Uwe Brahm commented on Jun 5, 2010

Adding an ID vault password resetter from a different organization

The "Copy to Personal Address Book" action is essential here. Really. If you are the signer of an agent doing e.g. a password reset using this agent, it is needed to do this - even if your agent is running on a server containing the cross certificate.