If you utilize smartcard authentication for authentication across your domain, you may come across this issue where you are unable to perform password resets after upgrading Active Roles.
This seems to relate to certificates created by the smartcard solution.
1) Access the host running the AR administration service;
2) Lauch certmgr.msc with the credentials used to run the AR service itself;
3) Please navigate to the local certificate store;
4) Delete any real-user personal certs listed;
5) Restart the AR service or server.