Oh that's going to be tough. I think you should be able to enable ap telnet/ssh, and then wipe the configuration from the remote console connection. You should then point the APs to Airwave via Aruba Activate and then push a config, or use Aruba Central if you have it to configure the AP for IAP-VPN.
Otherwise someone will have to console into the AP and factory reset it....