I have set up a challenge set, and allowed users to reset their passwords
after answering their challenge response questions. However when I open
the User Application and use the forgot password link the questions are
never asked and I get a 1642 error code returned. Apparently the code
corresponds to an invalid secret.

I am using IDM 3.0, from a SLES 9 box with JBoss and a MySQL database.
All other functionality of the User Application seems intact. Thank you
for any help.