Token Lockout occurs when the token passphrase has been entered incorrectly 10 times consecutively.

If this happens, you will need to initialize the token to unlock it. Initializing the token also erases all certificates and keys on the token, so you will also need to complete a key recovery (if your account has both signing AND encryption certificates) or certificate replacement (if your account has only a signing certificate), in order to obtain new certificates.

Related documents:

• How do I do a key recovery?
• How do I do a certificate replacement?