Guidance? Ca/foreman

Good day,
We recently built out what we are hoping is a scalable puppet environment using foreman and foremen-installer.
For the first build one of my co-workers put foreman and the ca service on the same server.
We would like to separate them to allow us to offer fail over for the ca and ha for the foreman server with the use of an F5.

Would it be better to remove the foreman portion using the foreman-installer --no-enable-foreman build a new server run foreman installer and change master configurations or to use foreman installer to remove ca service then build new server foreman install ca service gen new certs n so on?

Any insight help is greatly appreciated.
Thank you so much.