In the Controller GUI you can go to Configuration > AP Group > Edit "<Group name>" select your Virtual AP > SSID and change the 802.11 Security flag from None to WPA2-PSK. In the Keys section you have to insert the key to access the SSID.
[If you found my post helpful, please give kudos]