Oops, sorry... I didn't mean the recertification process of an existing user (and ID-file), but you have to certify the user all over again, as if he were a new user. There is an option to keep the existing mail database, but you might make a back-up for just in case.