From b86583031d077b2a3e104957e812fa8dbf7191cb Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 16 Jan 2019 00:47:58 +0000 Subject: [PATCH] Merged PR 13811: Added bitlocker info to Autopilot Added info about BitLocker encryption --- windows/deployment/windows-autopilot/TOC.md | 1 + .../deployment/windows-autopilot/bitlocker.md | 40 ++++++++++++++++++ .../images/bitlocker-encryption.png | Bin 0 -> 14308 bytes 3 files changed, 41 insertions(+) create mode 100644 windows/deployment/windows-autopilot/bitlocker.md create mode 100644 windows/deployment/windows-autopilot/images/bitlocker-encryption.png diff --git a/windows/deployment/windows-autopilot/TOC.md b/windows/deployment/windows-autopilot/TOC.md index dd630b65e0..0911105dfa 100644 --- a/windows/deployment/windows-autopilot/TOC.md +++ b/windows/deployment/windows-autopilot/TOC.md @@ -18,6 +18,7 @@ #### [Adding devices](add-devices.md) #### [Creating profiles](profiles.md) #### [Enrollment status page](enrollment-status.md) +#### [BitLocker encryption](bitlocker.md) ### [Administering Autopilot via Microsoft Store for Business](https://docs.microsoft.com/microsoft-store/add-profile-to-devices#manage-autopilot-deployment-profiles) ### [Administering Autopilot via Microsoft Intune](https://docs.microsoft.com/intune/enrollment-autopilot) ### [Administering Autopilot via Microsoft 365 Business & Office 365 Admin portal](https://support.office.com/article/Create-and-edit-Autopilot-profiles-5cf7139e-cfa1-4765-8aad-001af1c74faa) diff --git a/windows/deployment/windows-autopilot/bitlocker.md b/windows/deployment/windows-autopilot/bitlocker.md new file mode 100644 index 0000000000..f530d66f35 --- /dev/null +++ b/windows/deployment/windows-autopilot/bitlocker.md @@ -0,0 +1,40 @@ +--- +title: Setting the BitLocker encryption algorithm for Autopilot devices +description: Microsoft Intune provides a comprehensive set of configuration options to manage BitLocker on Windows 10 devices. +keywords: Autopilot, BitLocker, encryption, 256-bit, Windows 10 +ms.prod: w10 +ms.technology: Windows +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +ms.localizationpriority: medium +author: greg-lindsay +ms.author: