ok I finally got somewhere with this and let me share what I found. In today's attempt I followed the steps in this link - http://www.virtualizationteam.com/cloud/generating-certificates-for-the-identity-appliancevcac-appli... to create the certificate PEM files. I did this for both the identity and cafe appliances. Once it was changed on both, the cafe appliance finished it's startup and I found the shell-ui-app failed. For the next step I started with the cafe appliance certificate and tried this method
RSA Private Key | openssl pkcs12 -in path _to_.pfx certificate_file-nocerts -out key.pem | |
openssl pkcs12 -in path _to_.pfx certificate_file-clcerts -nokeys -out cert.pem | ||
When I used the output from this step for the cage all the services started and I was able to login to the default tenant as expected.
So to recap, for the identity appliance, I followed the steps in the link above and for the cafe appliance I used the RSA Private Key and PEM file commands which got me to where I need to be.