AzStackHci.EnvironmentChecker

1.2100.2790.560

AzStackHciStandaloneObservability/AzStackHCI.StandaloneObservability.psm1

                                <#############################################################

 #                                                           #

 # Copyright (C) Microsoft Corporation. All rights reserved. #

 #                                                           #

 #############################################################>

Import-Module $PSScriptRoot\AzStackHCI.StandaloneObservability.Helpers.psm1 -Force -DisableNameChecking -Global

Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Utilities.psm1 -Force -DisableNameChecking -Global

Import-Module $PSScriptRoot\..\AzStackHci.EnvironmentChecker.Reporting.psm1 -Force -DisableNameChecking -Global

Import-LocalizedData -BindingVariable lvsTxt -FileName AzStackHCI.StandaloneObservability.Strings.psd1

<#

.SYNOPSIS

    Sends daignostics data using standalone observability pipeline.

.DESCRIPTION

    Sends diagnostics data using standalone observability pipeline.

    PS C:\> Enter-PsSession -ComputerName <NodeName> -Credential $cred

    PS C:\> Send-AzStackHciDiagnosticData

.PARAMETER ResourceGroupName

    Azure Resource group name where temporary Arc resource will be created. This can be same parameter as used in AzS Deployment.

.PARAMETER SubscriptionId

    Azure SubscriptionID where temporary Arc resource will be created. This can be same parameter as used in AzS Deployment.

.PARAMETER RegistrationRegion

    Optional. Azure registration region where Arc resource will be created. This can be same parameter as used in AzS Deployment.

.PARAMETER DiagnosticLogPath

    Diagnostic Log path which will be parsed and sent to Microsoft.

.PARAMETER Cloud

    Optional. Azure Cloud name default: AzureCloud.

.PARAMETER CacheFlushWaitTimeInSec

    Optional wait time to Flush the cache folder. default:600

.PARAMETER RegistrationCredential

    Azure credentials used for authentication to register ArcAgent. Needed only for DefaultSet

.PARAMETER RegistrationWithDeviceCode

    This is RegistrationWithDeviceCode switch to use device code for authentication.

.PARAMETER RegistrationWithExistingContext

    This is RegistrationWithExistingContext switch to use existing Azure context on the local machine.

.PARAMETER RegistrationSPCredential

    This is SPN crednetials used for authentication to register ArcAgent. Needed only for ServicePrincipal set

.EXAMPLE

    The example below .

    During Remote Support JEA configuration, WinRM will be restarted twice and that can break the PsSession to node if you are installing Remote Support remotely. In that case, connect to remote node again and execute Enable cmdlet again after 4-5 minutes.

    PS C:\> Enter-PsSession -ComputerName <NodeName> -Credential $cred

    PS C:\> Send-AzStackHciDiagnosticData

    Processing data from remote server v-host1 failed with the following error message: The I/O operation has been aborted because of either a thread exit or an application request. For more information, see the about_Remote_Troubleshooting Help topic.

    PS C:\> Enter-PsSession -ComputerName <NodeName> -Credential $cred

    PS C:\> Send-AzStackHciDiagnosticData

.NOTES

    Requires Support VM to have stable internet connectivity.

#>

function Send-AzStackHciDiagnosticData

{

    [CmdletBinding(PositionalBinding = $false, DefaultParameterSetName = "Interactive")]

    param(

        [Parameter(Mandatory = $true)]

        [System.String] $ResourceGroupName,

        [Parameter(Mandatory = $true)]

        [System.String] $SubscriptionId,

        [Parameter(Mandatory = $true, ParameterSetName = "DefaultSet")]

        [PSCredential] $RegistrationCredential,

        [Parameter(Mandatory = $true, ParameterSetName = "Interactive")]

        [Switch] $RegistrationWithDeviceCode,

        [Parameter(Mandatory = $true, ParameterSetName = "PassThrough")]

        [Switch] $RegistrationWithExistingContext,

        [Parameter(Mandatory = $true, ParameterSetName = "ServicePrincipal")]

        [PSCredential] $RegistrationSPCredential,

        [Parameter(Mandatory=$true)]

