Removing LSCs from APs

[mmelbourne]

Is there a process to remove Locally Significant Certiifcates (LSCs) from registered APs so that they, instead, use their Self-Signed Certificates (SSCs)? The WLC firmware is: 7.4.121.0.

[Saurav Lodh]

From WLC GUI, navigate to Security > Certificate > LSC
Uncheck the Enable AP Provisioning, generally when the provisioning is enabled, The WLC initiate the LSC certificate parameter request to the LAP. The AP generates PKCS #10 CertReq and sends a ‘LWAPP LSC Certificate Request’ to the WLC.The request is in turn forwarded by the WLC to the CA server. The CA server sends the LAP LSC certificate to the controller. The controller then sends the LSC to the LAP.

[mmelbourne]

Thanks for the information. However, I have LSCs enabled but want to remove these from each AP and revert to SSCs/MICs. I can disable "Enable AP Provisioning" within the LSC Security Configuration. Is it sufficient to remove "Accept Local Significant Certificate (LSC)" from  the AP Policy configuration; will APs with LSCs revert to using SSCs/MICs to register with the Contollers?