Is it possible this agent is not successfully enrolled in Fleet? It should show as Healthy in the Fleet app in Kibana. You can also test that its getting the policy updates by running elastic-agent inspect. It should match what you see in the Fleet app in Kibana.
Elastic Agent doesnt support keystores yet but this is under consideration Beats and Elastic Agent capabilities | Fleet and Elastic Agent Guide [8.0] | Elastic