IIRC it's hard to swap the OS, you can't run mixed OS in a PE system. fwiw, we found it easier to set the agents noop, spin up new infra using certs from last system, let existing agents repopulate, move agents to enforcing. Was faster in a large system due to avoid large db migrations.