Wireless Access

I'm looking for some guidance on the expectations when disabling auto-cert provisioning in a live environment. Does it cause the active APs to bootstrap or does it affect the allowlist-db entries in any way? 

Thanks for the insight! 

Talking about the CPSec setting?
Just means that new APs will have to be approved and onboarded manually rather than automatically being allowed to talk to the controller via CPSec.  If you aren't bringing online new APs, go ahead and disable.  You can also set an allow list so that only APs in approved management networks get approved automatically.