AP cannot join vwlc 8.10

[eigrpy]

Hello, AP3602 can join vwlc8.0 but cannot join vwlc8.10-, Is this wlc version too high? If so , what is the latest version of vwlc the AP can join? The below is the AP message. Thank you!

*Apr 3 22:55:45.000: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:508 Certificate verified failed!
*Apr 3 22:55:45.003: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to 10.0.10.6:5246
*Apr 3 22:55:45.003: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.10.6:5246
*Apr 3 22:56:53.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.10.6 peer_port: 5246
*Apr 3 22:56:53.000: %CAPWAP-1-SSC_CERT_AUTH_FAILED: Failed to authorize controller, SSC certificate validation failed.Peer certificate verification failed FFFFFFFF

[Scott Fella]

The matrix explains exactly what image is supported for each ap. The 3602 last support is 8.5.x so you can’t run a controller image higher than that. So make a decision if you still want the 3602 or else get rid of it.

[eigrpy]

Yes that is why I tried wlc 8.5 for 3602 and wlc 8.5 8.7 and 8.10 for 3702. all of them cannot work. 

I know ap 3802 has ios 8.10-. we upgrade ap3800 then join the wlc 8.10.  Not sure if ap 3700 has ios 8.10 and do the same thing 

[Scott Fella]

The controller provides the image to the access point. So you need to review the troubleshooting guide. If you have 8.10 and the 3802’s have joined, then the 3702’s should be able to join. If not, the look at the console output and search the internet and see what others have done to fix it. The 3602 will not join the controller on this code, so don’t worry about those aps anymore.