When creating a Pipeline, you can insert a repository URL in both HTTPS and SSH formats. The latter option requires uploading a private SSH key and (in case of password-protected keys) entering a passphrase.
tip
TeamCity Pipelines supports keys in the PEM and OpenSSH formats.
Uploaded keys are stored securely on the TeamCity server, and can be viewed by server administrators via the Admin | SSH Keys menu.
A server administrator can use this page to upload and remove existing private keys, as well as generate new ones.
To ensure the maximum security, TeamCity server encrypts keys with a DES symmetric cipher before passing them to build agents. After the sources are cloned from a remote repository and the key is no longer needed, the agent automatically removes it.