Hi Glenn,
You must have created the KRB and bscLogin files for tomcat and mentioned paths for these files in the tomcat JAVA options.
In the same way, please ensure that you have specified the paths in NW JVM arguments.
You can also follow the steps 5 and 6 of this KBA: http://service.sap.com/sap/support/notes/1476374
~SwapnilY