greg-lindsay +--- + +# Setting the BitLocker encryption algorithm for Autopilot devices + +With Windows Autopilot, you can configure the BitLocker encryption settings to be applied before automatic encryption is started. This ensures that the default encrytion algorithm is not applied automatically when this is not the desired setting. Other BitLocker policies that must be applied prior to encryption can also be delivered before automatic BitLocker encryption begins. + +The BitLocker encryption algorithm is used when BitLocker is first enabled, and sets the strength to which full volume encryption should occur. Available encryption algorithms are: AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit or XTS-AES 256-bit encryption. The default value is XTS-AES 128-bit encryption. See [BitLocker CSP](https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp) for information about the recommended encryption algorithms to use. + +An example of encryption settings is shown below. + + ![BitLocker encryption settings](images/bitlocker-encryption.png) + +Note that a device which is encrypted automatically will need to be decrypted prior to changing the encyption algorithm. + +To ensure the desired BitLocker encryption algorithm is set before automatic encryption occurs for Autopilot devices: + +1. Configure the [encryption method settings](https://docs.microsoft.com/intune/endpoint-protection-windows-10#windows-encryption) in the Windows 10 Endpoint Protection profile to the desired encryption algorithm. +2. [Assign the policy](https://docs.microsoft.com/intune/device-profile-assign) to your Autopilot device group. + - **IMPORTANT**: The encryption policy must be assigned to **devices** in the group, not users. +3. Enable the Autopilot [Enrollment Status Page](https://docs.microsoft.com/windows/deployment/windows-autopilot/enrollment-status) (ESP) for these devices. This is a critical step because if the ESP is not enabled, the policy will not apply when the device boots. + +## Requirements + +Windows 10, version 1809 or later. + +## See also + +[Bitlocker overview](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview) diff --git a/windows/deployment/windows-autopilot/images/bitlocker-encryption.png b/windows/deployment/windows-autopilot/images/bitlocker-encryption.png new file mode 100644 index 0000000000000000000000000000000000000000..f2766e12d2415d8a70a8443f9b858ae51b6f924f GIT binary patch literal 14308 zcmcJ$cUV(TwD%hoLj%Pd+#54cJ|&gvuAc$Yd-6{Ci1nq!o9l>?