I am currently learning about WLCs and Lightweight APs.
My book mentions that every AP and WLC must authenticate each other with digital certificates, and that a X.509 certificate is preinstalled in each device when it is purchased.
How does this prevent someone from connecting a rogue AP to the network? What if their device is preinstalled with a digital certificate too?