The first step should be replacing the long-term keys with quantum-safe crypto.