Do NOT try more than 4 tries! You only have 5 attempts! This method might NOT work if the USB token is rendered after too many failed attempts.
1. Open the SafeNet Authentication Client, which should already be installed on the computer (keep the USB token inserted)
2. follow the rest of the instructions to Initialize Token and reset the token password/administrator password/PIN/PUK.
If you cannot initialize the token, we would need to order a new physical USB token, which costs $75.
3. If the Token can be re-initialized and the password is reset. Follow this link to reissue the certificate: https://support.globalsign.com/digital-certificates/digital-certificates-life-cycle/reissue-certificate-client-digital-certificates.
4. Download and install the new certificate, it will ask for the new token password during the installation.
5. Once completed, you can try to sign the QES signature.