*agTdrFG3S^&U} zLEMkv&TZTg=40$`z@8gqJ%tRPASi)q%;Pb z11!AN0WYN)@INbVlLPVa$qQ&^dRJ~Q&?)Y``b zUK--tq0Zk=G@pWZHq5YSy_(=FWbQvl3zS|mmyr#bcCJPDq0W|qmjccfKtsYy0pkIf z6WC%0dW++_cBjy=K2&kM19NIr>B?E~bUEu8*x%oOh&1Tn*5C6D!yV@<(eMEt$ng{9 zpGuiBR6|*L=10Scbk`l4yS+Jwxj4&=lR%e<`)H2Bvzadl0gk;9cK_s+jnW_S0F%p?XJH258Z@81*NVG$T&(Y8sNO^r*KPFG)h` zUkjQvyBGT6hMH;A=z=m~ZO=s=EX!bTe7Ow7U3Uy=bcYppC!NENcMH=@-^!@woaeX1rKL48c=MUiTvs;Vrz^qV16hlzOl9+F(gD%o`^RaMKCNOTi?{DFXO#1{K zblswHdRBJh?_N3nJ0oIZ0^B9dSF1nT;{J!=-F?=t3uXhBF^8-ROM}cz?W`xO8Wm-^p76hPZZ<7SBHHOWz}FkJa87@GU1`>Tjp$56irY zodqUirWVyF2p_~ZDuj{%ZO^gheWgW{z1`-XvrCcPwpmX@>(!s)&Lb2KokgCFfH-5* z=W3>oa?_$_5nNesw^zy%`^6@A;tI^09^GjfK7I;XsZiC7^PN@xdi0uZuQwDK9W?4S zv{F(I>NDG-KB7Px0_|p%YV>nNJ$j21^!s7v7yoiIr0%kEWm(cYyIIEbR9zLCy)iJi zccX^7jGl&bvh)*h9r0D(e<*#|)^Nv$K@YCKcBYR|sn+!4)(xvsG;cW}-jpCM^vFIJ zJ9?pKL};C(e&xgbx|Ac$;Cbn{9g!q`{z$QNJN5Tq!-WN>0?8F3 zkXa+{CF+Z)&vsR2(A5Ac@MPL}9_XZgd7zFoJ6myt9$$X&!<2kI`o<6^=}|1|hROuD zNK6?lb?)(wTXJr2=Cs)lgw2k^x9{5S$?USorR$2BWO~b6&nUa(@N}m_mo@piO$r}; z8`SIP87DdsM2ZcHykUrC?ugpuudN7kS9V+9{Duj{eEU3on^x=bX1hv=S<;7v$JFU! z9wDfyK<4(bPwe1e|KC|YV}ukvR7pi6i;*7R0FgVjxlrmdyCbJZ1Nr8*fobOPA)C~5 zbwIMFp2_*_2XbFHz_a1gsQ5S*;?v=z%cJTr-;M`Hy3}#((IVi_nSF0|taUyoFO)zG zMx;#@xZg0O6mx>xy|_}eqf`o`gDm)iiQ6^$Rumb}ne2-RJLkDLzot8XGM6V)1tvFH z4S@150)4~G_aL+*FLJ{jsj8a4(6CnwfV5`Zp>msjjnqoCX%);&$XZARDFIij`V5svaHW ziRU_eIEW53-tb*64ik=iRY!qEn&^M2ZA;z@8{^vB;xR!SsZ-B;4Tnv0X&JwP)UD=a zhWf;Q5%VECZXF|F(j*_(!CPCEoYVNi!MJDp0rvbkkRC~rgs+LZ6S9k6p}^bxz1_zh z_wokiLSFD1cLuQhRv!zR5WX`}F^~{>-=4{Bjr1aZ)IZZ4RQ1ueAq51!6pPFUrV8*7 z7PU!GD7WY)r0F<#Ffmrj-^kNfdbL(D-nGJ9N#=P3EHN#LYwEI|bzG=O!WV!KVU#UY zEjRu&*|f|qBx)L^U4H+tK%q)bzqoL`V;D=d=xk$2(uwy&mMd>k_r5CIA?Dsc6|7a0Ogvdh-F=uOV*9f*#P@=t z(JIQJ?$5<`w?Ei@*|swq1`p{T=}CD^MjofEL%hPrDyci{3RSuA=3>A`0Y4TnW^&Q%WYf(!GaA0jN4WuxyTLSorN9yWAz73HWSZ2NuU*<9Zio(0}wYtdn^3EEb{H!nb5cY-V;B*Hs-JJ|9XNiH?N%q;Pnk$ z(*QupKThDkcHsZ1n)zz8&*2l|hANY$cTBMbLAV0%W5TIk0;tx<3RMnE82>tjZzczT zs*?8QS*^}2q1Evch2h#j&vV zE?