Notes/Domino 6 and 7 Forum : This puzzles me: Admin

This has happened to us twice. I can deal with it, but I'd just like to understand what's going on.

Remote user gets message that his certificate is expiring, and he should email a renewal request. He ignores it. In a few days, I get a panicked call that he cannot connect to the server.

I go to Domino Administrator, People and Groups, and click Recertify. I use the Supply certifier ID and password option. I give the user three more years, and indications are that it worked. Certlog.nsf shows that user is recertified.

If I then go to File, Security, User Security, Identity of Others, and research this user, it shows the old, expired date.

The user still can't connect.

It seems that we're stuck, because he no longer has email, but I detach his ID file from the address book, go to Configuration, Certify, and certify the file on my hard drive, using our certifier ID and password, and the user's password(!).

I do nothing further. I don't send him the certified ID file, I don't put it back in the PAB.

Now the user can connect. Does this make sense?

We don't have the CA process running; perhaps we should, but just haven't taken the time to set it up. Mainly, I want to understand what's happening. Sorry it's such a long post.

TIA
Larry