Sorry for my lated response.
Please open a bugzilla and attach the stack trace. Please indicate
the
versions of pki-ca, pki-common and tomcat.
filed (id=1017032)
This sounds like an update may be needed to the Java security policy.
In the meantime, to get the server to start, you can disable the Java
security manager by editing /etc/sysconfig/pki-ca and setting:
SECURITY_MANAGER="false"
service pki-ca start_sans_security_manager works.
Ade