>YJ$FSc5Wg<3aH#`KJR{|c)O00|K_E=9y^~hY!tKEU>-ZvCbpP}lgFbH^~US38U z8tg2&`&g63jSh&l8_79w@Kp8Qn-|4CJPxI2)xW*NyLz+7l7foM^pE}MgUx3BW_&)b z<2^7VBmv+nrPCqp$3f*rW_yFl%+jK$r*2!OJO4g#Fp-hAtf17`kCu_gy^X2b_c9$Q zx8xZEa-M8_!$V1WqS4sV$Fo||H`kE_jr#CM?3a&Nbxi0NC1p3Q78;8A#_Vc~?%$E3 zI2Zaz>9K*}CeJQ^-w!8SE}sbkcZrWM!~)G9uMjTC;a0Fp_~i!Deb=FK_l&JV2^rJN zX2uMUV(emCpwsqT6d8@7P^{`2Bv2EIw+9^F+@ThWG(P^7#@KE7VTj--Sr#wg$+F$Q=x` zOO7#C*^NuU`E=pl*N$cH4y2}v5_&0$GT z;ky4})$tc;Q|77B`K#vqF03xEFX&YiUnj}#E>2Tl{JJbAwCK*q8y@HGmXkCnkL+-- zoqm?xzkg2Fq3z$dTHaCk=mu7+M}{c*DVS_IfBcjfq3IhVR^oFUVio26OnsE<2;9$7 zodg_GCsv&j8pKT?lSCvi$Kw*a3X%f6w9`Q9jLojgFY(V(AhvDtIWrm0Xx-Du{XAP>^?p zIo_!{Pipw4TwbSdAXT#ndC-q&CAg_J!9hM*`wy**OuC=p$GJzR-Q!R2#x2l&R+JA0 z3R_piU-mEzvZ*ZXiJ(@Hx`ELriB}3khpSMarJQelaBj(LN2Wrz`J_~jHWRo|!~_$I z-O>H^WUdFwMxEWWixlT=g^z zo6a`jzya@E zj=nsS-KnFQSa74J{=~I2O;E-m%G9b?S-Z-ZUVeN z&Ek^+i2gPvvl~M29^V^hd9!Z-RjY{qp2t~|PJW#21WeObb>R)Xr^ijs?Y`j0$tGRx z9r0l*xoTD6X~CQGzptj&(ofQYh`W_Xw#{z+AGm=3jpuOsY|g;IASBrl(0Xm^ZC%Bk zPlJx+(HGMil`o2U+8=pb16i3JGahpCOyVqWLyljVYQ%oLaSvLCJMn&!&!@8>+lo7? z9e!llh+|9hNn%4@HlC#yatRCri)|N$jiYNn24!FspF@=dX6GDFPt{+HgC|s>dncx~ z!MF*nxd46Zc2)$B9B1y9iP~q^3dgC)IJ=3ay|M0=p|=VnPj+8fJAXwN)G#6}o(3+4 zQew@~&Ed?EMybruS@BgD16>`M9284lUO3XmXvM`&HlVY;PsXR;Dc%IKzsod3O65j66yFQzYb3sH zL4EZ#bEyp)v0i-do7VL+?dI==DRhvOe;dJZa;Po;!(kuBa&w8RL3(YxzBOi8El;pH zoC$bUYs3dj?Ec_~KHhA|UzHvJm0YQRzD+%2ztSS=Em$08P&&3T8`{TC?^v^)9Tu54 z{*CL>(aiR9Xsp%XPTIhsZbaDj1Uw=6C@w?$Vh7lu#%Wa8)0V%+yvS8562o63$lq?> zjjXvE1uas2`#w!Q$v5RIxFSXas+JFw_TNHhT+#bEi7&6No!Zasy%A7HdCq+le9qxW zbW}MTw@Qwn^f+c(9}etkSP58dTlnT;D>)L|S`jllee)!6Kl7&u{D`77c41n@D$(0y z3VeWCcS{LYYUFgJ|FaF>7XY;-N)SoN_yz{Tc?XzVylVQ{(*`zQ?6%N^J{SxqWz4wA z9@8B^D8{yX%En>O&Nq7en8@L6UQe~bt&Ey0=gNaqFj40wwt1bf6 zz4bn*#$she%4YA8EE4Y?FT;CU-JSW{9TnB$m?l;d!{_=v=1_wQqeglbXQ%4+cF1e* zVlEL<;odvb<5|8qvs7o(IetAx!wzdx1ta0nsjZg# zj`kz&^E%FNHZmL3M$$+>Xba3wU)pBFbdOAn=nm$U+!Ul8I%F&nO@lo>Tx&^GR6InJeU^Ei zflclhU*U+NLmra}+Ic#&AIB5~*^M*;R=s=3Gy>O}--=Hv?U~7nDaQ@+>BT7GwHFa2n62XeQs>9Gt$iW!EPj zXpc^G^OL@+cH9=+ONJa7$Ge3$HI++0ikyD17&o9je%9+|he(*L_Ev3h7RsMbzdFhI zGottXR&fS0bIdO6sJuZP*h3=|+p0TQ^%zy0V$0 zb?#~{PzTyx*({U?rB0kN@m!