After performing the following tasks, the process restart seemed to have wiped the content of the CS.cfg:

1) cp /etc/pki/pki-district/server.xml /etc/pki/pki-district/server.xml.orig
2) modify the content with the following data:
ORIGINAL


MODIFIED

<!-- This Realm uses the UserDatabase configured in the global JNDI

resources under the key "UserDatabase". Any edits

that are performed against this UserDatabase are immediately

available for use by the Realm. -->

<Realm className="org.apache.catalina.realm.UserDatabaseRealm"

resourceName="UserDatabase"/>

  <Realm className="org.apache.catalina.realm.JNDIRealm"
      connectionURL="ldap://OURSERVER:389"
      userPattern="uid={0},o=ca"
      roleBase="ou=groups,o=ca"
      roleName="cn"
    roleSearch="(uniqueMember={0})"
  />

3) cp /var/lib/pki/pki-district/webapps/ca/WEB-INF/web.xml /var/lib/pki/pki-district/webapps/ca/WEB-INF/web.xml.orig
4) modify the content with the following data:
ORIGINAL

Certificate Authority

<security-role>
    <role-name>*</role-name>
</security-role>

MODIFIED

Certificate Authority

*

BASIC
PKI Certificate Authority

*

EE Services
/ee/ca/





CONFIDENTIAL

5) Restarted the service: systemctl restart pki-tomcatd.target & systemctl restart pki-tomcatd@pki-district.services

After performing the restarted, I started getting an HTTP 500 within the subsystem's admin and EE pages.

Turns out, the CS.cfg was wiped, it is completely empty. I'm attaching the catalina.out FYI.