDkxODEyNDc0M1owLwYJKoZIhvcNAQkEMSIEIOUQbhJNibon9vP0+yebmTVoGRYO

# Nbu+eqStV+yhoIJ9MA0GCSqGSIb3DQEBAQUABIIBAEOa+9tNQC7rRYwEldDgbJof

# c1THOyIzYde3/BnpLmmWdrKQzKSkC/ISVa2rg3/I+IVSLlW3tY8RAxxJaaTs7fi1

# E+0HS4/Ph/Yv/UPrDjo/Cd4rxcwBVwmXgzWT1OUvlTuwrqlTQlzZQMwEYQ0LnjBa

# CN2q7n4gMcEjnaMAzUjn4t66AMLXw7CcEuJQlaAhrzIqGdSqvmCOuIf1fFXvYWun

# y7gXAnAsJfNuB2l10NjZ4ctpM+6xY4eVJsJuYlCQnzp59KcfAPZsdz3m/G1cLOZo

# bL6iGaFyw0yEsASILQ/VQ7E9HdTGtjdh/C19C0j7FA04gi0VIvG3CvyVm3SByPo=

# SIG # End signature block