I would not say that there is "Workaround: None" for this. We just installed a new 3540 WLC (anchor) to replace existing 2504 WLC. The SNMP Trap logs was filling up with "Failed to authorize AP with Base Radio MAC Authorization entry does not exist in Controller's AP Authorization List" messages.
So, we added an AP authorization to Security \ AP Policies \ ... with the MAC address of our MSE server, certificate type and hash.
