Uploading SSL Certificates
It is possible to upload an SSL certificate which TeamCity considers trusted when establishing connection by HTTPS or SSL protocols. These can be self-signed certificates or certificates signed by a not well-known certificate authority (CA).
The trusted certificate storage is global for the whole server and affects all server projects.
To add a trusted certificate:
Go to Administration | Projects and click <Root project> in the project tree.
In the Root project's settings, open the SSL/HTTPS Certificates tab.
Click Upload certificate, specify the certificate name and choose a certificate file of one of the supported formats: PEM, DER or PKCS#7.
Save your changes.
The uploaded certificate will be applied to all the settings on the server.
All uploaded certificates will be automatically delivered to all TeamCity agents. Automatically distributed certificates are not added to the JVM keystore and are only used by the agent for TeamCity-related functionality.
However, sometimes automatically distributing certificates to all agents may not be needed or may be undesirable. Then, you can manually add certificates to a required agent by placing them into the <TeamCity Agent Home>/conf/trustedCertificates directory (one file per certificate, certificates in textual form in one of the supported formats mentioned above). Note that this directory is used for storing manually added certificates only; automatically distributed certificates are stored separately (in the <TeamCity Agent Home>/system/serverTrustedCertificates directory).
This can be useful in the following cases:
If the user is running the TeamCity server under a non-trusted certificate, you need to place the server certificate into this directory on an agent to establish agent-server connection
If the user considers their network connection between the server and agents insecure and does not want to transfer sensitive information.
Thanks for your feedback!