I don't have SP3 installed but I do have SP2 with kb917021 and have no problems with setting up WPA2 for broadcast or non-broadcast SSID's. The Microsoft document for troubleshooting wireless networks includes the following sentences:- " If you are adding the wireless network from the Wireless Networks tab for the properties of your wireless connection, by default, the new wireless network is configured for open system authentication and then IEEE 802.1X authentication. If you are connecting to a wireless network from the Connect to Wireless Network or the Choose a wireless network dialog boxes, the authentication settings are determined from the capabilities in the wireless AP's Probe Response frame." Therefore if you have only entered the SSID into the WZC setup it will assume that the AP uses the default authentication and not WPA2 and will not connect or ask you for any more information whereas if you have chosen "Connect to a Wireless Network" depending on the AP's response you will be asked to supply authentication.