_z=#0EN=yOAV6pGtHq`QsSGpAQXY`zFI6HB%B%Cb{6 z+{~_deyO5tld{^sm7JnL=bKB}UppsFWEPfL| zxp#9qHXXzHZC?ia{H$>HIr+F&W)G~dDHro>xr}u$XPRYsHmZY%UPbJBC{(>4Im`MX z1#eOV7vzr(s>RFH`PANgG2Ro$eO`~6yOKi;Y9HYP$_XK_BZ0p4=6e85SxzQK&elac zmFtj7WsLp`vslnX}OtG~|T*i})!Fda+ zqsley8k`mP&cVe%q!|6G@Z!r)6F5=0Ljc`QbNr+)m82{;9sqwm?A!@Bxjw2NB1OcC z(Jg=a>G+u;no)J5t(n4WrRDUD8{>hU#Dsi&f?o6-J!Kq*lg4>R3RP2uH$aPY9(ui)uxl&Nnl*@ zYu#r;DW*~P09BJt$>t1{?l;sU@C~`kvvNN3pV#d@ndgR+G~Xd|OTRGuF#F8c!;Aeq z(?sFPT5vK%W@hHafH;3gY_P){U8=ZJqdAho>9@0w096aGcscG^{)~3)Hhy;zq)^YI z<#%`%{VvR$s*-Y}M{;btvNHAqi##U-e;hfvX0Y^xQV+K!drwik@8_D$>2eSQuCYau z!qd_92EJNGzz?BYo#iZq_y+nZJ<{ns<;fbCSH&Zagi^-ceQW!&x_4|34dv#U+&UKZ zH7oCS?1zW41+~Y${A5ykSNCA-D*& zH{Sm_0sl|aAE6u~YVIHAM015IX)B6b1b?HYZ>hxroQi^u*FY|mb3KiV#?5P^u=Gna z)x{OiV+ClZbzP!6Di~|F7JQ6w)Y#>r9`F>uz_yn6)v~AV>(sjrUq_nD^eWMWA58|} z?>lY|RILJ4*}&Ua#+26I!CP%(?xY!gJ}XxyA8jfoIk~_p4Fh65`qI*(3~|?NEQAYc zJF4eO?3yJ-gjoCwcp~vhT7Klj^$$VM0Z&26|#SS)g4u%X}fO$;jaz_wU)8%gbM>6>4hjM$m#mYPUZP zmE(_$&{wm5gb4=uWL3prd>o)7Ik~{6zv3i#pdf!|h@_hu9b~vRg6q*LU!^bU7A$2i z(k1KF&CazOze0yd1sQwSIFo_~Uu_-aD*#21fWi zuuRiGVz$!RaO|>Pb}tG1`STSb@qH7RAsDW%OSS&Ovh0`4?n>=1Z?b~Z!DpzV<2JMN zN@f&=gK@E?0okHS%_xa>$L+2n+wd8QZ||&>hiEgX-6Zb6y*%N=VQ0YDb~rNI3^=ef zu^^&AAXq6gB`*I{d4PSezPlU=yvxuB4}J28z3qJl(Kq9F@WJ8pRP%S^w(c#rum2)ItS<6F&Nx)@B z09D|CU(+guhQyc9hG1EvYDrh7JFwv6*~Q5*de&%WjT`~H;d9t=1Ql^+DgDhD8DU-4 z>_bkt&@v*z$K*+@!b4XFpK%{2GrYGL(f+)>ck81*#H%fTMn>u{H`BVHex`%%Ej~ho z8O6db^AVMTg2kJxO?ckmsV|fc4w~M#zImKcv)%OIr4^NsqO9sM2dA;@6)8kL9 zhPXeBF_F;^k}xvr*s4Zn&?+D}YX4KI)B48KTU|xo;jgS@hVub2)vB-TvkEe~GFe>S zs`fpS=5u|1x#`Ap8PS|Ee9e{WMlKmd+z_l04R#I?IQ4#(13P#lCdLXHi)u7ce#Prs zCCah8Fb3%dUPDEJ@6TW)(&%%O4FUhMq6vvShC$>BpT%0Wt*P%V-gE=JGR{!jwaMEjai ztE>*7HZQR)j}J>!z_^NK+LHN9$R;A_%0AirMpT{U6c4xvGN?yFRAd;g4EsH6{Svcs z39Rx?&`-1DEkWZIxhOF;>Gky{kQRsK1ZiDd}s*0Rx>+-K-6SjMtw11)X7DHyJ z%?}b>d{bb8+XtZkA5j%|iu2Zg&$RZP%%d!=K8Gv4^aJO5Zi5|2NB~3diCN9V{}iJ9 zpA7WBNt6FWHFGOGBz%D<(@Mj{^%`BP4(l-6JCZplvs{Af84E!u^C^3N*m zi=@!=j7YD{$=DpZ*$=;FrB9S>B!|0{(QO1AS87d4;)zW*qVDBG0(+@8I$kE8mpq+@ z=)nuVsSxsNsgk7(7PkrnmEZ~;xo=KZ#mh@ZqRZ#7Ei|v@-7e4X!)ZY>%L$dY9Jgwl z@sMBAKYtQfB;WwEs7@%R(j2|t^tT>pAYXa)G7#-KH|q9vJ?I!