I have xpack security working with self generated certs - I have loaded the Elastic ca cert in to the trusted root authorities store of the test computer.
It should be fine, did you try to restart the Agent? I assume that certs have been installed on that host, right?