Please open a bugzilla and attach the stack trace.  Please indicate the
versions of pki-ca, pki-common and tomcat.

This sounds like an update may be needed to the Java security policy.
In the meantime, to get the server to start, you can disable the Java
security manager by editing /etc/sysconfig/pki-ca and setting:

SECURITY_MANAGER="false"

Ade