diff --git a/tasks/acs-ci-nightly/workflow/harness.yaml b/tasks/acs-ci-nightly/workflow/harness.yaml
index 4c08206..39c83ae 100644
--- a/tasks/acs-ci-nightly/workflow/harness.yaml
+++ b/tasks/acs-ci-nightly/workflow/harness.yaml
@@ -24,6 +24,7 @@ sandbox:
     GCS_BUCKET: test-platform-results-public
     CLOUDSDK_CORE_CUSTOM_CA_CERTS_FILE: /etc/openshell-tls/ca-bundle.pem
     CURL_CA_BUNDLE: /etc/openshell-tls/ca-bundle.pem
+    BOTO_CONFIG: /tmp/openshell-boto.cfg
 
 source:
   repo: https://github.com/stackrox/acs-triage-agent.git
@@ -33,6 +34,10 @@ source:
 payloads:
   - source: CI-NIGHTLY.md
     destination: /sandbox/CI-NIGHTLY.md
+  - content: |
+      [Boto]
+      ca_certificates_file = /etc/openshell-tls/ca-bundle.pem
+    destination: /tmp/openshell-boto.cfg
 
 agent:
   type: claude
diff --git a/tasks/acs-ci-nightly/workflow/preflight.yaml b/tasks/acs-ci-nightly/workflow/preflight.yaml
index 826af48..a0b47cd 100644
--- a/tasks/acs-ci-nightly/workflow/preflight.yaml
+++ b/tasks/acs-ci-nightly/workflow/preflight.yaml
@@ -13,6 +13,13 @@ sandbox:
     GCS_BUCKET: test-platform-results-public
     CLOUDSDK_CORE_CUSTOM_CA_CERTS_FILE: /etc/openshell-tls/ca-bundle.pem
     CURL_CA_BUNDLE: /etc/openshell-tls/ca-bundle.pem
+    BOTO_CONFIG: /tmp/openshell-boto.cfg
+
+payloads:
+  - content: |
+      [Boto]
+      ca_certificates_file = /etc/openshell-tls/ca-bundle.pem
+    destination: /tmp/openshell-boto.cfg
 
 agent:
   type: /bin/sh
@@ -32,17 +39,6 @@ agent:
         echo "Jira URL: $JIRA_URL"
         echo
 
-        echo "GCS: gsutil ls -b gs://$GCS_BUCKET"
-        if timeout 30s /opt/gsutil/bin/gsutil ls -b "gs://$GCS_BUCKET" >/dev/null 2>"$gcs_error"; then
-          echo "GCS: PASS"
-        else
-          gcs_status=$?
-          echo "GCS: FAIL (exit $gcs_status)"
-          sed -n '1,20p' "$gcs_error"
-          status=1
-        fi
-        echo
-
         echo "Jira: GET $JIRA_URL/rest/api/2/myself"
         jira_status=$(curl --silent --show-error --output /dev/null \
           --write-out '%{http_code}' --connect-timeout 10 --max-time 30 \
@@ -58,6 +54,17 @@ agent:
           echo "Jira: FAIL (HTTP $jira_status)"
           status=1
         fi
+        echo
+
+        echo "GCS: gsutil ls -b gs://$GCS_BUCKET"
+        if timeout 30s /opt/gsutil/bin/gsutil ls -b "gs://$GCS_BUCKET" >/dev/null 2>"$gcs_error"; then
+          echo "GCS: PASS"
+        else
+          gcs_status=$?
+          echo "GCS: FAIL (exit $gcs_status)"
+          sed -n '1,20p' "$gcs_error"
+          status=1
+        fi
       } >"$log" 2>&1
 
       cat "$log"