I have come across the same, from the proxy server ap I can see the ap is getting ip add but no matter how many times I tried to reset the idm or revert to device to policy template. It is still saying RadSec Certificate state: Not exist, not sure if...
Thanks for clarify, if that was the case Enforce 5.0 GHz band usage: Select to disallow connections on the 2.4 GHz band, then why not disable the 2.4gh instead. My understanding is legacy 2.4gh clients should still able to connect to 2.4gh, right?