@DcJN&o&q*hoiEBY zsFfn0bYjl049(c_v-`RzmhC-uRnH^PD+P6T`%-2px_GzxUG}VaqSlqB$J^XMXhWn; zSsfUZ9MIh=M~RR^%9_fj$`?_8rb#OgK3;H+E?4{ZTOY9sje~lwa!-|L*lU<9O;BeE zH&}q2&SirG=e&zE-1>{>SPL`_8!O06m?m+l-LanE-CELt45;8}jzkfIu!kaaVW1KC)xmG1wR?x<#@+d(MP{qYSq zOp0Swo*}rG_&O)|buY{M2X#-3IN8TY0`pHg+>IYNH6$w{LxlvhBBbgPB5I9=7f4!& zJ1V|QrgW`LIuH$a#qiaVBsNHVRi(eCo@hi{ut9}eIW*KBDjsCe@OG8kJa`n;8jV~c!*3uoW#X_y*9ir+c?RrP_4(7h#hRDa#A9ii zE_-J1MzjIH2IFnB00d*ge*jm#`h*CzWlWPe4(&wXBQicUV#5Ng(N@w7dgpP);#UFd zV(%8WuuP{0U&ULwti@~lzq`WZW^mYpBqq#D36GHwsS|YnK~e3|6gnZR87fOEvM}@E z-R@_4+iOnsMTCD?l@rf2b`E$F6u!%Le|WQJY|vFbmc!!yg@`O>{XG?hS+9Xht_#rK za;Dx z`hAx-f846v4mFo_cxTH8S{=Y-=~V(l=btz7ii%K)A(o02eS1#C4Ro?}7nFCu5T1+^ z5jCn+bIBSnXT9tkLesdVU#&YPQ1wq9qP3ssw$2Y?2d|0yYjDbimNR9f!?&T8ZR`1w ztKtSSHKNKP>=~SI{Gp*+X9WKo1a{U~gVleCT*W92SZe}w*cTc9H~k{&@!!ZPou&V>aFV{UM6Cx1-P3E z_uD?4yPen1YjR3cjoiia$d{lc1n6gU60yp}S#W)@&Nq3AiRf%$=xSJsjE?5s2g_$M zKsFeu$K$Caec?z$NF_K>?^pU#y)0u8U+(Jc-pvZ+@kPGnuGnqhdazs=L|`4{=t+lp zxwZ7w3HiClwdzP=9qISzu)DCF=2z0WbJOqX201v%FuEmPlt-QVC+tYSDz)@^h_zmp)mEh*tJDI9@T|eoA8OT>cJIgOzhWz1(odhWaBo5T&tlh+AcPU7`M3;?P$Zj&el%ykaeBaLgVp$8{` z_h4i9cc!&rR_JSq%uuQM5`x_~yJ9VJx_=z(ZHU!Gc(%QsQ-$W+Vu#Kxd-OZ>Cc{N> z#Be}yj1y_E_HhKeN?XM~Z4qLFQ(THD22ZeY{U*vct9kz=*N5Hl{@_aRn|ABDGqfp_ zUZts*mB&sD>oW{4+oyn9vr6Q;>U(o|bg|iMwjt{WpqzZ&2z$29YiRW#LjU5j&TrQg zVCc&ZN2neM1HC|{l-5tX+Kq*&8B?Q}A=RMqhTe_f?s$2MFlpm|O2KEG$ z1|02or(2OZ!?==;B88YFbup+c9fc^aQf;;hV&9-FSuP&ODaS|SjZTfz;cu2$ioSKo z?|5>jIxgJ*t)AGE=$+P$)1b8<>Sq}MRV8DQZZ9R4Vo}ysOKHwadxh0+rGk!qMRDn1 z7nn%LF|o&Rt1K*2Grd)w7+27+mxkvmULqpLpPS*NwmqcpRy;u_qrLdS&%E3*k7{?K z!uqE1FUXM6fG|(UtNzY@Si--7EO#~t{8W-(H&PV@b+`dqzg7-Rg4j~4?2l7?an>uq z@GXUu8PF}W1hQ-$p_12MEV0`_hB`JV;Uwd*>OtV()^pUQBWJI&4Ye%vYfi97>(w4N z%8e89$(&nZh~#Tv)E~6b5G@~^@P!Z>EOg?1@VQ<}CEF7o&K`c7%&ITi8SGuH-1XX*j=fKR4d@Z&G*uX-x-F*kRrcA93PWkg zSKS&rymtiUH|q5R@GtMAer99G^LX)w%STY&SQ01nT6WK~vYUM+rL?4Ll!3*hoXUNf z%FXB8BGF@rN#cdyy}A_V%_%_Xk3{=wQjf4oxjHAiWa0AAU_j`B;?%>sCtO@$m&aav zS7Xw&*Lg*etwgH8FCvE`3N0MTHdS$hkaXN5_;Z6v@u?(tJ0<8t$t_gs$zjRS$y)LX zE|2GN?y-nwRE;5p5Vzrmw3iID&W(;NisJrW$mFrm`AAr+z(q zWVJFY)z=T*H|2;#5hn&~c}muy@z>(7 zKjH3=!bk-Nmm@;PvEcqW3XSOds^Ob#aVeUcbb7qO-=0GrgRiF9lMbApP|@m{_Otc# z&OPfXTIJu)9gfSu&8fqi%4@V1f1fTOMQxV8Ev!