Create a SSID
ap.(config)#dot11 ssid testap2
ap.(config-ssid)#
Enable SSID broadcast
ap.(config-ssid)#guest-mode
Setting up WPA-PSK
ap.(config-ssid)#authentication open
ap.(config-ssid)#authentication key-management wpa
ap.(config-ssid)#wpa-psk ascii cisco123
Attached radio interface to ssid
ap.(config)#int dot11Radio 0
ap.(config-if)#ssid testap2
ap.(config-if)#encryption mode ciphers aes-ccm
(Default cipher is aes-ccm so you have the option not to explicitly configure the cipher)