I upgraded hardware for my pfSense firewall and went through the normal restore process from the XML file. Reassigned interfaces, allowed packages to install / update in the background, etc. The one thing I ran into was in Wireguard my site-to-site connections would not establish a connection. I didn’t have a lot of time to dig into it yet but thought I would throw it out to the group if there were additional steps other than the restore of the XML to clone the settings (including Wireguard) to new firewall hardware.
My first thought was ‘did the public / private keys change for the tunnels / peers?’. I will dig into it later tonight but if anyone has either a confirmation of my thought or a different solution that would be greatly appreciated.