For R10.3, you must regenerate certificates with RSA key length of 2048 or 4096 and install the identity certificates on the new Communication Manager.