Cisco 8861 Deployment Manual page 52

To utilize 802.11r (FT) for fast secure roaming, check the box to enable Fast Transition.
Is recommended to uncheck Over the DS to utilize the Over the Air method instead of the Over the Distribution System
method.
Enable WPA2 policy with AES encryption then either FT 802.1x or FT PSK for authenticated key management type depending
on whether 802.1x or PSK is to be utilized.
802.1x, CCKM and/or PSK may also be enabled if wanting to utilize the same SSID for various type of voice clients, where
some clients do not support 802.11r (FT) depending on whether 802.1x or PSK is being utilized.
Cisco IP Phone 8861 and 8865 Wireless LAN Deployment Guide
52