After performing the following tasks, the process restart seemed to have wiped the content of the CS.cfg:

1) cp /etc/pki/pki-district/server.xml /etc/pki/pki-district/server.xml.orig
2) modify the content with the following data:
ORIGINAL

<Realm className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase"/>
MODIFIED

<!-- This Realm uses the UserDatabase configured in the global JNDI

resources under the key "UserDatabase". Any edits

that are performed against this UserDatabase are immediately

available for use by the Realm. -->

<Realm className="org.apache.catalina.realm.UserDatabaseRealm"

resourceName="UserDatabase"/>

  <Realm className="org.apache.catalina.realm.JNDIRealm"
      connectionURL="ldap://OURSERVER:389"
      userPattern="uid={0},o=ca"
      roleBase="ou=groups,o=ca"
      roleName="cn"
    roleSearch="(uniqueMember={0})"
  />

3) cp /var/lib/pki/pki-district/webapps/ca/WEB-INF/web.xml /var/lib/pki/pki-district/webapps/ca/WEB-INF/web.xml.orig
4) modify the content with the following data:
ORIGINAL
<login-config>
<realm-name>Certificate Authority</realm-name>
</login-config>

<security-role>
    <role-name>*</role-name>
</security-role>

MODIFIED

<login-config>

<realm-name>Certificate Authority</realm-name>

</login-config>

<security-role>

<role-name>*</role-name>

</security-role>

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>PKI Certificate Authority</realm-name>
</login-config>

<security-role>
<role-name>*</role-name>
</security-role>

<security-constraint>
<web-resource-collection>
<web-resource-name>EE Services</web-resource-name>
<url-pattern>/ee/ca/</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name></role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

5) Restarted the service: systemctl restart pki-tomcatd.target & systemctl restart pki-tomcatd@pki-district.services

After performing the restarted, I started getting an HTTP 500 within the subsystem's admin and EE pages.

Turns out, the CS.cfg was wiped, it is completely empty. I'm attaching the catalina.out FYI.