WLC AP authentication for expired built-in certs

[gpinero]

Hi all, I'm facing a problem with old ap's. The builtin certificate was expired and it's doesn't register. Temporal workaround was change date of the WLC. Now I like to resolve this issue with best practices. 

Can I use ISE to auth the access points?

I'm reading about LSC and disable the use of certificates, only auth the AP with MAC address? Is this options secure? what are the problems with LSC?

I have an enterprise CA... I can use it? what is the best form of do that

Can you guide me to the best maner to do the AP authentication to the controller?

Thanks

[marce1000]

- Try :

(WLC)>config ap cert-expiry-ignore {mic|ssc} enable

M.