It is possible for a user to be placed in both password-invalid account lock state and consecutive certification failure account lock state. This state is called a double lock.

To release a double lock, you must release both the password-invalid account lock state and the consecutive certification failure account lock state. The order in which these states are released does not matter.