Without having read through the post you linked yet, can it be a wildcard for this case? I do have a wildcard that I'm using on the clearpass server, I can put that on the controller.
And this leads the follow up question. I was of the understanding that if I change the "securelogin" address on the weblogin page, it will be controller specific and I'll need a new page for each controller, is that accurate?
Unfortunately I am unable to access the cert 101 document as I do not have an account on support.arubanetwork, they required me to have an account on the hpe website instead.