This assumes you are running 6.4.x:
You should use the Master (active) controller's IP as the lms-ip in the AP System profile (in your case 10.1.10.2).
Sample Configuration:
Master
ha group-profile ap-ha-group
controller 10.1.10.2 role dual
controller 10.1.10.3 role dual
preemption
state-sync
pre-shared-key xxxxxx
!
ha group-membership ap-ha-group
!
ap system-profile ap-sys-profile-ha
lms-ip 10.1.10.2
Backup
ha group-membership ap-ha-group
Also, preemption should match in the HA group profile and the VRRP profile: enabled or disabled in both.