To restore the CA or RA, the relevant root certificates with private keys will be required that are generated automatically when the WLC is started.
To ensure that this confidential information remains protected even when exported from the device, it is initially stored to a password-protected PCKS12 container.
The command "Create-PKCS12-Backup-Files" starts the export. Enter the passphrase when prompted to enter a parameter.
Telnet path: /Setup/Certificates/SCEP-CA/CA-certificates/Create-PKCS12-Backup-Files