About certificates
Most Cisco devices support wireless connection using X.509 certificates in addition to a password. If your company uses certificates for wireless connection, then you deploy the certificates before activating the device.
You create and manage certificates from the device setup web page, which you access by entering the device's IP address into a browser. When the device registers with Control Hub, the setup page becomes the device web page. If you don't see the setup page, then do a factory restart and return the device to the factory state.
If you decide to use certificates after deployment, then do a factory reset and delete the device from Control Hub. Reactivate the device by generating a second activation code. But don't register the device with Control Hub until after you deploy the certificates.