Can you ping the controller from the AP?
Do you have enough licenses ?
Do you have CPSec turned on ?
Run the following command on the controller : show log system all | include
The logs may reflect the reason the AP is not able to fully get converted