To deactivate an access point, set its corresponding entry in the AP table to 'inactive' or delete the entry from the table. In the access point, the WLAN modules in managed mode are switched off and the corresponding SSIDs are deleted.
An access point deactivated in this way remains connected to the WLAN controller and the certificates are retained. The WLAN controller can reactivate the access point and its managed-mode WLAN modules at any time. All you have to do is to activate the entry in the AP table or make a new entry in the AP table for the corresponding MAC address.
If the connection to a deactivated access point is broken (either unintentionally due to a failure or intentionally by the administrator) then the access point begins a new search for a suitable WLAN controller. Although the former WLAN controller can check the validity of the certificate, due to the fact that there is no (active) entry in the AP table, the access point treats it as a secondary WLAN controller. If the access point finds a primary WLAN controller then it will register with it.