We need to move our current CSA server to a different box. The hardware will be different so an image of the current server isn't possible. I've installed CSA on the new server exactly like the old server. The server name is the same, the IP is the same, the versions of CSA are the same (18.104.22.168). But the agents will not poll to the new server. The old server is off by the way. I'm convinced it is an SSL CA issue. Because the MC's are identical, the rules and policies and groups are identical. I've posted a question here before and you guys have been VERY helpful so I hope you can help here. Please let me know any additional information you need.
You are correct that it is a cert issue.
Your options will depend on the version you are using now but I think there are three:
1. Uninstall the old server agents and install the new ones (not fun).
2. Manually install the new cert on all hosts (ugly and time consuming).
3. Install a newer version of CSA and do a migration from the old server to the new one.
I'd go with option 3.