I have an EVO 4G LTE phone that apparently does not like Mikrotik's WPA2 implementation. As long as WPA2 is enabled the phone fails to associate. Nothing is logged, my guess is that the initial handshake is failing. Setting the security profile as WPA only on solves the problem and allows the phone to associate. PSK and EAP behave the same; WPA only to associate.

The phone will associate with other WPA/WPA2 or WPA2-only access points and "hotspot" devices, just not anything Mikrotik WPA2.