        [ValidateNotNullOrEmpty()]

        [ValidateScript({ Test-Path -Path $_ -PathType Container })]

        [System.String] $DiagnosticLogPath,

        [Parameter(Mandatory=$false)]

        [System.String] $RegistrationRegion = "eastus",

        [Parameter(Mandatory=$false)]

        [System.String] $ObsRootFolderPath = "C:\StdObservability",

        [Parameter(Mandatory=$false)]

        [System.String] $Cloud = "AzureCloud",

        [Parameter(Mandatory=$false)]

        [Int] $CacheFlushWaitTimeInSec = 600

    )

    # Fail if Arc Agent is already connected

    $OperationType = $MyInvocation.MyCommand

    $script:ErrorActionPreference = 'Stop'

    $standaloneScriptsPath = "..\Obs\scripts"

    Import-Module "$PSScriptRoot\$standaloneScriptsPath\StandaloneObservabilityHelper.psm1"

    $TenantId = Get-TenantId -AzureEnvironment $Cloud -SubscriptionId $SubscriptionId

    $skipArcForServer = $false

    if(Test-IsArcAgentConnected)

    {

        $skipArcForServer = $true

    }

    $service = Get-Service "WatchdogAgent" -ErrorAction SilentlyContinue

    if ($null -ne $service)

    {

        throw "Watchdog is present. Use the extension instead of this Cmdlet"

    }

    try

    {

        $LogSource = "AzStackHciEnvironmentChecker/StandaloneObservability"

        $EventID = "19101"

        Set-AzStackHciOutputPath -Path $ObsRootFolderPath -Source $LogSource

        # Ensure we are elevated

        if (Test-Elevation)

        {

            Log-Info -Message ($lvsTxt.ElevationModeInfo) -Type Info

        }

        else

        {

            Log-Info -Message ($lvsTxt.ElevationModeMsg) -Type Error -ConsoleOut

            throw $($lvsTxt.ElevationModeErrMsg)

        }

        Test-ModuleUpdate -PassThru:$PassThru

        # Call/Initialise reporting

        $envcheckerReport = Get-AzStackHciEnvProgress -clean:$CleanReport

        $envcheckerReport = Add-AzStackHciEnvJob -report $envcheckerReport

        Push-Location -Path "$PSScriptRoot\$standaloneScriptsPath"

