Hi community,
After further testing with most of the usual security features to configure a wireless profile, I have created a matrix for Layer 2 security features in Catalyst 9800 series wireless LAN controller Layer 2 as of IOS-XE release 16.2.1s.
WARNING: during the testing I discovered a new bug coded as CSCvr98394 when using CCKM with IOS-AP (c1700, c2700, c3700) where the device cannot connect when CCKM is enabled. receiving assoc-resp failure with status 20.