...
Password Reset connects to the TLS secured SSO endpoints, so the SSO server certificate needs to be added to the trust store of the Java Runtime Environment.
How to add the SSO server certificate to JRE trust store.
Enable Password Reset web application
...