Refer to the exhibit.

Enable automatic CPSec certificate deployment.

Replace the default Mobility Master certificate with a certificate that has the correct hostname.

Replace the default server certificate for mobility controllers with a certificate signed by a trusted CA.

Reconfigure the guest WLAN to use EAP methods that rely on passwords rather than certificates.