{nRt8Ac%@qYnZF33CZzdj$E#bI` zFn_{pwRSv}0 zIBWQT1`a`?xKH-mG8<7>bD48anqmk*Di4*#Ojs+*$>E3C-%O~>yF-To{LTe+}wjR4Kp>AsWvKAi#Q2NuY40Z^Ud z>GWal!VyptSIayFr{F4`GhA%G(5AtzrejZRvzc2leZr#ycSUgdJ-7rR*ZnsFF-k+8 zJEr?DF48Ur(qk9AT+Uh_RA1sKJdTjE`yAe4n|Dl_%YSov&Xy*<+1><~} zVAi38erLe)u0{Z}fu)G3z0oW};3$5y87B{K;rzo~Y%CGiSw4g!zf(>qqsb+feh8QN zS1OoMPLQN2Hbp0>@$0X88~FQPXz=d9XSd(g#&jE{`mv4DoW{jMak9{HIOB`r(;1Lc zrhbERw68*+LYvVWw}&>?4%U915hw8{aUHGB7RO5ENL<#2Rf`+7;{;n>afRy^(eR_W zDxgq69;Cy$ReMNeecYL1tb~&}XflW{O{5Z>Px=hB$I(EEc!bzhhyI&B@{LBwFvk)NZeAntQ7mNb~5C=QcB?F|C7>;i)|7u+b^5ZnjlYSS0$i z+hkHctb-7ydm6Z@Z#h+Mry6xx%20^Y|H1`s4A>c^E~J&J|JNAI!c^BiA_$AO^%F#U z?vDMs!3cB^%p)QEzstA1Fi*{FPS&W+u3S*4{X^`STz2R80e(!k6oRXFFd4bs$-!p+ zuiC9n?~F8%z3GZVuh)Kl=OWB}Wo5GgADX^JZIyx$yNW@VM9!^BPDIX`P8c_Su0yMQ;N7d=r1VCD1o6A|IoI{uJwI=f0)p0TtW+e7}hc;R3r=z>S zo2}MsOfY@LkWaBQXqBmfny%C=(^Vx zv9Mh7>e+SME4$O$f(}wl*?ijDGDTGtXDTzc)u7YjkChos{+3A}9XZe)o}8N#ZaI7g zG!%csOj-t~UXMoYdXCD)dIU8;xHlu~wk@4<%v++yeQl>)k{3sC5y$^VzCCW0XZxHA zNL2b?^sIZNNCk)=UF!NbLsM=}UbqzXooui^cp55sHnK>hPdN%Y+os42 z!wNnUeqBDU*#WcaseO&@Ir}cu9t;2=`RqGcHiRua_zJ?J@Dc{aG>U@u-qLsDgLEXD z>jJyux+>RWEy-$pbRUBso%AUJevA>D@)DBEt32Q`f(_ST)QycjeW8LY$LDg`Ch(`a z^FD!G7&@?Lr&W6Rvf?TFAR0vn^QL~6UA)9d=?LSSeum|EewqCYVwAtSv9F0GvB|XK z3<^z=e4Y!Ni(s4jJ|0XW(9otnj0*+tP(5M-HkVxVfv`-G+~De@M(LMV=qQn{?AOW}a!>C*yi2KhM{$ub^OLTau}v2kYZ`ZU+?8 zWTR|tD|(PA3+Ib9!W!W4@~(|Rwbz(cP%sxRFKe2n(^^qvv+T*S1U!ys>GX*b<9$N} z^K_N|DW<|!UtdEU^|+8NpIG8M$NgQ)z4+*=`)SRUlqK1T!fa3QgSD*5OJik!NrIQY zCLelTs^r(y{KeNTh?dif-Ftv(7a?`txRA%JZB6o@@f)$AH!4pGse>VR^scqm52lyQ z?N{h68b!dGLT|cr7#sP5VbBQZ)y0PqeHz{ zdP{@QtVaEaE|)ZNub$pW8lG_Y3@hJG|D3^hx7_>AH*bFqN!$XL+aaP4lJy7s_+i7* zJSsbj3^p?Wz`KvHc;gbAI93)0ja!rdKT&YU8WFj{41d?X9N+k7&C=sQ|K%|13=X{t zL0E-}BMAvfhX2`~Z|CLdoGXH2uo80h@VdM?2W|z;VGs4S5G&-`fwD#JweEBCfd5&? zl&@Ai4xiLBb9R|;8ofk~1iS1lL6!ng>uE?rR+|F5CbNLUFwnuG|NaYM*F`5&|J@hZ zwlmzCo+Bdzzblno{*X>{UK*zj`3yOE;DFiHQQ8nkW!u>0)fvQfG3a6!j)RmToXnGf zONkP~t?kJsSIN`kRkBcW=Zv=<^fTB5}hr`F(>c zGz@YI91vdg$!`wAv|xXXEM1*8!jm*44s(~%Re1Y0Zu)Wh`}l0+ZZCEO&PBt&8#M;p zV97b|d-Bifs~*MHjh8B8e6t3L`eQ{0`Ee3&C9szsSkIG-eMlvRY6$<>1-NbC@_1YW zlRtx7#|1&*2C=e4SE%toQ|g~vl$a1SY7}!!lj@zylA0TMYT!qwf)-9QAG0#hGSD(2 zS93o-gfjX=S#s*OS@QS4|M=T|!roaqF?m=##WHX`=x1!m@R=2}a?l;04sCILVFeHP>2KQ-fDr^rvs{r74SSZVxHa