Dec 15, 2017 · Script 1 and Script 2 need to be run on the TFS application tier machine. Script 3 and Script 4 need to be run on any developer workstation or build server that is going to talk to the Git repository that’s running with the self-signed certificate. 01-fix-tfs-self-signed-cert.ps1. This script is the workaround/fix for the TFS2018.0 bug.
The private key should always be kept secret. Generating a self signed certificate consists of a few steps: Generate a private RSA key. Generate certificate signing request (CSR) with the key. Sign the certificate signing request with the key. If you already have a private key, you could skip the first step.