        if ($PSCmdlet.ParameterSetName -eq "ServicePrincipal") {

            & .\Install-StandaloneObservability.ps1 -ResourceGroupName $ResourceGroupName `

                                                                -SubscriptionId $SubscriptionId `

                                                                -TenantId $TenantId `

                                                                -RegistrationSPCredential $RegistrationSPCredential `

                                                                -FactoryLogShare $DiagnosticLogPath `

                                                                -ObsRootFolderPath $ObsRootFolderPath `

                                                                -Cloud $Cloud `

                                                                -RegistrationRegion $RegistrationRegion `

                                                                -GcsRegion $RegistrationRegion `

                                                                -SkipArcForServer $skipArcForServer -ParseOnce | Out-Null

        }

        elseif ($PSCmdlet.ParameterSetName -eq "Interactive") {

            & .\Install-StandaloneObservability.ps1 -ResourceGroupName $ResourceGroupName `

                                                                -SubscriptionId $SubscriptionId `

                                                                -TenantId $TenantId `

                                                                -Interactive `

                                                                -FactoryLogShare $DiagnosticLogPath `

                                                                -ObsRootFolderPath $ObsRootFolderPath `

                                                                -Cloud $Cloud `

                                                                -RegistrationRegion $RegistrationRegion `

                                                                -GcsRegion $RegistrationRegion `

                                                                -SkipArcForServer $skipArcForServer -ParseOnce | Out-Null

        }

        elseif ($PSCmdlet.ParameterSetName -eq "PassThrough") {

            & .\Install-StandaloneObservability.ps1 -ResourceGroupName $ResourceGroupName `

                                                                -SubscriptionId $SubscriptionId `

                                                                -TenantId $TenantId `

                                                                -PassThrough `

                                                                -FactoryLogShare $DiagnosticLogPath `

                                                                -ObsRootFolderPath $ObsRootFolderPath `

                                                                -Cloud $Cloud `

                                                                -RegistrationRegion $RegistrationRegion `

                                                                -GcsRegion $RegistrationRegion `

                                                                -SkipArcForServer $skipArcForServer -ParseOnce | Out-Null

        }

        else {

            & .\Install-StandaloneObservability.ps1 -ResourceGroupName $ResourceGroupName `

                                                                -SubscriptionId $SubscriptionId `

                                                                -TenantId $TenantId `

                                                                -RegistrationCredential $RegistrationCredential `

                                                                -FactoryLogShare $DiagnosticLogPath `

                                                                -ObsRootFolderPath $ObsRootFolderPath `

                                                                -Cloud $Cloud `

                                                                -RegistrationRegion $RegistrationRegion `

                                                                -GcsRegion $RegistrationRegion `

                                                                -SkipArcForServer $skipArcForServer -ParseOnce | Out-Null

        }

        Write-Host "Going to Wait for MA to flush the Cahce folder: $CacheFlushWaitTimeInSec"

        Start-Sleep -Seconds $CacheFlushWaitTimeInSec

    }

    catch

    {

        $exception = $_

        Log-Info -Message "" -ConsoleOut

        Trace-Execution "$OperationType failed. $exception"

        Trace-Execution "$($exception.ScriptStackTrace)"

        $cmdletException = $_

        throw $exception

    }

    finally

    {

        $Script:ErrorActionPreference = 'SilentlyContinue'

        # Write result to StandaloneObs channel

        Write-ETWLog -Source $LogSource -Message "Standalone Observability Status: $cmdletFailed" -EventId $EventID

        # Write validation result to report object and close out report

        $envcheckerReport | Add-Member -MemberType NoteProperty -Name 'StandaloneObservability' -Value $cmdletFailed -Force

        $envcheckerReport = Close-AzStackHciEnvJob -report $envcheckerReport

        Write-AzStackHciEnvReport -report $envcheckerReport

        if ($PSCmdlet.ParameterSetName -eq "ServicePrincipal") {

            & .\Uninstall-StandaloneObservability.ps1 -RegistrationSPCredential $RegistrationSPCredential `

                                                                -Cloud $Cloud -SkipArcForServer $skipArcForServer | Out-Null

        }

        else {

            $token = Get-AzAccessToken

            if ($null -eq $token)

            {

                 Write-Host "Token was null. Going to try to use Connect-AzAccount to get the token."

                 Connect-AzAccount -Credential $RegistrationCredential -Environment $Cloud -Tenant $TenantId -Subscription $SubscriptionId | Out-Null

                 $token = Get-AzAccessToken

            }

            & .\Uninstall-StandaloneObservability.ps1 -AccessToken $token.Token -SkipArcForServer $skipArcForServer | Out-Null

        }

        Pop-Location

    }

}

 function Get-TenantId

 {

     [CmdletBinding()]

     param (

         [Parameter(Mandatory=$false)]

         [ValidateSet("AzureCloud", "AzureChinaCloud", "AzureGermanCloud", "AzureUSGovernment")]

         [string] $AzureEnvironment = "AzureCloud",

         [Parameter(Mandatory=$true)]

         [string] $SubscriptionId

     )

     $commandName = $MyInvocation.MyCommand

     $endpoints = Get-AzureURIs -AzureEnvironment $AzureEnvironment

     $params = @{

         UseBasicParsing = $true

         ErrorAction     = 'Stop'

         Uri             = $endpoints.ARMUri.TrimEnd('/') + "/subscriptions/${SubscriptionId}?api-version=1.0"

     }

     $response = try { Invoke-WebRequest @params } catch { $_.Exception.Response }

     if ($response.StatusCode -eq [System.Net.HttpStatusCode]::NotFound) {

         throw "[$commandName] SubscriptionId $SubscriptionId not found"

     }

     $header   = $response.GetResponseHeader('WWW-Authenticate')

