Try to follow these steps:
- In OS admin download a CSR for "tomcat"
- Using this CSR obtain cert signed by the CA
- Upload the CA root cert for "tomcat-trust", Leave Root Certificate text box empty
- Upload application cert obtained by CA for "tomcat". Enter the CA root Cert name in the Root Cert text box
- Restart Tomcat