Let's clear up some terms here:
CPSEC (configuration> System> CPSEC) is control plane security, which is a secure connection between APs and the controller. You absolutely want this. You want it enabled and "Enable Auto Cert Provisioning" to be enabled, so that you don't have to manually approve access points, for them to be able to function.
The whitelist (Configuration> Access Points> Whitelist) is where you can see what access points have registered with your system, and have successfully negotiated a secure connection with your system. By default, the access points in the whitelist just have a mac address and the date and time it was approved. It doesn't have a name or ap-group. What you
don't want to do, is modify the name or the AP-group of access points in the whitelist interface, because once you do that, you can ONLY modify the name and ap-group from the Whitelist interface and not from the more functional Campus APs interface (configuration> access points> campus APs). If you modify an access point's name or ap-group in the whitelist and then attempt to do the same thing in the Campus APs interface, it will silently fail, making you confused as to why your rename or changing the ap-group did not work in the Campus APs interface. Long story short, just don't modify the campus AP whitelist.
That is my opinion.
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------
Original Message:
Sent: Jan 14, 2022 08:44 AM
From: Doug Selix
Subject: MM/Controller whitelist
So we recently upgraded to 8.7 in preparation for future AP's. We were holding on 8.6 until the vast majority of 100 series were out of the environment.
Whitelisting of AP's was enabled by the 8.7 upgrade. I am not sure I want it! Have been unsuccessful so far in finding any instructions on how to disable or if it is even possible? I foresee it being a possible serious headache if we do a large swapout of 200 series AP's sometime this year.
Thoughts, pointer on documentation to disable it, am I stuck with it?
------------------------------
Doug Selix
------------------------------