     Write-Verbose "[$commandName] $header"

     $guidPattern = "[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}"

     $tenantId = $header.Split(' ') | Where-Object { $_ -like '*authorization_uri*' } | Select-Object -First 1 | ForEach-Object { [Regex]::Matches($_, $guidPattern).Value }

     if ([string]::IsNullOrEmpty($tenantId)) {

         Write-Verbose "[$commandName] Response $($response | ConvertTo-Json -depth 5)"

         throw "[$commandName] Unable to get tenantId for SubscriptionId $SubscriptionId"

     }

     Write-Verbose "[$commandName] Retrieved tenantId $tenantId"

     return ,$tenantId

 }

 <#

 .Synopsis

    Builds graph and login endpoints for a given AzureEnvironment

 #>

 function Get-AzureURIs {

     [CmdletBinding()]

     param (

         [Parameter(Mandatory=$false)]

         [ValidateSet("AzureCloud", "AzureChinaCloud", "AzureGermanCloud", "AzureUSGovernment")]

         [string] $AzureEnvironment = "AzureCloud"

     )

     $commandName = $MyInvocation.MyCommand

     $fullUri = "https://management.azure.com/metadata/endpoints?api-version=2023-01-01"

     try {

         $response = Invoke-RestMethod -Uri $fullUri -ErrorAction Stop -UseBasicParsing -TimeoutSec 30 -Verbose

     } catch {

         $message = "[$commandName] Error $($_.Exception)"

         Write-Verbose $message

         throw $message

     }

     $data = $response | Where name -EQ $AzureEnvironment

     if (-not $data) {

         throw New-Object NotImplementedException("Unknown environment type $AzureEnvironment")

     }

     # sample @{ GraphUri = "https://graph.windows.net/"; LoginUri = "https://login.microsoftonline.com/"; ManagementServiceUri = "https://management.core.windows.net/"; ARMUri = "https://management.azure.com/" }

     $endpointProperties = @{

         GraphUri = $data.graph

         LoginUri = $data.authentication.loginEndpoint

         ManagementServiceUri = $data.authentication.audiences[0]

         ARMUri = $data.resourceManager

         MsGraphUri = $data.microsoftGraphResourceId

     }

     Write-Verbose "[$commandName] AzureEnvironment $AzureEnvironment, EndpointProperties $($endpointProperties | ConvertTo-Json -Depth 2)"

     return $endpointProperties

 }

Export-ModuleMember -Function Send-AzStackHciDiagnosticData

# SIG # Begin signature block

# MIIoQwYJKoZIhvcNAQcCoIIoNDCCKDACAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBLBCzButRY72WH

# FxSCao2SHuSkRwEpfvr2RTA6XpZ+E6CCDXYwggX0MIID3KADAgECAhMzAAADrzBA

# DkyjTQVBAAAAAAOvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwOTAwWhcNMjQxMTE0MTkwOTAwWjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDOS8s1ra6f0YGtg0OhEaQa/t3Q+q1MEHhWJhqQVuO5amYXQpy8MDPNoJYk+FWA

