VSTO Document Level Deployment (Con'd)

http://blogs.msdn.com/b/rjohri/archive/2009/06/29/the-page-you-are-requesting-cannot-be-served-because-of-the-extension-configuration.aspx
http://blogs.msdn.com/b/keithmg/archive/2010/11/08/wcf-error-500-21-handler-quot-svc-integrated-quot-has-a-bad-module-quot-managedpipelinehandler-quot-in-its-module-list-quot.aspx


System.Security.SecurityException: Customized functionality in this application will not work because the certificate used to sign the deployment manifest for <App Name> is not trusted. Contact your administrator for further assistance.
Add intranet website into local intranet zone
are you using IE7?  IE7 includes something called Internet Explorer Enhanced Security Configuration (IEESC).  if your web server is categorized in the Internet zone, rather than the Local intranet zone, the manifest must be signed with a known and trusted certificate. 
http://msdn.microsoft.com/en-us/library/bb772087.aspx
Troubleshooting Office Solution Security


The Setup program for Office solutions can add inclusion list entries when the solution being installed does not have a trusted certificate. 
http://msdn.microsoft.com/en-us/library/bb398239.aspx
How to: Add or Remove Inclusion List Entries
http://msdn.microsoft.com/en-us/library/bb772086.aspx
Granting Trust to Office Solutions
-ClickOnce Authenticode certificates
-ClickOnce trust prompts
-Inclusion list
How to: Configure Inclusion List Security
-Enabling the Inclusion List:Enable the inclusion list for a zone when you want end users to be presented with the option of installing and running any Office solution that comes from that zone.
-Restricting the Inclusion List:Restrict the inclusion list so that solutions must be signed with Authenticode certificates that have known identity before users are prompted for a trust decision.
-Disabling the Inclusion List:You can disable the inclusion list so that end users can only install solutions that are signed with a trusted and known certificate.