Thank you for your response.

I powered up the defunct system and confirmed that the keycloak DB was present in the source database, but the engine-backup tool was not backing it up.

I was able to recover with the following these steps:

1. start from clean CentOS 9

2. remove a conflicting man page rpm

2. dnf install ovirt-engine, ignore the script error

3. restore the engine database

4. back up the keycloak database with pg_dump, migrate to new engine host, and restore the keycloak database

5. Add entries to the pg_hba for the keycloak database

6. ensure the keycloak user could connect to the keycloak database

7. run engine-setup (no errors)

8. manually add engin.cer to the java keystore

We are now running on Version 4.5.4-1.el9