As David said, you copy everything, not just the keys, then upgrade the new server, and that will work fine (assuming you're cutting DNS over to just point the same endpoints at the new server). -- Scott