re: "Windows was unable to find a certificate to log you on to the
network ..."

After researching this all over, and eliminating the X501
authentication tab of wifi properties, windows wireless zero
configuration (wzc) and various other suggestions, I saw some message
pop up that referenced 2002 (it's now 2007). Unfortunately can't
remember where.

I think the problem is that the time on the route / gateway was way
wrong, and this was invalidating the certificate. So after some pain
I was able to set the d-link DI-524 time correctly, and now WPA-PSK
works correctly.

D-link gateway's mgmt web page 192.168.0.1 or whatever, Tools ->
Time.

You can just set it once, but you have to make sure the daylight
savings time right. After the time's pretty close you can set it to
use an internet time server to stay sync'd.

The only way I could find on the gateway to check the time it had was
to do a "repair" on the network connection on the windows machine, and
then look at the Tools -> Log page of the gateway's mgmt web page and
see what time the resync was attempted.