The same problem here with multiple ‘rejected, can’t find PMKSA’ in logs. Wireless clients are locked off the network on two of my wave2 CAPs. Rebooting the controller didn’t help, only the same action with CAPs did. Will try disabing WPA3 for a time being and see how it works out.