# hePP5LxwcSge5aen+f5Q6WNPd6EDxGzotvVpNi5ve0H97S3F7C/axDfKxyNh21MG

# 0W8Sb0vxi/vorcLHOL9i+t2D6yvvDzLlEefUCbQV/zGCBjXGlYJcUj6RAzXyeNAN

# xSpKXAGd7Fh+ocGHPPphcD9LQTOJgG7Y7aYztHqBLJiQQ4eAgZNU4ac6+8LnEGAL

# go1ydC5BJEuJQjYKbNTy959HrKSu7LO3Ws0w8jw6pYdC1IMpdTkk2puTgY2PDNzB

# tLM4evG7FYer3WX+8t1UMYNTAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQURxxxNPIEPGSO8kqz+bgCAQWGXsEw

# RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW

# MBQGA1UEBRMNMjMwMDEyKzUwMTgyNjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci

# tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG

# CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu

# Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0

# MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAISxFt/zR2frTFPB45Yd

# mhZpB2nNJoOoi+qlgcTlnO4QwlYN1w/vYwbDy/oFJolD5r6FMJd0RGcgEM8q9TgQ

# 2OC7gQEmhweVJ7yuKJlQBH7P7Pg5RiqgV3cSonJ+OM4kFHbP3gPLiyzssSQdRuPY

# 1mIWoGg9i7Y4ZC8ST7WhpSyc0pns2XsUe1XsIjaUcGu7zd7gg97eCUiLRdVklPmp

# XobH9CEAWakRUGNICYN2AgjhRTC4j3KJfqMkU04R6Toyh4/Toswm1uoDcGr5laYn

# TfcX3u5WnJqJLhuPe8Uj9kGAOcyo0O1mNwDa+LhFEzB6CB32+wfJMumfr6degvLT

# e8x55urQLeTjimBQgS49BSUkhFN7ois3cZyNpnrMca5AZaC7pLI72vuqSsSlLalG

# OcZmPHZGYJqZ0BacN274OZ80Q8B11iNokns9Od348bMb5Z4fihxaBWebl8kWEi2O

# PvQImOAeq3nt7UWJBzJYLAGEpfasaA3ZQgIcEXdD+uwo6ymMzDY6UamFOfYqYWXk

# ntxDGu7ngD2ugKUuccYKJJRiiz+LAUcj90BVcSHRLQop9N8zoALr/1sJuwPrVAtx

# HNEgSW+AKBqIxYWM4Ev32l6agSUAezLMbq5f3d8x9qzT031jMDT+sUAoCw0M5wVt

# CUQcqINPuYjbS1WgJyZIiEkBMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq

# hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5

# IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG

# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG

# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg

# Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC

# CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03

# a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr

# rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg

# OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy

# 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9

# sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh

# dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k

# A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB

# w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn

# Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90

# lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w

# ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o

# ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa

# BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG

# AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t

# L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV

# HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG

# AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl

# AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb

# C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l

# hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6

# I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0

# wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560

# STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam

# ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa

# J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah

# XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA

# 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt

# Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr

