Upgrade 2504 WLC

[JayEl]

Hi, I'm wanting to upgrade the SW on our 2504 WLC. We are currently experiencing the expired certificate issue where APs are stuck in downloading state.
We do have 2600/3600 APs in our fleet and I understand the last WLC firmware to support these APs is 8.5.x.x.
Ok so based on that, I can upgrade the 2504 SW to 8.5.182.0 and the 2600/3600 APs will be supported?
Current SW is 8.3.143.0, I can upgrade directly to 8.5.182.0 yeah?
Does the 8.5.182.0 (ED) SW fixes the expired certificate issue as mentioned here - IOS AP Image Download Fails Due to Expired Image Signing Certificate Post December 4th, 2022 (CSCwd80290) - Cisco

As summary, is this the correct approach

1. Set this config below on the 2504

config ap cert-expiry-ignore ssc enable
config ap cert-expiry-ignore mic enable

2. Upgrade 2504 to latest FUS version, reboot

3. Upgrade 2504 SW, reboot

thanks

[marce1000]

 - FYI : https://www.cisco.com/c/en/us/support/docs/wireless/aironet-700-series-access-points/218447-ios-ap-image-download-fails-due-to-expir.html#toc-hId--1695958895

   So , from that you would need : https://software.cisco.com/download/specialrelease/8f166c6d88b9f77aabb63f78affa9749
                8.5.182.0 (ED)  doesn't fix it , your procedure is OK , 

 M.

[Rich R]

You should be using 8.5.182.11 (link below) not 8.5.182.0.

Yes you can upgrade directly.

If you're affected by the expired certificates (FN63942) then you will also need to disable NTP and set the time back to before the certs expired to let the APs join, get the updated config from WLC and download updated software.  Then once they have the new software and config you can re-enable NTP.

[JayEl]

thanks guys, much appreciated