hello Simon,
This is a new term found on WAAS version 5.0 it is not something that required configuration and it is enable by default, it is just the same as SSL AO on WAAS previous versions for secure channels between the CM and AP's for their own certificates.
If you need more details on the process please engage your Cisco System Engineer or account team.
BR,