VNC Connection Policy in SPS shows SSL Handshake failed error

I configured a VNC connection policy in SPS. I set the client side TLS to generate cert on the fly using a signing cert I configured. The signing cert is in the client side certificate authorities already, but I am still encountering "SSL Handshake failed; side='client'" error. Anyone else experiencing this error?