sd/SSH/2504.0.psd1

# Copyright (c) Microsoft Corporation. All rights reserved.

# Autogenerated. Do not edit.

@{
    Metadata = @'
{"name":"SSH","description":"Recommendations by Microsoft to secure OpenSSH server configurations for Windows Server machines","version":"2504.0","include":{"installationType":"Server*","minVersion":"24H2"},"settings":[{"id":"d9868b1f-0c8e-4adb-889e-14e374874ece","name":"AllowGroups","description":"Allowed groups for SSH","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metaType":"multistring","delimiter":" ","items":{"type":"string"}},"default":["administrators","openssh users"],"compliance":{"delimiter":" ","items":{"enum":["administrators","openssh users"]},"minItems":2,"maxItems":2,"uniqueItems":true}},{"id":"dc8da71d-aeba-4c03-8835-36fe158e372a","name":"AllowUsers","description":"Allowed users for SSH","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metaType":"multistring","delimiter":" ","items":{"type":"string"}},"default":"","compliance":{"delimiter":" ","items":{"enum":[]},"minItems":0,"maxItems":0,"uniqueItems":true}},{"name":"AuthenticationMethods","description":"Authentication Method that can be used.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string","enum":["password","publickey","any"]},"default":"any","compliance":{"items":{"enum":["password","publickey","any"]}}},{"name":"AuthorizedKeysFile","description":"Specifies the file that contains the public keys used for user authentication.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string"},"default":"%programdata%/ssh/administrators_authorized_keys","compliance":{"const":"%programdata%/ssh/administrators_authorized_keys"}},{"id":"9e240540-5e0a-4b60-beb2-57421c65a0b9","name":"Banner","description":"The contents of the banner file that is sent to the remote user before authentication is allowed.","severity":"informational","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string"},"default":"#######################################################################\r\n\r\nAuthorized access only!\r\n\r\nIf you are not authorized to access or use this system, disconnect now!\r\n\r\n#######################################################################\r\n","compliance":{"const":"#######################################################################\r\n\r\nAuthorized access only!\r\n\r\nIf you are not authorized to access or use this system, disconnect now!\r\n\r\n#######################################################################\r\n"}},{"id":"b07d4c69-a1d9-4c22-a486-634ec3b8c380","name":"Ciphers","description":"The list of allowed ciphers","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metaType":"multistring","delimiter":",","items":{"type":"string","enum":["3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com"]}},"default":["aes128-ctr","aes192-ctr","aes256-ctr"],"compliance":{"delimiter":",","items":{"enum":["aes128-ctr","aes192-ctr","aes256-ctr"]},"minItems":3,"maxItems":3,"uniqueItems":true}},{"id":"fd9f1554-6b72-8610-826e-78578e6f7811","name":"ClientAliveCountMax","description":"The number of client alive messages which may be sent without sshd receiving any messages back from the client","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":0,"compliance":{"const":0}},{"id":"c848bba4-93b1-4756-b08a-ff94c2b4814c","name":"ClientAliveInterval","description":"Timeout interval in seconds after which if no data has been received from the client, sshd will send a message to request a response","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":3600,"compliance":{"const":3600}},{"id":"f85c04a4-427b-4ee1-b988-c3ff7b4998cc","name":"DenyGroups","description":"Denied groups for SSH","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metaType":"multistring","delimiter":" ","items":{"type":"string"}},"default":"","compliance":{"delimiter":" ","items":{"enum":[]},"minItems":0,"maxItems":0,"uniqueItems":true}},{"id":"1db7d147-3a75-4637-8cdc-c119e22d0206","name":"DenyUsers","description":"Denied users for SSH","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metaType":"multistring","delimiter":" ","items":{"type":"string"}},"default":"","compliance":{"delimiter":" ","items":{"enum":[]},"minItems":0,"maxItems":0,"uniqueItems":true}},{"name":"GSSAPIAuthentication","description":"Specifies whether user authentication based on GSSAPI is allowed.