# /Xmfwb1tbWrJUnMTDXpQzTGCGiMwghofAgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp

# Z25pbmcgUENBIDIwMTECEzMAAAOvMEAOTKNNBUEAAAAAA68wDQYJYIZIAWUDBAIB

# BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO

# MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIAuE9IJ4WuqE/Px+REsmHNv0

# 2aiJ7RCpD2XOks1IU2M0MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A

# cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB

# BQAEggEAeHr67gOz47UMeLxe6sDfSAvgJ9O2Lz+WksQTlz+a40aEvc6zYyy0qyN4

# jaWVcyvKoW+Lnvi4XsnRWsehL9qMTH/UUnBuxU/pfQI9Z1JzS90msHUPQjGnedWk

# yII+qry6KnkgZ/twfpSc9y4P3Sua2wyN7o+1tRgHrP/ow59ovAlw4cwPI5XUGVBk

# gY+zMj0z3enTBvl4o/IISa91L1PDfH5Y/XEitF48+2Ma+BYGbEDhXmU6gWsDZFJT

# wsQ5LjuNsr2YpTSV2U13i798Tpd6rwfZdtpt9LVf+7yxOI5kORgfGc5OXi+Ih9MH

# Keq3CA4PAXQZKUKzY1NERMpqVkKJP6GCF60wghepBgorBgEEAYI3AwMBMYIXmTCC

# F5UGCSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsq

# hkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl

# AwQCAQUABCBX8HkOC1GnvNHf7Bf8Acp9aPA15dboYFXlmf6hAtQ6ZgIGZutJ0vFr

# GBMyMDI0MTAwOTAxMTI0Ni4zMzZaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl

# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT

# Tjo0QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg

# U2VydmljZaCCEfswggcoMIIFEKADAgECAhMzAAAB/xI4fPfBZdahAAEAAAH/MA0G

# CSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0

# MDcyNTE4MzExOVoXDTI1MTAyMjE4MzExOVowgdMxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9w

# ZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjRDMUEt

# MDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNl

# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyeiV0pB7bg8/qc/mkiDd

# JXnzJWPYgk9mTGeI3pzQpsyrRJREWcKYHd/9db+g3z4dU4VCkAZEXqvkxP5QNTtB

# G5Ipexpph4PhbiJKwvX+US4KkSFhf1wflDAY1tu9CQqhhxfHFV7vhtmqHLCCmDxh

# ZPmCBh9/XfFJQIUwVZR8RtUkgzmN9bmWiYgfX0R+bDAnncUdtp1xjGmCpdBMygk/

# K0h3bUTUzQHb4kPf2ylkKPoWFYn2GNYgWw8PGBUO0vTMKjYD6pLeBP0hZDh5P3f4

# xhGLm6x98xuIQp/RFnzBbgthySXGl+NT1cZAqGyEhT7L0SdR7qQlv5pwDNerbK3Y

# SEDKk3sDh9S60hLJNqP71iHKkG175HAyg6zmE5p3fONr9/fIEpPAlC8YisxXaGX4

# RpDBYVKpGj0FCZwisiZsxm0X9w6ZSk8OOXf8JxTYWIqfRuWzdUir0Z3jiOOtaDq7

# XdypB4gZrhr90KcPTDRwvy60zrQca/1D1J7PQJAJObbiaboi12usV8axtlT/dCeP

# C4ndcFcar1v+fnClhs9u3Fn6LkHDRZfNzhXgLDEwb6dA4y3s6G+gQ35o90j2i6am

# aa8JsV/cCF+iDSGzAxZY1sQ1mrdMmzxfWzXN6sPJMy49tdsWTIgZWVOSS9uUHhSY

# kbgMxnLeiKXeB5MB9QMcOScCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTD+pXk/rT/

# d7E/0QE7hH0wz+6UYTAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBf

# BgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz

# L2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmww

# bAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29m

# dC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El

# MjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUF

# BwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAOSNN5MpLiyun

# m866frWIi0hdazKNLgRp3WZPfhYgPC3K/DNMzLliYQUAp6WtgolIrativXjOG1lI

# jayG9r6ew4H1n5XZdDfJ12DLjopap5e1iU/Yk0eutPyfOievfbsIzTk/G51+uiUJ

# k772nVzau6hI2KGyGBJOvAbAVFR0g8ppZwLghT4z3mkGZjq/O4Z/PcmVGtjGps2T

# CtI4rZjPNW8O4c/4aJRmYQ/NdW91JRrOXRpyXrTKUPe3kN8N56jpl9kotLhdvd89

# RbOsJNf2XzqbAV7XjV4caCglA2btzDxcyffwXhLu9HMU3dLYTAI91gTNUF7BA9q1

# EvSlCKKlN8N10Y4iU0nyIkfpRxYyAbRyq5QPYPJHGA0Ty0PD83aCt79Ra0IdDIMS

# uwXlpUnyIyxwrDylgfOGyysWBwQ/js249bqQOYPdpyOdgRe8tXdGrgDoBeuVOK+c

# RClXpimNYwr61oZ2/kPMzVrzRUYMkBXe9WqdSezh8tytuulYYcRK95qihF0irQs6

# /WOQJltQX79lzFXE9FFln9Mix0as+C4HPzd+S0bBN3A3XRROwAv016ICuT8hY1In

# yW7jwVmN+OkQ1zei66LrU5RtAz0nTxx5OePyjnTaItTSY4OGuGU1SXaH49JSP3t8

# yGYA/vorbW4VneeD721FgwaJToHFkOIwggdxMIIFWaADAgECAhMzAAAAFcXna54C

# m0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UE

# CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9z

# b2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZp

# Y2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMy

# MjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV

# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0B

# AQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51

# yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY

# 6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9

# cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN

# 7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDua

# Rr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74

# kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2

# K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5

# TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZk

# i1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9Q

# BXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3Pmri

# Lq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUC

# BBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJl

# pxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIB

# FjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9y

# eS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUA

# YgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# 1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIw

# MTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0w

# Ni0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/yp

# b+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulm

# ZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM

# 9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECW

# OKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4

# FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3Uw

# xTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPX

# fx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVX

# VAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGC

# onsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU

# 5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEG

# ahC0HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJV

# UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE

# ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJl

# bGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVT

# Tjo0QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAg

# U2VydmljZaIjCgEBMAcGBSsOAwIaAxUAqROMbMS8JcUlcnPkwRLFRPXFspmggYMw

# gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD

# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsF

# AAIFAOqwJSYwIhgPMjAyNDEwMDgyMTM5NTBaGA8yMDI0MTAwOTIxMzk1MFowdDA6

# BgorBgEEAYRZCgQBMSwwKjAKAgUA6rAlJgIBADAHAgEAAgIKXzAHAgEAAgITsTAK

# AgUA6rF2pgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIB

# AAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQBzQiY07FEUhOen

# m6kx2rf8qISPVuJ1BYoPjZErEMx0EaWVhAQGHaFgy0OPKikbZSHfyIx4L5IIQatu

# xi5cbfyrXZOZFaZ4cCEJ3SZ1y9HrWkKeSv6dUeAG4gSiSUAODA7TGm/HVJZLQ7yp

# rQtTZRnP0OLnwM1k5xyZJU8TKdql3DMNU4QQOAZrXCj3g88uAl7Kfx6bBC+T1Nyb

# 511GI8z/qqRV4RBtc9y3u7UNs4k4yPP6wfuetHmc8mZTkf0ss7nNuTFIXRH3jO2R

# yV8mxYypEBRILqGWoEmiIoNn9wthrlIFa6JxO8JWZuTKAdyhGtEvQxeh6b0uQDGq

# Nia/VapdMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw

# MTACEzMAAAH/Ejh898Fl1qEAAQAAAf8wDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqG

# SIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgkJfniYaxlaWn

# 1ud3ZKvDdIlk9kXfgmHK9JdRyvpwsngwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHk

# MIG9BCDkMu++yQJ3aaycIuMT6vA7JNuMaVOI3qDjSEV8upyn/TCBmDCBgKR+MHwx

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p

# Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB/xI4fPfBZdahAAEAAAH/

# MCIEIL5Cc5fop5CuEtPzNX9xsNxj8mMvTAQugdNYCYrnpaQkMA0GCSqGSIb3DQEB

# CwUABIICAGTUa1B3fsNc733q0+QvG6RESXIDdEXPYnBMWNoDNSKePYT5f4QvvlLV

# EB6ACaoP8elLjgM7r8Y5oJ4EZ4XPdvR3eDTUs0Qt6ZiitnAZTF51/xuSs3jYSqA5

# qkQwlg7MDIUg+bjuyuthmciCpoytSdk4KSakSO+/KarE5hJfsHhmG9B91v5L69Pi

# r6VD1euzK6o3yVeAssByIxJ9M3UNd6pvP/8MKm9YuObbqTtiqFA99pGg8g7QqKB5

# lPQT+U7ik0bNkff83O2gwq5b0t76bkFg6iSQmbmFVrGHsnBpSgRyrjXnSK9oEFPL

# NF/bFbTsBUXNMYeDYDWKa2dDDr/ZLp167O/YQaOUqYP6knybBiExoLs/jV46wPgo

# znYsgcTLbEkvayaWbb8DcVNvgKGJy8lWaw+7UkX3hU0jOxI+fXP+LYghe0gJDVTm

# OYqtS8PPZGVtm0+rt8wetKFd8/el8eB3ctW7EQjoxNbm3gYagxur/LMrpVyBP14u

# Yp2yzRNWzhcK6THYrMYZWYiCMEy5Ti09E7ar5tM2WGrbpiN4oOyq/7aAvvcRBK27

# oh7TP83NXsHlb0CVkQz+PnTYutVrTf40MFsDmnbeBkePgIWk8HvAKuB1Ek/o8lNH

# ayjK6hEcupiHPttIs4zE0hnmydT07Hex/7fKz+PCVn/CEvHARUr+

# SIG # End signature block