When the MobileID desktop application is installed and run for the first time the user is asked to set their security PIN. If a user has forgotten their PIN, there is no way to recover the PIN.
The user would have to remove a local data file in order to reset the PIN. However, by removing the local data file, the user would also lose their token data.