How does remote de-blocking work for a security token like Digipass?

I have a Digipass 260 token and one of its features is "remote de-blocking" where the issuer can remotely allow the user to select a new PIN after too many incorrect PINs have been entered. How does this work? (And it does work, I’ve seen it in action.)