Hi,
For the Mesh APs, you must enter the MAC address in the MAC filter which is found in
Security > AAA > MAC Filtering. Note that Outdoor Mesh APs, the MAC address is the BVI mac address, for Indoor Mesh, it is the Ethernet MAC address.
Also, if you're using DNS for controller discovery, create a pointer record in your DNS with the following:
CISCO-CAPWAP-CONTROLLER.domainname - IP address of WLC