Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

The 1231AG Lightweight access point does not associate to the Cisco 4136 WLC, which runs the software version and receives the "Invalid AP certificate - unknown issuer" error message

Core Issue

This error message appears while you monitor the activity on the controller:

Error for AIR-LAP1231G-E-K9

  • Day Month Date 00:00:00 Year: <_128> [CRITICAL] sshpmPkiApi.c 1530: Invalid AP certificate - unknown issuer
  • Day Month Date 00:00:00 Year: <_130> [ERROR] spam_lrad.c 4880: LWAPP Join-Request does not include valid certificate in CERTIFICATE_PAYLOAD from AP 00:00:00:00:00:00


The Wireless LAN Controller (WLC) 4136 does not support the Cisco IOS Software Release Lightweight Access Point Protocol (LWAPP) APs.  It supports only 4400 and 2100 series controllers, and Wireless Services Module (WiSM) supports Cisco IOS LWAPP APs, so there is no workaround for WLC4136. Therefore, the access point (AP) 1231 does not join to a 4136 or 4100 series controller at any code version.

Refer to Wireless LAN Controller (WLC) Troubleshoot FAQ for more information.

Problem Type

Device cannot associate

Error message


4100 Series

LAP 1200


LWAPP network

SW Features

Lightwieght Access Point Protocol (LWAPP)

Version history
Revision #:
1 of 1
Last update:
‎06-22-2009 05:29 PM
Updated by: