Clients upgraded to PGP Desktop 10.1.x managed by PGP Universal Server 2.x version receive PGP WDE Local Self Recovery questions during enrollment.
PGP Desktop 10.1.x are usually expected to run with PGP Universal Server 3.1.x servers that enable the WDE Local Self Recovery questions feature by default. This feature was not available on PGP Desktop 9.x clients with PGP Universal Server 2.x.
When using PGP Desktop 10 clients with PGP Universal Server 2.x version, you need to disable PGP WDE Local Self Recovery questions option for the clients. This is accomplished by editing the advanced prefs for the user policy.
To edit the client prefs: