BAS

Not sure if you are using CA & RADIUS but that would help in implementing a secure solution Try using certificates on devices for authentication. I have implemented this a few times & seems to me the most secure way of deploying wireless for trusted domain objects