We have ACS 5.6 in production now. I have read the migration guide for ISE 2.1. It does not show if certificates are migrated. We also have an existing PKI environment. What we want to do, is do the complete migration, and then change the IP address ...