The asterisk indicates the AP that has the Virtual Controller (VC) role.
The VC should not move to another AP, unless you reboot the virtual controller (or the cluster), in that case, a re-election takes place and another available AP will become the VC. If it moves during normal operations, please collect tech-support and open a case with your partner or the Aruba TAC.