HI,
You just bring up the new 3600 controller as VRRP backup by configuring lowest priority than the existing controller so that it will become the standby.
please ensure the following before joining it to the network.
1. configure all the required VLANs and VLAN interfaces
2. install all the required licenses
3. configure VRRP with lowest priority (may be 1)
After the above join the controller to the network and configure the master redundancy accordingly. after becoming standby, it will sync whole WLAN config along with the internal DB, (will copy whole whitelist DB). need not worry about the cpsec and RAP certificates, cpsec will not be an issue because the whitelist bd will be synced from the master.
hope got some clarity on this,