How do I bypass an Amazon load balancer to terminate https access on my auto-scaling group instances?

I have set up a TCP listener on the elastic load balancer (ELB) port 443 which then forwards to the auto-scaling group (ASG) via SSL on port 443.

It is my understanding that the certificate on the ASG servers will be presented.

I have enabled back end authentication. On the console, the port configuration reads: 443 (TCP) forwarding to 443 (SSL) Backend Authentication: Enabled, followed by my PublicKeyPolicyType name.

This is not working. No certificate is being presented.

Am I missing something? Do I need to upload the cert to the ELB? I am trying to avoid this.