So it is:
Configuration> Wireless> AP Configuration> Click on AP-Group. Expand Wireless LAN. Click on Virtual AP.
and then, the ssid
aaa authentication dot1x "default-psk"
!
aaa profile "default-dot1x-psk"
authentication-dot1x "default-psk"
!
Then set your PSK....
wlan ssid-profile "Green"
essid "Green"
wpa-passphrase [PSK Passphrase]
opmode wpa2-psk-aes
!
And add them to the VAP
wlan virtual-ap "green"
aaa-profile "default-dot1x-psk"
vlan 10
ssid-profile "Green"
!
because i get:
Error processing command 'wlan ssid-profile "WI-FI-CONFERENCE-ssid_prof" opmode wpa2-psk-aes':Error: dot1x profile needs to be enabled in aaa profile "default-dot1x-psk" to support opmode "wpa2-psk-aes" configured in ssid profile "WI-FI-CONFERENCE-ssid_prof"