Hi Robert,
Just copy the crytpo files to the device which is missing those files and once files are copied and matched, go to ACTIVE device and do this:
config# no ft auto-sync running-conifg
config# ft auto-sync running-config.
Do the same for startup-config as well and everything should be fine. There should be no configuration copied from secondary to primary since SYNC always happens from ACTIVE to standby. You don't need to do no inservice and inservice on FT group. Also, you can run the above command from specific contexts or from Admin context(will do bulk sync for all contexts).
Let me know if you have any questions.
Regards,
Kanwal
NOTE: Please mark answers if they helped.