As per subject, I'm using CM2 and if I create slave cap interfaces (to support multiple SSID per radio), I cannot authenticate from the client devices to the slave interface at all (simple wpa2-psk).

Any ideas what could be causing this?

Problem fixed...lack of understanding of CAPsMAN on my side.