At system startup, a WLC generates the basic certificates for the assignment of certificates to the APs, including the root certificates for the CA (Certification Authority) and the RA (Registration Authority). Based on these two certificates, the WLC issues device certificates for the APs.
If multiple WLCs are employed in parallel in the same WLAN infrastructure (for load balancing) or if a device is being replaced or reconfigured, the same root certificates should always be used to avoid problems operating the managed APs.
