I tried using Decrypt-tunnel on an AP-105 and couldn't get it to work. The controller could provision the AP and it would show connected, however the radios never turned on. When I changed it back to Tunnel it started working.
Is there a limitation as to which APs can support Decrypt-tunnel or is this the control plane security you mentioned? Where do you enable the control plane security?
Thanks!