Here is what I would do:
Backup the Oracle Database and the crypto keys for Enforce/Oracle communication.
Export your policies from Enforce as well
Build new Enforce server
Build new Oracle server
Restore Oracle Database to new Oracle server
Install Enforce on new Enforce server w/ crypto.properties and point to existing Oracle Database
Verify policies are in place, if not import the policies you exported
Install Endpoint server