The SCH init-tls container mounts the shared volume that's used to store certificate materials at /opt/tls/shared.  It should mount it at /opt/app/osaaf.

As a result, the init-tls container is pulling down the certificate materials from AAF but writing them into its own container file system.  The materials aren't put into the shared volume and therefore aren't available to SCH.