Microsoft Sharepoint Products and Technologies Resource Kit eBook

1010 Part IX: Maintaining a Server in Windows SharePoint Services
membership condition for the new code group is based on strong-named membership.
Therefore, the element contains a PublicKeyBlob
attribute. The next step discusses how to obtain the public key blob.
9. To retrieve the public key blob for an assembly, use the Secutil.exe tool as
follows: secutil.exe -hex -s MyAssemblyName.dll
10. The Secutil tool extracts strong name information or the public key for an
X.509 certificate from an assembly and converts this information into a format
that can be incorporated into code. Please notice that the Secutil tool returns a
string in the form of ““0X…”.…”. You should not include the 0X notation marker
when copying the public key blob to the policy file.
11. Save and close your .config file.
12. Open the Web.config file for your Windows SharePoint Services virtual server,
and add the following element:
13. Go to the element in the Web.config file, and adjust it so that it refers
to your custom trust level.
14. Save and close the Web.config file, and run iisreset.
Caution Failing to run iisreset can result in the display of the following error
message: “Assembly AssemblyName security permission grant set is incompatible
between app domains.” In ASP.NET programs, strong-named assemblies
are loaded in a neutral domain. These assemblies are not unloaded
until the process is stopped.
Therefore, if the security policy for a strong-named assembly is
altered, the common language runtime will cause an error message to
appear when it detects that differing grant sets have been applied to the
same assembly. This behavior typically occurs in scenarios where the trust
level for a strong-named assembly has been changed.
Another way to resolve this is to manually recycle the site’s associated
application pool in the Internet Services Manager for IIS. To do this, in IIS
Manager, expand the local computer, expand Application Pools, right-click
the application pool, and then click Recycle.