If your DualShield system consists of a backend and a frontend server, and you have only upgraded the backend server but not the frontend server, then you will have get the following problems on the frontend server: 

Reset Password not functional in the Legacy Self-Service Console (DSS)

Questions & Answers not functional in the Legacy Self-Service Console (DSS)

Access denied in the legacy Unlock Account portal

Your users will get the error below when they attempt to unlock their accounts from the frontend Unlock Account portal:

To fix this problem without upgrading the frontend, you can update the User role and add the "changeStatus" permission of the user object.