When attempting to enroll a client to a PGP Universal Server enrollment fails. Client logs indicate a smart card is missing.
Certificate Enrollment has failed with error: Smart card not found (-10844)
Certificate Enrollment is enforced by policy. Exiting the application
This is caused by certificate enrollment being enabled for the LDAP directory.
If you are not using certificate enrollment, disable the option on the Universal Server.
In the Universal Server web interface, go to Consumers->Directory Synchronization->Settings. In the drop down box for certificate enrollment select "Deny" and click "Save".