There's a recently patched bug (CSCua29504) in centralised Cisco wireless environments that prevents 802.11w clients like Windows 8 (probably only Windows 8 at the time of writing) from connecting. Unusually there are no workarounds - the controller has to be patched for them to work. Proper 802.11w support is apparently coming later and will replace Cisco's Management Frame Protection (MFP).