diff --git a/test/src/test/java/jenkins/agents/InboundAgentTlsTest.java b/test/src/test/java/jenkins/agents/InboundAgentTlsTest.java
new file mode 100644
index 000000000000..39593397bb60
--- /dev/null
+++ b/test/src/test/java/jenkins/agents/InboundAgentTlsTest.java
@@ -0,0 +1,55 @@
+package jenkins.agents;
+
+import org.junit.Before;
+import org.junit.Rule;
+import org.junit.Test;
+import org.jvnet.hudson.test.InboundAgentRule;
+import org.jvnet.hudson.test.RealJenkinsRule;
+
+public class InboundAgentTlsTest {
+
+    @Rule
+    public final RealJenkinsRule rjr = new RealJenkinsRule().https();
+
+    @Rule
+    public InboundAgentRule iar = new InboundAgentRule();
+
+    @Before
+    public void setUp() throws Throwable {
+        rjr.startJenkins();
+    }
+
+    @Test
+    public void webSocketNoCertificateCheck() throws Throwable {
+        var options = InboundAgentRule.Options
+            .newBuilder()
+            .webSocket()
+            .noCertificateCheck();
+        iar.createAgent(rjr, options.build());
+    }
+
+    @Test
+    public void webSocketWithCertByValue() throws Throwable {
+        var options = InboundAgentRule.Options
+            .newBuilder()
+            .webSocket()
+            .cert(rjr.getRootCAPem());
+        iar.createAgent(rjr, options.build());
+    }
+
+    @Test
+    public void tcpWithNoCertificateCheck() throws Throwable {
+        var options = InboundAgentRule.Options
+            .newBuilder()
+            .noCertificateCheck();
+        iar.createAgent(rjr, options.build());
+    }
+
+    @Test
+    public void tcpWithCertByValue() throws Throwable {
+        var options = InboundAgentRule.Options
+            .newBuilder()
+            .cert(rjr.getRootCAPem());
+        iar.createAgent(rjr, options.build());
+    }
+}