Please see my full post in this thread:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/JEW5WIRD67WM...
Full credit and kudos to the poster before me who gave the missing bits to make this all
work -- I only added some additional places to copy files and tried organize it into
easier chunks of work. The biggest key difference between what is in this present thread
and that one is that `vdsm-tool configure --module certificates` creates self signed
certificates -- and if you're using the ENGINE you need to get that signed by the
engine for it to all work.