HA SSO doesnt sync certificates between primary and standby

[lcaruso]

Hi,

Since the HA SSO doesn't sync device certificates, how do I get the certs used to authenticate devices (laptops) onto the standby controller?

Thanks.

[Scott Fella · Accepted solution]

You need to disable AP SSO and once broken apart, you install the certificate on the HA (secondary).  Once you install the cert and reboot the WLC, then you can enable AP SSO. 

This is the only way.