AFAIK it's not possible in Mac OS X as it is now.
Windows tools you've mentioned are probably relying on Windows 7 native ability to create ad-hoc WPA-protected networks. There is no support for that in Mac OS X and since WPA encryption on ad-hoc network is not defined by the WPA standard it will probably never be.
I believe that WPA was the original WPA standard, and WPA2 was an improved version of it. Some network cards can’t connect to WPA2 networks. From the Wikipedia page on WPA:
The later WPA2 certification mark indicates compliance with the full IEEE 802.11i standard. This advanced protocol will not work with some older network cards.
The Wikipedia article cites a white paper from the Wi-Fi Alliance:
WPA is both forward and backward-compatible and is designed to run on existing Wi-Fi devices as a software download.
In a nutshell, a WPA/WPA2 network will any network card that supports WPA or WPA2 to connect to it; whereas a WPA2 only network locks out network cards that only support the newer standard. I don’t think there’s any meaningful difference in the security.
FWIW, I’ve used WPA2 Personal on my Airport Extreme since I bought it, and no device has ever had problems connecting.
Confession: I initially misread the question as being about the difference between Personal and Enterprise, and wrote this. Although not directly answering the question, I include it for interest.
“Personal” and “Enterprise” just refer to the two flavours of WPA and WPA2. From the Wi-fi Alliance’s page on WPA2:
WPA2 can be enabled in two versions - WPA2 Personal and WPA2 Enterprise. WPA2 - Personal protects unauthorized network access by utilizing a set-up password. WPA2 - Enterprise verifies network users through a server. WPA2 is backward compatible with WPA.
I believe that WPA and WPA2 both come in these two flavours, hence the either/or. Personal is more suitable for a home network, but it’s less secure than enterprise. Enterprise connects to a “RADIUS server” for authentication. I don’t know what that is, but it sounds clever and secure.
I’d guess that a device connecting to your Time Capsule just sees a request for a WPA2 password, hence why it doesn’t ask you for a WPA2 Personal password.
Best Answer
You can find this out by holding Option and clicking on the WiFi icon in the Menu bar.
It will open up a "menu" with additional options and details including the type of security you're using.
If you see your network say WPA/WPA2 Personal, it means it supports both. This is what the Access Point supports. In my case, I disabled WPA (and thusly it doesn't show up). You can choose either QR code and the client will be connected.