Server 2008 and Secure Wireless

Hello all,

I am in the middle of setting up our network from scratch. I have
already set up the main server (2008 Enterprise), which has AD, DNS,
DHCP, NPAS, ADCS. There are two NIC's: one connected to the router/
Internet; one connected to the LAN switch. I am able to connect a
computer to the switch and join the network, access resources, browse
the Internet, etc. There are a few tasks left, including setting up
secure wireless access, VPN, and lastly a DMZ wireless for guests to
our facility. After starting down the VPN path, I decided yesterday
to pursue setting up secure wireless first because it will be more
immediately useful.

I have been trying to retrofit these 2003 SBS instructions to 2008
Enterprise:
http://home.comcast.net/~clearviewtc..._2003-Text.pdf

Here is the skinny:
- Setting up WAP went fine. SSID is "NETSecure."
- Installing Certificate Services acted WAY different than the
instructions (pp 8-9). I was able to create a root cert and then
request & receive a cert on the client PC, but I'm not convinced it's
set up correctly. And the part about "SBS domain controller
certificate" I didn't see where to do this in 2008. Do I need IIS
installed for some reason?
- Setting up the RADIUS clients in NPAS went fine.
- The parts about setting up the "wireless remote access policy" (pp
10-11) was pretty different. There was no "Wireless" option, but I
added a condition that the Radius client IP is the IP of the WAP.
There was also no option for "User or Group Access," which is worrying
to me because it implies security.
- I'm not looking at it now, but I think the policy was listed third,
not first as the instructions say. Is this a problem?
- Setting up the GPO went well. No questions there.
- We do not have ISA, but my understanding is that we don't need it.
True?

I have logged on to the domain with my Vista laptop with a wired
connection, no problem. I can also see the NETSecure wireless network
in My Wireless Connections (in addition to seeing it in the list of
available networks). I assume the server put it there. I did a
certificate request on Vista and got 4 certs. I try to get on the
NETSecure network and it just says unable to access it, contact
Administrator. No other info.

Help?

Thanks!
Tom