TFS Build Agent failing to connect to HTTPS git in TFS 2017 when running as service

Question

We are using an internal certificate on our server and I\'ve followed the steps in

https://blogs.msdn.microsoft.com/tfssetup/2016/12/19/error-ssl-certificate-problem-una

Answer 1

I have an internally issued cert (not self-signed) for TFS. Here are the steps I took to get this working for my scenario:

1. I followed step 1 of this guide, then dropped the exported cert into the certs folder, which looked something like this: E:\agent\1\externals\git\mingw64\ssl\certs.

2. After that, I followed the directions here to set the git config. The command(s) for that looked like this:

   git config --global http."https://tfs/tfs/".sslCAInfo "path\to\cert\certificate.cer"
   git config --system http."https://tfs/tfs/".sslCAInfo "path\to\cert\certificate.cer"
   

3. The last thing I did was restart the agent service and everything was fine after that.

EDIT: I'm also running the agent under a build service domain account.