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"boolean","metaType":"yesorno"},"default":false,"compliance":{"const":false}},{"name":"HostKey","description":"Specifies a file containing the private host key used by ssh","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string"},"default":"__PROGRAMDATA__/ssh/ssh_host_ecdsa_key","compliance":{"const":"__PROGRAMDATA__/ssh/ssh_host_ecdsa_key"}},{"id":"39aa5c2b-5b36-84a7-4022-570a53c86ff9","name":"LoginGraceTime","description":"The time in seconds after which the server disconnects if the user has not successfully logged in","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":60,"compliance":{"const":60}},{"id":"483e8b0c-7572-8467-7e0c-26e1e9ce6359","name":"MACs","description":"The list of available MAC algorithms, known as MACs","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"array","metaType":"multistring","delimiter":",","items":{"type":"string","enum":["hmac-md5","hmac-md5-96","hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-512","umac-64@openssh.com","umac-128@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com"]}},"default":"hmac-sha2-256","compliance":{"delimiter":",","items":{"enum":["hmac-sha2-256"]},"minItems":1,"maxItems":1,"uniqueItems":true}},{"id":"e7708534-5d98-406f-83ae-1de835b2906e","name":"MaxAuthTries","description":"Maximum number of authentication attempts","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0},"default":6,"compliance":{"const":6}},{"id":"d50c3f39-264c-4cdc-b0ba-89de8a0f6828","name":"PermitEmptyPasswords","description":"Whether the server allows login to account with empty password strings","severity":"critical","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"boolean","metaType":"yesorno"},"default":false,"compliance":{"const":false}},{"id":"1310042d-193f-414a-a7e3-b2c4e89aa537","name":"Port","description":"The SSH port","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"integer","minimum":0,"maximum":65535},"default":22,"compliance":{"const":22}},{"name":"SyslogFacility","description":"Gives the facility code that is used when logging messages.","severity":"important","provider":{"type":"powershell","name":"SSH"},"schema":{"type":"string","enum":["DAEMON","USER","AUTH","LOCAL0","LOCAL1","LOCAL2","LOCAL3","LOCAL4","LOCAL5","LOCAL6","LOCAL7"]},"default":"LOCAL0","compliance":{"const":"LOCAL0"}}],"alias":{"get":"msftinventory","set":"msftpolicies"},"context":"device"}
'@

}

# SIG # Begin signature block
# MIIoNAYJKoZIhvcNAQcCoIIoJTCCKCECAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCUhyT//rbltowT
# mUZcJUow6jN/UDcQ5nYucp25EUNY5KCCDYUwggYDMIID66ADAgECAhMzAAAEA73V
# lV0POxitAAAAAAQDMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD
# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p
# bmcgUENBIDIwMTEwHhcNMjQwOTEyMjAxMTEzWhcNMjUwOTExMjAxMTEzWjB0MQsw
# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u
# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy
# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
# AQCfdGddwIOnbRYUyg03O3iz19XXZPmuhEmW/5uyEN+8mgxl+HJGeLGBR8YButGV
# LVK38RxcVcPYyFGQXcKcxgih4w4y4zJi3GvawLYHlsNExQwz+v0jgY/aejBS2EJY
# oUhLVE+UzRihV8ooxoftsmKLb2xb7BoFS6UAo3Zz4afnOdqI7FGoi7g4vx/0MIdi
# kwTn5N56TdIv3mwfkZCFmrsKpN0zR8HD8WYsvH3xKkG7u/xdqmhPPqMmnI2jOFw/
# /n2aL8W7i1Pasja8PnRXH/QaVH0M1nanL+LI9TsMb/enWfXOW65Gne5cqMN9Uofv
# ENtdwwEmJ3bZrcI9u4LZAkujAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE
# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQU6m4qAkpz4641iK2irF8eWsSBcBkw
# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh
# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwMjkyNjAfBgNVHSMEGDAW
# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw
# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov
# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx
# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB
# AFFo/6E4LX51IqFuoKvUsi80QytGI5ASQ9zsPpBa0z78hutiJd6w154JkcIx/f7r
# EBK4NhD4DIFNfRiVdI7EacEs7OAS6QHF7Nt+eFRNOTtgHb9PExRy4EI/jnMwzQJV
# NokTxu2WgHr/fBsWs6G9AcIgvHjWNN3qRSrhsgEdqHc0bRDUf8UILAdEZOMBvKLC
# rmf+kJPEvPldgK7hFO/L9kmcVe67BnKejDKO73Sa56AJOhM7CkeATrJFxO9GLXos
# oKvrwBvynxAg18W+pagTAkJefzneuWSmniTurPCUE2JnvW7DalvONDOtG01sIVAB
# +ahO2wcUPa2Zm9AiDVBWTMz9XUoKMcvngi2oqbsDLhbK+pYrRUgRpNt0y1sxZsXO
# raGRF8lM2cWvtEkV5UL+TQM1ppv5unDHkW8JS+QnfPbB8dZVRyRmMQ4aY/tx5x5+
# sX6semJ//FbiclSMxSI+zINu1jYerdUwuCi+P6p7SmQmClhDM+6Q+btE2FtpsU0W
# +r6RdYFf/P+nK6j2otl9Nvr3tWLu+WXmz8MGM+18ynJ+lYbSmFWcAj7SYziAfT0s
# IwlQRFkyC71tsIZUhBHtxPliGUu362lIO0Lpe0DOrg8lspnEWOkHnCT5JEnWCbzu
# iVt8RX1IV07uIveNZuOBWLVCzWJjEGa+HhaEtavjy6i7MIIHejCCBWKgAwIBAgIK
# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm
# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw
# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD
# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG
# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la
# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc
# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D
# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+
# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk
# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6
# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd
# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL
# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd
# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3
# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS
# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI
# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL
# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD
# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv
# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3
# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf
# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF
# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h
# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA
# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn
# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7
# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b
# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/
# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy
# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp
# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi
# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb
# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS
# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL
# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX
# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGgUwghoBAgEBMIGVMH4x
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p
# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAAQDvdWVXQ87GK0AAAAA
# BAMwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw
# LwYJKoZIhvcNAQkEMSIEIDQbc7nxTYqCsXQS8XsutdB9he1frpUeSMvHheHb/A1+
# MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRw
# Oi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAEeZV4RLBZvRP
# QaQSdR+7QtdKriTlOi4A7S/jVis/NbBQzbv+0dtNE9wemaoxiGcRn+mWM07nYmF4
# 5jHsSru+vd+ZqzzY/CCd4l9iFuvGx17AGt7/Cr2M0KuKmtLXc70wAAJxWO9WyWjx
# j/1Bk7ijhxlZuIbzHQhFD6S8S1ALFZiSYziR/CCzeBRRxYyEYemLmVMRohMkuC6E
# modgN2+lOaMNyNTz5uXaY4iMEHZAD+Q+qxtSBw5rIoQ8N7shhFxmTfRQeMGEajqd
# mOguY/zf5hP7gcXUHqFpVwrzvk/cX9os9F2uPXKVYDQbwgAvCRdsqL80r1jnGaeo
# jDnZzxxzpKGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCC
# F4YwgheCAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkE
# ggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAM3rkr9O66
# ZO/xkj4tGqiElUB35y96/jwnvb33T6t0xQIGZ+0iQmWvGBMyMDI1MDQxNTE3MzA1
# OS44MjhaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25z
# IExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyRDFBLTA1RTAtRDk0
# NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggco
# MIIFEKADAgECAhMzAAAB/XP5aFrNDGHtAAEAAAH9MA0GCSqGSIb3DQEBCwUAMHwx
# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt
# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p
# Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI0MDcyNTE4MzExNloXDTI1
# MTAyMjE4MzExNlowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
# b24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRl
# ZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjJEMUEtMDVFMC1EOTQ3MSUwIwYD
# VQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0B
# AQEFAAOCAg8AMIICCgKCAgEAoWWs+D+Ou4JjYnRHRedu0MTFYzNJEVPnILzc02R3
# qbnujvhZgkhp+p/lymYLzkQyG2zpxYceTjIF7HiQWbt6FW3ARkBrthJUz05ZnKpc
# F31lpUEb8gUXiD2xIpo8YM+SD0S+hTP1TCA/we38yZ3BEtmZtcVnaLRp/Avsqg+5
# KI0Kw6TDJpKwTLl0VW0/23sKikeWDSnHQeTprO0zIm/btagSYm3V/8zXlfxy7s/E
# VFdSglHGsUq8EZupUO8XbHzz7tURyiD3kOxNnw5ox1eZX/c/XmW4H6b4yNmZF0wT
# Zuw37yA1PJKOySSrXrWEh+H6++Wb6+1ltMCPoMJHUtPP3Cn0CNcNvrPyJtDacqjn
# ITrLzrsHdOLqjsH229Zkvndk0IqxBDZgMoY+Ef7ffFRP2pPkrF1F9IcBkYz8hL+Q
# jX+u4y4Uqq4UtT7VRnsqvR/x/+QLE0pcSEh/XE1w1fcp6Jmq8RnHEXikycMLN/a/
# KYxpSP3FfFbLZuf+qIryFL0gEDytapGn1ONjVkiKpVP2uqVIYj4ViCjy5pLUceMe
# qiKgYqhpmUHCE2WssLLhdQBHdpl28+k+ZY6m4dPFnEoGcJHuMcIZnw4cOwixojRO
# r+Nq71cJj7Q4L0XwPvuTHQt0oH7RKMQgmsy7CVD7v55dOhdHXdYsyO69dAdK+nWl
# yYcCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBTpDMXA4ZW8+yL2+3vA6RmU7oEKpDAf
# BgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQ
# hk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQl
# MjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBe
# MFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Nl
# cnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAM
# BgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQE
# AwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAY9hYX+T5AmCrYGaH96TdR5T52/PNOG7y
# SYeopv4flnDWQLhBlravAg+pjlNv5XSXZrKGv8e4s5dJ5WdhfC9ywFQq4TmXnUev
# PXtlubZk+02BXK6/23hM0TSKs2KlhYiqzbRe8QbMfKXEDtvMoHSZT7r+wI2IgjYQ
# wka+3P9VXgERwu46/czz8IR/Zq+vO5523Jld6ssVuzs9uwIrJhfcYBj50mXWRBcM
# hzajLjWDgcih0DuykPcBpoTLlOL8LpXooqnr+QLYE4BpUep3JySMYfPz2hfOL3g0
# 2WEfsOxp8ANbcdiqM31dm3vSheEkmjHA2zuM+Tgn4j5n+Any7IODYQkIrNVhLdML
# 09eu1dIPhp24lFtnWTYNaFTOfMqFa3Ab8KDKicmp0AthRNZVg0BPAL58+B0UcoBG
# KzS9jscwOTu1JmNlisOKkVUVkSJ5Fo/ctfDSPdCTVaIXXF7l40k1cM/X2O0JdAS9
# 7T78lYjtw/PybuzX5shxBh/RqTPvCyAhIxBVKfN/hfs4CIoFaqWJ0r/8SB1CGsyy
# IcPfEgMo8ceq1w5Zo0JfnyFi6Guo+z3LPFl/exQaRubErsAUTfyBY5/5liyvjAgy
# DYnEB8vHO7c7Fg2tGd5hGgYs+AOoWx24+XcyxpUkAajDhky9Dl+8JZTjts6BcT9s
# YTmOodk/SgIwggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqG
# SIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ
# MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
# MTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkg
# MjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYT
# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBU
# aW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
# AgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4X
# YDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTz
# xXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7
# uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlw
# aQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedG
# bsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXN
# xF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03
# dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9
# ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5
# UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReT
# wDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZ
# MBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8
# RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAE
# VTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1p
# Y3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAww
# CgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQD
# AgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb
# 186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29t
# L3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoG
# CCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQu
# Y29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZI
# hvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9
# MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2Lpyp
# glYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OO
# PcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8
# DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA
# 0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1Rt
# nWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjc
# ZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq7
# 7EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJ
# C4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328
# y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYID
# VjCCAj4CAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz
# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv
# cnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25z
# IExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjoyRDFBLTA1RTAtRDk0
# NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcG
# BSsOAwIaAxUAoj0WtVVQUNSKoqtrjinRAsBUdoOggYMwgYCkfjB8MQswCQYDVQQG
# EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG
# A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQg
# VGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAOuow2owIhgPMjAy
# NTA0MTUxMTM3MTRaGA8yMDI1MDQxNjExMzcxNFowdDA6BgorBgEEAYRZCgQBMSww
# KjAKAgUA66jDagIBADAHAgEAAgIxfjAHAgEAAgIShTAKAgUA66oU6gIBADA2Bgor
# BgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAID
# AYagMA0GCSqGSIb3DQEBCwUAA4IBAQB9UHNacIK3y6F4A0K5tnHLmCnPyNr7k5uR
# 3y5fDRuDhCo++HV8UcFPMDVoVoNeXu81y/srA+TPIlZ6e+0knv+yFhVeoWTrJn9J
# 1dVUoDx9b40MbEzcVsZs3rocrV3kNrk/k07uX5vPyrfnZE11YbdmHxN+lKCPVj9r
# wwTEIHjkg/HiPr+AqNrOcEAIUxN+lIImKwoLIlWV4lIh78ZL6meJCTByisNISczz
# Jx82KngEEGOFIM596yd+1iyLIrLTltjUJ0/AU0VQ+Yi5+7ZINv+jt4TvtVE48EAH
# LZ1mz0Gk1M9muvSy5Cc7kCPupfr7dzzZkNspnORGx/0ws3exmLNuMYIEDTCCBAkC
# AQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV
# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG
# A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAH9c/loWs0M
# Ye0AAQAAAf0wDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG
# 9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQg56GV2ML6WXgTzG2XJoTAJj8olRH+IGk5
# VesKz7YDmAYwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCAKEgNyUowvIfx
# /eDfYSupHkeF1p6GFwjKBs8lRB4NRzCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMw
# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN
# aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0
# YW1wIFBDQSAyMDEwAhMzAAAB/XP5aFrNDGHtAAEAAAH9MCIEILlNyKUVaKUDdwR9
# 49VSEtoipq8p8wYW6UAOv694o9s/MA0GCSqGSIb3DQEBCwUABIICAGXI5FEForpM
# tJ5kKaKYXCyXaCk0yFN9evdD7QGWJ/mk2coZ09hOZGnDB4WX42gx6UNfDgz/qKnQ
# +6HBGC8MRLsgpIQZN7G51uiaAp8qmL7YPYPjch+IIndb5/4Aj0sZNU+BIOvI2Igv
# 8G9PhCb8VMTifVjtWhqQX2Iui4olQYas/uLt1fibDbcnrsyHne3TayCkFVH8eG2N
# z3VUiSM/3PpyjImt8DEftS04KFPIdFo13TxGtaoLI29DW468lI0jhTrvRDlhL3Qb
# tdeCXKx6694aZS8WwLhq+B//3FNYFrQ+Qw0PM1ZU8OG8V4qi1mwWYxyBbGWQNzDs
# 2kBLV76ySz7AVhw7EdXsXLf56zgepsJcrY+MoIe+uVjhwRI6TqZjx/TcumJv8+zP
# VPCfNFmOF8QvQ/bQMu93f9DqOm8sFN4LK8tZGxy+Dwbam2/Iz+2/92Xs/NWiXRtd
# enHYdYD1U9YAG41+F1XQaINpOrP2j3Qp9zuHgvM97jRd+ZDKGqlWFDLPwxJlJyPO
# hDtoaT2D1NHjfGlzVA/3HKGWAFDHr3YGqov6w5nRhA+gQiMuH2kEOsnim0ZEpBzg
# oKXvyGO3V2LxRWA5Q5LozfDIUQM8HMD23kVkDktsolDhLpCsdUb7EpfSvlwTqkxh
# gJ1ZqqdY1hwY2khVuvbkyb9sVttEyvDa
# SIG # End signature block