It's pretty much an all-or-nothing change. In the router you have to do:
> crypto map local-interface loopback0
which is a global command and will make the router start sourcing all IPSec packets from the loopback IP address. At the same time you have to change all your peers to point to this loopback address.