Visual Studio 2008 and 2005 Team Foundation Server Installation fails with error 28925 if less than Full Trust specified in root level web.config

Source: Microsoft Support

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

Changing the trust level in the web.config files <trust level> element to any level other than Full will cause Team Foundation Server installaiton to fail with a 28925 error.


An example of a change of this type is recommended in this article for ISP and Web Hosting companies to reduce risk to shared servers: How To: Improve Security When Hosting Multiple Applications in ASP.NET 2.0 (http://msdn2.microsoft.com/en-us/library/aa480478.aspx) .

The change noted in this recommendation is:
<location allowOverride="true">
  <system.web>
    <securityPolicy>
    ...
    </securityPolicy>
    <trust level="Medium" originUrl="" />
  </system.web>
</location>


 

Installation of Visual Studio 2008 Team Foundation Server fails with "Product: Microsoft Visual Studio 2008 Team Foundation Server - ENU -- Error 28925.TFServerStatusValidator: The tool could not call the Team Foundation Server ServerStatus Web service."

Additional data from the installation log:


Unhandled Exception:
System.IO.FileLoadException: Unverifiable code failed policy check. (Exception from HRESULT: 0x80131402)
   at Microsoft.TeamFoundation.Common.ExceptionFormatter.FormatExceptionForDisplay(Exception ex)
12/20/07 08:59:34 DDSet_Status: Process returned -532459699
12/20/07 08:59:34 DDSet_Error: The Commandline '"C:\DOCUME~1\EWITTE~1\LOCALS~1\Temp\TFServerStatusValidator.exe" ...' returned non-zero value: -532459699.
MSI (s) (9C!20) [08:59:36:624]: Product: Microsoft Visual Studio 2008 Team Foundation Server - ENU -- Error 32000.The Commandline '"C:\DOCUME~1\EWITTE~1\LOCALS~1\Temp\TFServerStatusValidator.exe" ...' returned non-zero value: -532459699.

The change to the "root" web.config file causes all ASP.NET applications to attempt to run at the trust level specified.  TFSServerStatusValidator application requires Full Trust and fails if any level less than full is specified.

Set the trust level to Full Trust to apply to Team Foundation Server Applications. 

Preferred method:
An entry can be added to the web.config file located in ([Team Foundation Program Files Folder]\Microsoft Visual Studio 2005 Team Foundation Server\Web Services) that applies only to Team Foundation Server Applications.

Add to System.web node:
<trust level="Full" originUrl="" />

Alternative:
This can also be done in the root level web.config for all .NET 2.0 services.

MICROSOFT AND/OR ITS SUPPLIERS MAKE NO REPRESENTATIONS OR WARRANTIES ABOUT THE SUITABILITY, RELIABILITY OR ACCURACY OF THE INFORMATION CONTAINED IN THE DOCUMENTS AND RELATED GRAPHICS PUBLISHED ON THIS WEBSITE (THE “MATERIALS”) FOR ANY PURPOSE. THE MATERIALS MAY INCLUDE TECHNICAL INACCURACIES OR TYPOGRAPHICAL ERRORS AND MAY BE REVISED AT ANY TIME WITHOUT NOTICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.