Certificates coming from backup and restore from prior to Release 10.1 having a key length of 1024 does not work. You have to regenerate certificates with key length of 2048 and install the identity certificates on the new Communication Manager Release 10.1.